n_alloc+0x204/0x810 [ 504.701560] ? ion_dma_buf_release+0x40/0x40 [ 504.706213] ? __might_fault+0x177/0x1b0 [ 504.710361] ion_ioctl+0xea/0x1f0 [ 504.713984] ? ion_query_heaps+0x360/0x360 [ 504.718221] ? lock_acquire+0x170/0x3f0 [ 504.722278] ? lock_downgrade+0x740/0x740 [ 504.726596] ? ion_query_heaps+0x360/0x360 [ 504.731006] do_vfs_ioctl+0x75a/0xff0 [ 504.734866] ? ioctl_preallocate+0x1a0/0x1a0 [ 504.739448] ? lock_downgrade+0x740/0x740 [ 504.743598] ? __fget+0x225/0x360 [ 504.747047] ? do_vfs_ioctl+0xff0/0xff0 [ 504.751102] ? security_file_ioctl+0x83/0xb0 [ 504.755504] SyS_ioctl+0x7f/0xb0 [ 504.759384] ? do_vfs_ioctl+0xff0/0xff0 [ 504.763455] do_syscall_64+0x1d5/0x640 [ 504.767378] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 504.772642] RIP: 0033:0x45e219 [ 504.775912] RSP: 002b:00007f61d9eb6c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 504.783904] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 504.791425] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 504.798687] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 504.806141] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 504.813657] R13: 00007ffd9f2d641f R14: 00007f61d9eb79c0 R15: 000000000119bf8c [ 504.820937] CPU: 1 PID: 18006 Comm: syz-executor.0 Not tainted 4.14.217-syzkaller #0 [ 504.828934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 504.838538] Call Trace: [ 504.841233] dump_stack+0x1b2/0x281 [ 504.844878] warn_alloc.cold+0x96/0x1cc [ 504.846960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.848990] ? zone_watermark_ok_safe+0x220/0x220 [ 504.859731] __alloc_pages_nodemask+0x2127/0x2720 [ 504.864594] ? __phys_addr+0x73/0xe0 [ 504.868326] ? lock_acquire+0x170/0x3f0 [ 504.872319] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 504.877314] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 504.880199] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 504.882777] ? __mutex_unlock_slowpath+0x75/0x770 [ 504.893678] alloc_pages_current+0x155/0x260 [ 504.898110] ion_page_pool_alloc+0x118/0x1b0 [ 504.902693] ion_system_heap_allocate+0x133/0x8c0 [ 504.907554] ? _raw_spin_unlock+0x29/0x40 [ 504.910085] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 504.911715] ? _ion_heap_freelist_drain+0x6e/0x410 [ 504.923083] ? ion_system_contig_heap_create+0x130/0x130 [ 504.928551] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 504.933587] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 504.936810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 504.938529] ion_alloc+0x27a/0x810 [ 504.945906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 504.948903] ? ion_dma_buf_release+0x40/0x40 [ 504.948916] ? __might_fault+0x177/0x1b0 [ 504.948927] ion_ioctl+0xea/0x1f0 [ 504.948936] ? ion_query_heaps+0x360/0x360 [ 504.948950] ? lock_acquire+0x170/0x3f0 [ 504.948958] ? lock_downgrade+0x740/0x740 [ 504.948965] ? ion_query_heaps+0x360/0x360 [ 504.948976] do_vfs_ioctl+0x75a/0xff0 [ 504.948987] ? ioctl_preallocate+0x1a0/0x1a0 [ 504.970183] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 504.972651] ? lock_downgrade+0x740/0x740 [ 504.986762] 8021q: adding VLAN 0 to HW filter on device team0 [ 504.989624] ? __fget+0x225/0x360 [ 505.014014] ? do_vfs_ioctl+0xff0/0xff0 [ 505.018186] ? security_file_ioctl+0x83/0xb0 [ 505.020354] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 505.022609] SyS_ioctl+0x7f/0xb0 [ 505.033470] ? do_vfs_ioctl+0xff0/0xff0 [ 505.037466] do_syscall_64+0x1d5/0x640 [ 505.041464] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 505.046658] RIP: 0033:0x45e219 [ 505.046785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 505.049842] RSP: 002b:00007f29fee76c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 505.066686] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 505.067395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 505.074225] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 505.089234] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 505.096710] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 505.103991] R13: 00007fff7563b0cf R14: 00007f29fee779c0 R15: 000000000119bf8c [ 505.107281] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.118136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.123872] warn_alloc_show_mem: 3 callbacks suppressed [ 505.123876] Mem-Info: [ 505.134086] active_anon:12318 inactive_anon:18919 isolated_anon:0 [ 505.134086] active_file:1680 inactive_file:1764 isolated_file:0 [ 505.134086] unevictable:0 dirty:16 writeback:0 unstable:0 [ 505.134086] slab_reclaimable:12883 slab_unreclaimable:119061 [ 505.134086] mapped:55128 shmem:19224 pagetables:847 bounce:0 [ 505.134086] free:164085 free_pcp:144 free_cma:0 [ 505.159483] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 505.172768] Node 0 active_anon:48508kB inactive_anon:56920kB active_file:6640kB inactive_file:7132kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:138208kB dirty:60kB writeback:0kB shmem:58012kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 505.199432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 505.205572] Node 1 active_anon:764kB inactive_anon:18756kB active_file:80kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:82404kB dirty:4kB writeback:0kB shmem:18884kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 505.230716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 505.239816] Node 0 DMA free:11036kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 505.255137] systemd[1]: Started Journal Service. [ 505.274189] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 505.285728] Node 0 DMA32 free:345084kB min:36200kB low:45248kB high:54296kB active_anon:48508kB inactive_anon:56860kB active_file:6640kB inactive_file:7432kB unevictable:0kB writepending:60kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:8032kB pagetables:2848kB bounce:0kB free_pcp:572kB local_pcp:100kB free_cma:0kB [ 505.322436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 505.328049] lowmem_reserve[]: 0 0 0 0 0 [ 505.334715] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 505.357378] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.366690] lowmem_reserve[]: 0 0 0 0 0 [ 505.367813] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.372302] Node 1 Normal free:276652kB min:53696kB low:67120kB high:80544kB active_anon:764kB inactive_anon:18756kB active_file:80kB inactive_file:24kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:540kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 505.409390] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 505.421477] lowmem_reserve[]: 0 0 0 0 0 [ 505.426202] Node 0 DMA: 19*4kB (UM) 2*8kB (U) 0*16kB 2*32kB (U) 2*64kB (UM) 2*128kB (UM) 1*256kB (M) 2*512kB (UM) 1*1024kB (M) 0*2048kB 2*4096kB (UM) = 11036kB [ 505.433148] IPVS: ftp: loaded support on port[0] = 21 [ 505.446785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 505.462226] Node 0 DMA32: 12*4kB (E) 537*8kB (E) 8492*16kB (UME) 4827*32kB (UME) 27*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 296408kB [ 505.465387] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 505.496672] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 505.499569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 505.520903] Node 1 Normal: 24767*4kB (UE) 5646*8kB (U) 3316*16kB (UE) 2480*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 276652kB [ 505.553461] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 505.566047] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 505.570070] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 505.592103] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 505.614375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 505.620123] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 505.630524] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 505.632175] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 505.650302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 505.670348] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 505.687231] 23002 total pagecache pages [ 505.695016] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 505.697386] 0 pages in swap cache [ 505.720213] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 505.727227] Swap cache stats: add 0, delete 0, find 0/0 [ 505.732845] Free swap = 0kB [ 505.735960] Total swap = 0kB [ 505.737548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 505.757515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 505.767282] 2097051 pages RAM [ 505.770426] 0 pages HighMem/MovableOnly [ 505.773125] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 505.781661] 363840 pages reserved [ 505.796567] 0 pages cma reserved [ 505.800801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 505.809547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 505.842459] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 505.849759] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 505.892011] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 505.916343] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 505.939917] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 505.947818] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 505.980499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 506.222540] oom_reaper: reaped process 18159 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 506.317870] kworker/u4:3 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 506.333012] kworker/u4:3 cpuset=/ mems_allowed=0-1 [ 506.338735] CPU: 0 PID: 18337 Comm: kworker/u4:3 Not tainted 4.14.217-syzkaller #0 [ 506.346468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 506.356030] Call Trace: [ 506.358738] dump_stack+0x1b2/0x281 [ 506.362604] dump_header+0x178/0x82f [ 506.366335] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 506.371502] ? ___ratelimit+0x2cd/0x530 [ 506.375471] oom_kill_process.cold+0x10/0xb18 [ 506.380030] ? lock_downgrade+0x740/0x740 [ 506.384342] out_of_memory+0x2dc/0x1190 [ 506.388422] ? oom_killer_disable+0x1c0/0x1c0 [ 506.392980] ? mutex_trylock+0x152/0x1a0 [ 506.397124] __alloc_pages_nodemask+0x23e1/0x2720 [ 506.401970] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 506.407203] ? cache_grow_begin+0x41/0x630 [ 506.412043] cache_grow_begin+0x91/0x630 [ 506.416281] ? cache_grow_begin+0x91/0x630 [ 506.420731] fallback_alloc+0x207/0x2c0 [ 506.424920] kmem_cache_alloc+0x1e5/0x3c0 [ 506.429072] getname_kernel+0x4e/0x340 [ 506.432960] call_usermodehelper_exec_async+0x2df/0x510 [ 506.438346] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 506.443798] ret_from_fork+0x24/0x30 [ 506.473226] Mem-Info: [ 506.476521] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 506.481472] active_anon:12298 inactive_anon:18921 isolated_anon:0 [ 506.481472] active_file:17 inactive_file:0 isolated_file:0 [ 506.481472] unevictable:0 dirty:12 writeback:1 unstable:0 [ 506.481472] slab_reclaimable:12843 slab_unreclaimable:119083 [ 506.481472] mapped:52643 shmem:19227 pagetables:847 bounce:0 [ 506.481472] free:13722 free_pcp:0 free_cma:0 [ 506.488976] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 506.489001] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 506.489027] CPU: 1 PID: 18038 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 506.489033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 506.489037] Call Trace: [ 506.489059] dump_stack+0x1b2/0x281 [ 506.489075] warn_alloc.cold+0x96/0x1cc [ 506.489088] ? zone_watermark_ok_safe+0x220/0x220 [ 506.489100] ? usleep_range+0x130/0x130 [ 506.489110] ? try_to_free_pages+0x23f/0x6e0 [ 506.489121] ? _find_next_bit+0xdb/0x100 [ 506.489132] ? run_timer_softirq+0x5a0/0x5a0 [ 506.489146] __alloc_pages_nodemask+0x2127/0x2720 [ 506.489165] ? lock_acquire+0x170/0x3f0 [ 506.489179] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 506.489194] ? ion_page_pool_alloc+0x9e/0x1b0 [ 506.489208] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 506.489229] alloc_pages_current+0x155/0x260 [ 506.489242] ion_page_pool_alloc+0x118/0x1b0 [ 506.489254] ion_system_heap_allocate+0x133/0x8c0 [ 506.489265] ? _raw_spin_unlock+0x29/0x40 [ 506.489273] ? _ion_heap_freelist_drain+0x6e/0x410 [ 506.489293] ? ion_system_contig_heap_create+0x130/0x130 [ 506.528511] Node 0 active_anon:48428kB inactive_anon:56928kB active_file:52kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:128168kB dirty:40kB writeback:4kB shmem:58024kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 506.535077] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 506.535095] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 506.543187] Node 1 active_anon:764kB inactive_anon:18756kB active_file:16kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:82404kB dirty:8kB writeback:0kB shmem:18884kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 506.548190] ion_alloc+0x27a/0x810 [ 506.548207] ? ion_dma_buf_release+0x40/0x40 [ 506.548220] ? __might_fault+0x177/0x1b0 [ 506.548232] ion_ioctl+0xea/0x1f0 [ 506.548240] ? ion_query_heaps+0x360/0x360 [ 506.548254] ? lock_acquire+0x170/0x3f0 [ 506.548265] ? lock_downgrade+0x740/0x740 [ 506.562586] Node 0 [ 506.564023] ? ion_query_heaps+0x360/0x360 [ 506.568134] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 506.572904] do_vfs_ioctl+0x75a/0xff0 [ 506.586979] syz-executor.5: [ 506.590080] ? ioctl_preallocate+0x1a0/0x1a0 [ 506.594902] page allocation failure: order:0 [ 506.598874] ? lock_downgrade+0x740/0x740 [ 506.598888] ? __fget+0x225/0x360 [ 506.598897] ? do_vfs_ioctl+0xff0/0xff0 [ 506.598909] ? security_file_ioctl+0x83/0xb0 [ 506.598918] SyS_ioctl+0x7f/0xb0 [ 506.598926] ? do_vfs_ioctl+0xff0/0xff0 [ 506.598937] do_syscall_64+0x1d5/0x640 [ 506.598956] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 506.598965] RIP: 0033:0x45e219 [ 506.598972] RSP: 002b:00007f1c98502c68 EFLAGS: 00000246 [ 506.603827] syz-executor.0: [ 506.608286] ORIG_RAX: 0000000000000010 [ 506.608292] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 506.608296] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 506.608301] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 506.608305] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 506.608311] R13: 00007ffef867e34f R14: 00007f1c985039c0 R15: 000000000119bf8c [ 506.622745] warn_alloc_show_mem: 2 callbacks suppressed [ 506.622749] Mem-Info: [ 506.636927] syz-executor.2 cpuset= [ 506.660974] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 506.674103] lowmem_reserve[]: [ 506.676143] active_anon:12298 inactive_anon:18921 isolated_anon:0 [ 506.676143] active_file:17 inactive_file:0 isolated_file:0 [ 506.676143] unevictable:0 dirty:12 writeback:1 unstable:0 [ 506.676143] slab_reclaimable:12843 slab_unreclaimable:118902 [ 506.676143] mapped:52643 shmem:19227 pagetables:847 bounce:0 [ 506.676143] free:13848 free_pcp:1 free_cma:0 [ 506.683439] 0 [ 506.723494] (null) [ 506.728161] page allocation failure: order:0 [ 506.739859] syz-executor.5 cpuset= [ 506.745099] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 506.783140] Node 0 active_anon:48428kB inactive_anon:56928kB active_file:52kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:128168kB dirty:40kB writeback:4kB shmem:58024kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 506.788255] / [ 506.975441] / [ 506.979202] 2717 2718 2718 2718 [ 506.984329] Node 0 DMA32 free:18048kB min:36200kB low:45248kB high:54296kB active_anon:48528kB inactive_anon:56868kB active_file:104kB inactive_file:24kB unevictable:0kB writepending:44kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:8000kB pagetables:2848kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 506.993342] Node 1 active_anon:764kB inactive_anon:18756kB active_file:8kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:82404kB dirty:8kB writeback:4kB shmem:18884kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 507.015602] (null) [ 507.045460] lowmem_reserve[]: 0 0 0 0 0 [ 507.049513] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 507.054775] CPU: 0 PID: 18006 Comm: syz-executor.0 Not tainted 4.14.217-syzkaller #0 [ 507.056508] Node 0 [ 507.062874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 507.062895] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 507.065170] Call Trace: [ 507.074802] lowmem_reserve[]: [ 507.100485] dump_stack+0x1b2/0x281 [ 507.100500] warn_alloc.cold+0x96/0x1cc [ 507.100516] ? zone_watermark_ok_safe+0x220/0x220 [ 507.103111] 0 [ 507.106378] ? usleep_range+0x130/0x130 [ 507.106388] ? try_to_free_pages+0x23f/0x6e0 [ 507.106401] ? _find_next_bit+0xdb/0x100 [ 507.110098] 2717 [ 507.114067] ? run_timer_softirq+0x5a0/0x5a0 [ 507.119056] 2718 [ 507.120875] __alloc_pages_nodemask+0x2127/0x2720 [ 507.124908] 2718 [ 507.129322] ? lock_acquire+0x170/0x3f0 [ 507.129337] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 507.133476] 2718 [ 507.135538] ? ion_page_pool_alloc+0x9e/0x1b0 [ 507.142082] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 507.146924] Node 0 [ 507.148968] ? retint_kernel+0x2d/0x2d [ 507.153113] DMA32 free:18620kB min:36200kB low:45248kB high:54296kB active_anon:48424kB inactive_anon:56872kB active_file:52kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:8000kB pagetables:2848kB bounce:0kB free_pcp:32kB local_pcp:28kB free_cma:0kB [ 507.158041] alloc_pages_current+0x155/0x260 [ 507.158057] ion_page_pool_alloc+0x118/0x1b0 [ 507.158069] ion_system_heap_allocate+0x133/0x8c0 [ 507.160277] lowmem_reserve[]: [ 507.164772] ? _raw_spin_unlock+0x29/0x40 [ 507.170233] 0 [ 507.172616] ? _ion_heap_freelist_drain+0x6e/0x410 [ 507.176509] 0 [ 507.204769] ? ion_system_contig_heap_create+0x130/0x130 [ 507.204782] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 507.204797] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 507.209314] mems_allowed=0-1 [ 507.213686] ion_alloc+0x27a/0x810 [ 507.236325] 0 [ 507.240291] ? ion_dma_buf_release+0x40/0x40 [ 507.245544] 0 [ 507.250479] ? __might_fault+0x177/0x1b0 [ 507.250492] ion_ioctl+0xea/0x1f0 [ 507.250505] ? ion_query_heaps+0x360/0x360 [ 507.266376] 0 [ 507.269532] ? lock_acquire+0x170/0x3f0 [ 507.277190] ? lock_downgrade+0x740/0x740 [ 507.277203] ? ion_query_heaps+0x360/0x360 [ 507.277214] do_vfs_ioctl+0x75a/0xff0 [ 507.277227] ? ioctl_preallocate+0x1a0/0x1a0 [ 507.296324] Node 0 [ 507.301785] ? lock_downgrade+0x740/0x740 [ 507.301805] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 507.304028] ? __fget+0x225/0x360 [ 507.316326] lowmem_reserve[]: [ 507.334025] ? do_vfs_ioctl+0xff0/0xff0 [ 507.334037] ? security_file_ioctl+0x83/0xb0 [ 507.334047] SyS_ioctl+0x7f/0xb0 [ 507.352715] ? do_vfs_ioctl+0xff0/0xff0 [ 507.356845] do_syscall_64+0x1d5/0x640 [ 507.360741] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 507.365927] RIP: 0033:0x45e219 [ 507.366324] 0 [ 507.369322] RSP: 002b:00007f29fee76c68 EFLAGS: 00000246 [ 507.369328] 0 [ 507.371116] ORIG_RAX: 0000000000000010 [ 507.382488] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 507.386317] 0 [ 507.389953] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 507.389959] 0 [ 507.391754] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 507.406312] 0 [ 507.408399] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 507.410366] R13: 00007fff7563b0cf R14: 00007f29fee779c0 R15: 000000000119bf8c [ 507.425298] CPU: 1 PID: 18002 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 507.425796] Bluetooth: hci5 command 0x0409 tx timeout [ 507.433607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 507.433613] Call Trace: [ 507.433641] dump_stack+0x1b2/0x281 [ 507.433656] warn_alloc.cold+0x96/0x1cc [ 507.433669] ? zone_watermark_ok_safe+0x220/0x220 [ 507.433679] ? usleep_range+0x130/0x130 [ 507.433691] ? try_to_free_pages+0x23f/0x6e0 [ 507.442185] Node 0 [ 507.449940] ? _find_next_bit+0xdb/0x100 [ 507.449952] ? run_timer_softirq+0x5a0/0x5a0 [ 507.449971] __alloc_pages_nodemask+0x2127/0x2720 [ 507.449992] ? lock_acquire+0x170/0x3f0 [ 507.453262] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 507.456434] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 507.456449] ? ion_page_pool_alloc+0x9e/0x1b0 [ 507.456466] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 507.456482] ? alloc_pages_current+0x37/0x260 [ 507.456492] alloc_pages_current+0x155/0x260 [ 507.462581] lowmem_reserve[]: [ 507.466167] ion_page_pool_alloc+0x118/0x1b0 [ 507.471304] 0 [ 507.477621] ion_system_heap_allocate+0x133/0x8c0 [ 507.477636] ? _raw_spin_unlock+0x29/0x40 [ 507.477644] ? _ion_heap_freelist_drain+0x6e/0x410 [ 507.477655] ? ion_system_contig_heap_create+0x130/0x130 [ 507.480210] 0 [ 507.484710] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 507.492555] 0 [ 507.495872] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 507.500100] 0 [ 507.526193] ion_alloc+0x27a/0x810 [ 507.526210] ? ion_dma_buf_release+0x40/0x40 [ 507.526222] ? __might_fault+0x177/0x1b0 [ 507.526233] ion_ioctl+0xea/0x1f0 [ 507.526242] ? ion_query_heaps+0x360/0x360 [ 507.526255] ? lock_acquire+0x170/0x3f0 [ 507.526263] ? lock_downgrade+0x740/0x740 [ 507.526271] ? ion_query_heaps+0x360/0x360 [ 507.526282] do_vfs_ioctl+0x75a/0xff0 [ 507.526293] ? ioctl_preallocate+0x1a0/0x1a0 [ 507.526300] ? lock_downgrade+0x740/0x740 [ 507.526313] ? __fget+0x225/0x360 [ 507.526321] ? do_vfs_ioctl+0xff0/0xff0 [ 507.526333] ? security_file_ioctl+0x83/0xb0 [ 507.526342] SyS_ioctl+0x7f/0xb0 [ 507.526352] ? do_vfs_ioctl+0xff0/0xff0 [ 507.533487] 0 [ 507.536874] do_syscall_64+0x1d5/0x640 [ 507.536894] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 507.536903] RIP: 0033:0x45e219 [ 507.536910] RSP: 002b:00007f37fb62bc68 EFLAGS: 00000246 [ 507.547986] ORIG_RAX: 0000000000000010 [ 507.547992] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 507.547996] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 507.548001] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 507.548005] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 507.548010] R13: 00007ffd61d53b5f R14: 00007f37fb62c9c0 R15: 000000000119bf8c [ 507.576819] Node 1 [ 507.579796] Node 1 [ 507.583549] Normal free:26592kB min:53696kB low:67120kB high:80544kB active_anon:764kB inactive_anon:18756kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:540kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 507.583554] lowmem_reserve[]: [ 507.585566] Normal free:26592kB min:53696kB low:67120kB high:80544kB active_anon:764kB inactive_anon:18756kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:540kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 507.607206] 0 [ 507.612321] mems_allowed=0-1 [ 507.614808] 0 [ 507.619531] CPU: 0 PID: 18159 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 507.619537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 507.619541] Call Trace: [ 507.619567] dump_stack+0x1b2/0x281 [ 507.619583] warn_alloc.cold+0x96/0x1cc [ 507.619597] ? zone_watermark_ok_safe+0x220/0x220 [ 507.619609] ? usleep_range+0x130/0x130 [ 507.619618] ? try_to_free_pages+0x23f/0x6e0 [ 507.619636] ? _find_next_bit+0xdb/0x100 [ 507.619648] ? run_timer_softirq+0x5a0/0x5a0 [ 507.619663] __alloc_pages_nodemask+0x2127/0x2720 [ 507.639204] 0 [ 507.640796] ? lock_acquire+0x170/0x3f0 [ 507.645578] 0 [ 507.650034] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 507.650049] ? ion_page_pool_alloc+0x9e/0x1b0 [ 507.650069] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 507.653668] 0 [ 507.657828] alloc_pages_current+0x155/0x260 [ 507.657844] ion_page_pool_alloc+0x118/0x1b0 [ 507.657855] ion_system_heap_allocate+0x133/0x8c0 [ 507.666016] ? ion_alloc+0x187/0x810 [ 507.670176] Node 0 [ 507.672084] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 507.676316] DMA: [ 507.681980] ? ion_system_contig_heap_create+0x130/0x130 [ 507.685334] 2*4kB [ 507.691014] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 507.691028] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 507.691044] ion_alloc+0x204/0x810 [ 507.695067] (UM) [ 507.703004] ? ion_dma_buf_release+0x40/0x40 [ 507.703017] ? __might_fault+0x177/0x1b0 [ 507.703033] ion_ioctl+0xea/0x1f0 [ 507.710545] 0*8kB [ 507.718158] ? ion_query_heaps+0x360/0x360 [ 507.718173] ? lock_acquire+0x170/0x3f0 [ 507.718183] ? lock_downgrade+0x740/0x740 [ 507.726389] 0*16kB [ 507.733836] ? ion_query_heaps+0x360/0x360 [ 507.736058] 2*32kB [ 507.738294] do_vfs_ioctl+0x75a/0xff0 [ 507.738307] ? ioctl_preallocate+0x1a0/0x1a0 [ 507.738316] ? lock_downgrade+0x740/0x740 [ 507.738330] ? __fget+0x225/0x360 [ 507.806302] (U) [ 507.813901] ? do_vfs_ioctl+0xff0/0xff0 [ 507.836290] 2*64kB [ 507.838550] ? security_file_ioctl+0x83/0xb0 [ 507.842678] (UM) [ 507.847183] SyS_ioctl+0x7f/0xb0 [ 507.847193] ? do_vfs_ioctl+0xff0/0xff0 [ 507.847205] do_syscall_64+0x1d5/0x640 [ 507.847227] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 507.866285] 2*128kB [ 507.866533] RIP: 0033:0x45e219 [ 507.868522] (UM) [ 507.873358] RSP: 002b:00007f61d9eb6c68 EFLAGS: 00000246 [ 507.886283] 1*256kB [ 507.889599] ORIG_RAX: 0000000000000010 [ 507.894168] (M) [ 507.899003] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 507.899008] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 507.899012] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 507.899016] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 507.899021] R13: 00007ffd9f2d641f R14: 00007f61d9eb79c0 R15: 000000000119bf8c [ 507.906820] lowmem_reserve[]: [ 508.013732] chnl_net:caif_netlink_parms(): no params data found [ 508.101258] 0 0 0 0 0 [ 508.104847] Node 0 DMA: 2*4kB (UM) 0*8kB 0*16kB 2*32kB (U) 2*64kB (UM) 2*128kB (UM) 1*256kB (M) 2*512kB (UM) 1*1024kB (M) 0*2048kB 2*4096kB (UM) = 10952kB [ 508.116324] 2*512kB (UM) 1*1024kB (M) 0*2048kB 2*4096kB (UM) = 10952kB [ 508.120048] Node 0 DMA32: 774*4kB (UMEH) 1119*8kB (UME) 772*16kB (UMEH) 319*32kB (UME) 82*64kB (UM) 10*128kB (UM) 6*256kB (UM) 0*512kB 5*1024kB (U) 2*2048kB (U) 0*4096kB = 51888kB [ 508.136431] Node 0 DMA32: 774*4kB (UMEH) 1119*8kB (UME) 772*16kB (UMEH) 319*32kB (UME) 82*64kB (UM) 10*128kB (UM) 6*256kB (UM) 0*512kB 5*1024kB (U) 2*2048kB (U) 0*4096kB = 51888kB [ 508.144454] Node 0 [ 508.160168] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 508.163112] Normal: [ 508.175320] Node 1 Normal: 336*4kB (UE) 137*8kB (UM) 134*16kB (U) 828*32kB (U) 10*64kB (UM) 3*128kB (UME) 2*256kB (ME) 2*512kB (UE) 69*1024kB (UE) 20*2048kB (U) 0*4096kB = 145256kB [ 508.179733] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 508.216518] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 508.240830] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 508.242107] Node 1 [ 508.258753] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 508.260792] Normal: [ 508.276310] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 508.306595] 21249 total pagecache pages [ 508.310629] 0 pages in swap cache [ 508.314175] Swap cache stats: add 0, delete 0, find 0/0 [ 508.326577] Free swap = 0kB [ 508.329642] Total swap = 0kB [ 508.332830] 2097051 pages RAM [ 508.335941] 0 pages HighMem/MovableOnly [ 508.341658] 363840 pages reserved [ 508.345122] 0 pages cma reserved [ 508.354217] warn_alloc_show_mem: 1 callbacks suppressed [ 508.354221] Mem-Info: [ 508.376607] active_anon:12225 inactive_anon:18922 isolated_anon:0 [ 508.376607] active_file:453 inactive_file:1657 isolated_file:0 [ 508.376607] unevictable:0 dirty:26 writeback:0 unstable:0 [ 508.376607] slab_reclaimable:12847 slab_unreclaimable:118863 [ 508.376607] mapped:53919 shmem:19227 pagetables:848 bounce:0 [ 508.376607] free:84458 free_pcp:697 free_cma:0 [ 508.397060] 1373*4kB (UME) 1481*8kB (UME) 472*16kB (UME) 1012*32kB (UE) 190*64kB (UME) 16*128kB (UME) 10*256kB (UME) 7*512kB (UE) 88*1024kB (UE) 21*2048kB (U) 0*4096kB = 210748kB [ 508.496316] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 508.527707] Node 0 active_anon:48124kB inactive_anon:56932kB active_file:1152kB inactive_file:2952kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:129492kB dirty:8kB writeback:0kB shmem:58024kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 508.539928] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 508.615392] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 508.651240] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 508.659504] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 508.666519] Node 1 active_anon:776kB inactive_anon:18756kB active_file:1960kB inactive_file:2976kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:85884kB dirty:96kB writeback:0kB shmem:18884kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 508.690561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 508.712368] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 508.730488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 508.750227] 21471 total pagecache pages [ 508.754733] 0 pages in swap cache [ 508.756364] Node 0 DMA free:11016kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 508.776237] Swap cache stats: add 0, delete 0, find 0/0 [ 508.788089] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.808737] Free swap = 0kB [ 508.811813] Total swap = 0kB [ 508.814957] 2097051 pages RAM [ 508.826311] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.834700] device bridge_slave_0 entered promiscuous mode [ 508.840511] 0 pages HighMem/MovableOnly [ 508.840515] 363840 pages reserved [ 508.840518] 0 pages cma reserved [ 508.840525] Out of memory: Kill process 7962 (syz-fuzzer) score 5 or sacrifice child [ 508.841024] Killed process 18040 (syz-executor.1) total-vm:85024kB, anon-rss:1728kB, file-rss:4kB, shmem-rss:0kB [ 508.868158] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.877602] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 508.882845] Node 0 DMA32 free:279388kB min:36200kB low:45248kB high:54296kB active_anon:48124kB inactive_anon:56872kB active_file:1152kB inactive_file:2952kB unevictable:0kB writepending:8kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7968kB pagetables:2848kB bounce:0kB free_pcp:1224kB local_pcp:560kB free_cma:0kB [ 508.900814] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.947278] device bridge_slave_1 entered promiscuous mode [ 508.966211] lowmem_reserve[]: 0 0 0 0 0 [ 508.971334] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 509.038572] lowmem_reserve[]: 0 0 0 0 0 [ 509.043869] Node 1 Normal free:1090068kB min:53696kB low:67120kB high:80544kB active_anon:708kB inactive_anon:18756kB active_file:2012kB inactive_file:2892kB unevictable:0kB writepending:100kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:356kB bounce:0kB free_pcp:1472kB local_pcp:732kB free_cma:0kB [ 509.081773] lowmem_reserve[]: 0 0 0 0 0 21:24:51 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x80000001, 0x4) socket$inet_smc(0x2b, 0x1, 0x0) socketpair(0x2b, 0x80000, 0x360, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000140)=@ccm_128={{0x303}, "f13d3476f1a21f8b", "4c9dbdb6143c8659bb66597cc168f96c", "2754e9bb", "fdde28e4c0c56029"}, 0x28) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0xc0241, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:24:51 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x80000001, 0x4) socket$inet_smc(0x2b, 0x1, 0x0) socketpair(0x2b, 0x80000, 0x360, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000140)=@ccm_128={{0x303}, "f13d3476f1a21f8b", "4c9dbdb6143c8659bb66597cc168f96c", "2754e9bb", "fdde28e4c0c56029"}, 0x28) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0xc0241, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) [ 509.100461] Node 0 DMA: 19*4kB (UM) 2*8kB (U) 0*16kB 2*32kB (U) 2*64kB (UM) 3*128kB (UM) 1*256kB (M) 2*512kB (UM) 1*1024kB (M) 0*2048kB 2*4096kB (UM) = 11164kB [ 509.107813] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 509.118228] Node 0 DMA32: 8105*4kB (UEH) 4047*8kB (UMEH) 1489*16kB (UEH) 989*32kB (UME) 2283*64kB (UMEH) 319*128kB (UM) 83*256kB (UM) 15*512kB (U) 21*1024kB (UMH) 8*2048kB (U) 0*4096kB = 374028kB 21:24:52 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x80000001, 0x4) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0xc0241, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) [ 509.143436] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 509.162273] Node 1 Normal: 7684*4kB (UME) 2714*8kB (UME) 1080*16kB (UME) 1298*32kB (UE) 2554*64kB (UME) 614*128kB (UME) 253*256kB (UME) 161*512kB (UE) 394*1024kB (UME) 95*2048kB (U) 7*4096kB (U) = 1127200kB [ 509.164219] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 509.182139] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 509.228502] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 509.274713] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 509.277584] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 509.320733] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 509.336514] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 509.353452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 509.373839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 509.376440] 23124 total pagecache pages [ 509.394851] 0 pages in swap cache [ 509.406471] Swap cache stats: add 0, delete 0, find 0/0 [ 509.417470] device veth0_vlan entered promiscuous mode [ 509.425379] Free swap = 0kB [ 509.431830] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 509.435499] Total swap = 0kB [ 509.448463] 2097051 pages RAM [ 509.458564] 0 pages HighMem/MovableOnly [ 509.471658] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 509.473165] 363840 pages reserved [ 509.493161] 0 pages cma reserved [ 509.514661] device veth1_vlan entered promiscuous mode [ 509.521625] Bluetooth: hci5 command 0x041b tx timeout [ 509.547772] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 509.641100] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 509.700378] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 509.732763] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 509.766313] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 509.779806] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 509.826801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 509.846275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 509.882738] device veth0_macvtap entered promiscuous mode [ 509.906965] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 509.943530] device veth1_macvtap entered promiscuous mode [ 509.966926] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 510.022523] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 510.087802] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 510.122311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 510.132503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.176090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 510.185866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.206816] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 510.223336] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 510.226645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 510.239962] syz-executor.3: [ 510.245746] syz-executor.5: [ 510.252064] page allocation failure: order:4 [ 510.252901] page allocation failure: order:4 [ 510.258654] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 510.259605] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 510.267410] syz-executor.0 cpuset= [ 510.279300] (null) [ 510.286497] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 510.286546] syz-executor.3 cpuset= [ 510.292417] CPU: 0 PID: 18159 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 510.292424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 510.292428] Call Trace: [ 510.292449] dump_stack+0x1b2/0x281 [ 510.292465] warn_alloc.cold+0x96/0x1cc [ 510.296183] / [ 510.304251] ? zone_watermark_ok_safe+0x220/0x220 [ 510.315696] / [ 510.317640] __alloc_pages_nodemask+0x2127/0x2720 [ 510.321402] mems_allowed=0-1 [ 510.325205] ? ___preempt_schedule+0x16/0x18 [ 510.325224] ? lock_acquire+0x170/0x3f0 [ 510.325240] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 510.330286] mems_allowed=0-1 [ 510.331773] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 510.331788] ? __mutex_unlock_slowpath+0x75/0x770 [ 510.368003] alloc_pages_current+0x155/0x260 [ 510.372409] ion_page_pool_alloc+0x118/0x1b0 [ 510.376807] ion_system_heap_allocate+0x133/0x8c0 [ 510.381636] ? _raw_spin_unlock+0x29/0x40 [ 510.385778] ? _ion_heap_freelist_drain+0x6e/0x410 [ 510.390692] ? ion_system_contig_heap_create+0x130/0x130 [ 510.396127] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 510.401224] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 510.406170] ion_alloc+0x27a/0x810 [ 510.409699] ? ion_dma_buf_release+0x40/0x40 [ 510.414213] ? __might_fault+0x177/0x1b0 [ 510.418271] ion_ioctl+0xea/0x1f0 [ 510.421711] ? ion_query_heaps+0x360/0x360 [ 510.425963] ? lock_acquire+0x170/0x3f0 [ 510.429921] ? lock_downgrade+0x740/0x740 [ 510.434054] ? ion_query_heaps+0x360/0x360 [ 510.438295] do_vfs_ioctl+0x75a/0xff0 [ 510.442083] ? ioctl_preallocate+0x1a0/0x1a0 [ 510.446475] ? lock_downgrade+0x740/0x740 [ 510.450611] ? __fget+0x225/0x360 [ 510.454056] ? do_vfs_ioctl+0xff0/0xff0 [ 510.458026] ? security_file_ioctl+0x83/0xb0 [ 510.462432] SyS_ioctl+0x7f/0xb0 [ 510.465806] ? do_vfs_ioctl+0xff0/0xff0 [ 510.469784] do_syscall_64+0x1d5/0x640 [ 510.473674] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 510.478851] RIP: 0033:0x45e219 [ 510.482023] RSP: 002b:00007f61d9eb6c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 510.489743] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 510.496996] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 510.504248] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 510.511514] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 510.518767] R13: 00007ffd9f2d641f R14: 00007f61d9eb79c0 R15: 000000000119bf8c [ 510.526036] CPU: 1 PID: 18408 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 510.533942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 510.543305] Call Trace: [ 510.545906] dump_stack+0x1b2/0x281 [ 510.549435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.549530] warn_alloc.cold+0x96/0x1cc [ 510.559140] (null) [ 510.562592] ? zone_watermark_ok_safe+0x220/0x220 [ 510.564712] syz-executor.5 cpuset= [ 510.569546] __alloc_pages_nodemask+0x2127/0x2720 [ 510.569565] ? lock_acquire+0x170/0x3f0 [ 510.569579] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 510.569597] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 510.569609] ? __mutex_unlock_slowpath+0x75/0x770 [ 510.569625] alloc_pages_current+0x155/0x260 [ 510.569641] ion_page_pool_alloc+0x118/0x1b0 [ 510.569653] ion_system_heap_allocate+0x133/0x8c0 [ 510.588334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 510.592723] ? ion_alloc+0x187/0x810 [ 510.598754] / [ 510.601963] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 510.608671] mems_allowed=0-1 [ 510.611192] ? ion_system_contig_heap_create+0x130/0x130 [ 510.628260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.632001] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 510.649425] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 510.649613] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 510.654730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 510.661468] ion_alloc+0x204/0x810 [ 510.661483] ? ion_dma_buf_release+0x40/0x40 [ 510.661494] ? __might_fault+0x177/0x1b0 [ 510.661505] ion_ioctl+0xea/0x1f0 [ 510.661514] ? ion_query_heaps+0x360/0x360 [ 510.661527] ? lock_acquire+0x170/0x3f0 [ 510.661536] ? lock_downgrade+0x740/0x740 [ 510.661544] ? ion_query_heaps+0x360/0x360 [ 510.661554] do_vfs_ioctl+0x75a/0xff0 [ 510.661564] ? ioctl_preallocate+0x1a0/0x1a0 [ 510.661574] ? lock_downgrade+0x740/0x740 [ 510.718154] ? __fget+0x225/0x360 [ 510.720220] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 510.721608] ? do_vfs_ioctl+0xff0/0xff0 [ 510.732343] ? security_file_ioctl+0x83/0xb0 [ 510.736757] SyS_ioctl+0x7f/0xb0 [ 510.740120] ? do_vfs_ioctl+0xff0/0xff0 [ 510.740256] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 510.744618] do_syscall_64+0x1d5/0x640 [ 510.755156] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 510.760356] RIP: 0033:0x45e219 [ 510.763550] RSP: 002b:00007f1c98502c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 510.771254] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 510.778523] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 510.780035] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 510.786225] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 510.786230] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 510.786234] R13: 00007ffef867e34f R14: 00007f1c985039c0 R15: 000000000119bf8c [ 510.796878] CPU: 1 PID: 18404 Comm: syz-executor.0 Not tainted 4.14.217-syzkaller #0 [ 510.823330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 510.832684] Call Trace: [ 510.835270] dump_stack+0x1b2/0x281 [ 510.838996] warn_alloc.cold+0x96/0x1cc [ 510.843013] ? zone_watermark_ok_safe+0x220/0x220 [ 510.846643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 510.847874] __alloc_pages_nodemask+0x2127/0x2720 [ 510.860096] ? lock_acquire+0x170/0x3f0 [ 510.864062] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 510.868907] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 510.875164] ? __mutex_unlock_slowpath+0x75/0x770 [ 510.880110] alloc_pages_current+0x155/0x260 [ 510.884515] ion_page_pool_alloc+0x118/0x1b0 [ 510.887905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 510.888920] ion_system_heap_allocate+0x133/0x8c0 [ 510.903444] ? ion_alloc+0x187/0x810 [ 510.908676] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 510.914128] ? ion_system_contig_heap_create+0x130/0x130 [ 510.919588] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 510.924621] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 510.925995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.929469] ion_alloc+0x204/0x810 [ 510.942115] ? ion_dma_buf_release+0x40/0x40 [ 510.946523] ? __might_fault+0x177/0x1b0 [ 510.950571] ion_ioctl+0xea/0x1f0 [ 510.954008] ? ion_query_heaps+0x360/0x360 [ 510.958240] ? lock_acquire+0x170/0x3f0 [ 510.962214] ? lock_downgrade+0x740/0x740 [ 510.965964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 510.966357] ? ion_query_heaps+0x360/0x360 [ 510.966370] do_vfs_ioctl+0x75a/0xff0 [ 510.984092] ? ioctl_preallocate+0x1a0/0x1a0 [ 510.988757] ? lock_downgrade+0x740/0x740 [ 510.993067] ? __fget+0x225/0x360 [ 510.996512] ? do_vfs_ioctl+0xff0/0xff0 [ 511.000494] ? security_file_ioctl+0x83/0xb0 [ 511.004906] SyS_ioctl+0x7f/0xb0 [ 511.005954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.008268] ? do_vfs_ioctl+0xff0/0xff0 [ 511.021315] do_syscall_64+0x1d5/0x640 [ 511.025198] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 511.030732] RIP: 0033:0x45e219 [ 511.033918] RSP: 002b:00007f29fee76c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 511.041624] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 511.045969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 511.048886] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 511.048893] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 511.074050] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 511.079340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.081308] R13: 00007fff7563b0cf R14: 00007f29fee779c0 R15: 000000000119bf8c [ 511.099263] CPU: 0 PID: 18403 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 511.107167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 511.116918] Call Trace: [ 511.119528] dump_stack+0x1b2/0x281 [ 511.123170] warn_alloc.cold+0x96/0x1cc [ 511.127158] ? zone_watermark_ok_safe+0x220/0x220 [ 511.132030] __alloc_pages_nodemask+0x2127/0x2720 [ 511.136893] ? lock_acquire+0x170/0x3f0 [ 511.140881] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 511.145825] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 511.151299] ? __mutex_unlock_slowpath+0x75/0x770 [ 511.156158] alloc_pages_current+0x155/0x260 [ 511.160590] ion_page_pool_alloc+0x118/0x1b0 [ 511.165095] ion_system_heap_allocate+0x133/0x8c0 [ 511.169952] ? ion_alloc+0x187/0x810 [ 511.173676] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 511.180408] ? ion_system_contig_heap_create+0x130/0x130 [ 511.185896] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 511.191042] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 511.195898] ion_alloc+0x204/0x810 [ 511.199452] ? ion_dma_buf_release+0x40/0x40 [ 511.203877] ? __might_fault+0x177/0x1b0 [ 511.207978] ion_ioctl+0xea/0x1f0 [ 511.211464] ? ion_query_heaps+0x360/0x360 [ 511.220838] ? lock_acquire+0x170/0x3f0 [ 511.224825] ? lock_downgrade+0x740/0x740 [ 511.229101] ? ion_query_heaps+0x360/0x360 [ 511.233353] do_vfs_ioctl+0x75a/0xff0 [ 511.237174] ? ioctl_preallocate+0x1a0/0x1a0 [ 511.241594] ? lock_downgrade+0x740/0x740 [ 511.245756] ? __fget+0x225/0x360 [ 511.249220] ? do_vfs_ioctl+0xff0/0xff0 [ 511.253201] ? security_file_ioctl+0x83/0xb0 [ 511.257969] SyS_ioctl+0x7f/0xb0 [ 511.261340] ? do_vfs_ioctl+0xff0/0xff0 [ 511.265328] do_syscall_64+0x1d5/0x640 [ 511.269238] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 511.274434] RIP: 0033:0x45e219 [ 511.277621] RSP: 002b:00007f37fb62bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 511.285337] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 511.292618] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 511.299903] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 511.307209] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 511.314494] R13: 00007ffd61d53b5f R14: 00007f37fb62c9c0 R15: 000000000119bf8c [ 511.330901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 511.342627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.355180] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 511.357829] warn_alloc_show_mem: 1 callbacks suppressed [ 511.357832] Mem-Info: [ 511.370992] active_anon:12862 inactive_anon:18922 isolated_anon:0 [ 511.370992] active_file:1073 inactive_file:2789 isolated_file:0 [ 511.370992] unevictable:0 dirty:71 writeback:0 unstable:0 [ 511.370992] slab_reclaimable:12858 slab_unreclaimable:118007 [ 511.370992] mapped:46179 shmem:19227 pagetables:778 bounce:0 [ 511.370992] free:265423 free_pcp:726 free_cma:0 [ 511.406000] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 511.408399] Node 0 active_anon:50764kB inactive_anon:56936kB active_file:2256kB inactive_file:8316kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:130292kB dirty:180kB writeback:0kB shmem:58028kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 511.412755] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 511.461454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 511.546989] Node 1 active_anon:684kB inactive_anon:18752kB active_file:2136kB inactive_file:2740kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:54624kB dirty:104kB writeback:0kB shmem:18880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 511.561387] syz-executor.1 (18042) used greatest stack depth: 24944 bytes left [ 511.681428] Node 0 DMA free:11096kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 511.781384] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 511.815919] Node 0 DMA32 free:455492kB min:36200kB low:45248kB high:54296kB active_anon:51264kB inactive_anon:56876kB active_file:2856kB inactive_file:13216kB unevictable:0kB writepending:180kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:8032kB pagetables:3000kB bounce:0kB free_pcp:396kB local_pcp:212kB free_cma:0kB [ 511.943637] lowmem_reserve[]: 0 0 0 0 0 [ 511.970129] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 512.055822] lowmem_reserve[]: 0 0 0 0 0 [ 512.059887] Node 1 Normal free:609984kB min:53696kB low:67120kB high:80544kB active_anon:544kB inactive_anon:18752kB active_file:2212kB inactive_file:2788kB unevictable:0kB writepending:104kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:260kB bounce:0kB free_pcp:1432kB local_pcp:692kB free_cma:0kB [ 512.166293] lowmem_reserve[]: 0 0 0 0 0 [ 512.170346] Node 0 DMA: 4*4kB (UM) 9*8kB (U) 6*16kB (U) 3*32kB (U) 3*64kB (UM) 3*128kB (UM) 2*256kB (UM) 1*512kB (M) 1*1024kB (M) 0*2048kB 2*4096kB (UM) = 11096kB [ 512.185617] device bridge_slave_1 left promiscuous mode [ 512.191363] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.192062] Node 0 DMA32: 131*4kB (EH) 579*8kB (UMEH) 4299*16kB (UMEH) 3408*32kB (UMEH) 337*64kB (UMH) 13*128kB (U) 0*256kB 0*512kB 1*1024kB (H) 0*2048kB 0*4096kB = 207252kB [ 512.234402] device bridge_slave_0 left promiscuous mode [ 512.260131] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 512.265946] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.290065] Node 1 Normal: 11761*4kB (UM) 8378*8kB (UM) 4121*16kB (UM) 3747*32kB (U) 1993*64kB (U) 433*128kB (U) 105*256kB (U) 42*512kB (U) 19*1024kB (U) 4*2048kB (U) 0*4096kB = 558916kB [ 512.342572] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 512.379127] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 512.414220] bond0 (unregistering): Released all slaves [ 512.420751] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 512.451528] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 512.478939] 26239 total pagecache pages [ 512.491504] 0 pages in swap cache [ 512.503581] Swap cache stats: add 0, delete 0, find 0/0 [ 512.521946] Free swap = 0kB [ 512.535359] Total swap = 0kB [ 512.545048] 2097051 pages RAM [ 512.568093] 0 pages HighMem/MovableOnly [ 512.585001] 363840 pages reserved [ 512.599913] 0 pages cma reserved [ 512.901054] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 512.971741] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 512.987973] CPU: 1 PID: 18445 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 512.995897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 513.005245] Call Trace: [ 513.007823] dump_stack+0x1b2/0x281 [ 513.011433] warn_alloc.cold+0x96/0x1cc [ 513.015391] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 513.020400] ? zone_watermark_ok_safe+0x220/0x220 [ 513.025231] __alloc_pages_nodemask+0x2127/0x2720 [ 513.030060] ? lock_acquire+0x170/0x3f0 [ 513.034029] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 513.038862] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 513.044293] ? __mutex_unlock_slowpath+0x75/0x770 [ 513.049131] alloc_pages_current+0x155/0x260 [ 513.053525] ion_page_pool_alloc+0x118/0x1b0 [ 513.057929] ion_system_heap_allocate+0x133/0x8c0 [ 513.062767] ? ion_alloc+0x187/0x810 [ 513.066461] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 513.071982] ? ion_system_contig_heap_create+0x130/0x130 [ 513.077427] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 513.082425] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 513.087251] ion_alloc+0x204/0x810 [ 513.091224] ? ion_dma_buf_release+0x40/0x40 [ 513.095616] ? __might_fault+0x177/0x1b0 [ 513.099671] ion_ioctl+0xea/0x1f0 [ 513.103106] ? ion_query_heaps+0x360/0x360 [ 513.107322] ? lock_acquire+0x170/0x3f0 [ 513.111272] ? lock_downgrade+0x740/0x740 [ 513.115411] ? ion_query_heaps+0x360/0x360 [ 513.119635] do_vfs_ioctl+0x75a/0xff0 [ 513.123415] ? ioctl_preallocate+0x1a0/0x1a0 [ 513.127803] ? lock_downgrade+0x740/0x740 [ 513.131932] ? __fget+0x225/0x360 [ 513.135365] ? do_vfs_ioctl+0xff0/0xff0 [ 513.139347] ? security_file_ioctl+0x83/0xb0 [ 513.143734] SyS_ioctl+0x7f/0xb0 [ 513.147881] ? do_vfs_ioctl+0xff0/0xff0 [ 513.151837] do_syscall_64+0x1d5/0x640 [ 513.155712] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 513.160894] RIP: 0033:0x45e219 [ 513.164064] RSP: 002b:00007fd20c681c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 513.171754] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 513.179014] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 513.186351] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 513.193609] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 513.201040] R13: 00007fff87e85fff R14: 00007fd20c6829c0 R15: 000000000119bf8c [ 513.336152] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 513.350741] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 513.355527] CPU: 1 PID: 7962 Comm: syz-fuzzer Not tainted 4.14.217-syzkaller #0 [ 513.363319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 513.372671] Call Trace: [ 513.375270] dump_stack+0x1b2/0x281 [ 513.378905] dump_header+0x178/0x82f [ 513.382618] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 513.387716] ? ___ratelimit+0x2cd/0x530 [ 513.391701] oom_kill_process.cold+0x10/0xb18 [ 513.396208] out_of_memory+0xe3e/0x1190 [ 513.400191] ? oom_killer_disable+0x1c0/0x1c0 [ 513.404678] ? mutex_trylock+0x152/0x1a0 [ 513.408738] __alloc_pages_nodemask+0x23e1/0x2720 [ 513.413587] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 513.418443] alloc_pages_current+0x155/0x260 [ 513.422847] filemap_fault+0xea3/0x1980 [ 513.426828] ext4_filemap_fault+0x84/0xb0 [ 513.430974] __do_fault+0xfa/0x380 [ 513.434507] __handle_mm_fault+0x2497/0x4620 [ 513.438909] ? vm_insert_page+0x7c0/0x7c0 [ 513.443059] handle_mm_fault+0x391/0x860 [ 513.447233] __do_page_fault+0x549/0xad0 [ 513.451305] ? spurious_fault+0x640/0x640 [ 513.455451] ? do_page_fault+0x60/0x500 [ 513.459553] ? page_fault+0x2f/0x50 [ 513.463179] page_fault+0x45/0x50 [ 513.466632] RIP: 1ac0ec0:0xc0001ec120 [ 513.470424] RSP: 01ed:00007ffe9066a490 EFLAGS: 00000003 [ 513.487989] Mem-Info: [ 513.501188] active_anon:12790 inactive_anon:18920 isolated_anon:0 [ 513.501188] active_file:56 inactive_file:35 isolated_file:15 [ 513.501188] unevictable:0 dirty:4 writeback:0 unstable:0 [ 513.501188] slab_reclaimable:12831 slab_unreclaimable:117485 [ 513.501188] mapped:44040 shmem:19223 pagetables:830 bounce:0 [ 513.501188] free:13937 free_pcp:0 free_cma:0 [ 513.550421] warn_alloc_show_mem: 3 callbacks suppressed [ 513.550425] Mem-Info: [ 513.572686] active_anon:12790 inactive_anon:18920 isolated_anon:0 [ 513.572686] active_file:56 inactive_file:35 isolated_file:15 [ 513.572686] unevictable:0 dirty:4 writeback:0 unstable:0 [ 513.572686] slab_reclaimable:12831 slab_unreclaimable:117485 [ 513.572686] mapped:44015 shmem:19223 pagetables:830 bounce:0 [ 513.572686] free:13937 free_pcp:48 free_cma:0 [ 513.609053] Node 0 active_anon:50620kB inactive_anon:56928kB active_file:140kB inactive_file:80kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:125092kB dirty:12kB writeback:0kB shmem:58012kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 513.641730] Node 0 active_anon:50620kB inactive_anon:56928kB active_file:140kB inactive_file:80kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:125092kB dirty:12kB writeback:0kB shmem:58012kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 513.672166] Node 1 active_anon:540kB inactive_anon:18752kB active_file:84kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):60kB mapped:50968kB dirty:4kB writeback:0kB shmem:18880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 513.705681] Node 1 active_anon:540kB inactive_anon:18752kB active_file:84kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):60kB mapped:50968kB dirty:4kB writeback:0kB shmem:18880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 513.745970] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 513.763105] Node 0 [ 513.773747] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 513.781081] Node 0 DMA32 free:18024kB min:36200kB low:45248kB high:54296kB active_anon:50620kB inactive_anon:56868kB active_file:68kB inactive_file:52kB unevictable:0kB writepending:12kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:8064kB pagetables:3060kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 513.781731] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 513.817530] lowmem_reserve[]: 0 0 0 0 0 [ 513.844039] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 513.850030] lowmem_reserve[]: [ 513.882118] lowmem_reserve[]: 0 0 0 0 0 [ 513.885652] 0 2717 2718 2718 2718 [ 513.891293] Node 1 [ 513.893057] Node 0 [ 513.893069] Normal free:26768kB min:53696kB low:67120kB high:80544kB active_anon:540kB inactive_anon:18752kB active_file:84kB inactive_file:60kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:260kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 513.893073] lowmem_reserve[]: [ 513.895312] DMA32 free:18040kB min:36200kB low:45248kB high:54296kB active_anon:50620kB inactive_anon:56868kB active_file:68kB inactive_file:52kB unevictable:0kB writepending:12kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:8064kB pagetables:3060kB bounce:0kB free_pcp:136kB local_pcp:16kB free_cma:0kB [ 513.906481] 0 [ 513.958483] lowmem_reserve[]: 0 [ 513.963551] 0 0 0 0 [ 513.969193] Node 0 DMA: 1*4kB (M) 1*8kB (U) 2*16kB (U) 3*32kB (U) 3*64kB (UM) 3*128kB (UM) 2*256kB (UM) 1*512kB (M) 1*1024kB (M) 0*2048kB 2*4096kB (UM) = 10956kB [ 513.983848] 0 0 0 0 [ 513.989422] Node 0 DMA32: 506*4kB (UMEH) 875*8kB (UMEH) 254*16kB (UMEH) 69*32kB (UMEH) 17*64kB (UMH) 4*128kB (UM) 1*256kB (U) 0*512kB 1*1024kB (H) 0*2048kB 0*4096kB = 18176kB [ 514.005616] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 514.012396] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 514.061802] Node 1 Normal: 8*4kB (UM) 12*8kB (UM) 7*16kB (UM) 6*32kB (UM) 4*64kB (UM) 4*128kB (UM) 8*256kB (UM) 43*512kB (UM) 0*1024kB 1*2048kB (M) 0*4096kB = 27312kB [ 514.065615] lowmem_reserve[]: [ 514.085096] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 514.092000] 0 [ 514.100461] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 514.105607] 0 0 0 0 [ 514.111336] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 514.125623] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 514.126127] Node 1 [ 514.134196] 19262 total pagecache pages [ 514.134217] Normal free:26896kB min:53696kB low:67120kB high:80544kB active_anon:540kB inactive_anon:18752kB active_file:64kB inactive_file:72kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:260kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 514.155593] 0 pages in swap cache [ 514.181355] lowmem_reserve[]: 0 0 0 0 0 [ 514.181899] Swap cache stats: add 0, delete 0, find 0/0 [ 514.185389] Node 0 DMA: 1*4kB (M) 1*8kB (U) 2*16kB (U) 3*32kB (U) 3*64kB (UM) 3*128kB (UM) 2*256kB (UM) 1*512kB (M) 1*1024kB (M) 0*2048kB 2*4096kB (UM) = 10956kB [ 514.200779] Free swap = 0kB [ 514.205615] Node 0 DMA32: 504*4kB (UMEH) 950*8kB (UMEH) 281*16kB (UMEH) 79*32kB (UMEH) 24*64kB (UMH) 4*128kB (UM) 1*256kB (U) 0*512kB 1*1024kB (H) 0*2048kB 0*4096kB = 19968kB [ 514.205694] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 514.205736] Node 1 Normal: 5*4kB (UM) 11*8kB (UM) 7*16kB (UM) [ 514.221999] Total swap = 0kB [ 514.236163] 5*32kB (M) 3*64kB (M) 3*128kB (M) 7*256kB (UM) 43*512kB (UM) 0*1024kB 1*2048kB (M) 0*4096kB = 26812kB [ 514.245307] 2097051 pages RAM [ 514.254704] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 514.254711] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 514.254717] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 514.254723] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 514.254726] 19262 total pagecache pages [ 514.254735] 0 pages in swap cache [ 514.254739] Swap cache stats: add 0, delete 0, find 0/0 [ 514.254742] Free swap = 0kB [ 514.254745] Total swap = 0kB [ 514.254752] 2097051 pages RAM [ 514.254755] 0 pages HighMem/MovableOnly [ 514.254758] 363840 pages reserved [ 514.254762] 0 pages cma reserved [ 514.335996] 0 pages HighMem/MovableOnly [ 514.339997] 363840 pages reserved [ 514.343438] 0 pages cma reserved [ 514.358200] Out of memory (oom_kill_allocating_task): Kill process 7962 (syz-fuzzer) score 0 or sacrifice child [ 514.368617] Killed process 17135 (syz-executor.5) total-vm:85024kB, anon-rss:72kB, file-rss:4kB, shmem-rss:0kB [ 514.392854] oom_reaper: reaped process 17135 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 514.475740] syz-executor.4 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 514.509239] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 514.514429] CPU: 1 PID: 18010 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 514.522333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 514.531692] Call Trace: [ 514.534295] dump_stack+0x1b2/0x281 [ 514.537937] dump_header+0x178/0x82f [ 514.541647] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 514.546741] ? ___ratelimit+0x2cd/0x530 [ 514.550708] oom_kill_process.cold+0x10/0xb18 [ 514.555229] out_of_memory+0xe3e/0x1190 [ 514.559252] ? oom_killer_disable+0x1c0/0x1c0 [ 514.563744] ? mutex_trylock+0x152/0x1a0 [ 514.565589] syz-executor.0: page allocation failure: order:0 [ 514.567812] __alloc_pages_nodemask+0x23e1/0x2720 [ 514.567830] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 514.573607] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 514.578458] alloc_pages_current+0x155/0x260 [ 514.578472] filemap_fault+0xea3/0x1980 [ 514.578492] ext4_filemap_fault+0x84/0xb0 [ 514.578508] __do_fault+0xfa/0x380 [ 514.596388] (null) [ 514.598767] __handle_mm_fault+0x2497/0x4620 [ 514.602890] syz-executor.0 cpuset= [ 514.606416] ? vm_insert_page+0x7c0/0x7c0 [ 514.606426] ? lock_downgrade+0x740/0x740 [ 514.606443] handle_mm_fault+0x391/0x860 [ 514.606456] __do_page_fault+0x549/0xad0 [ 514.606467] ? spurious_fault+0x640/0x640 [ 514.606476] ? do_page_fault+0x60/0x500 [ 514.606488] ? page_fault+0x2f/0x50 [ 514.606496] page_fault+0x45/0x50 [ 514.612510] / [ 514.613099] RIP: 0002:0x32 [ 514.618450] mems_allowed=0-1 [ 514.620761] RSP: 0bb8:000000000007d13f EFLAGS: 00000003 [ 514.657570] CPU: 0 PID: 18404 Comm: syz-executor.0 Not tainted 4.14.217-syzkaller #0 [ 514.670814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 514.680166] Call Trace: [ 514.682758] dump_stack+0x1b2/0x281 [ 514.686386] warn_alloc.cold+0x96/0x1cc [ 514.691007] ? zone_watermark_ok_safe+0x220/0x220 [ 514.695551] Mem-Info: [ 514.695844] ? usleep_range+0x130/0x130 [ 514.698248] active_anon:12764 inactive_anon:18920 isolated_anon:0 [ 514.698248] active_file:16 inactive_file:16 isolated_file:0 [ 514.698248] unevictable:0 dirty:0 writeback:0 unstable:0 [ 514.698248] slab_reclaimable:12831 slab_unreclaimable:117027 [ 514.698248] mapped:43997 shmem:19223 pagetables:781 bounce:0 [ 514.698248] free:13945 free_pcp:31 free_cma:0 [ 514.702205] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 514.735374] Node 0 active_anon:50516kB inactive_anon:56928kB active_file:60kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:125056kB dirty:0kB writeback:0kB shmem:58012kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 514.740421] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 514.740434] ? run_timer_softirq+0x5a0/0x5a0 [ 514.768369] Node 1 active_anon:540kB inactive_anon:18752kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:50932kB dirty:0kB writeback:0kB shmem:18880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 514.773352] __alloc_pages_nodemask+0x2127/0x2720 [ 514.777746] Node 0 [ 514.804615] ? lock_acquire+0x170/0x3f0 [ 514.804632] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 514.809474] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 514.811675] ? ion_page_pool_alloc+0x9e/0x1b0 [ 514.815633] lowmem_reserve[]: [ 514.820540] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 514.846551] 0 [ 514.851018] alloc_pages_current+0x155/0x260 [ 514.854098] 2717 [ 514.859536] ion_page_pool_alloc+0x118/0x1b0 [ 514.859546] ion_system_heap_allocate+0x133/0x8c0 [ 514.859557] ? ion_alloc+0x187/0x810 [ 514.861331] 2718 [ 514.865720] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 514.865731] ? ion_system_contig_heap_create+0x130/0x130 [ 514.865744] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 514.867776] 2718 [ 514.872177] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 514.877001] 2718 [ 514.880684] ion_alloc+0x204/0x810 [ 514.882717] Node 0 [ 514.888151] ? ion_dma_buf_release+0x40/0x40 [ 514.888166] ? __might_fault+0x177/0x1b0 [ 514.893598] DMA32 free:18012kB min:36200kB low:45248kB high:54296kB active_anon:50516kB inactive_anon:56868kB active_file:60kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:8032kB pagetables:2864kB bounce:0kB free_pcp:124kB local_pcp:120kB free_cma:0kB [ 514.899024] ion_ioctl+0xea/0x1f0 [ 514.899035] ? ion_query_heaps+0x360/0x360 [ 514.899047] ? lock_acquire+0x170/0x3f0 [ 514.901079] lowmem_reserve[]: [ 514.905899] ? lock_downgrade+0x740/0x740 [ 514.905908] ? ion_query_heaps+0x360/0x360 [ 514.905920] do_vfs_ioctl+0x75a/0xff0 [ 514.907951] 0 [ 514.911473] ? ioctl_preallocate+0x1a0/0x1a0 [ 514.913677] 0 [ 514.918071] ? lock_downgrade+0x740/0x740 [ 514.918085] ? __fget+0x225/0x360 [ 514.918094] ? do_vfs_ioctl+0xff0/0xff0 [ 514.922131] 0 [ 514.950396] ? security_file_ioctl+0x83/0xb0 [ 514.950407] SyS_ioctl+0x7f/0xb0 [ 514.950414] ? do_vfs_ioctl+0xff0/0xff0 [ 514.950426] do_syscall_64+0x1d5/0x640 [ 514.954229] 0 [ 514.958812] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 514.958822] RIP: 0033:0x45e219 [ 514.962768] 0 [ 514.965864] RSP: 002b:00007f29fee76c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 514.965874] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 514.965879] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 514.965883] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 514.965890] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 514.974219] R13: 00007fff7563b0cf R14: 00007f29fee779c0 R15: 000000000119bf8c [ 514.983282] Mem-Info: [ 514.985512] syz-executor.2: [ 514.986752] active_anon:12764 inactive_anon:18920 isolated_anon:0 [ 514.986752] active_file:16 inactive_file:16 isolated_file:0 [ 514.986752] unevictable:0 dirty:0 writeback:0 unstable:0 [ 514.986752] slab_reclaimable:12831 slab_unreclaimable:117027 [ 514.986752] mapped:43997 shmem:19223 pagetables:781 bounce:0 [ 514.986752] free:13945 free_pcp:31 free_cma:0 [ 514.990824] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 514.994271] Node 0 active_anon:50516kB inactive_anon:56928kB active_file:60kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:125056kB dirty:0kB writeback:0kB shmem:58012kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 515.015506] Node 0 [ 515.022151] Node 1 active_anon:540kB inactive_anon:18752kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:50928kB dirty:0kB writeback:0kB shmem:18880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 515.022816] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 515.026137] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 515.026160] lowmem_reserve[]: 0 2717 [ 515.042186] (null) [ 515.048686] 2718 [ 515.056432] lowmem_reserve[]: [ 515.059581] 2718 [ 515.064893] 0 [ 515.077780] 2718 [ 515.112872] syz-executor.2 cpuset= [ 515.151185] / [ 515.171761] Node 0 [ 515.180796] 0 [ 515.221771] DMA32 free:18096kB min:36200kB low:45248kB high:54296kB active_anon:50516kB inactive_anon:56868kB active_file:60kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:8032kB pagetables:2864kB bounce:0kB free_pcp:204kB local_pcp:4kB free_cma:0kB [ 515.232368] mems_allowed=0-1 [ 515.243563] lowmem_reserve[]: [ 515.251390] CPU: 1 PID: 18159 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 515.252798] 0 0 [ 515.255063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 515.266548] 0 [ 515.284948] Call Trace: [ 515.284977] dump_stack+0x1b2/0x281 [ 515.284992] warn_alloc.cold+0x96/0x1cc [ 515.285005] ? zone_watermark_ok_safe+0x220/0x220 [ 515.285015] ? usleep_range+0x130/0x130 [ 515.285024] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 515.285037] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 515.285047] ? run_timer_softirq+0x5a0/0x5a0 [ 515.285063] __alloc_pages_nodemask+0x2127/0x2720 [ 515.285079] ? lock_acquire+0x170/0x3f0 [ 515.285093] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 515.285106] ? ion_page_pool_alloc+0x9e/0x1b0 [ 515.285118] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 515.285131] ? __sanitizer_cov_trace_pc+0x34/0x50 [ 515.285146] alloc_pages_current+0x155/0x260 [ 515.285155] ion_page_pool_alloc+0x118/0x1b0 [ 515.285164] ion_system_heap_allocate+0x133/0x8c0 [ 515.285173] ? _raw_spin_unlock+0x29/0x40 [ 515.285181] ? _ion_heap_freelist_drain+0x6e/0x410 [ 515.285189] ? ion_system_contig_heap_create+0x130/0x130 [ 515.285199] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 515.285210] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 515.285220] ion_alloc+0x27a/0x810 [ 515.285233] ? ion_dma_buf_release+0x40/0x40 [ 515.285244] ? __might_fault+0x177/0x1b0 [ 515.285257] ion_ioctl+0xea/0x1f0 [ 515.285267] ? ion_query_heaps+0x360/0x360 [ 515.285277] ? lock_acquire+0x170/0x3f0 [ 515.285290] ? lock_downgrade+0x740/0x740 [ 515.297952] 0 [ 515.299514] ? ion_query_heaps+0x360/0x360 [ 515.301461] 0 [ 515.310829] do_vfs_ioctl+0x75a/0xff0 [ 515.310843] ? ioctl_preallocate+0x1a0/0x1a0 [ 515.310854] ? lock_downgrade+0x740/0x740 [ 515.310867] ? __fget+0x225/0x360 [ 515.310875] ? do_vfs_ioctl+0xff0/0xff0 [ 515.310885] ? security_file_ioctl+0x83/0xb0 [ 515.310894] SyS_ioctl+0x7f/0xb0 [ 515.310901] ? do_vfs_ioctl+0xff0/0xff0 [ 515.310915] do_syscall_64+0x1d5/0x640 [ 515.310934] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 515.310967] RIP: 0033:0x45e219 [ 515.310975] RSP: 002b:00007f61d9eb6c68 EFLAGS: 00000246 [ 515.322906] ORIG_RAX: 0000000000000010 [ 515.327774] Node 0 [ 515.331708] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 515.345995] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 515.346228] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 515.351061] lowmem_reserve[]: [ 515.355015] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 515.369120] 0 [ 515.369779] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 515.374600] 0 [ 515.382110] R13: 00007ffd9f2d641f R14: 00007f61d9eb79c0 R15: 000000000119bf8c [ 515.455864] 0 [ 515.459398] 0 [ 515.508207] 0 0 [ 515.595968] Node 1 Normal free:199264kB min:53696kB low:67120kB high:80544kB active_anon:540kB inactive_anon:18752kB active_file:0kB inactive_file:2504kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:260kB bounce:0kB free_pcp:176kB local_pcp:56kB free_cma:0kB [ 515.698615] 0 0 [ 515.700668] Node 1 Normal free:314720kB min:53696kB low:67120kB high:80544kB active_anon:540kB inactive_anon:18752kB active_file:0kB inactive_file:2504kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:260kB bounce:0kB free_pcp:176kB local_pcp:120kB free_cma:0kB [ 515.705431] lowmem_reserve[]: [ 515.770224] lowmem_reserve[]: [ 515.778587] 0 [ 515.795431] 0 0 0 0 0 [ 515.799804] Node 0 DMA: 1*4kB (M) 1*8kB (U) 2*16kB (U) 3*32kB (U) 4*64kB (UM) 3*128kB (UM) 1*256kB (M) 2*512kB (UM) 1*1024kB (M) 0*2048kB 2*4096kB (UM) = 11276kB [ 515.817833] 0 0 0 0 [ 515.820202] Node 0 DMA: 1*4kB (M) 1*8kB (U) 2*16kB (U) 3*32kB (U) 4*64kB (UM) 3*128kB (UM) 1*256kB (M) 2*512kB (UM) 1*1024kB (M) 0*2048kB 2*4096kB (UM) = 11276kB [ 515.841822] Node 0 DMA32: 309*4kB (UME) 673*8kB (UE) 646*16kB (UME) 127*32kB (UME) 1395*64kB (UME) 314*128kB (UM) 51*256kB (U) 3*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 166108kB [ 515.865425] Node 0 DMA32: 327*4kB (UME) 693*8kB (UE) 616*16kB (UME) 530*32kB (UME) 1395*64kB (UME) 314*128kB (UM) 51*256kB (U) 3*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 178756kB [ 515.889940] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 515.925774] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 1*16kB (M) 2*32kB (UM) 2379*64kB (UM) 688*128kB (UM) 170*256kB (U) 108*512kB (UM) 31*1024kB (UM) 5*2048kB (U) 0*4096kB = 381216kB [ 515.926532] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 515.976559] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 1*16kB (M) 2*32kB (UM) 2379*64kB (UM) 688*128kB (UM) 170*256kB (U) 108*512kB (UM) 31*1024kB (UM) 5*2048kB (U) 0*4096kB = 381216kB [ 516.009050] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 516.034212] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 516.043076] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 516.047684] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 516.052266] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 516.085919] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 516.115731] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 516.124631] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 516.136889] 21831 total pagecache pages [ 516.140901] 0 pages in swap cache [ 516.144801] Swap cache stats: add 0, delete 0, find 0/0 [ 516.175768] 21831 total pagecache pages [ 516.179788] 0 pages in swap cache [ 516.183240] Swap cache stats: add 0, delete 0, find 0/0 [ 516.189128] Free swap = 0kB [ 516.192163] Total swap = 0kB [ 516.195194] 2097051 pages RAM [ 516.221985] Free swap = 0kB [ 516.225021] Total swap = 0kB [ 516.225407] 0 pages HighMem/MovableOnly [ 516.232553] 363840 pages reserved [ 516.254919] 2097051 pages RAM [ 516.255381] 0 pages cma reserved [ 516.261468] Out of memory (oom_kill_allocating_task): Kill process 18010 (syz-executor.4) score 0 or sacrifice child [ 516.272365] 0 pages HighMem/MovableOnly [ 516.276851] 363840 pages reserved [ 516.280305] 0 pages cma reserved [ 516.315427] Killed process 18445 (syz-executor.4) total-vm:93352kB, anon-rss:148kB, file-rss:35012kB, shmem-rss:0kB [ 516.337023] oom_reaper: reaped process 18404 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 21:24:59 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0xc0241, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) [ 516.428646] oom_reaper: reaped process 18445 (syz-executor.4), now anon-rss:0kB, file-rss:8kB, shmem-rss:0kB [ 517.092599] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 517.142718] oom_reaper: reaped process 18403 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 517.160679] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 517.174205] CPU: 1 PID: 18449 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 517.182126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 517.191479] Call Trace: [ 517.194063] dump_stack+0x1b2/0x281 [ 517.197867] warn_alloc.cold+0x96/0x1cc [ 517.201829] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 517.206829] ? zone_watermark_ok_safe+0x220/0x220 [ 517.211662] __alloc_pages_nodemask+0x2127/0x2720 [ 517.216486] ? __schedule+0x893/0x1de0 [ 517.220533] ? lock_acquire+0x170/0x3f0 [ 517.224501] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 517.229345] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 517.234793] ? __mutex_unlock_slowpath+0x75/0x770 [ 517.239735] alloc_pages_current+0x155/0x260 [ 517.244150] ion_page_pool_alloc+0x118/0x1b0 [ 517.248542] ion_system_heap_allocate+0x133/0x8c0 [ 517.253371] ? ion_alloc+0x187/0x810 [ 517.257068] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 517.262516] ? ion_system_contig_heap_create+0x130/0x130 [ 517.267946] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 517.272943] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 517.277767] ion_alloc+0x204/0x810 [ 517.281292] ? ion_dma_buf_release+0x40/0x40 [ 517.285832] ? __might_fault+0x177/0x1b0 [ 517.289920] ion_ioctl+0xea/0x1f0 [ 517.293367] ? ion_query_heaps+0x360/0x360 [ 517.297595] ? lock_acquire+0x170/0x3f0 [ 517.301555] ? lock_downgrade+0x740/0x740 [ 517.305687] ? ion_query_heaps+0x360/0x360 [ 517.309906] do_vfs_ioctl+0x75a/0xff0 [ 517.313697] ? ioctl_preallocate+0x1a0/0x1a0 [ 517.318694] ? lock_downgrade+0x740/0x740 [ 517.322843] ? __fget+0x225/0x360 [ 517.326279] ? do_vfs_ioctl+0xff0/0xff0 [ 517.330235] ? security_file_ioctl+0x83/0xb0 [ 517.334712] SyS_ioctl+0x7f/0xb0 [ 517.338063] ? do_vfs_ioctl+0xff0/0xff0 [ 517.342019] do_syscall_64+0x1d5/0x640 [ 517.345897] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 517.351071] RIP: 0033:0x45e219 [ 517.354259] RSP: 002b:00007f61d9eb6c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 517.361948] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 517.369199] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 517.376452] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 517.383705] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 517.390956] R13: 00007ffd9f2d641f R14: 00007f61d9eb79c0 R15: 000000000119bf8c [ 517.433897] oom_reaper: reaped process 18408 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 517.463665] warn_alloc_show_mem: 1 callbacks suppressed [ 517.463670] Mem-Info: [ 517.468290] syz-executor.2 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=1000 [ 517.482989] active_anon:12135 inactive_anon:18919 isolated_anon:0 [ 517.482989] active_file:29 inactive_file:5 isolated_file:0 [ 517.482989] unevictable:0 dirty:61 writeback:0 unstable:0 [ 517.482989] slab_reclaimable:12735 slab_unreclaimable:118093 [ 517.482989] mapped:44085 shmem:19222 pagetables:805 bounce:0 [ 517.482989] free:13843 free_pcp:28 free_cma:0 [ 517.505255] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 517.546385] CPU: 0 PID: 18448 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 517.560991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 517.565153] Node 0 active_anon:47864kB inactive_anon:56924kB active_file:236kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:113048kB dirty:200kB writeback:0kB shmem:58008kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 517.570341] Call Trace: [ 517.570364] dump_stack+0x1b2/0x281 [ 517.570378] dump_header+0x178/0x82f [ 517.570390] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 517.570404] ? ___ratelimit+0x2cd/0x530 [ 517.599227] Node 1 active_anon:676kB inactive_anon:18752kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:63292kB dirty:44kB writeback:0kB shmem:18880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 517.601848] oom_kill_process.cold+0x10/0xb18 [ 517.605484] Node 0 [ 517.609170] out_of_memory+0xe3e/0x1190 [ 517.614277] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 517.618225] ? oom_killer_disable+0x1c0/0x1c0 [ 517.618236] ? mutex_trylock+0x152/0x1a0 [ 517.618247] __alloc_pages_nodemask+0x23e1/0x2720 [ 517.645216] lowmem_reserve[]: [ 517.649692] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 517.651897] 0 [ 517.655867] alloc_pages_current+0x155/0x260 [ 517.655880] filemap_fault+0xea3/0x1980 [ 517.681892] 2717 [ 517.686390] ext4_filemap_fault+0x84/0xb0 [ 517.686404] __do_fault+0xfa/0x380 [ 517.690434] 2718 [ 517.695256] ? pmd_devmap_trans_unstable+0x151/0x1b0 [ 517.695265] __handle_mm_fault+0x2373/0x4620 [ 517.695277] ? vm_insert_page+0x7c0/0x7c0 [ 517.698360] 2718 [ 517.703189] ? lock_downgrade+0x740/0x740 [ 517.704962] 2718 [ 517.709370] handle_mm_fault+0x391/0x860 [ 517.709383] __do_page_fault+0x549/0xad0 [ 517.715390] ? spurious_fault+0x640/0x640 [ 517.715399] ? do_page_fault+0x60/0x500 [ 517.715411] ? page_fault+0x2f/0x50 [ 517.719529] Node 0 [ 517.723071] page_fault+0x45/0x50 [ 517.725119] DMA32 free:17696kB min:36200kB low:45248kB high:54296kB active_anon:47964kB inactive_anon:56864kB active_file:244kB inactive_file:228kB unevictable:0kB writepending:200kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7968kB pagetables:2728kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 517.730189] RIP: 119ca00:0x119bf80 [ 517.730193] RSP: 0001:00000000000003e7 EFLAGS: 0119ca00 [ 517.736627] syz-executor.0: [ 517.768134] lowmem_reserve[]: [ 517.775830] page allocation failure: order:4 [ 517.821485] 0 [ 517.825719] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 517.835817] 0 0 0 0 [ 517.838166] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 517.839165] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 517.882274] CPU: 0 PID: 18404 Comm: syz-executor.0 Not tainted 4.14.217-syzkaller #0 [ 517.884706] lowmem_reserve[]: [ 517.890161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 517.890165] Call Trace: [ 517.890189] dump_stack+0x1b2/0x281 [ 517.890204] warn_alloc.cold+0x96/0x1cc [ 517.893291] 0 [ 517.902632] ? zone_watermark_ok_safe+0x220/0x220 [ 517.902657] __alloc_pages_nodemask+0x2127/0x2720 [ 517.905243] 0 [ 517.908857] ? lock_acquire+0x170/0x3f0 [ 517.912791] 0 0 0 [ 517.912804] Node 1 Normal free:26752kB min:53696kB low:67120kB high:80544kB active_anon:676kB inactive_anon:18752kB active_file:100kB inactive_file:16kB unevictable:0kB writepending:44kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:492kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 517.912824] lowmem_reserve[]: [ 517.914618] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 517.919453] 0 [ 517.924270] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 517.926076] 0 [ 517.930015] ? __mutex_unlock_slowpath+0x75/0x770 [ 517.932135] 0 [ 517.960914] ? __sanitizer_cov_trace_pc+0x1d/0x50 [ 517.960930] alloc_pages_current+0x155/0x260 [ 517.960949] ion_page_pool_alloc+0x118/0x1b0 [ 517.964024] 0 [ 517.968846] ion_system_heap_allocate+0x133/0x8c0 [ 517.968860] ? _raw_spin_unlock+0x29/0x40 [ 517.968872] ? _ion_heap_freelist_drain+0x6e/0x410 [ 517.970659] 0 [ 517.976091] ? ion_system_contig_heap_create+0x130/0x130 [ 517.976102] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 517.976114] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 517.982727] ion_alloc+0x27a/0x810 [ 517.984521] Node 0 [ 517.989362] ? ion_dma_buf_release+0x40/0x40 [ 517.989374] ? __might_fault+0x177/0x1b0 [ 517.989387] ion_ioctl+0xea/0x1f0 [ 517.993778] Mem-Info: [ 517.998169] ? ion_query_heaps+0x360/0x360 [ 517.998182] ? lock_acquire+0x170/0x3f0 [ 517.998193] ? lock_downgrade+0x740/0x740 [ 517.999981] active_anon:12135 inactive_anon:18919 isolated_anon:0 [ 517.999981] active_file:27 inactive_file:2 isolated_file:0 [ 517.999981] unevictable:0 dirty:61 writeback:0 unstable:0 [ 517.999981] slab_reclaimable:12735 slab_unreclaimable:118093 [ 517.999981] mapped:44085 shmem:19222 pagetables:805 bounce:0 [ 517.999981] free:13854 free_pcp:30 free_cma:0 [ 518.004792] ? ion_query_heaps+0x360/0x360 [ 518.004803] do_vfs_ioctl+0x75a/0xff0 [ 518.008949] DMA: [ 518.013849] ? ioctl_preallocate+0x1a0/0x1a0 [ 518.015645] 2*4kB [ 518.021052] ? lock_downgrade+0x740/0x740 [ 518.021067] ? __fget+0x225/0x360 [ 518.026091] Node 0 active_anon:47864kB inactive_anon:56924kB active_file:128kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:113048kB dirty:200kB writeback:0kB shmem:58008kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 518.030881] ? do_vfs_ioctl+0xff0/0xff0 [ 518.034398] Node 1 active_anon:676kB inactive_anon:18752kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:63292kB dirty:44kB writeback:0kB shmem:18880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 518.036630] ? security_file_ioctl+0x83/0xb0 [ 518.036640] SyS_ioctl+0x7f/0xb0 [ 518.036650] ? do_vfs_ioctl+0xff0/0xff0 [ 518.041057] (UM) [ 518.045096] do_syscall_64+0x1d5/0x640 [ 518.048543] 0*8kB [ 518.050921] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 518.055119] 1*16kB [ 518.059071] RIP: 0033:0x45e219 [ 518.059076] RSP: 002b:00007f29fee76c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 518.059086] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 518.059093] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 518.063225] Node 0 [ 518.096353] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 518.096358] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 518.096363] R13: 00007fff7563b0cf R14: 00007f29fee779c0 R15: 000000000119bf8c [ 518.214915] (U) [ 518.224270] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 518.288459] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 518.293505] Node 0 DMA32 free:18028kB min:36200kB low:45248kB high:54296kB active_anon:47832kB inactive_anon:56864kB active_file:172kB inactive_file:20kB unevictable:0kB writepending:116kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7968kB pagetables:2724kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 518.325505] lowmem_reserve[]: 0 0 0 0 0 [ 518.329501] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 518.368675] lowmem_reserve[]: 0 0 0 0 0 [ 518.371399] 0*32kB 1*64kB [ 518.372688] Node 1 Normal free:26764kB min:53696kB low:67120kB high:80544kB active_anon:656kB inactive_anon:18752kB active_file:16kB inactive_file:24kB unevictable:0kB writepending:12kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:492kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 518.417025] lowmem_reserve[]: 0 0 0 0 0 [ 518.419462] (M) 3*128kB [ 518.421050] Node 0 DMA: [ 518.423830] (UM) [ 518.423837] 2*4kB [ 518.427456] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 518.450939] (UM) 0*8kB 1*16kB (U) 0*32kB 1*64kB (M) 3*128kB (UM) 1*256kB (M) 2*512kB (UM) 1*1024kB (M) 0*2048kB 2*4096kB (UM) = 10968kB [ 518.455072] 1*256kB [ 518.472840] Node 0 DMA32: 520*4kB (UME) 823*8kB (ME) 246*16kB (ME) 75*32kB (UME) 20*64kB (ME) 2*128kB (UM) 2*256kB (M) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 17560kB [ 518.478552] (M) [ 518.494674] syz-executor.0: [ 518.498788] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 518.504803] page allocation failure: order:0 [ 518.523921] syz-executor.5 cpuset= [ 518.525230] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 518.530364] / [ 518.531890] (null) [ 518.539014] Node 1 Normal: 12*4kB (M) 19*8kB (UM) 12*16kB (UM) 10*32kB (UM) 15*64kB (UM) 8*128kB (UM) 2*256kB (M) 46*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26760kB [ 518.539086] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 518.539091] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 518.539096] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 518.539101] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 518.539108] 19285 total pagecache pages [ 518.546715] syz-executor.3: [ 518.561687] syz-executor.4: [ 518.576349] 2*512kB [ 518.591323] mems_allowed=0-1 [ 518.607374] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 518.613406] CPU: 0 PID: 18404 Comm: syz-executor.0 Not tainted 4.14.217-syzkaller #0 [ 518.618776] page allocation failure: order:0 [ 518.621972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 518.621978] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 518.626414] Call Trace: [ 518.626437] dump_stack+0x1b2/0x281 [ 518.626454] warn_alloc.cold+0x96/0x1cc [ 518.645109] 0 pages in swap cache [ 518.645953] ? zone_watermark_ok_safe+0x220/0x220 [ 518.649551] Swap cache stats: add 0, delete 0, find 0/0 [ 518.653516] ? usleep_range+0x130/0x130 [ 518.665096] syz-executor.4 cpuset= [ 518.667104] ? try_to_free_pages+0x23f/0x6e0 [ 518.671052] / [ 518.674575] ? _find_next_bit+0xdb/0x100 [ 518.678981] Free swap = 0kB [ 518.680655] ? run_timer_softirq+0x5a0/0x5a0 [ 518.684685] Total swap = 0kB [ 518.687709] __alloc_pages_nodemask+0x2127/0x2720 [ 518.687729] ? lock_acquire+0x170/0x3f0 [ 518.704013] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 518.705090] mems_allowed=0-1 [ 518.708847] ? ion_page_pool_alloc+0x9e/0x1b0 [ 518.715095] 2097051 pages RAM [ 518.717807] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 518.720909] 0 pages HighMem/MovableOnly [ 518.726346] ? __sanitizer_cov_trace_pc+0x1d/0x50 [ 518.726361] alloc_pages_current+0x155/0x260 [ 518.726378] ion_page_pool_alloc+0x118/0x1b0 [ 518.744692] ion_system_heap_allocate+0x133/0x8c0 [ 518.749534] ? _raw_spin_unlock+0x29/0x40 [ 518.753666] ? _ion_heap_freelist_drain+0x6e/0x410 [ 518.755084] 363840 pages reserved [ 518.758595] ? ion_system_contig_heap_create+0x130/0x130 [ 518.762022] 0 pages cma reserved [ 518.767540] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 518.767553] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 518.767565] ion_alloc+0x27a/0x810 [ 518.784243] ? ion_dma_buf_release+0x40/0x40 [ 518.788724] ? __might_fault+0x177/0x1b0 [ 518.793296] ion_ioctl+0xea/0x1f0 [ 518.796732] ? ion_query_heaps+0x360/0x360 [ 518.800967] ? lock_acquire+0x170/0x3f0 [ 518.804930] ? lock_downgrade+0x740/0x740 [ 518.805080] Out of memory (oom_kill_allocating_task): Kill process 18448 (syz-executor.2) score 0 or sacrifice child [ 518.809060] ? ion_query_heaps+0x360/0x360 [ 518.809071] do_vfs_ioctl+0x75a/0xff0 [ 518.827928] ? ioctl_preallocate+0x1a0/0x1a0 [ 518.832344] ? lock_downgrade+0x740/0x740 [ 518.836476] ? __fget+0x225/0x360 [ 518.839911] ? do_vfs_ioctl+0xff0/0xff0 [ 518.843877] ? security_file_ioctl+0x83/0xb0 [ 518.845097] Killed process 18448 (syz-executor.2) total-vm:93348kB, anon-rss:2160kB, file-rss:33760kB, shmem-rss:0kB [ 518.848269] SyS_ioctl+0x7f/0xb0 [ 518.862887] ? do_vfs_ioctl+0xff0/0xff0 [ 518.867281] do_syscall_64+0x1d5/0x640 [ 518.871157] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 518.876347] RIP: 0033:0x45e219 [ 518.879789] RSP: 002b:00007f29fee76c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 518.887484] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 518.894733] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 518.902000] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 518.904118] oom_reaper: reaped process 18448 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 518.909365] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 518.909370] R13: 00007fff7563b0cf R14: 00007f29fee779c0 R15: 000000000119bf8c [ 518.923930] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 518.944327] CPU: 1 PID: 18445 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 518.953107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 518.954859] (UM) [ 518.962453] Call Trace: [ 518.962476] dump_stack+0x1b2/0x281 [ 518.962491] warn_alloc.cold+0x96/0x1cc [ 518.962504] ? zone_watermark_ok_safe+0x220/0x220 [ 518.962516] ? usleep_range+0x130/0x130 [ 518.962529] ? try_to_free_pages+0x23f/0x6e0 [ 518.964586] 1*1024kB [ 518.967152] ? _find_next_bit+0xdb/0x100 [ 518.967164] ? run_timer_softirq+0x5a0/0x5a0 [ 518.967179] __alloc_pages_nodemask+0x2127/0x2720 [ 518.967198] ? lock_acquire+0x170/0x3f0 [ 518.967213] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 518.967226] ? ion_page_pool_alloc+0x9e/0x1b0 [ 518.967241] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 518.980380] (M) [ 518.983597] alloc_pages_current+0x155/0x260 [ 518.989916] syz-executor.3 cpuset= [ 518.990370] ion_page_pool_alloc+0x118/0x1b0 [ 518.994398] / [ 518.998812] ion_system_heap_allocate+0x133/0x8c0 [ 519.013231] 0*2048kB [ 519.017069] ? ion_alloc+0x187/0x810 [ 519.017083] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 519.017095] ? ion_system_contig_heap_create+0x130/0x130 [ 519.022517] 2*4096kB [ 519.024494] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 519.024509] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 519.038456] mems_allowed=0-1 [ 519.038512] ion_alloc+0x204/0x810 [ 519.051200] (UM) [ 519.055843] ? ion_dma_buf_release+0x40/0x40 [ 519.055857] ? __might_fault+0x177/0x1b0 [ 519.055870] ion_ioctl+0xea/0x1f0 [ 519.055879] ? ion_query_heaps+0x360/0x360 [ 519.055896] ? lock_acquire+0x170/0x3f0 [ 519.077411] = 10968kB [ 519.080173] ? lock_downgrade+0x740/0x740 [ 519.082205] Node 0 [ 519.086596] ? ion_query_heaps+0x360/0x360 [ 519.086608] do_vfs_ioctl+0x75a/0xff0 [ 519.086619] ? ioctl_preallocate+0x1a0/0x1a0 [ 519.086628] ? lock_downgrade+0x740/0x740 [ 519.086641] ? __fget+0x225/0x360 [ 519.086650] ? do_vfs_ioctl+0xff0/0xff0 [ 519.086662] ? security_file_ioctl+0x83/0xb0 [ 519.086670] SyS_ioctl+0x7f/0xb0 [ 519.086677] ? do_vfs_ioctl+0xff0/0xff0 [ 519.086690] do_syscall_64+0x1d5/0x640 [ 519.106952] DMA32: [ 519.108899] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 519.111099] 520*4kB [ 519.115314] RIP: 0033:0x45e219 [ 519.115319] RSP: 002b:00007fd20c681c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 519.115327] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 519.115332] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 519.115337] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 519.115342] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 519.115347] R13: 00007fff87e85fff R14: 00007fd20c6829c0 R15: 000000000119bf8c [ 519.153844] CPU: 1 PID: 18403 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 519.215712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 519.225057] Call Trace: [ 519.227648] dump_stack+0x1b2/0x281 [ 519.231258] warn_alloc.cold+0x96/0x1cc [ 519.235224] ? zone_watermark_ok_safe+0x220/0x220 [ 519.238859] (UME) [ 519.240057] ? usleep_range+0x130/0x130 [ 519.240060] 823*8kB (ME) [ 519.242195] ? try_to_free_pages+0x23f/0x6e0 [ 519.253285] ? _find_next_bit+0xdb/0x100 [ 519.257337] ? run_timer_softirq+0x5a0/0x5a0 [ 519.258824] 246*16kB (ME) [ 519.261775] __alloc_pages_nodemask+0x2127/0x2720 [ 519.261795] ? lock_acquire+0x170/0x3f0 [ 519.264610] 75*32kB [ 519.269600] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 519.269615] ? ion_page_pool_alloc+0x9e/0x1b0 [ 519.269632] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 519.269645] ? __sanitizer_cov_trace_pc+0x9/0x50 [ 519.269663] alloc_pages_current+0x155/0x260 [ 519.299275] (UME) 20*64kB [ 519.299815] ion_page_pool_alloc+0x118/0x1b0 [ 519.299823] (ME) [ 519.302654] ion_system_heap_allocate+0x133/0x8c0 [ 519.313901] ? ion_alloc+0x187/0x810 [ 519.317606] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 519.318864] 2*128kB (UM) [ 519.323046] ? ion_system_contig_heap_create+0x130/0x130 [ 519.323058] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 519.336232] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 519.338804] 2*256kB (M) [ 519.341069] ion_alloc+0x204/0x810 [ 519.341084] ? ion_dma_buf_release+0x40/0x40 [ 519.343727] 1*512kB [ 519.347247] ? __might_fault+0x177/0x1b0 [ 519.347259] ion_ioctl+0xea/0x1f0 [ 519.347269] ? ion_query_heaps+0x360/0x360 [ 519.347282] ? lock_acquire+0x170/0x3f0 [ 519.347292] ? lock_downgrade+0x740/0x740 [ 519.371461] (U) [ 519.373755] ? ion_query_heaps+0x360/0x360 [ 519.373761] 0*1024kB [ 519.375720] do_vfs_ioctl+0x75a/0xff0 [ 519.375731] ? ioctl_preallocate+0x1a0/0x1a0 [ 519.375743] ? lock_downgrade+0x740/0x740 [ 519.375756] ? __fget+0x225/0x360 [ 519.375763] ? do_vfs_ioctl+0xff0/0xff0 [ 519.375775] ? security_file_ioctl+0x83/0xb0 [ 519.375786] SyS_ioctl+0x7f/0xb0 [ 519.383977] 1*2048kB [ 519.386178] ? do_vfs_ioctl+0xff0/0xff0 [ 519.386191] do_syscall_64+0x1d5/0x640 [ 519.386213] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 519.386223] RIP: 0033:0x45e219 [ 519.390603] (M) [ 519.394727] RSP: 002b:00007f37fb62bc68 EFLAGS: 00000246 [ 519.426959] 0*4096kB [ 519.428412] ORIG_RAX: 0000000000000010 [ 519.430370] = 19608kB [ 519.435722] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 519.435728] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 519.435732] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 519.435737] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 519.435741] R13: 00007ffd61d53b5f R14: 00007f37fb62c9c0 R15: 000000000119bf8c [ 519.454130] warn_alloc_show_mem: 1 callbacks suppressed [ 519.454134] Mem-Info: [ 519.480444] kworker/u4:2 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask= [ 519.489565] CPU: 0 PID: 18408 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 519.500555] active_anon:11607 inactive_anon:18919 isolated_anon:0 [ 519.500555] active_file:31 inactive_file:17 isolated_file:0 [ 519.500555] unevictable:0 dirty:32 writeback:0 unstable:0 [ 519.500555] slab_reclaimable:12734 slab_unreclaimable:118089 [ 519.500555] mapped:44037 shmem:19222 pagetables:804 bounce:0 [ 519.500555] free:14379 free_pcp:0 free_cma:0 [ 519.507124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 519.507128] Call Trace: [ 519.507152] dump_stack+0x1b2/0x281 [ 519.507180] warn_alloc.cold+0x96/0x1cc [ 519.540348] Node 0 active_anon:45772kB inactive_anon:56924kB active_file:92kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:112932kB dirty:116kB writeback:0kB shmem:58008kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 519.549735] ? zone_watermark_ok_safe+0x220/0x220 [ 519.549747] ? usleep_range+0x130/0x130 [ 519.549757] ? try_to_free_pages+0x23f/0x6e0 [ 519.552338] Node 1 active_anon:656kB inactive_anon:18752kB active_file:32kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:63216kB dirty:12kB writeback:0kB shmem:18880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 519.555932] ? _find_next_bit+0xdb/0x100 [ 519.555944] ? run_timer_softirq+0x5a0/0x5a0 [ 519.555961] __alloc_pages_nodemask+0x2127/0x2720 [ 519.559902] Node 0 [ 519.587742] ? lock_acquire+0x170/0x3f0 [ 519.587760] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 519.605047] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 519.629474] ? ion_page_pool_alloc+0x9e/0x1b0 [ 519.629493] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 519.655018] lowmem_reserve[]: [ 519.679432] ? alloc_pages_current+0x21c/0x260 [ 519.679444] alloc_pages_current+0x155/0x260 [ 519.701422] ion_page_pool_alloc+0x118/0x1b0 [ 519.705835] ion_system_heap_allocate+0x133/0x8c0 [ 519.710675] ? ion_alloc+0x187/0x810 [ 519.714497] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 519.715010] 0 2717 [ 519.719941] ? ion_system_contig_heap_create+0x130/0x130 [ 519.719953] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 519.722173] 2718 [ 519.727604] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 519.727614] ion_alloc+0x204/0x810 [ 519.727628] ? ion_dma_buf_release+0x40/0x40 [ 519.727642] ? __might_fault+0x177/0x1b0 [ 519.752522] ion_ioctl+0xea/0x1f0 [ 519.755011] 2718 2718 [ 519.758066] ? ion_query_heaps+0x360/0x360 [ 519.758080] ? lock_acquire+0x170/0x3f0 [ 519.764796] ? lock_downgrade+0x740/0x740 [ 519.772970] ? ion_query_heaps+0x360/0x360 [ 519.774999] Node 0 DMA32 free:19608kB min:36200kB low:45248kB high:54296kB active_anon:45772kB inactive_anon:56864kB active_file:72kB inactive_file:60kB unevictable:0kB writepending:116kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7968kB pagetables:2724kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 519.777652] do_vfs_ioctl+0x75a/0xff0 [ 519.777665] ? ioctl_preallocate+0x1a0/0x1a0 [ 519.814562] ? lock_downgrade+0x740/0x740 [ 519.818715] ? __fget+0x225/0x360 [ 519.822598] ? do_vfs_ioctl+0xff0/0xff0 [ 519.826569] ? security_file_ioctl+0x83/0xb0 [ 519.830975] SyS_ioctl+0x7f/0xb0 [ 519.834332] ? do_vfs_ioctl+0xff0/0xff0 [ 519.838307] do_syscall_64+0x1d5/0x640 [ 519.842208] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 519.844998] lowmem_reserve[]: 0 [ 519.847402] RIP: 0033:0x45e219 [ 519.847409] RSP: 002b:00007f1c98502c68 EFLAGS: 00000246 [ 519.850677] 0 [ 519.853847] ORIG_RAX: 0000000000000010 [ 519.864927] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 519.872195] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 519.875002] 0 [ 519.879478] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 519.879484] 0 [ 519.881266] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 519.894990] 0 [ 519.897610] R13: 00007ffef867e34f R14: 00007f1c985039c0 R15: 000000000119bf8c [ 519.906511] (null), order=3, oom_score_adj=0 [ 519.914558] kworker/u4:2 cpuset=/ mems_allowed=0-1 [ 519.917036] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 519.933262] CPU: 0 PID: 70 Comm: kworker/u4:2 Not tainted 4.14.217-syzkaller #0 [ 519.953394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 519.962771] Workqueue: events_unbound call_usermodehelper_exec_work [ 519.969190] Call Trace: [ 519.971787] dump_stack+0x1b2/0x281 [ 519.976580] dump_header+0x178/0x82f [ 519.980302] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 519.985011] lowmem_reserve[]: 0 [ 519.985527] ? ___ratelimit+0x2cd/0x530 [ 519.985541] oom_kill_process.cold+0x10/0xb18 [ 519.988806] 0 [ 519.992769] ? lock_downgrade+0x740/0x740 [ 520.003454] out_of_memory+0x2dc/0x1190 [ 520.009782] ? oom_killer_disable+0x1c0/0x1c0 [ 520.014526] ? mutex_trylock+0x152/0x1a0 [ 520.014997] 0 0 [ 520.021243] __alloc_pages_nodemask+0x23e1/0x2720 [ 520.021261] ? mark_held_locks+0xa6/0xf0 [ 520.023222] 0 [ 520.028265] ? fprop_reflect_period_percpu.isra.0+0x1c/0x2b0 [ 520.028281] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 520.028304] ? kmem_cache_alloc_node+0x38b/0x410 [ 520.028316] copy_process.part.0+0x265/0x71c0 [ 520.028333] ? __lock_acquire+0x5fc/0x3f20 [ 520.046535] ? cpuacct_charge+0x1ca/0x350 [ 520.052150] Node 1 [ 520.056833] ? static_obj+0x50/0x50 [ 520.056843] ? lock_downgrade+0x740/0x740 [ 520.056854] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 520.056864] ? __cleanup_sighand+0x40/0x40 [ 520.056877] ? update_curr+0x28d/0x670 [ 520.085096] Normal free:71888kB min:53696kB low:67120kB high:80544kB active_anon:656kB inactive_anon:18752kB active_file:32kB inactive_file:8kB unevictable:0kB writepending:12kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:492kB bounce:0kB free_pcp:628kB local_pcp:620kB free_cma:0kB [ 520.088333] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 520.093853] lowmem_reserve[]: [ 520.099837] _do_fork+0x184/0xc80 [ 520.099850] ? fork_idle+0x270/0x270 [ 520.099862] ? lock_downgrade+0x740/0x740 [ 520.099867] ? lock_downgrade+0x740/0x740 [ 520.099880] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 520.099892] ? process_one_work+0x6c4/0x14a0 [ 520.099904] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 520.182680] kernel_thread+0x2f/0x40 [ 520.189471] call_usermodehelper_exec_work+0x1ac/0x2a0 [ 520.194762] ? call_usermodehelper+0x80/0x80 [ 520.194982] 0 [ 520.199170] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 520.199176] 0 [ 520.200965] process_one_work+0x793/0x14a0 [ 520.213742] ? work_busy+0x320/0x320 [ 520.214967] 0 [ 520.217459] ? worker_thread+0x158/0xff0 [ 520.217466] 0 [ 520.219259] ? _raw_spin_unlock_irq+0x24/0x80 [ 520.223312] 0 [ 520.225097] worker_thread+0x5cc/0xff0 [ 520.225113] ? rescuer_thread+0xc80/0xc80 [ 520.225122] kthread+0x30d/0x420 [ 520.225131] ? kthread_create_on_node+0xd0/0xd0 [ 520.247488] Node 0 [ 520.247507] ret_from_fork+0x24/0x30 [ 520.252201] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 520.266351] DMA: 5*4kB (UM) 2*8kB (U) 1*16kB (U) 0*32kB 1*64kB (M) 3*128kB (UM) 1*256kB (M) 2*512kB (UM) 1*1024kB (M) 0*2048kB 2*4096kB (UM) = 10996kB [ 520.278885] Node 1 Normal: 4187*4kB (UM) 3274*8kB (UM) 1256*16kB (UM) 714*32kB (UM) 38*64kB (UM) 9*128kB (UM) 7*256kB (UM) 56*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 119932kB [ 520.299832] Node 0 [ 520.345377] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 520.352405] DMA32: [ 520.368599] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 520.375116] 20907*4kB [ 520.395780] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 520.403224] (UME) [ 520.414483] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 520.423970] 8889*8kB (UME) 2735*16kB (UME) 893*32kB (UME) 320*64kB (UME) 5*128kB (UM) 6*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 250244kB [ 520.470067] 21407 total pagecache pages [ 520.483166] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB [ 520.489045] 0 pages in swap cache [ 520.502823] 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 520.511185] Swap cache stats: add 0, delete 0, find 0/0 [ 520.526155] Free swap = 0kB [ 520.528369] Node 1 Normal: 7538*4kB (UM) 3493*8kB (UM) 1370*16kB (UM) 1238*32kB (UM) 446*64kB (UM) 11*128kB (UM) 8*256kB (UM) 57*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 180816kB [ 520.531432] warn_alloc_show_mem: 1 callbacks suppressed [ 520.531436] Mem-Info: [ 520.561064] Total swap = 0kB [ 520.570258] 2097051 pages RAM [ 520.581046] 0 pages HighMem/MovableOnly [ 520.584986] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 520.594082] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 520.603595] 363840 pages reserved [ 520.610914] active_anon:11711 inactive_anon:18919 isolated_anon:0 [ 520.610914] active_file:652 inactive_file:2058 isolated_file:0 [ 520.610914] unevictable:0 dirty:25 writeback:0 unstable:0 [ 520.610914] slab_reclaimable:12729 slab_unreclaimable:117666 [ 520.610914] mapped:45710 shmem:19222 pagetables:803 bounce:0 [ 520.610914] free:130294 free_pcp:712 free_cma:0 [ 520.646228] 0 pages cma reserved [ 520.648188] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 520.689341] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 520.705147] Node 0 active_anon:46272kB inactive_anon:56924kB active_file:2592kB inactive_file:8208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119920kB dirty:100kB writeback:0kB shmem:58008kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 520.714909] 21962 total pagecache pages [ 520.735080] Node 1 active_anon:572kB inactive_anon:18752kB active_file:16kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:63220kB dirty:0kB writeback:0kB shmem:18880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 520.791444] 0 pages in swap cache [ 520.814919] Node 0 DMA free:10996kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 520.819024] IPVS: ftp: loaded support on port[0] = 21 [ 520.850935] Swap cache stats: add 0, delete 0, find 0/0 [ 520.867888] Free swap = 0kB [ 520.870952] Total swap = 0kB [ 520.873977] 2097051 pages RAM [ 520.874935] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 520.882185] Node 0 DMA32 free:308692kB min:36200kB low:45248kB high:54296kB active_anon:46276kB inactive_anon:56864kB active_file:2108kB inactive_file:7848kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7968kB pagetables:2724kB bounce:0kB free_pcp:836kB local_pcp:120kB free_cma:0kB [ 520.904913] 0 pages HighMem/MovableOnly [ 520.938840] 363840 pages reserved [ 520.942370] 0 pages cma reserved [ 520.969142] lowmem_reserve[]: 0 0 0 0 0 [ 520.973193] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 521.085675] lowmem_reserve[]: 0 0 0 0 0 [ 521.089794] Node 1 Normal free:208176kB min:53696kB low:67120kB high:80544kB active_anon:572kB inactive_anon:18752kB active_file:16kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:488kB bounce:0kB free_pcp:1400kB local_pcp:740kB free_cma:0kB [ 521.160472] Mem-Info: [ 521.163475] active_anon:11711 inactive_anon:18919 isolated_anon:0 [ 521.163475] active_file:652 inactive_file:2133 isolated_file:0 [ 521.163475] unevictable:0 dirty:25 writeback:0 unstable:0 [ 521.163475] slab_reclaimable:12704 slab_unreclaimable:119886 [ 521.163475] mapped:45860 shmem:19222 pagetables:803 bounce:0 [ 521.163475] free:115278 free_pcp:549 free_cma:0 [ 521.224989] lowmem_reserve[]: 0 0 0 0 0 [ 521.229071] Node 0 DMA: 6*4kB (UM) 2*8kB (U) 1*16kB (U) 0*32kB 1*64kB (M) 3*128kB (UM) 1*256kB (M) 2*512kB (UM) 1*1024kB (M) 0*2048kB 2*4096kB (UM) = 11000kB [ 521.269540] Node 0 active_anon:46272kB inactive_anon:56924kB active_file:2592kB inactive_file:8508kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120220kB dirty:100kB writeback:0kB shmem:58008kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 521.308874] Node 0 DMA32: 13671*4kB (UME) 8743*8kB (UME) 4337*16kB (UE) 1428*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 239716kB [ 521.370800] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 521.415322] Node 1 Normal: 11223*4kB (U) 3888*8kB (U) 1508*16kB (U) 1542*32kB (U) 0*64kB 0*128kB 0*256kB 1*512kB (U) 179*1024kB (U) 17*2048kB (U) 0*4096kB = 368092kB [ 521.460967] Node 1 active_anon:572kB inactive_anon:18752kB active_file:16kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:63220kB dirty:0kB writeback:0kB shmem:18880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 521.491620] chnl_net:caif_netlink_parms(): no params data found [ 521.503228] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 521.553674] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 521.572298] Node 0 DMA free:10996kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 521.619038] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 521.628664] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 521.648972] 22073 total pagecache pages [ 521.653452] 0 pages in swap cache [ 521.658778] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 521.664526] Node 0 DMA32 free:240820kB min:36200kB low:45248kB high:54296kB active_anon:46276kB inactive_anon:56864kB active_file:2108kB inactive_file:8316kB unevictable:0kB writepending:228kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:8032kB pagetables:2724kB bounce:0kB free_pcp:1044kB local_pcp:248kB free_cma:0kB [ 521.709435] Swap cache stats: add 0, delete 0, find 0/0 [ 521.729908] Free swap = 0kB [ 521.733080] Total swap = 0kB [ 521.747827] 2097051 pages RAM [ 521.751017] 0 pages HighMem/MovableOnly [ 521.771032] 363840 pages reserved [ 521.774525] 0 pages cma reserved [ 521.808506] lowmem_reserve[]: 0 0 0 0 0 [ 521.812593] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 521.880203] lowmem_reserve[]: 0 0 0 0 0 [ 521.884389] Node 1 Normal free:186572kB min:53696kB low:67120kB high:80544kB active_anon:572kB inactive_anon:18752kB active_file:16kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:488kB bounce:0kB free_pcp:1360kB local_pcp:624kB free_cma:0kB [ 521.949360] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 521.959391] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.977698] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.995791] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 522.006199] device bridge_slave_0 entered promiscuous mode [ 522.007765] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 522.026017] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.032402] lowmem_reserve[]: 0 0 0 0 0 [ 522.034860] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 522.040929] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.041662] CPU: 1 PID: 18403 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 522.049934] Node 0 [ 522.055976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 522.055981] Call Trace: [ 522.056003] dump_stack+0x1b2/0x281 [ 522.056023] warn_alloc.cold+0x96/0x1cc [ 522.056037] ? zone_watermark_ok_safe+0x220/0x220 [ 522.056058] __alloc_pages_nodemask+0x2127/0x2720 [ 522.056071] ? switch_mm_irqs_off+0x601/0xeb0 [ 522.056089] ? lock_acquire+0x170/0x3f0 [ 522.056102] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 522.056119] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 522.066612] device bridge_slave_1 entered promiscuous mode [ 522.067957] ? __mutex_unlock_slowpath+0x75/0x770 [ 522.071276] DMA: [ 522.074364] ? __list_del_entry_valid+0x70/0xf0 [ 522.089944] 6*4kB [ 522.092502] alloc_pages_current+0x155/0x260 [ 522.108605] (UM) [ 522.113384] ion_page_pool_alloc+0x118/0x1b0 [ 522.126885] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 522.127340] ion_system_heap_allocate+0x133/0x8c0 [ 522.133059] 2*8kB [ 522.133912] ? _raw_spin_unlock+0x29/0x40 [ 522.146772] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 522.150850] ? _ion_heap_freelist_drain+0x6e/0x410 [ 522.158671] (U) [ 522.164892] ? ion_system_contig_heap_create+0x130/0x130 [ 522.164905] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 522.164918] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 522.164929] ion_alloc+0x27a/0x810 [ 522.164943] ? ion_dma_buf_release+0x40/0x40 [ 522.164954] ? __might_fault+0x177/0x1b0 [ 522.164965] ion_ioctl+0xea/0x1f0 [ 522.164974] ? ion_query_heaps+0x360/0x360 [ 522.164987] ? lock_acquire+0x170/0x3f0 [ 522.181233] 1*16kB [ 522.182449] ? lock_downgrade+0x740/0x740 [ 522.192640] (U) [ 522.195456] ? ion_query_heaps+0x360/0x360 [ 522.195470] do_vfs_ioctl+0x75a/0xff0 [ 522.195480] ? ioctl_preallocate+0x1a0/0x1a0 [ 522.195492] ? lock_downgrade+0x740/0x740 [ 522.195504] ? __fget+0x225/0x360 [ 522.195513] ? do_vfs_ioctl+0xff0/0xff0 [ 522.195525] ? security_file_ioctl+0x83/0xb0 [ 522.195535] SyS_ioctl+0x7f/0xb0 [ 522.195542] ? do_vfs_ioctl+0xff0/0xff0 [ 522.195554] do_syscall_64+0x1d5/0x640 [ 522.195572] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 522.210906] 0*32kB [ 522.211341] RIP: 0033:0x45e219 [ 522.213569] 1*64kB (M) [ 522.218142] RSP: 002b:00007f37fb62bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 522.218151] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 522.218155] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 522.218159] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 522.218164] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 522.218169] R13: 00007ffd61d53b5f R14: 00007f37fb62c9c0 R15: 000000000119bf8c [ 522.218703] syz-executor.4 cpuset= [ 522.231739] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 522.244793] syz-executor.3 cpuset= [ 522.264764] 3*128kB [ 522.267128] / [ 522.268155] (UM) [ 522.271341] mems_allowed=0-1 [ 522.273905] 1*256kB [ 522.281913] CPU: 1 PID: 18445 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 522.281923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 522.309792] team0: Port device team_slave_0 added [ 522.312886] Call Trace: [ 522.336383] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 522.338075] dump_stack+0x1b2/0x281 [ 522.348637] (M) [ 522.353461] warn_alloc.cold+0x96/0x1cc [ 522.363911] team0: Port device team_slave_1 added [ 522.367732] ? zone_watermark_ok_safe+0x220/0x220 [ 522.367755] __alloc_pages_nodemask+0x2127/0x2720 [ 522.367775] ? lock_acquire+0x170/0x3f0 [ 522.367789] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 522.367808] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 522.367818] ? __mutex_unlock_slowpath+0x75/0x770 [ 522.367833] alloc_pages_current+0x155/0x260 [ 522.410127] 2*512kB [ 522.415512] ion_page_pool_alloc+0x118/0x1b0 [ 522.415523] ion_system_heap_allocate+0x133/0x8c0 [ 522.415538] ? _raw_spin_unlock+0x29/0x40 [ 522.415546] ? _ion_heap_freelist_drain+0x6e/0x410 [ 522.415556] ? ion_system_contig_heap_create+0x130/0x130 [ 522.415573] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 522.415588] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 522.430365] (UM) [ 522.431670] ion_alloc+0x27a/0x810 [ 522.448184] 1*1024kB [ 522.451540] ? ion_dma_buf_release+0x40/0x40 [ 522.467699] (M) [ 522.469732] ? __might_fault+0x177/0x1b0 [ 522.469751] ion_ioctl+0xea/0x1f0 [ 522.474187] 0*2048kB [ 522.476117] ? ion_query_heaps+0x360/0x360 [ 522.476130] ? lock_acquire+0x170/0x3f0 [ 522.476139] ? lock_downgrade+0x740/0x740 [ 522.476146] ? ion_query_heaps+0x360/0x360 [ 522.476157] do_vfs_ioctl+0x75a/0xff0 [ 522.476168] ? ioctl_preallocate+0x1a0/0x1a0 [ 522.476175] ? lock_downgrade+0x740/0x740 [ 522.476188] ? __fget+0x225/0x360 [ 522.476197] ? do_vfs_ioctl+0xff0/0xff0 [ 522.476209] ? security_file_ioctl+0x83/0xb0 [ 522.476219] SyS_ioctl+0x7f/0xb0 [ 522.476226] ? do_vfs_ioctl+0xff0/0xff0 [ 522.476238] do_syscall_64+0x1d5/0x640 [ 522.476258] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 522.476271] RIP: 0033:0x45e219 [ 522.476276] RSP: 002b:00007fd20c681c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 522.476286] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 522.476297] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 522.508245] 2*4096kB [ 522.512047] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 522.512055] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 522.517049] / [ 522.519654] R13: 00007fff87e85fff R14: 00007fd20c6829c0 R15: 000000000119bf8c [ 522.523698] mems_allowed=0-1 [ 522.528843] Bluetooth: hci5 command 0x0409 tx timeout [ 522.544761] (UM) [ 522.549632] warn_alloc_show_mem: 1 callbacks suppressed [ 522.549635] Mem-Info: [ 522.565189] CPU: 0 PID: 18408 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 522.577168] active_anon:11703 inactive_anon:18922 isolated_anon:0 [ 522.577168] active_file:816 inactive_file:2054 isolated_file:0 [ 522.577168] unevictable:0 dirty:52 writeback:0 unstable:0 [ 522.577168] slab_reclaimable:12668 slab_unreclaimable:119537 [ 522.577168] mapped:45879 shmem:19227 pagetables:825 bounce:0 [ 522.577168] free:117054 free_pcp:371 free_cma:0 [ 522.581215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 522.597049] Node 0 active_anon:46240kB inactive_anon:56936kB active_file:3252kB inactive_file:8188kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120296kB dirty:200kB writeback:0kB shmem:58028kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 522.598689] Call Trace: [ 522.607521] Node 1 active_anon:572kB inactive_anon:18752kB active_file:12kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:63220kB dirty:8kB writeback:0kB shmem:18880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 522.609071] dump_stack+0x1b2/0x281 [ 522.614452] Node 0 [ 522.616573] warn_alloc.cold+0x96/0x1cc [ 522.616586] ? zone_watermark_ok_safe+0x220/0x220 [ 522.616607] __alloc_pages_nodemask+0x2127/0x2720 [ 522.616620] ? lock_acquire+0x170/0x3f0 [ 522.616632] ? lock_acquire+0x170/0x3f0 [ 522.624580] DMA free:11000kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 522.632280] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 522.632299] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 522.632310] ? __mutex_unlock_slowpath+0x75/0x770 [ 522.632338] alloc_pages_current+0x155/0x260 [ 522.674776] lowmem_reserve[]: [ 522.675679] ion_page_pool_alloc+0x118/0x1b0 [ 522.734751] 0 [ 522.737381] ion_system_heap_allocate+0x133/0x8c0 [ 522.739650] 2717 [ 522.743619] ? _raw_spin_unlock+0x29/0x40 [ 522.764694] 2718 [ 522.787789] ? _ion_heap_freelist_drain+0x6e/0x410 [ 522.787801] ? ion_system_contig_heap_create+0x130/0x130 [ 522.787816] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 522.824687] 2718 [ 522.828120] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 522.830159] 2718 [ 522.835083] ion_alloc+0x27a/0x810 [ 522.835099] ? ion_dma_buf_release+0x40/0x40 [ 522.835111] ? __might_fault+0x177/0x1b0 [ 522.858257] ion_ioctl+0xea/0x1f0 [ 522.862642] Node 0 [ 522.866693] ? ion_query_heaps+0x360/0x360 [ 522.866707] ? lock_acquire+0x170/0x3f0 [ 522.866717] ? lock_downgrade+0x740/0x740 [ 522.884703] DMA32 free:144500kB min:36200kB low:45248kB high:54296kB active_anon:46240kB inactive_anon:56876kB active_file:3252kB inactive_file:8188kB unevictable:0kB writepending:200kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:8096kB pagetables:2812kB bounce:0kB free_pcp:160kB local_pcp:116kB free_cma:0kB [ 522.885023] ? ion_query_heaps+0x360/0x360 [ 522.918426] do_vfs_ioctl+0x75a/0xff0 [ 522.922250] ? ioctl_preallocate+0x1a0/0x1a0 [ 522.926668] ? lock_downgrade+0x740/0x740 [ 522.930828] ? __fget+0x225/0x360 [ 522.934289] ? do_vfs_ioctl+0xff0/0xff0 [ 522.938282] ? security_file_ioctl+0x83/0xb0 [ 522.942905] SyS_ioctl+0x7f/0xb0 [ 522.944673] lowmem_reserve[]: 0 [ 522.946276] ? do_vfs_ioctl+0xff0/0xff0 [ 522.946289] do_syscall_64+0x1d5/0x640 [ 522.949558] 0 [ 522.953560] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 522.964450] RIP: 0033:0x45e219 [ 522.967649] RSP: 002b:00007f1c98502c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 522.974753] 0 [ 522.975514] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 522.975516] 0 0 [ 522.977345] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 522.986573] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 522.986578] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 522.986583] R13: 00007ffef867e34f R14: 00007f1c985039c0 R15: 000000000119bf8c [ 522.990160] = 11000kB [ 523.023348] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 523.029240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.084693] Node 0 DMA32: 156*4kB (E) 564*8kB (UME) 141*16kB (E) 1503*32kB (UE) 17*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 56576kB [ 523.094848] lowmem_reserve[]: 0 0 0 0 0 [ 523.102718] Node 1 Normal free:220040kB min:53696kB low:67120kB high:80544kB active_anon:572kB inactive_anon:18752kB active_file:12kB inactive_file:28kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:488kB bounce:0kB free_pcp:668kB local_pcp:668kB free_cma:0kB [ 523.104727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.174740] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 523.174833] lowmem_reserve[]: [ 523.194805] Node 1 Normal: 8989*4kB (UM) 5554*8kB (UM) 1878*16kB (U) 1604*32kB (UM) 14*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 162660kB [ 523.204656] 0 0 0 0 0 [ 523.221592] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 523.238395] Node 0 DMA: 6*4kB (UM) 2*8kB (U) 1*16kB (U) 0*32kB 1*64kB (M) 3*128kB (UM) 1*256kB (M) 2*512kB (UM) 1*1024kB (M) 0*2048kB 2*4096kB (UM) = 11000kB [ 523.244681] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 523.262242] Node 0 DMA32: 156*4kB (E) 564*8kB (UME) 141*16kB (E) 1130*32kB (UE) 17*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 44640kB [ 523.275482] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 523.284748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.294776] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 523.314733] 22111 total pagecache pages [ 523.318923] 0 pages in swap cache [ 523.319482] Node 0 [ 523.322493] Swap cache stats: add 0, delete 0, find 0/0 [ 523.322500] Free swap = 0kB [ 523.327073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.334753] Total swap = 0kB [ 523.354841] 2097051 pages RAM [ 523.358547] 0 pages HighMem/MovableOnly [ 523.362526] 363840 pages reserved [ 523.364789] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 523.375054] 0 pages cma reserved [ 523.379814] Out of memory: Kill process 7962 (syz-fuzzer) score 4 or sacrifice child [ 523.404831] Killed process 16307 (syz-executor.2) total-vm:85024kB, anon-rss:68kB, file-rss:4kB, shmem-rss:0kB [ 523.420187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.454048] oom_reaper: reaped process 16307 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 523.469391] Node 1 Normal: 7*4kB (M) 1*8kB (M) 1*16kB (U) 1251*32kB (UM) 15*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 41044kB [ 523.514860] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 523.528237] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 523.545456] kworker/u4:2 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 523.563035] kworker/u4:2 cpuset=/ mems_allowed=0-1 [ 523.568128] CPU: 0 PID: 70 Comm: kworker/u4:2 Not tainted 4.14.217-syzkaller #0 [ 523.575580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 523.581277] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 523.585078] Workqueue: events_unbound call_usermodehelper_exec_work [ 523.585085] Call Trace: [ 523.585104] dump_stack+0x1b2/0x281 [ 523.585117] dump_header+0x178/0x82f [ 523.593961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.600387] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 523.600396] ? ___ratelimit+0x2cd/0x530 [ 523.600405] oom_kill_process.cold+0x10/0xb18 [ 523.600418] ? lock_downgrade+0x740/0x740 [ 523.600433] out_of_memory+0x2dc/0x1190 [ 523.600445] ? oom_killer_disable+0x1c0/0x1c0 [ 523.646345] ? mutex_trylock+0x152/0x1a0 [ 523.650399] __alloc_pages_nodemask+0x23e1/0x2720 [ 523.655238] ? mark_held_locks+0xa6/0xf0 [ 523.659292] ? fprop_reflect_period_percpu.isra.0+0x1c/0x2b0 [ 523.665249] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 523.671656] ? kmem_cache_alloc_node+0x38b/0x410 [ 523.676579] copy_process.part.0+0x265/0x71c0 [ 523.681160] ? __lock_acquire+0x5fc/0x3f20 [ 523.685383] ? cpuacct_charge+0x1ca/0x350 [ 523.689518] ? static_obj+0x50/0x50 [ 523.693131] ? lock_downgrade+0x740/0x740 [ 523.697312] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 523.702751] ? __cleanup_sighand+0x40/0x40 [ 523.706974] ? update_curr+0x28d/0x670 [ 523.710849] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 523.716288] _do_fork+0x184/0xc80 [ 523.719800] ? fork_idle+0x270/0x270 [ 523.723502] ? lock_downgrade+0x740/0x740 [ 523.727637] ? lock_downgrade+0x740/0x740 [ 523.731948] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 523.736957] ? process_one_work+0x6c4/0x14a0 [ 523.741393] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 523.746844] kernel_thread+0x2f/0x40 [ 523.750581] call_usermodehelper_exec_work+0x1ac/0x2a0 [ 523.757098] ? call_usermodehelper+0x80/0x80 [ 523.761545] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 523.766986] process_one_work+0x793/0x14a0 [ 523.771214] ? work_busy+0x320/0x320 [ 523.775040] ? worker_thread+0x158/0xff0 [ 523.779095] ? _raw_spin_unlock_irq+0x24/0x80 [ 523.783578] worker_thread+0x5cc/0xff0 [ 523.787478] ? rescuer_thread+0xc80/0xc80 [ 523.791667] kthread+0x30d/0x420 [ 523.795021] ? kthread_create_on_node+0xd0/0xd0 [ 523.799694] ret_from_fork+0x24/0x30 [ 523.821668] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 523.836221] warn_alloc_show_mem: 1 callbacks suppressed [ 523.836224] Mem-Info: [ 523.839483] 19286 total pagecache pages [ 523.841772] active_anon:11679 inactive_anon:18922 isolated_anon:0 [ 523.841772] active_file:28 inactive_file:20 isolated_file:4 [ 523.841772] unevictable:0 dirty:16 writeback:0 unstable:0 [ 523.841772] slab_reclaimable:12643 slab_unreclaimable:119220 [ 523.841772] mapped:35422 shmem:19227 pagetables:826 bounce:0 [ 523.841772] free:13944 free_pcp:184 free_cma:0 [ 523.844140] 0 pages in swap cache [ 523.851546] Node 0 active_anon:46144kB inactive_anon:56936kB active_file:100kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):16kB mapped:78468kB dirty:56kB writeback:0kB shmem:58028kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 523.888570] Swap cache stats: add 0, delete 0, find 0/0 [ 523.919243] Free swap = 0kB [ 523.920828] Mem-Info: [ 523.922299] Total swap = 0kB [ 523.925906] active_anon:11679 inactive_anon:18922 isolated_anon:0 [ 523.925906] active_file:28 inactive_file:20 isolated_file:4 [ 523.925906] unevictable:0 dirty:16 writeback:0 unstable:0 [ 523.925906] slab_reclaimable:12643 slab_unreclaimable:119220 [ 523.925906] mapped:35422 shmem:19227 pagetables:826 bounce:0 [ 523.925906] free:13944 free_pcp:184 free_cma:0 [ 523.927769] 2097051 pages RAM [ 523.974702] 0 pages HighMem/MovableOnly [ 523.978161] Node 1 active_anon:572kB inactive_anon:18752kB active_file:12kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:63220kB dirty:8kB writeback:0kB shmem:18880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 523.978806] 363840 pages reserved [ 524.016602] Node 0 active_anon:46112kB inactive_anon:56936kB active_file:56kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:78452kB dirty:0kB writeback:0kB shmem:58028kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 524.017964] 0 pages cma reserved [ 524.050674] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 524.083429] Node 1 active_anon:560kB inactive_anon:18752kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:63216kB dirty:0kB writeback:0kB shmem:18880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 524.084708] syz-executor.5: [ 524.112363] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 524.130191] lowmem_reserve[]: [ 524.148111] syz-executor.4: [ 524.149092] page allocation failure: order:0 [ 524.151245] page allocation failure: order:0 [ 524.154269] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 524.160530] syz-executor.2: [ 524.164532] 0 2717 2718 2718 2718 [ 524.177934] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 524.177951] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 524.177975] CPU: 0 PID: 18449 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 524.177981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 524.177985] Call Trace: [ 524.178007] dump_stack+0x1b2/0x281 [ 524.178022] warn_alloc.cold+0x96/0x1cc [ 524.178042] ? zone_watermark_ok_safe+0x220/0x220 [ 524.178058] ? usleep_range+0x130/0x130 [ 524.196526] (null) [ 524.201592] ? try_to_free_pages+0x23f/0x6e0 [ 524.211059] Node 0 [ 524.213601] ? _find_next_bit+0xdb/0x100 [ 524.217236] syz-executor.5 cpuset= [ 524.221200] ? run_timer_softirq+0x5a0/0x5a0 [ 524.226063] DMA32 free:17464kB min:36200kB low:45248kB high:54296kB active_anon:46112kB inactive_anon:56876kB active_file:56kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7968kB pagetables:2604kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 524.229997] __alloc_pages_nodemask+0x2127/0x2720 [ 524.232119] lowmem_reserve[]: [ 524.236526] ? lock_acquire+0x170/0x3f0 [ 524.236543] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 524.238788] / [ 524.242834] ? ion_page_pool_alloc+0x9e/0x1b0 [ 524.246373] 0 [ 524.250841] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 524.278899] mems_allowed=0-1 [ 524.283745] ? __alloc_pages_nodemask+0xb/0x2720 [ 524.314556] 0 0 0 [ 524.317185] alloc_pages_current+0x155/0x260 [ 524.317203] ion_page_pool_alloc+0x118/0x1b0 [ 524.319331] 0 [ 524.323780] ion_system_heap_allocate+0x133/0x8c0 [ 524.334824] ? ion_alloc+0x187/0x810 [ 524.338550] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 524.344025] ? ion_system_contig_heap_create+0x130/0x130 [ 524.349468] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 524.349475] Node 0 [ 524.354480] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 524.362372] ion_alloc+0x204/0x810 [ 524.364519] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 524.365909] ? ion_dma_buf_release+0x40/0x40 [ 524.395357] ? __might_fault+0x177/0x1b0 [ 524.399452] ion_ioctl+0xea/0x1f0 [ 524.402933] ? ion_query_heaps+0x360/0x360 [ 524.407276] ? lock_acquire+0x170/0x3f0 [ 524.411302] ? lock_downgrade+0x740/0x740 [ 524.414560] lowmem_reserve[]: [ 524.415441] ? ion_query_heaps+0x360/0x360 [ 524.415446] 0 [ 524.418544] do_vfs_ioctl+0x75a/0xff0 [ 524.422763] 0 [ 524.424556] ? ioctl_preallocate+0x1a0/0x1a0 [ 524.424564] ? lock_downgrade+0x740/0x740 [ 524.424578] ? __fget+0x225/0x360 [ 524.442154] ? do_vfs_ioctl+0xff0/0xff0 [ 524.444501] 0 0 [ 524.446132] ? security_file_ioctl+0x83/0xb0 [ 524.446142] SyS_ioctl+0x7f/0xb0 [ 524.448166] 0 [ 524.452604] ? do_vfs_ioctl+0xff0/0xff0 [ 524.461750] do_syscall_64+0x1d5/0x640 [ 524.465667] Node 1 [ 524.465681] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 524.465690] RIP: 0033:0x45e219 [ 524.476475] RSP: 002b:00007f61d9eb6c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 524.484180] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 524.484528] Normal free:26312kB min:53696kB low:67120kB high:80544kB active_anon:560kB inactive_anon:18752kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:488kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 524.491441] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 524.491449] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 524.533824] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 524.541145] R13: 00007ffd9f2d641f R14: 00007f61d9eb79c0 R15: 000000000119bf8c [ 524.544492] lowmem_reserve[]: 0 0 0 0 0 [ 524.552608] CPU: 1 PID: 18403 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 524.557916] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 524.560604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 524.560613] (null) [ 524.569098] Call Trace: [ 524.569123] dump_stack+0x1b2/0x281 [ 524.569137] warn_alloc.cold+0x96/0x1cc [ 524.569150] ? zone_watermark_ok_safe+0x220/0x220 [ 524.569161] ? usleep_range+0x130/0x130 [ 524.569170] ? try_to_free_pages+0x23f/0x6e0 [ 524.569181] ? _find_next_bit+0xdb/0x100 [ 524.569192] ? run_timer_softirq+0x5a0/0x5a0 [ 524.569209] __alloc_pages_nodemask+0x2127/0x2720 [ 524.586258] syz-executor.4 cpuset= [ 524.587708] ? lock_acquire+0x170/0x3f0 [ 524.592171] / [ 524.597019] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 524.608127] lowmem_reserve[]: [ 524.610161] ? ion_page_pool_alloc+0x9e/0x1b0 [ 524.616431] 0 [ 524.619844] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 524.623371] 2717 [ 524.628551] ? __list_del_entry_valid+0x70/0xf0 [ 524.628565] alloc_pages_current+0x155/0x260 [ 524.628583] ion_page_pool_alloc+0x118/0x1b0 [ 524.628593] ion_system_heap_allocate+0x133/0x8c0 [ 524.628607] ? _raw_spin_unlock+0x29/0x40 [ 524.628616] ? _ion_heap_freelist_drain+0x6e/0x410 [ 524.628626] ? ion_system_contig_heap_create+0x130/0x130 [ 524.628640] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 524.637504] mems_allowed=0-1 [ 524.639378] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 524.646320] 2718 [ 524.651699] ion_alloc+0x27a/0x810 [ 524.653830] 2718 [ 524.659224] ? ion_dma_buf_release+0x40/0x40 [ 524.659237] ? __might_fault+0x177/0x1b0 [ 524.659247] ion_ioctl+0xea/0x1f0 [ 524.659257] ? ion_query_heaps+0x360/0x360 [ 524.659270] ? lock_acquire+0x170/0x3f0 [ 524.659278] ? lock_downgrade+0x740/0x740 [ 524.659286] ? ion_query_heaps+0x360/0x360 [ 524.659297] do_vfs_ioctl+0x75a/0xff0 [ 524.659308] ? ioctl_preallocate+0x1a0/0x1a0 [ 524.659317] ? lock_downgrade+0x740/0x740 [ 524.689692] 2718 [ 524.693320] ? __fget+0x225/0x360 [ 524.714124] ? do_vfs_ioctl+0xff0/0xff0 [ 524.736309] Node 0 [ 524.738799] ? security_file_ioctl+0x83/0xb0 [ 524.742752] DMA32 free:17464kB min:36200kB low:45248kB high:54296kB active_anon:46112kB inactive_anon:56876kB active_file:56kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7968kB pagetables:2604kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 524.747841] SyS_ioctl+0x7f/0xb0 [ 524.747851] ? do_vfs_ioctl+0xff0/0xff0 [ 524.747863] do_syscall_64+0x1d5/0x640 [ 524.747880] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 524.747889] RIP: 0033:0x45e219 [ 524.747893] RSP: 002b:00007f37fb62bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 524.747903] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 524.747908] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 524.747913] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 524.747918] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 524.747923] R13: 00007ffd61d53b5f R14: 00007f37fb62c9c0 R15: 000000000119bf8c [ 524.761525] Bluetooth: hci5 command 0x041b tx timeout [ 524.769201] CPU: 0 PID: 18445 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 524.770170] Node 0 [ 524.798232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 524.798237] Call Trace: [ 524.798262] dump_stack+0x1b2/0x281 [ 524.798276] warn_alloc.cold+0x96/0x1cc [ 524.798289] ? zone_watermark_ok_safe+0x220/0x220 [ 524.798299] ? usleep_range+0x130/0x130 [ 524.798308] ? queue_work_on+0x10d/0x1d0 [ 524.798319] ? _find_next_bit+0xdb/0x100 [ 524.798329] ? run_timer_softirq+0x5a0/0x5a0 [ 524.798346] __alloc_pages_nodemask+0x2127/0x2720 [ 524.807094] DMA: [ 524.810675] ? lock_acquire+0x170/0x3f0 [ 524.816500] 2*4kB [ 524.819753] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 524.827755] (UM) [ 524.835000] ? ion_page_pool_alloc+0x9e/0x1b0 [ 524.835020] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 524.842378] 1*8kB [ 524.849823] ? retint_kernel+0x2d/0x2d [ 524.849838] alloc_pages_current+0x155/0x260 [ 524.849854] ion_page_pool_alloc+0x118/0x1b0 [ 524.857223] (U) [ 524.864480] ion_system_heap_allocate+0x133/0x8c0 [ 524.864495] ? _raw_spin_unlock+0x29/0x40 [ 524.869671] 1*16kB [ 524.877984] ? _ion_heap_freelist_drain+0x6e/0x410 [ 524.877994] ? ion_system_contig_heap_create+0x130/0x130 [ 524.878005] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 524.878019] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 524.880330] (U) [ 524.889776] ion_alloc+0x27a/0x810 [ 524.889791] ? ion_dma_buf_release+0x40/0x40 [ 524.889804] ? __might_fault+0x177/0x1b0 [ 524.892376] 0*32kB [ 524.896001] ion_ioctl+0xea/0x1f0 [ 524.896011] ? ion_query_heaps+0x360/0x360 [ 524.896026] ? lock_acquire+0x170/0x3f0 [ 524.899992] 1*64kB [ 524.904846] ? lock_downgrade+0x740/0x740 [ 524.904855] ? ion_query_heaps+0x360/0x360 [ 524.904865] do_vfs_ioctl+0x75a/0xff0 [ 524.904877] ? ioctl_preallocate+0x1a0/0x1a0 [ 524.908872] (M) [ 524.913459] ? lock_downgrade+0x740/0x740 [ 524.917618] 3*128kB [ 524.922370] ? __fget+0x225/0x360 [ 524.927341] (UM) [ 524.929551] ? do_vfs_ioctl+0xff0/0xff0 [ 524.933993] 1*256kB [ 524.936537] ? security_file_ioctl+0x83/0xb0 [ 524.936547] SyS_ioctl+0x7f/0xb0 [ 524.936555] ? do_vfs_ioctl+0xff0/0xff0 [ 524.936568] do_syscall_64+0x1d5/0x640 [ 524.941487] (M) [ 524.943552] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 524.948058] 2*512kB [ 524.953476] RIP: 0033:0x45e219 [ 524.955651] (UM) [ 524.959865] RSP: 002b:00007fd20c681c68 EFLAGS: 00000246 [ 524.964264] 1*1024kB [ 524.968691] ORIG_RAX: 0000000000000010 [ 524.968697] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 524.968702] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 524.968706] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 524.968710] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 524.968715] R13: 00007fff87e85fff R14: 00007fd20c6829c0 R15: 000000000119bf8c [ 524.976612] lowmem_reserve[]: [ 524.992011] Mem-Info: [ 524.999305] 0 [ 525.008544] (M) [ 525.009663] 0 [ 525.013359] 0*2048kB [ 525.022764] 0 [ 525.028476] active_anon:11664 inactive_anon:18922 isolated_anon:0 [ 525.028476] active_file:22 inactive_file:7 isolated_file:0 [ 525.028476] unevictable:0 dirty:0 writeback:0 unstable:0 [ 525.028476] slab_reclaimable:12631 slab_unreclaimable:119213 [ 525.028476] mapped:35417 shmem:19227 pagetables:750 bounce:0 [ 525.028476] free:13789 free_pcp:19 free_cma:0 [ 525.033845] 0 [ 525.034410] Node 0 active_anon:46100kB inactive_anon:56936kB active_file:96kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:78452kB dirty:0kB writeback:0kB shmem:58028kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 525.050629] 0 [ 525.059182] 2*4096kB [ 525.064287] (UM) [ 525.073397] Node 0 [ 525.087930] Node 1 active_anon:556kB inactive_anon:18752kB active_file:0kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:63216kB dirty:0kB writeback:0kB shmem:18880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 525.095938] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 525.103048] Node 0 [ 525.103813] lowmem_reserve[]: [ 525.112807] = 10976kB [ 525.123607] 0 [ 525.142017] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 525.152988] 0 [ 525.164708] lowmem_reserve[]: [ 525.172735] 0 [ 525.216150] Node 0 [ 525.252114] 0 [ 525.273612] 0 [ 525.347497] DMA32: 664*4kB (UME) 897*8kB (UME) 270*16kB (UME) 86*32kB (UME) 17*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17992kB [ 525.365392] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 525.376760] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 525.385077] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 525.414558] Node 1 Normal: 1*4kB (M) 1*8kB (U) 1*16kB (M) 729*32kB (U) 15*64kB (UM) 0*128kB 1*256kB (M) 1*512kB (M) 49*1024kB (U) 16*2048kB (U) 0*4096kB = 108028kB [ 525.436757] device hsr_slave_0 entered promiscuous mode [ 525.442864] device hsr_slave_1 entered promiscuous mode [ 525.448938] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 525.460053] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 525.467801] 2717 2718 2718 2718 [ 525.471418] Node 0 DMA32 free:18592kB min:36200kB low:45248kB high:54296kB active_anon:46100kB inactive_anon:56876kB active_file:56kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7968kB pagetables:2512kB bounce:0kB free_pcp:164kB local_pcp:76kB free_cma:0kB [ 525.501601] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 525.512256] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 525.519414] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 525.531626] 0 [ 525.534334] Node 1 Normal free:183132kB min:53696kB low:67120kB high:80544kB active_anon:656kB inactive_anon:18752kB active_file:696kB inactive_file:6708kB unevictable:0kB writepending:148kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:488kB bounce:0kB free_pcp:244kB local_pcp:148kB free_cma:0kB [ 525.538107] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 525.581499] lowmem_reserve[]: 0 0 0 0 0 [ 525.585900] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 525.626267] 22179 total pagecache pages [ 525.630812] 0 pages in swap cache [ 525.637567] lowmem_reserve[]: 0 0 0 0 0 [ 525.647052] lowmem_reserve[]: 0 0 0 0 0 [ 525.647680] Node 0 [ 525.651410] Node 1 Normal free:180876kB min:53696kB low:67120kB high:80544kB active_anon:656kB inactive_anon:18752kB active_file:1996kB inactive_file:7708kB unevictable:0kB writepending:148kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:488kB bounce:0kB free_pcp:296kB local_pcp:84kB free_cma:0kB [ 525.651431] lowmem_reserve[]: 0 0 0 0 0 21:25:08 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x80000001, 0x4) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0xc0241, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) [ 525.651447] Node 0 DMA: 2*4kB (UM) 3*8kB (U) 1*16kB (U) 0*32kB 1*64kB (M) 3*128kB (UM) 1*256kB (M) 2*512kB (UM) 1*1024kB (M) 0*2048kB 2*4096kB (UM) = 10992kB [ 525.651514] Node 0 [ 525.658061] DMA: [ 525.687739] Swap cache stats: add 0, delete 0, find 0/0 [ 525.720054] Free swap = 0kB [ 525.724679] Total swap = 0kB [ 525.744405] 2097051 pages RAM [ 525.748270] 0 pages HighMem/MovableOnly [ 525.752339] 363840 pages reserved [ 525.762076] 0 pages cma reserved [ 525.768435] DMA32: 5934*4kB (UME) 9369*8kB (UE) 315*16kB (UME) 94*32kB (UME) 26*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 108400kB [ 525.787635] 2*4kB (UM) 3*8kB (U) 1*16kB (U) 0*32kB 1*64kB (M) 3*128kB (UM) 1*256kB (M) 2*512kB (UM) 1*1024kB (M) 0*2048kB 2*4096kB (UM) = 10992kB [ 525.795118] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 525.848749] Node 1 Normal: 412*4kB (UM) 4*8kB (UM) 3*16kB (UM) 704*32kB (UM) 277*64kB (UM) 1*128kB (M) 2*256kB (UM) 2*512kB (UM) 8*1024kB (U) 29*2048kB (U) 1*4096kB (U) = 115328kB [ 525.873152] Node 0 DMA32: 6645*4kB (UME) 9242*8kB (UME) 575*16kB (UME) 89*32kB (UME) 26*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 114228kB [ 525.930119] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 525.945962] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 525.962148] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 525.980507] Node 1 Normal: 424*4kB (UM) 15*8kB (UM) 14*16kB (UM) 717*32kB (UM) 706*64kB (UM) 209*128kB (UM) 35*256kB (UM) 2*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 106904kB [ 525.986732] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 526.048285] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 526.066917] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 526.089779] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 526.112679] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 526.123179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 526.129536] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 526.150107] 23206 total pagecache pages [ 526.153081] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 526.165088] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 526.172421] 0 pages in swap cache [ 526.173833] 23206 total pagecache pages [ 526.173843] 0 pages in swap cache [ 526.173848] Swap cache stats: add 0, delete 0, find 0/0 [ 526.173854] Free swap = 0kB [ 526.191643] Swap cache stats: add 0, delete 0, find 0/0 [ 526.205921] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 526.210170] Free swap = 0kB [ 526.217109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 526.240096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 526.249625] Total swap = 0kB [ 526.252685] 2097051 pages RAM [ 526.259207] 0 pages HighMem/MovableOnly [ 526.262673] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 526.263629] 363840 pages reserved [ 526.263634] 0 pages cma reserved [ 526.287862] Total swap = 0kB [ 526.291272] 2097051 pages RAM [ 526.307501] 0 pages HighMem/MovableOnly [ 526.317110] 363840 pages reserved [ 526.324145] 0 pages cma reserved [ 526.334468] 8021q: adding VLAN 0 to HW filter on device team0 [ 526.336729] Out of memory: Kill process 7962 (syz-fuzzer) score 4 or sacrifice child [ 526.369303] Killed process 16308 (syz-executor.0) total-vm:85024kB, anon-rss:64kB, file-rss:4kB, shmem-rss:0kB [ 526.396773] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 526.404003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready 21:25:09 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0xc0241, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) [ 526.414988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 526.422834] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.429289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 526.484847] oom_reaper: reaped process 16308 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 526.485004] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 526.532047] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 526.561064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 526.573884] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 526.592550] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 526.612697] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.619463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 526.631073] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 526.636644] CPU: 0 PID: 18629 Comm: syz-executor.0 Not tainted 4.14.217-syzkaller #0 [ 526.644535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 526.654774] Call Trace: [ 526.657379] dump_stack+0x1b2/0x281 [ 526.661099] warn_alloc.cold+0x96/0x1cc [ 526.665083] ? zone_watermark_ok_safe+0x220/0x220 [ 526.670296] __alloc_pages_nodemask+0x2127/0x2720 [ 526.675142] ? _raw_spin_unlock_irq+0x24/0x80 [ 526.679648] ? lock_acquire+0x170/0x3f0 [ 526.683628] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 526.688480] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 526.693936] ? __mutex_unlock_slowpath+0x75/0x770 [ 526.698802] alloc_pages_current+0x155/0x260 [ 526.703398] ion_page_pool_alloc+0x118/0x1b0 [ 526.707815] ion_system_heap_allocate+0x133/0x8c0 [ 526.712835] ? ion_alloc+0x187/0x810 [ 526.716833] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 526.722718] ? ion_system_contig_heap_create+0x130/0x130 [ 526.728170] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 526.733190] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 526.738043] ion_alloc+0x204/0x810 [ 526.741621] ? ion_dma_buf_release+0x40/0x40 [ 526.746032] ? __might_fault+0x177/0x1b0 [ 526.750100] ion_ioctl+0xea/0x1f0 [ 526.753585] ? ion_query_heaps+0x360/0x360 [ 526.757823] ? lock_acquire+0x170/0x3f0 [ 526.761804] ? lock_downgrade+0x740/0x740 [ 526.765956] ? ion_query_heaps+0x360/0x360 [ 526.770712] do_vfs_ioctl+0x75a/0xff0 [ 526.774515] ? ioctl_preallocate+0x1a0/0x1a0 [ 526.778923] ? lock_downgrade+0x740/0x740 [ 526.783078] ? __fget+0x225/0x360 [ 526.786530] ? do_vfs_ioctl+0xff0/0xff0 [ 526.791065] ? security_file_ioctl+0x83/0xb0 [ 526.795472] SyS_ioctl+0x7f/0xb0 [ 526.799200] ? do_vfs_ioctl+0xff0/0xff0 [ 526.803698] do_syscall_64+0x1d5/0x640 [ 526.807780] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 526.813084] RIP: 0033:0x45e219 [ 526.816617] RSP: 002b:00007f29fee76c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 526.824411] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 526.831957] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 526.839249] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 526.846678] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 526.853954] R13: 00007fff7563b0cf R14: 00007f29fee779c0 R15: 000000000119bf8c [ 526.871921] Bluetooth: hci5 command 0x040f tx timeout [ 526.873798] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 526.913951] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 526.929391] warn_alloc_show_mem: 2 callbacks suppressed [ 526.929395] Mem-Info: [ 526.950446] active_anon:11636 inactive_anon:18922 isolated_anon:0 [ 526.950446] active_file:1240 inactive_file:2827 isolated_file:0 [ 526.950446] unevictable:0 dirty:19 writeback:0 unstable:0 [ 526.950446] slab_reclaimable:12603 slab_unreclaimable:118362 [ 526.950446] mapped:37788 shmem:19227 pagetables:682 bounce:0 [ 526.950446] free:87172 free_pcp:399 free_cma:0 [ 526.996004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 527.004043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 527.048675] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 527.074659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready 21:25:09 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x80000001, 0x4) socket$inet_smc(0x2b, 0x1, 0x0) socketpair(0x2b, 0x80000, 0x360, &(0x7f0000000100)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0xc0241, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) [ 527.097599] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 527.131473] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 527.142908] syz-executor.5 (17147) used greatest stack depth: 24808 bytes left [ 527.143444] syz-executor.2: [ 527.160025] syz-executor.4: [ 527.172891] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 527.174506] page allocation failure: order:4 [ 527.177075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 527.182479] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 527.189307] Node 0 active_anon:46148kB inactive_anon:56924kB active_file:1232kB inactive_file:5892kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:82444kB dirty:32kB writeback:0kB shmem:58008kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 527.235941] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 527.237820] (null) [ 527.264116] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 527.267630] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 527.277427] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 527.290197] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 527.300693] CPU: 0 PID: 18658 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 527.308596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 527.318655] Call Trace: [ 527.322010] dump_stack+0x1b2/0x281 [ 527.325690] warn_alloc.cold+0x96/0x1cc [ 527.330748] ? zone_watermark_ok_safe+0x220/0x220 [ 527.335613] __alloc_pages_nodemask+0x2127/0x2720 [ 527.340447] ? lock_acquire+0x170/0x3f0 [ 527.344412] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 527.349268] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 527.354732] ? __mutex_unlock_slowpath+0x75/0x770 [ 527.359674] alloc_pages_current+0x155/0x260 [ 527.364097] ion_page_pool_alloc+0x118/0x1b0 [ 527.368541] ion_system_heap_allocate+0x133/0x8c0 [ 527.373368] ? ion_alloc+0x187/0x810 [ 527.377084] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 527.382550] ? ion_system_contig_heap_create+0x130/0x130 [ 527.388019] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 527.393401] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 527.398242] ion_alloc+0x204/0x810 [ 527.401771] ? ion_dma_buf_release+0x40/0x40 [ 527.406175] ? __might_fault+0x177/0x1b0 [ 527.410271] ion_ioctl+0xea/0x1f0 [ 527.413730] ? ion_query_heaps+0x360/0x360 [ 527.417978] ? lock_acquire+0x170/0x3f0 [ 527.421958] ? lock_downgrade+0x740/0x740 [ 527.426101] ? ion_query_heaps+0x360/0x360 [ 527.430673] do_vfs_ioctl+0x75a/0xff0 [ 527.434462] ? ioctl_preallocate+0x1a0/0x1a0 [ 527.439015] ? lock_downgrade+0x740/0x740 [ 527.443183] ? __fget+0x225/0x360 [ 527.446675] ? do_vfs_ioctl+0xff0/0xff0 [ 527.450767] ? security_file_ioctl+0x83/0xb0 [ 527.455309] SyS_ioctl+0x7f/0xb0 [ 527.458670] ? do_vfs_ioctl+0xff0/0xff0 [ 527.463159] do_syscall_64+0x1d5/0x640 [ 527.467056] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 527.472251] RIP: 0033:0x45e219 [ 527.475442] RSP: 002b:00007fd20c681c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 527.483160] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 527.490512] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 527.497773] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 527.505052] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 527.512436] R13: 00007fff87e85fff R14: 00007fd20c6829c0 R15: 000000000119bf8c [ 527.519720] CPU: 1 PID: 18449 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 527.527645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 527.536991] Call Trace: [ 527.539587] dump_stack+0x1b2/0x281 [ 527.543224] warn_alloc.cold+0x96/0x1cc [ 527.547185] ? zone_watermark_ok_safe+0x220/0x220 [ 527.552034] __alloc_pages_nodemask+0x2127/0x2720 [ 527.556860] ? lock_acquire+0x170/0x3f0 [ 527.560823] ? lock_acquire+0x170/0x3f0 [ 527.564784] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 527.569616] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 527.575072] ? __mutex_unlock_slowpath+0x75/0x770 [ 527.579903] alloc_pages_current+0x155/0x260 [ 527.584488] ion_page_pool_alloc+0x118/0x1b0 [ 527.589155] ion_system_heap_allocate+0x133/0x8c0 [ 527.593982] ? _raw_spin_unlock+0x29/0x40 [ 527.598113] ? _ion_heap_freelist_drain+0x6e/0x410 [ 527.603030] ? ion_system_contig_heap_create+0x130/0x130 [ 527.608462] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 527.613584] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 527.618929] ion_alloc+0x27a/0x810 [ 527.622466] ? ion_dma_buf_release+0x40/0x40 [ 527.626870] ? __might_fault+0x177/0x1b0 [ 527.630925] ion_ioctl+0xea/0x1f0 [ 527.634372] ? ion_query_heaps+0x360/0x360 [ 527.638587] ? lock_acquire+0x170/0x3f0 [ 527.642541] ? lock_downgrade+0x740/0x740 [ 527.646669] ? ion_query_heaps+0x360/0x360 [ 527.650899] do_vfs_ioctl+0x75a/0xff0 [ 527.654683] ? ioctl_preallocate+0x1a0/0x1a0 [ 527.659081] ? lock_downgrade+0x740/0x740 [ 527.663211] ? __fget+0x225/0x360 [ 527.666642] ? do_vfs_ioctl+0xff0/0xff0 [ 527.670599] ? security_file_ioctl+0x83/0xb0 [ 527.675000] SyS_ioctl+0x7f/0xb0 [ 527.678343] ? do_vfs_ioctl+0xff0/0xff0 [ 527.682298] do_syscall_64+0x1d5/0x640 [ 527.686187] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 527.691359] RIP: 0033:0x45e219 [ 527.694527] RSP: 002b:00007f61d9eb6c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 527.702250] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 527.709514] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 527.716782] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 527.724042] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 527.731292] R13: 00007ffd9f2d641f R14: 00007f61d9eb79c0 R15: 000000000119bf8c [ 527.741031] Node 1 active_anon:564kB inactive_anon:18756kB active_file:4776kB inactive_file:4716kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:70408kB dirty:4kB writeback:0kB shmem:18884kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 527.750324] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 527.782238] Node 0 DMA free:11008kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 527.814683] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 527.820003] Node 0 DMA32 free:117888kB min:36200kB low:45248kB high:54296kB active_anon:46264kB inactive_anon:56864kB active_file:1032kB inactive_file:8852kB unevictable:0kB writepending:32kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7936kB pagetables:2320kB bounce:0kB free_pcp:300kB local_pcp:172kB free_cma:0kB [ 527.854771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 527.870129] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 527.878650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 527.894687] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 527.902984] lowmem_reserve[]: 0 0 0 0 0 [ 527.917060] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 527.939937] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 527.969975] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 528.034804] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 528.069679] lowmem_reserve[]: 0 0 0 0 0 [ 528.097922] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 528.106689] Mem-Info: [ 528.140860] Node 1 Normal free:53460kB min:53696kB low:67120kB high:80544kB active_anon:572kB inactive_anon:18756kB active_file:3620kB inactive_file:3524kB unevictable:0kB writepending:36kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:488kB bounce:0kB free_pcp:740kB local_pcp:668kB free_cma:0kB [ 528.143642] active_anon:11709 inactive_anon:18920 isolated_anon:0 [ 528.143642] active_file:975 inactive_file:963 isolated_file:25 [ 528.143642] unevictable:0 dirty:35 writeback:0 unstable:0 [ 528.143642] slab_reclaimable:12603 slab_unreclaimable:118149 [ 528.143642] mapped:37340 shmem:19223 pagetables:702 bounce:0 [ 528.143642] free:24562 free_pcp:244 free_cma:0 [ 528.197113] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 528.268128] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 528.294864] lowmem_reserve[]: 0 0 0 0 0 [ 528.308596] Node 0 DMA: 2*4kB (UM) 0*8kB 0*16kB 0*32kB 1*64kB (M) 3*128kB (UM) 1*256kB (M) 2*512kB (UM) 1*1024kB (M) 0*2048kB 2*4096kB (UM) = 10952kB [ 528.337127] syz-executor.4 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 528.362306] Node 0 DMA32: 601*4kB (ME) 869*8kB (ME) 248*16kB (ME) 84*32kB (UME) 25*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17612kB [ 528.381055] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 528.388398] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 528.389886] Node 0 [ 528.402412] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 528.416778] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 528.420355] CPU: 1 PID: 18010 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 528.434983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 528.439409] Node 1 [ 528.444334] Call Trace: [ 528.444359] dump_stack+0x1b2/0x281 [ 528.444373] dump_header+0x178/0x82f [ 528.444385] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 528.444395] ? ___ratelimit+0x2cd/0x530 [ 528.444405] oom_kill_process.cold+0x10/0xb18 [ 528.444425] out_of_memory+0xe3e/0x1190 [ 528.444443] ? oom_killer_disable+0x1c0/0x1c0 [ 528.444450] ? mutex_trylock+0x152/0x1a0 [ 528.444460] __alloc_pages_nodemask+0x23e1/0x2720 [ 528.452610] syz-executor.3 cpuset= [ 528.452883] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 528.463026] Normal: [ 528.465663] alloc_pages_current+0x155/0x260 [ 528.465679] filemap_fault+0xea3/0x1980 [ 528.465699] ext4_filemap_fault+0x84/0xb0 [ 528.465711] __do_fault+0xfa/0x380 [ 528.465721] __handle_mm_fault+0x2497/0x4620 [ 528.465731] ? vm_insert_page+0x7c0/0x7c0 [ 528.465744] ? free_object+0xe4/0x240 [ 528.465763] handle_mm_fault+0x391/0x860 [ 528.465786] __do_page_fault+0x549/0xad0 [ 528.465796] ? spurious_fault+0x640/0x640 [ 528.465803] ? do_page_fault+0x60/0x500 [ 528.465815] ? page_fault+0x2f/0x50 [ 528.465821] page_fault+0x45/0x50 [ 528.465829] RIP: 0002:0x32 [ 528.465833] RSP: 0bb8:0000000000080cee EFLAGS: 00000005 [ 528.469686] syz-executor.2 cpuset= [ 528.483221] / [ 528.487890] Node 0 active_anon:46264kB inactive_anon:56924kB active_file:64kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:78760kB dirty:104kB writeback:0kB shmem:58008kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 528.503701] 8*4kB [ 528.508822] / [ 528.523778] (M) [ 528.528978] Node 1 active_anon:572kB inactive_anon:18756kB active_file:72kB inactive_file:100kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:63300kB dirty:36kB writeback:0kB shmem:18884kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 528.531287] mems_allowed=0-1 [ 528.535360] mems_allowed=0-1 [ 528.535373] CPU: 1 PID: 18449 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 528.535379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 528.535383] Call Trace: [ 528.535405] dump_stack+0x1b2/0x281 [ 528.535421] warn_alloc.cold+0x96/0x1cc [ 528.535440] ? zone_watermark_ok_safe+0x220/0x220 [ 528.535453] ? usleep_range+0x130/0x130 [ 528.553655] 8*8kB [ 528.558761] ? try_to_free_pages+0x23f/0x6e0 [ 528.558773] ? _find_next_bit+0xdb/0x100 [ 528.558784] ? run_timer_softirq+0x5a0/0x5a0 [ 528.558801] __alloc_pages_nodemask+0x2127/0x2720 [ 528.558820] ? lock_acquire+0x170/0x3f0 [ 528.558834] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 528.593991] (M) [ 528.594300] ? ion_page_pool_alloc+0x9e/0x1b0 [ 528.594317] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 528.594338] alloc_pages_current+0x155/0x260 [ 528.594356] ion_page_pool_alloc+0x118/0x1b0 [ 528.594368] ion_system_heap_allocate+0x133/0x8c0 [ 528.594379] ? _raw_spin_unlock+0x29/0x40 [ 528.594390] ? _ion_heap_freelist_drain+0x6e/0x410 [ 528.599748] 10*16kB [ 528.625400] ? ion_system_contig_heap_create+0x130/0x130 [ 528.625412] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 528.625429] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 528.625441] ion_alloc+0x27a/0x810 [ 528.625460] ? ion_dma_buf_release+0x40/0x40 [ 528.625472] ? __might_fault+0x177/0x1b0 [ 528.625487] ion_ioctl+0xea/0x1f0 [ 528.625497] ? ion_query_heaps+0x360/0x360 [ 528.625510] ? lock_acquire+0x170/0x3f0 [ 528.625517] ? lock_downgrade+0x740/0x740 [ 528.625524] ? ion_query_heaps+0x360/0x360 [ 528.625534] do_vfs_ioctl+0x75a/0xff0 [ 528.625546] ? ioctl_preallocate+0x1a0/0x1a0 [ 528.625552] ? lock_downgrade+0x740/0x740 [ 528.625565] ? __fget+0x225/0x360 [ 528.625574] ? do_vfs_ioctl+0xff0/0xff0 [ 528.625586] ? security_file_ioctl+0x83/0xb0 [ 528.625597] SyS_ioctl+0x7f/0xb0 [ 528.625604] ? do_vfs_ioctl+0xff0/0xff0 [ 528.625616] do_syscall_64+0x1d5/0x640 [ 528.625634] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 528.625642] RIP: 0033:0x45e219 [ 528.625646] RSP: 002b:00007f61d9eb6c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 528.709348] (UM) [ 528.713184] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 528.732046] Mem-Info: [ 528.734038] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 528.734044] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 528.734048] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 528.734052] R13: 00007ffd9f2d641f R14: 00007f61d9eb79c0 R15: 000000000119bf8c [ 528.741970] Node 0 [ 528.753713] CPU: 0 PID: 18408 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 528.757657] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 528.761663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 528.765115] lowmem_reserve[]: [ 528.769740] Call Trace: [ 528.773710] 0 [ 528.778210] dump_stack+0x1b2/0x281 [ 528.778226] warn_alloc.cold+0x96/0x1cc [ 528.782434] 2717 [ 528.786220] ? zone_watermark_ok_safe+0x220/0x220 [ 528.786232] ? usleep_range+0x130/0x130 [ 528.786242] ? try_to_free_pages+0x23f/0x6e0 [ 528.790646] 2718 [ 528.794780] ? _find_next_bit+0xdb/0x100 [ 528.794792] ? run_timer_softirq+0x5a0/0x5a0 [ 528.794809] __alloc_pages_nodemask+0x2127/0x2720 [ 528.798407] 2718 [ 528.802371] ? lock_acquire+0x170/0x3f0 [ 528.806768] 2718 [ 528.810204] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 528.818042] ? ion_page_pool_alloc+0x9e/0x1b0 [ 528.823198] Node 0 [ 528.826381] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 528.826400] ? alloc_pages_current+0x84/0x260 [ 528.837158] DMA32 free:17488kB min:36200kB low:45248kB high:54296kB active_anon:46264kB inactive_anon:56864kB active_file:80kB inactive_file:44kB unevictable:0kB writepending:104kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7904kB pagetables:2320kB bounce:0kB free_pcp:240kB local_pcp:120kB free_cma:0kB [ 528.839175] alloc_pages_current+0x155/0x260 [ 528.846442] lowmem_reserve[]: [ 528.848832] ion_page_pool_alloc+0x118/0x1b0 [ 528.856092] 0 [ 528.863333] ion_system_heap_allocate+0x133/0x8c0 [ 528.870594] 0 [ 528.877840] ? _raw_spin_unlock+0x29/0x40 [ 528.877852] ? _ion_heap_freelist_drain+0x6e/0x410 [ 528.880064] 0 [ 528.887930] ? ion_system_contig_heap_create+0x130/0x130 [ 528.887943] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 528.887958] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 528.913539] 0 [ 528.923585] ion_alloc+0x27a/0x810 [ 528.923600] ? ion_dma_buf_release+0x40/0x40 [ 528.926723] 0 [ 528.929288] ? __might_fault+0x177/0x1b0 [ 528.934832] ion_ioctl+0xea/0x1f0 [ 528.934843] ? ion_query_heaps+0x360/0x360 [ 528.934857] ? lock_acquire+0x170/0x3f0 [ 528.943307] Node 0 [ 528.945681] ? lock_downgrade+0x740/0x740 [ 528.945692] ? ion_query_heaps+0x360/0x360 [ 528.945706] do_vfs_ioctl+0x75a/0xff0 [ 528.949672] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 528.954052] ? ioctl_preallocate+0x1a0/0x1a0 [ 528.954060] ? lock_downgrade+0x740/0x740 [ 528.954074] ? __fget+0x225/0x360 [ 528.956107] lowmem_reserve[]: [ 528.960150] ? do_vfs_ioctl+0xff0/0xff0 [ 528.964551] 0 [ 528.969360] ? security_file_ioctl+0x83/0xb0 [ 528.971399] 0 [ 528.976050] SyS_ioctl+0x7f/0xb0 [ 528.976058] ? do_vfs_ioctl+0xff0/0xff0 [ 528.976074] do_syscall_64+0x1d5/0x640 [ 528.978128] 0 [ 528.982976] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 528.987459] 0 [ 528.989663] RIP: 0033:0x45e219 [ 528.995476] 0 [ 528.999942] RSP: 002b:00007f1c98502c68 EFLAGS: 00000246 [ 529.033304] ORIG_RAX: 0000000000000010 [ 529.036413] Node 1 [ 529.040795] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 529.042587] Normal free:26544kB min:53696kB low:67120kB high:80544kB active_anon:572kB inactive_anon:18756kB active_file:16kB inactive_file:0kB unevictable:0kB writepending:36kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:488kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 529.047394] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 529.047399] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 529.047404] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 529.047409] R13: 00007ffef867e34f R14: 00007f1c985039c0 R15: 000000000119bf8c [ 529.071757] 674*32kB [ 529.083641] Bluetooth: hci5 command 0x0419 tx timeout [ 529.089912] (UM) [ 529.113831] active_anon:11709 inactive_anon:18920 isolated_anon:0 [ 529.113831] active_file:18 inactive_file:16 isolated_file:0 [ 529.113831] unevictable:0 dirty:0 writeback:0 unstable:0 [ 529.113831] slab_reclaimable:12603 slab_unreclaimable:118116 [ 529.113831] mapped:35475 shmem:19223 pagetables:702 bounce:0 [ 529.113831] free:20944 free_pcp:397 free_cma:0 [ 529.118040] 11*64kB [ 529.118417] Node 0 active_anon:46264kB inactive_anon:56924kB active_file:60kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:78684kB dirty:0kB writeback:0kB shmem:58008kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 529.146985] (UM) [ 529.161648] lowmem_reserve[]: [ 529.162654] 6*128kB [ 529.171700] 0 [ 529.177674] (M) [ 529.183313] 0 [ 529.183831] 3*256kB [ 529.196170] 0 [ 529.205344] (M) 1*512kB (M) 2*1024kB (M) 0*2048kB [ 529.216312] 0 [ 529.246783] 0*4096kB [ 529.262797] Node 1 active_anon:572kB inactive_anon:18756kB active_file:12kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:63216kB dirty:0kB writeback:0kB shmem:18884kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 529.268519] = 26624kB [ 529.279064] Node 0 [ 529.281199] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 529.282526] DMA free:11008kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 529.325460] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 529.350102] 0 [ 529.358612] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 529.361483] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 529.363257] Node 0 [ 529.372262] 19257 total pagecache pages [ 529.373646] DMA: [ 529.402861] 0 pages in swap cache [ 529.404183] lowmem_reserve[]: [ 529.412990] Swap cache stats: add 0, delete 0, find 0/0 [ 529.412996] Free swap = 0kB [ 529.438898] 4*4kB [ 529.450824] warn_alloc_show_mem: 2 callbacks suppressed [ 529.450827] Mem-Info: [ 529.458140] (UM) [ 529.467524] active_anon:11709 inactive_anon:18920 isolated_anon:0 [ 529.467524] active_file:18 inactive_file:0 isolated_file:30 [ 529.467524] unevictable:0 dirty:0 writeback:0 unstable:0 [ 529.467524] slab_reclaimable:12603 slab_unreclaimable:118116 [ 529.467524] mapped:35475 shmem:19223 pagetables:702 bounce:0 [ 529.467524] free:20944 free_pcp:403 free_cma:0 [ 529.473082] 0 [ 529.473192] Node 0 active_anon:46264kB inactive_anon:56924kB active_file:60kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):120kB mapped:78684kB dirty:0kB writeback:0kB shmem:58008kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 529.475311] 2717 [ 529.479398] Total swap = 0kB [ 529.481822] 2718 [ 529.487215] Node 1 active_anon:572kB inactive_anon:18756kB active_file:12kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:63216kB dirty:0kB writeback:0kB shmem:18884kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 529.487220] Node 0 DMA free:11008kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 529.487241] lowmem_reserve[]: 0 2717 2718 [ 529.493826] 4*8kB [ 529.497795] 2097051 pages RAM [ 529.500179] (U) [ 529.502228] 0 pages HighMem/MovableOnly [ 529.539184] 2718 [ 529.564989] 2718 2718 [ 529.565001] Node 0 DMA32 free:32008kB min:36200kB low:45248kB high:54296kB active_anon:46264kB inactive_anon:56864kB active_file:60kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7904kB pagetables:2320kB bounce:0kB free_pcp:828kB local_pcp:704kB free_cma:0kB [ 529.565021] lowmem_reserve[]: 0 0 0 0 [ 529.570417] 2718 [ 529.572129] 0 [ 529.603000] 1*16kB [ 529.626599] 363840 pages reserved [ 529.633425] (U) [ 529.636907] 0*32kB [ 529.640862] Node 0 [ 529.642902] 1*64kB [ 529.645430] 0 pages cma reserved [ 529.646791] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 529.678971] lowmem_reserve[]: [ 529.681023] Node 0 [ 529.682801] 0 [ 529.685164] DMA32 free:32008kB min:36200kB low:45248kB high:54296kB active_anon:46264kB inactive_anon:56864kB active_file:60kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7904kB pagetables:2320kB bounce:0kB free_pcp:828kB local_pcp:124kB free_cma:0kB [ 529.688548] 0 [ 529.690504] lowmem_reserve[]: [ 529.692733] 0 0 [ 529.698385] 0 [ 529.700576] 0 [ 529.729433] (M) [ 529.732779] 3*128kB [ 529.762714] Node 1 [ 529.766796] 0 [ 529.768562] Normal free:41460kB min:53696kB low:67120kB high:80544kB active_anon:572kB inactive_anon:18756kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:488kB bounce:0kB free_pcp:784kB local_pcp:0kB free_cma:0kB [ 529.769888] 0 [ 529.771614] lowmem_reserve[]: [ 529.773548] 0 [ 529.775895] 0 0 0 0 0 [ 529.775912] Node 0 DMA: 4*4kB (UM) 4*8kB (U) 1*16kB (U) 0*32kB 1*64kB (M) 3*128kB (UM) 1*256kB (M) 2*512kB (UM) 1*1024kB (M) 0*2048kB 2*4096kB (UM) [ 529.780954] 0 [ 529.821494] (UM) [ 529.832400] = 11008kB [ 529.834579] Node 0 DMA32: [ 529.836885] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 529.839721] 639*4kB [ 529.865291] 1*256kB (M) 2*512kB (UM) 1*1024kB (M) 0*2048kB 2*4096kB (UM) = 11008kB [ 529.869170] lowmem_reserve[]: 0 0 0 0 0 [ 529.875951] Node 0 DMA32: [ 529.879627] Node 1 Normal free:41560kB min:53696kB low:67120kB high:80544kB active_anon:572kB inactive_anon:18756kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:488kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 529.882460] 639*4kB [ 529.915512] (UME) 897*8kB (UME) 272*16kB (UME) 372*32kB (UME) 104*64kB (U) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 32900kB [ 529.918635] lowmem_reserve[]: 0 0 0 0 0 [ 529.930878] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 529.946908] (UME) 897*8kB (UME) 272*16kB (UME) 372*32kB (UME) 104*64kB (U) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 32900kB [ 529.951678] Node 0 [ 529.959720] Node 1 Normal: 130*4kB (UM) 88*8kB (UM) 423*16kB (UM) 899*32kB (UM) 12*64kB (UM) 6*128kB (M) 3*256kB (M) 1*512kB (M) 2*1024kB (M) 0*2048kB 0*4096kB = 41624kB [ 529.959795] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 529.959801] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 529.959806] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 529.959814] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 529.965414] DMA: [ 529.977687] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 529.977736] Node 1 Normal: 130*4kB (UM) 88*8kB (UM) 423*16kB (UM) [ 529.990211] 4*4kB [ 529.995607] 19257 total pagecache pages [ 530.007658] (UM) [ 530.012873] 899*32kB [ 530.014968] 4*8kB [ 530.026527] (UM) [ 530.037538] 0 pages in swap cache [ 530.038949] 12*64kB [ 530.040300] Swap cache stats: add 0, delete 0, find 0/0 [ 530.042687] (UM) [ 530.047347] (U) [ 530.052660] 6*128kB [ 530.052738] 1*16kB [ 530.059975] (M) [ 530.068156] Free swap = 0kB [ 530.069037] 3*256kB [ 530.070131] Total swap = 0kB [ 530.073129] (M) 1*512kB (M) 2*1024kB (M) 0*2048kB 0*4096kB = 41624kB [ 530.091924] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 530.097455] (U) 0*32kB 1*64kB (M) 3*128kB (UM) 1*256kB (M) 2*512kB (UM) 1*1024kB (M) 0*2048kB 2*4096kB (UM) = 11008kB [ 530.102674] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 530.127519] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 530.138249] Node 0 DMA32: 608*4kB (UME) 897*8kB (UME) 272*16kB (UME) 372*32kB (UME) 104*64kB (U) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 32776kB [ 530.138669] 2097051 pages RAM [ 530.162916] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 530.171606] 19257 total pagecache pages [ 530.171622] Node 0 [ 530.182772] 0 pages in swap cache [ 530.188548] Swap cache stats: add 0, delete 0, find 0/0 [ 530.190946] Normal: [ 530.200655] 0 pages HighMem/MovableOnly [ 530.202129] 0*4kB [ 530.202993] 363840 pages reserved [ 530.212557] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB [ 530.212634] Free swap = 0kB [ 530.212635] 0*256kB 0*512kB [ 530.223429] Total swap = 0kB [ 530.227837] 0*1024kB 0*2048kB [ 530.229487] 2097051 pages RAM [ 530.229492] 0 pages HighMem/MovableOnly [ 530.232669] 0*4096kB [ 530.241742] 0 pages cma reserved [ 530.254590] = 0kB [ 530.258545] Node 1 Normal: 130*4kB (UM) 88*8kB (UM) 423*16kB (UM) 899*32kB (UM) 40*64kB (UM) 6*128kB (M) 3*256kB (M) 1*512kB (M) 2*1024kB (M) 1*2048kB (U) 1*4096kB (U) = 49560kB [ 530.273446] 363840 pages reserved [ 530.278741] 0 pages cma reserved [ 530.333374] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 530.344906] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 530.357406] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 530.368863] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 530.383339] 21005 total pagecache pages [ 530.406800] 0 pages in swap cache [ 530.410940] Swap cache stats: add 0, delete 0, find 0/0 [ 530.421414] Free swap = 0kB [ 530.425539] Total swap = 0kB [ 530.428975] 2097051 pages RAM [ 530.432285] 0 pages HighMem/MovableOnly [ 530.465302] 363840 pages reserved [ 530.469330] 0 pages cma reserved [ 530.485953] Out of memory (oom_kill_allocating_task): Kill process 18010 (syz-executor.4) score 0 or sacrifice child [ 530.506136] Killed process 18658 (syz-executor.4) total-vm:93348kB, anon-rss:156kB, file-rss:34816kB, shmem-rss:0kB [ 530.527749] oom_reaper: reaped process 18658 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 530.581645] 8021q: adding VLAN 0 to HW filter on device batadv0 21:25:13 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0xc0241, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) [ 530.884559] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 530.891332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 530.916772] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 530.923756] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 530.938622] device bridge_slave_1 left promiscuous mode [ 530.946881] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.960375] device bridge_slave_0 left promiscuous mode [ 530.969120] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.987303] device veth1_macvtap left promiscuous mode [ 530.993064] device veth0_macvtap left promiscuous mode [ 531.005587] device veth1_vlan left promiscuous mode [ 531.011043] device veth0_vlan left promiscuous mode [ 531.154177] device hsr_slave_1 left promiscuous mode [ 531.162693] device hsr_slave_0 left promiscuous mode [ 531.178090] team0 (unregistering): Port device team_slave_1 removed [ 531.191487] team0 (unregistering): Port device team_slave_0 removed [ 531.202408] bond0 (unregistering): Releasing backup interface bond_slave_1 21:25:14 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x80000001, 0x4) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0xc0241, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) [ 531.225011] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 531.260710] bond0 (unregistering): Released all slaves [ 531.404720] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 531.440383] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 531.454910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 531.463038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 531.619211] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 531.644870] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 531.651894] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 531.696218] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 531.703051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 531.714521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 531.722205] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 531.774518] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 531.783443] device veth0_vlan entered promiscuous mode [ 531.804870] device veth1_vlan entered promiscuous mode [ 531.810829] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 531.850538] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 531.883924] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 531.907164] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 531.924683] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 531.937959] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 531.958531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 531.975196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 532.010137] device veth0_macvtap entered promiscuous mode [ 532.017091] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 532.031080] device veth1_macvtap entered promiscuous mode [ 532.048934] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 532.081308] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 532.108073] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 532.139555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 532.163807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.172958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 532.233960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.243409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 532.293783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.302979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 532.373752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.394067] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 532.405184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 532.424689] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 532.432349] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 532.464401] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 532.484423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 532.499344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 532.544426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.578073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 532.594489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.614533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 532.631167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.642646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 532.653715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.685113] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 532.692141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 532.713995] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 532.722046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 533.916134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 533.946519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 533.964286] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 533.994100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 534.015224] device bridge_slave_1 left promiscuous mode [ 534.031029] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.058552] device bridge_slave_0 left promiscuous mode [ 534.064729] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.076094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 534.082924] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 534.098541] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 534.107710] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 534.118448] device bridge_slave_1 left promiscuous mode [ 534.127499] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 534.127669] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.151172] device bridge_slave_0 left promiscuous mode [ 534.153768] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 534.158060] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.161701] CPU: 0 PID: 18735 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 534.161707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 534.161713] Call Trace: [ 534.187910] dump_stack+0x1b2/0x281 [ 534.191546] warn_alloc.cold+0x96/0x1cc [ 534.195569] ? zone_watermark_ok_safe+0x220/0x220 [ 534.200433] __alloc_pages_nodemask+0x2127/0x2720 [ 534.205329] ? _raw_spin_unlock_irq+0x24/0x80 [ 534.209853] ? lock_acquire+0x170/0x3f0 [ 534.213847] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 534.218768] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 534.224203] ? __mutex_unlock_slowpath+0x75/0x770 [ 534.229133] alloc_pages_current+0x155/0x260 [ 534.233624] ion_page_pool_alloc+0x118/0x1b0 [ 534.238034] ion_system_heap_allocate+0x133/0x8c0 [ 534.242867] ? ion_alloc+0x187/0x810 [ 534.246689] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 534.252120] ? ion_system_contig_heap_create+0x130/0x130 [ 534.257567] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 534.262566] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 534.267496] ion_alloc+0x204/0x810 [ 534.271026] ? ion_dma_buf_release+0x40/0x40 [ 534.275592] ? __might_fault+0x177/0x1b0 [ 534.279901] ion_ioctl+0xea/0x1f0 [ 534.283337] ? ion_query_heaps+0x360/0x360 [ 534.287582] ? lock_acquire+0x170/0x3f0 [ 534.291557] ? lock_downgrade+0x740/0x740 [ 534.295860] ? ion_query_heaps+0x360/0x360 [ 534.300275] do_vfs_ioctl+0x75a/0xff0 [ 534.304076] ? ioctl_preallocate+0x1a0/0x1a0 [ 534.308489] ? lock_downgrade+0x740/0x740 [ 534.312640] ? __fget+0x225/0x360 [ 534.316079] ? do_vfs_ioctl+0xff0/0xff0 [ 534.320363] ? security_file_ioctl+0x83/0xb0 [ 534.324756] SyS_ioctl+0x7f/0xb0 [ 534.328104] ? do_vfs_ioctl+0xff0/0xff0 [ 534.332066] do_syscall_64+0x1d5/0x640 [ 534.335951] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 534.341227] RIP: 0033:0x45e219 [ 534.344761] RSP: 002b:00007f39dd445c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 534.352902] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 534.360153] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 534.367405] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 534.374691] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 534.382401] R13: 00007ffc799adfff R14: 00007f39dd4469c0 R15: 000000000119bf8c [ 534.406662] device veth1_macvtap left promiscuous mode [ 534.426656] device veth0_macvtap left promiscuous mode [ 534.438302] device veth1_vlan left promiscuous mode [ 534.444063] device veth0_vlan left promiscuous mode [ 534.449769] device veth1_macvtap left promiscuous mode [ 534.459843] device veth0_macvtap left promiscuous mode [ 534.466518] device veth1_vlan left promiscuous mode [ 534.472619] device veth0_vlan left promiscuous mode [ 534.643405] Mem-Info: [ 534.656503] active_anon:13173 inactive_anon:18923 isolated_anon:0 [ 534.656503] active_file:1437 inactive_file:5327 isolated_file:0 [ 534.656503] unevictable:0 dirty:73 writeback:0 unstable:0 [ 534.656503] slab_reclaimable:12545 slab_unreclaimable:115766 [ 534.656503] mapped:57371 shmem:19227 pagetables:764 bounce:0 [ 534.656503] free:141397 free_pcp:377 free_cma:0 [ 534.725009] Node 0 active_anon:51964kB inactive_anon:56908kB active_file:5712kB inactive_file:21164kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:150944kB dirty:272kB writeback:0kB shmem:57996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 534.753966] Node 1 active_anon:728kB inactive_anon:18784kB active_file:36kB inactive_file:144kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:78540kB dirty:20kB writeback:0kB shmem:18912kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 534.781405] device hsr_slave_1 left promiscuous mode [ 534.786762] device hsr_slave_0 left promiscuous mode [ 534.797247] Node 0 DMA free:11360kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:64kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 534.824241] team0 (unregistering): Port device team_slave_1 removed [ 534.826819] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 534.837162] Node 0 DMA32 free:466612kB min:36200kB low:45248kB high:54296kB active_anon:51960kB inactive_anon:56844kB active_file:5712kB inactive_file:21164kB unevictable:0kB writepending:272kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7968kB pagetables:2620kB bounce:0kB free_pcp:1428kB local_pcp:764kB free_cma:0kB [ 534.868620] team0 (unregistering): Port device team_slave_0 removed [ 534.872062] lowmem_reserve[]: 0 0 0 0 0 [ 534.879234] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 534.905178] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 534.914225] lowmem_reserve[]: 0 0 0 0 0 [ 534.918361] Node 1 Normal free:349796kB min:53696kB low:67120kB high:80544kB active_anon:728kB inactive_anon:18784kB active_file:36kB inactive_file:144kB unevictable:0kB writepending:20kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:436kB bounce:0kB free_pcp:1332kB local_pcp:700kB free_cma:0kB [ 534.918400] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 534.949000] lowmem_reserve[]: 0 0 0 0 0 [ 534.959806] Node 0 DMA: 6*4kB (UM) 10*8kB (UM) 8*16kB (UM) 6*32kB (UM) 1*64kB (M) 1*128kB (U) 2*256kB (UM) 2*512kB (UM) 1*1024kB (M) 0*2048kB 2*4096kB (UM) = 11368kB [ 534.976101] Node 0 DMA32: 36642*4kB (UME) 15158*8kB (UME) 4781*16kB (UME) 3012*32kB (UME) 1175*64kB (UM) 83*128kB (U) 28*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 533704kB [ 534.992971] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 535.005326] Node 1 Normal: 21006*4kB (UM) 9563*8kB (UM) 3978*16kB (UM) 2436*32kB (UM) 940*64kB (U) 78*128kB (U) 44*256kB (U) 4*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 385584kB [ 535.022077] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 535.031804] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 535.041437] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 535.053496] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 535.062101] 25783 total pagecache pages [ 535.071606] bond0 (unregistering): Released all slaves [ 535.084449] 0 pages in swap cache [ 535.087939] Swap cache stats: add 0, delete 0, find 0/0 [ 535.093323] Free swap = 0kB [ 535.109423] Total swap = 0kB [ 535.114139] 2097051 pages RAM [ 535.117268] 0 pages HighMem/MovableOnly [ 535.121240] 363840 pages reserved [ 535.137603] 0 pages cma reserved [ 535.169920] device hsr_slave_1 left promiscuous mode [ 535.192308] device hsr_slave_0 left promiscuous mode [ 535.237179] team0 (unregistering): Port device team_slave_1 removed [ 535.264519] team0 (unregistering): Port device team_slave_0 removed [ 535.287866] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 535.315884] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 535.402088] bond0 (unregistering): Released all slaves 21:25:18 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x80000001, 0x4) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:25:18 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x80000001, 0x4) socket$inet_smc(0x2b, 0x1, 0x0) socketpair(0x2b, 0x80000, 0x360, &(0x7f0000000100)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0xc0241, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:25:18 executing program 4: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0xc0241, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:25:18 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x80000001, 0x4) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:25:18 executing program 4: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0xc0241, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:25:18 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x80000001, 0x4) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) [ 535.913522] Bluetooth: hci0 command 0x0409 tx timeout [ 535.918828] Bluetooth: hci1 command 0x0409 tx timeout [ 535.923429] Bluetooth: hci3 command 0x0409 tx timeout 21:25:18 executing program 4: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0xc0241, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:25:18 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x80000001, 0x4) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0xc0241, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:25:18 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) [ 536.997687] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 537.020394] syz-executor.3 cpuset=/ [ 537.020427] syz-executor.4: [ 537.021707] syz-executor.1: [ 537.025042] page allocation failure: order:4 [ 537.031117] mems_allowed=0-1 [ 537.037481] page allocation failure: order:4 [ 537.041152] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 537.042069] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 537.046608] CPU: 1 PID: 18767 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 537.061264] (null) [ 537.067759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 537.067764] Call Trace: [ 537.067790] dump_stack+0x1b2/0x281 [ 537.067806] warn_alloc.cold+0x96/0x1cc [ 537.067818] ? zone_watermark_ok_safe+0x220/0x220 [ 537.067842] __alloc_pages_nodemask+0x2127/0x2720 [ 537.084940] syz-executor.1 cpuset= [ 537.085559] ? lock_acquire+0x170/0x3f0 [ 537.101601] / [ 537.102697] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 537.113214] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 537.118676] ? __mutex_unlock_slowpath+0x75/0x770 [ 537.119461] mems_allowed=0-1 [ 537.123510] ? retint_kernel+0x2d/0x2d [ 537.123527] alloc_pages_current+0x155/0x260 [ 537.123543] ion_page_pool_alloc+0x118/0x1b0 [ 537.123554] ion_system_heap_allocate+0x133/0x8c0 [ 537.123564] ? ion_alloc+0x187/0x810 [ 537.123574] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 537.123585] ? ion_system_contig_heap_create+0x130/0x130 [ 537.158780] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 537.163812] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 537.168661] ion_alloc+0x204/0x810 [ 537.172203] ? ion_dma_buf_release+0x40/0x40 [ 537.176618] ? __might_fault+0x177/0x1b0 [ 537.180682] ion_ioctl+0xea/0x1f0 [ 537.184128] ? ion_query_heaps+0x360/0x360 [ 537.188359] ? lock_acquire+0x170/0x3f0 [ 537.192330] ? lock_downgrade+0x740/0x740 [ 537.196480] ? ion_query_heaps+0x360/0x360 [ 537.200715] do_vfs_ioctl+0x75a/0xff0 [ 537.205043] ? ioctl_preallocate+0x1a0/0x1a0 [ 537.209624] ? lock_downgrade+0x740/0x740 [ 537.213779] ? __fget+0x225/0x360 [ 537.217260] ? do_vfs_ioctl+0xff0/0xff0 [ 537.221334] ? security_file_ioctl+0x83/0xb0 [ 537.225750] SyS_ioctl+0x7f/0xb0 [ 537.229174] ? do_vfs_ioctl+0xff0/0xff0 [ 537.233154] do_syscall_64+0x1d5/0x640 [ 537.237059] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 537.242269] RIP: 0033:0x45e219 [ 537.245469] RSP: 002b:00007f1c98502c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 537.253317] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 537.260591] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 537.267862] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 537.275226] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 537.282600] R13: 00007ffef867e34f R14: 00007f1c985039c0 R15: 000000000119bf8c [ 537.289890] CPU: 0 PID: 18784 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 537.297795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 537.298712] (null) [ 537.308143] Call Trace: [ 537.308173] dump_stack+0x1b2/0x281 [ 537.308187] warn_alloc.cold+0x96/0x1cc [ 537.308200] ? zone_watermark_ok_safe+0x220/0x220 [ 537.308226] __alloc_pages_nodemask+0x2127/0x2720 [ 537.320263] syz-executor.4 cpuset= [ 537.320561] ? io_schedule_timeout+0x140/0x140 [ 537.326278] / [ 537.330226] ? lock_acquire+0x170/0x3f0 [ 537.333823] mems_allowed=0-1 [ 537.338304] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 537.338323] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 537.357302] ? __mutex_unlock_slowpath+0x75/0x770 [ 537.362133] alloc_pages_current+0x155/0x260 [ 537.366529] ion_page_pool_alloc+0x118/0x1b0 [ 537.370921] ion_system_heap_allocate+0x133/0x8c0 [ 537.375743] ? ion_alloc+0x187/0x810 [ 537.379454] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 537.384886] ? ion_system_contig_heap_create+0x130/0x130 [ 537.390318] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 537.395316] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 537.400141] ion_alloc+0x204/0x810 [ 537.403668] ? ion_dma_buf_release+0x40/0x40 [ 537.408064] ? __might_fault+0x177/0x1b0 [ 537.412108] ion_ioctl+0xea/0x1f0 [ 537.415542] ? ion_query_heaps+0x360/0x360 [ 537.419777] ? lock_acquire+0x170/0x3f0 [ 537.423735] ? lock_downgrade+0x740/0x740 [ 537.427863] ? ion_query_heaps+0x360/0x360 [ 537.432080] do_vfs_ioctl+0x75a/0xff0 [ 537.435862] ? ioctl_preallocate+0x1a0/0x1a0 [ 537.440252] ? lock_downgrade+0x740/0x740 [ 537.444382] ? __fget+0x225/0x360 [ 537.447818] ? do_vfs_ioctl+0xff0/0xff0 [ 537.451776] ? security_file_ioctl+0x83/0xb0 [ 537.456166] SyS_ioctl+0x7f/0xb0 [ 537.459514] ? do_vfs_ioctl+0xff0/0xff0 [ 537.463585] do_syscall_64+0x1d5/0x640 [ 537.467496] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 537.472673] RIP: 0033:0x45e219 [ 537.475876] RSP: 002b:00007f39dd445c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 537.483568] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 537.490817] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 537.498078] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 537.505328] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 537.512590] R13: 00007ffc799adfff R14: 00007f39dd4469c0 R15: 000000000119bf8c [ 537.519856] CPU: 1 PID: 18785 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 537.527756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 537.537114] Call Trace: [ 537.539724] dump_stack+0x1b2/0x281 [ 537.543360] warn_alloc.cold+0x96/0x1cc [ 537.547335] ? zone_watermark_ok_safe+0x220/0x220 [ 537.552283] __alloc_pages_nodemask+0x2127/0x2720 [ 537.557145] ? __schedule+0x893/0x1de0 [ 537.561051] ? lock_acquire+0x170/0x3f0 [ 537.565132] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 537.570596] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 537.576058] ? __mutex_unlock_slowpath+0x75/0x770 [ 537.580915] alloc_pages_current+0x155/0x260 [ 537.585335] ion_page_pool_alloc+0x118/0x1b0 [ 537.589774] ion_system_heap_allocate+0x133/0x8c0 [ 537.594625] ? ion_alloc+0x187/0x810 [ 537.598344] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 537.603887] ? ion_system_contig_heap_create+0x130/0x130 [ 537.609358] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 537.614393] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 537.619247] ion_alloc+0x204/0x810 [ 537.622797] ? ion_dma_buf_release+0x40/0x40 [ 537.627216] ? __might_fault+0x177/0x1b0 [ 537.631288] ion_ioctl+0xea/0x1f0 [ 537.634776] ? ion_query_heaps+0x360/0x360 [ 537.639139] ? lock_acquire+0x170/0x3f0 [ 537.643116] ? lock_downgrade+0x740/0x740 [ 537.647275] ? ion_query_heaps+0x360/0x360 [ 537.651512] do_vfs_ioctl+0x75a/0xff0 [ 537.655329] ? ioctl_preallocate+0x1a0/0x1a0 [ 537.659744] ? lock_downgrade+0x740/0x740 [ 537.663923] ? __fget+0x225/0x360 [ 537.667378] ? do_vfs_ioctl+0xff0/0xff0 [ 537.671359] ? security_file_ioctl+0x83/0xb0 [ 537.675868] SyS_ioctl+0x7f/0xb0 [ 537.679239] ? do_vfs_ioctl+0xff0/0xff0 [ 537.683241] do_syscall_64+0x1d5/0x640 [ 537.687162] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 537.692382] RIP: 0033:0x45e219 [ 537.695564] RSP: 002b:00007fd20c681c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 537.703273] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 537.710574] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 537.717849] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 537.725212] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 537.732491] R13: 00007fff87e85fff R14: 00007fd20c6829c0 R15: 000000000119bf8c [ 537.769694] Mem-Info: [ 537.772213] active_anon:14250 inactive_anon:18923 isolated_anon:0 [ 537.772213] active_file:1725 inactive_file:5114 isolated_file:0 [ 537.772213] unevictable:0 dirty:91 writeback:0 unstable:0 [ 537.772213] slab_reclaimable:12433 slab_unreclaimable:114528 [ 537.772213] mapped:57421 shmem:19227 pagetables:820 bounce:0 [ 537.772213] free:398412 free_pcp:214 free_cma:0 [ 537.807334] Node 0 active_anon:56384kB inactive_anon:56908kB active_file:6864kB inactive_file:20308kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:151144kB dirty:340kB writeback:0kB shmem:57996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 537.837418] Node 1 active_anon:616kB inactive_anon:18784kB active_file:36kB inactive_file:148kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:78540kB dirty:24kB writeback:0kB shmem:18912kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 537.865636] Node 0 DMA free:11076kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 537.876728] IPVS: ftp: loaded support on port[0] = 21 [ 537.893499] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 537.902943] Node 0 DMA32 free:704064kB min:36200kB low:45248kB high:54296kB active_anon:56384kB inactive_anon:56848kB active_file:6864kB inactive_file:20308kB unevictable:0kB writepending:340kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7968kB pagetables:2844kB bounce:0kB free_pcp:964kB local_pcp:220kB free_cma:0kB [ 537.935275] lowmem_reserve[]: 0 0 0 0 0 [ 537.939385] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 537.978697] lowmem_reserve[]: 0 0 0 0 0 [ 537.983051] Node 1 Normal free:944032kB min:53696kB low:67120kB high:80544kB active_anon:616kB inactive_anon:18784kB active_file:36kB inactive_file:148kB unevictable:0kB writepending:24kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:436kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 538.012810] Bluetooth: hci1 command 0x041b tx timeout [ 538.023007] Bluetooth: hci3 command 0x041b tx timeout [ 538.035194] Bluetooth: hci0 command 0x041b tx timeout [ 538.071531] lowmem_reserve[]: 0 0 0 0 0 [ 538.085312] Node 0 DMA: 9*4kB (UM) 10*8kB (U) 7*16kB (U) 5*32kB (U) 1*64kB (M) 1*128kB (M) 1*256kB (M) 2*512kB (UM) 1*1024kB (M) 0*2048kB 2*4096kB (UM) = 11076kB [ 538.103338] IPVS: ftp: loaded support on port[0] = 21 [ 538.123166] Node 0 DMA32: 1370*4kB (UE) 18671*8kB (UME) 13028*16kB (UME) 7791*32kB (UE) 1020*64kB (U) 56*128kB (UM) 4*256kB (UM) 2*512kB (UM) 0*1024kB 1*2048kB (U) 7*4096kB (U) = 717824kB [ 538.173671] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 538.207309] Node 1 Normal: 3744*4kB (UM) 3548*8kB (UM) 2838*16kB (UM) 2441*32kB (UM) 434*64kB (U) 52*128kB (U) 17*256kB (U) 6*512kB (U) 58*1024kB (U) 64*2048kB (U) 133*4096kB (U) = 943968kB [ 538.277142] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 538.312142] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 538.349962] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 538.378843] chnl_net:caif_netlink_parms(): no params data found [ 538.386189] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 538.388991] IPVS: ftp: loaded support on port[0] = 21 [ 538.410550] 25861 total pagecache pages [ 538.426185] 0 pages in swap cache [ 538.432767] Swap cache stats: add 0, delete 0, find 0/0 [ 538.448805] Free swap = 0kB [ 538.463278] Total swap = 0kB [ 538.474317] 2097051 pages RAM [ 538.487987] 0 pages HighMem/MovableOnly [ 538.500143] 363840 pages reserved [ 538.508365] 0 pages cma reserved [ 538.692183] chnl_net:caif_netlink_parms(): no params data found [ 538.879780] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.887432] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.909285] device bridge_slave_0 entered promiscuous mode [ 538.999462] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.008363] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.028528] device bridge_slave_1 entered promiscuous mode [ 539.065464] chnl_net:caif_netlink_parms(): no params data found [ 539.171753] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 539.217142] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 539.334482] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 539.341868] team0: Port device team_slave_0 added [ 539.367563] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.379589] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.404087] device bridge_slave_0 entered promiscuous mode [ 539.411443] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 539.434387] team0: Port device team_slave_1 added [ 539.439593] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.453196] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.460411] device bridge_slave_1 entered promiscuous mode [ 539.553428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 539.559718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 539.636790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 539.668714] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 539.697866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 539.704737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 539.765543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 539.804317] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 539.847268] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 539.858381] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.866099] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.883869] device bridge_slave_0 entered promiscuous mode [ 539.926795] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 539.938981] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.947031] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.963144] device bridge_slave_1 entered promiscuous mode [ 539.978906] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 539.997737] team0: Port device team_slave_0 added [ 540.038369] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 540.057544] team0: Port device team_slave_1 added [ 540.077748] Bluetooth: hci0 command 0x040f tx timeout [ 540.090736] Bluetooth: hci3 command 0x040f tx timeout [ 540.119271] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 540.127762] Bluetooth: hci1 command 0x040f tx timeout [ 540.448995] oom_reaper: reaped process 18784 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 540.488381] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 540.533447] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 540.538274] CPU: 1 PID: 7963 Comm: syz-fuzzer Not tainted 4.14.217-syzkaller #0 [ 540.548912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 540.563676] Call Trace: [ 540.566930] dump_stack+0x1b2/0x281 [ 540.572823] dump_header+0x178/0x82f [ 540.578259] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 540.585368] ? ___ratelimit+0x2cd/0x530 [ 540.591332] oom_kill_process.cold+0x10/0xb18 [ 540.598594] out_of_memory+0xe3e/0x1190 [ 540.605088] ? oom_killer_disable+0x1c0/0x1c0 [ 540.613205] ? mutex_trylock+0x152/0x1a0 [ 540.620325] __alloc_pages_nodemask+0x23e1/0x2720 [ 540.625546] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 540.632227] alloc_pages_current+0x155/0x260 [ 540.636722] filemap_fault+0xea3/0x1980 [ 540.641882] ext4_filemap_fault+0x84/0xb0 [ 540.647000] __do_fault+0xfa/0x380 [ 540.650885] __handle_mm_fault+0x2497/0x4620 [ 540.655364] ? vm_insert_page+0x7c0/0x7c0 [ 540.659494] ? lock_downgrade+0x740/0x740 [ 540.663828] handle_mm_fault+0x391/0x860 [ 540.667885] __do_page_fault+0x549/0xad0 [ 540.672035] ? spurious_fault+0x640/0x640 [ 540.676178] ? do_page_fault+0x60/0x500 [ 540.680136] ? page_fault+0x2f/0x50 [ 540.683740] page_fault+0x45/0x50 [ 540.687271] RIP: 0000:0xb358f8 [ 540.690438] RSP: 3a4b7ff3:000000c00003dec8 EFLAGS: 00438920 [ 540.709091] Mem-Info: [ 540.759854] active_anon:13476 inactive_anon:18922 isolated_anon:0 [ 540.759854] active_file:13 inactive_file:0 isolated_file:0 [ 540.759854] unevictable:0 dirty:0 writeback:0 unstable:0 [ 540.759854] slab_reclaimable:12401 slab_unreclaimable:114426 [ 540.759854] mapped:52979 shmem:19226 pagetables:798 bounce:0 [ 540.759854] free:15647 free_pcp:94 free_cma:0 [ 540.809625] Node 0 active_anon:53280kB inactive_anon:56904kB active_file:44kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:133400kB dirty:0kB writeback:0kB shmem:57992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 540.857881] Node 1 active_anon:624kB inactive_anon:18784kB active_file:8kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:78516kB dirty:0kB writeback:0kB shmem:18912kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 540.862935] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 540.903912] Node 0 [ 540.925715] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 540.929438] DMA free:11000kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 540.933147] CPU: 1 PID: 18784 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 540.960684] lowmem_reserve[]: [ 540.966768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 540.966772] Call Trace: [ 540.966796] dump_stack+0x1b2/0x281 [ 540.966811] warn_alloc.cold+0x96/0x1cc [ 540.969886] 0 [ 540.979945] ? zone_watermark_ok_safe+0x220/0x220 [ 540.979957] ? usleep_range+0x130/0x130 [ 540.979965] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 540.979987] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 540.982557] 2717 [ 540.986682] ? run_timer_softirq+0x5a0/0x5a0 [ 540.986702] __alloc_pages_nodemask+0x2127/0x2720 [ 540.990646] 2718 [ 540.992432] ? lock_acquire+0x170/0x3f0 [ 540.997255] 2718 [ 541.001214] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 541.006298] 2718 [ 541.011284] ? ion_page_pool_alloc+0x9e/0x1b0 [ 541.017730] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 541.022536] Node 0 [ 541.024591] alloc_pages_current+0x155/0x260 [ 541.024606] ion_page_pool_alloc+0x118/0x1b0 [ 541.028558] DMA32 free:18496kB min:36200kB low:45248kB high:54296kB active_anon:53280kB inactive_anon:56844kB active_file:140kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:8032kB pagetables:2756kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 541.030591] ion_system_heap_allocate+0x133/0x8c0 [ 541.035423] lowmem_reserve[]: [ 541.037472] ? ion_alloc+0x187/0x810 [ 541.041949] 0 [ 541.047379] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 541.047389] ? ion_system_contig_heap_create+0x130/0x130 [ 541.047397] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 541.047409] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 541.049619] 0 [ 541.054019] ion_alloc+0x204/0x810 [ 541.054036] ? ion_dma_buf_release+0x40/0x40 [ 541.058416] 0 [ 541.086597] ? __might_fault+0x177/0x1b0 [ 541.086611] ion_ioctl+0xea/0x1f0 [ 541.086623] ? ion_query_heaps+0x360/0x360 [ 541.091441] 0 [ 541.094527] ? lock_acquire+0x170/0x3f0 [ 541.094537] ? lock_downgrade+0x740/0x740 [ 541.094547] ? ion_query_heaps+0x360/0x360 [ 541.098492] 0 [ 541.100278] do_vfs_ioctl+0x75a/0xff0 [ 541.111129] ? ioctl_preallocate+0x1a0/0x1a0 [ 541.116144] Node 0 [ 541.120947] ? lock_downgrade+0x740/0x740 [ 541.120960] ? __fget+0x225/0x360 [ 541.122739] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 541.126253] ? do_vfs_ioctl+0xff0/0xff0 [ 541.126264] ? security_file_ioctl+0x83/0xb0 [ 541.126275] SyS_ioctl+0x7f/0xb0 [ 541.130659] lowmem_reserve[]: [ 541.132446] ? do_vfs_ioctl+0xff0/0xff0 [ 541.136491] 0 [ 541.139909] do_syscall_64+0x1d5/0x640 [ 541.144130] 0 [ 541.145907] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 541.149841] 0 0 [ 541.153983] RIP: 0033:0x45e219 [ 541.153988] RSP: 002b:00007f39dd445c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 541.153998] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 541.154005] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 541.158244] 0 [ 541.160023] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 541.168181] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 541.170395] Node 1 [ 541.174517] R13: 00007ffc799adfff R14: 00007f39dd4469c0 R15: 000000000119bf8c [ 541.183312] warn_alloc_show_mem: 2 callbacks suppressed [ 541.183316] Mem-Info: [ 541.219188] Normal free:27048kB min:53696kB low:67120kB high:80544kB active_anon:624kB inactive_anon:18784kB active_file:8kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:436kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 541.272855] active_anon:13471 inactive_anon:18922 isolated_anon:0 [ 541.272855] active_file:13 inactive_file:13 isolated_file:0 [ 541.272855] unevictable:0 dirty:0 writeback:0 unstable:0 [ 541.272855] slab_reclaimable:12401 slab_unreclaimable:114432 [ 541.272855] mapped:52963 shmem:19226 pagetables:797 bounce:0 [ 541.272855] free:14108 free_pcp:42 free_cma:0 [ 541.291828] lowmem_reserve[]: [ 541.306320] Node 0 active_anon:53260kB inactive_anon:56904kB active_file:44kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:133336kB dirty:0kB writeback:0kB shmem:57992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 541.338916] 0 0 0 0 0 [ 541.406534] Node 0 DMA: 1*4kB (M) 1*8kB (U) 6*16kB (U) 6*32kB (U) 1*64kB (M) 1*128kB (M) 1*256kB (M) 2*512kB (UM) 1*1024kB (M) 0*2048kB 2*4096kB (UM) = 10988kB [ 541.430707] Node 0 DMA32: 899*4kB (UME) 918*8kB (ME) 246*16kB (ME) 60*32kB (UME) 5*64kB (UM) 4*128kB (UM) 3*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18396kB [ 541.434813] Node 1 active_anon:624kB inactive_anon:18784kB active_file:8kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:78516kB dirty:0kB writeback:0kB shmem:18912kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 541.456841] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 541.509329] Node 1 Normal: 42*4kB (UM) 16*8kB (UM) 8*16kB (UM) 6*32kB (UM) 3*64kB (UM) 1*128kB (M) 2*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 1*2048kB (M) 5*4096kB (U) = 27048kB [ 541.509479] Node 0 [ 541.539395] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 541.544843] DMA free:10988kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 541.554002] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 541.597865] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 541.613448] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 541.618510] Node 0 DMA32 free:18396kB min:36200kB low:45248kB high:54296kB active_anon:53260kB inactive_anon:56844kB active_file:44kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:8032kB pagetables:2752kB bounce:0kB free_pcp:168kB local_pcp:136kB free_cma:0kB [ 541.660778] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 541.674212] 19252 total pagecache pages [ 541.678197] 0 pages in swap cache [ 541.681636] Swap cache stats: add 0, delete 0, find 0/0 [ 541.697598] Free swap = 0kB [ 541.700638] Total swap = 0kB [ 541.703836] 2097051 pages RAM [ 541.706929] 0 pages HighMem/MovableOnly [ 541.707047] lowmem_reserve[]: [ 541.710893] 363840 pages reserved [ 541.710899] 0 [ 541.721074] 0 pages cma reserved [ 541.730288] Out of memory (oom_kill_allocating_task): Kill process 7963 (syz-fuzzer) score 0 or sacrifice child [ 541.734108] 0 0 0 0 [ 541.746771] Killed process 18708 (syz-executor.2) total-vm:85024kB, anon-rss:1732kB, file-rss:4kB, shmem-rss:0kB [ 541.778340] oom_reaper: reaped process 18708 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 541.786698] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 541.822525] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 541.846643] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 541.851452] CPU: 1 PID: 7964 Comm: syz-fuzzer Not tainted 4.14.217-syzkaller #0 [ 541.858891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 541.868234] Call Trace: [ 541.870824] dump_stack+0x1b2/0x281 [ 541.874449] dump_header+0x178/0x82f [ 541.878157] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 541.883251] ? ___ratelimit+0x2cd/0x530 [ 541.887216] oom_kill_process.cold+0x10/0xb18 [ 541.891713] out_of_memory+0xe3e/0x1190 [ 541.895682] ? oom_killer_disable+0x1c0/0x1c0 [ 541.900256] ? mutex_trylock+0x152/0x1a0 [ 541.904315] __alloc_pages_nodemask+0x23e1/0x2720 [ 541.909161] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 541.914044] alloc_pages_current+0x155/0x260 [ 541.918533] filemap_fault+0xea3/0x1980 [ 541.922507] ext4_filemap_fault+0x84/0xb0 [ 541.926668] __do_fault+0xfa/0x380 [ 541.930197] __handle_mm_fault+0x2497/0x4620 [ 541.934601] ? vm_insert_page+0x7c0/0x7c0 [ 541.938746] ? sync_mm_rss+0xf2/0x160 [ 541.942537] handle_mm_fault+0x391/0x860 [ 541.946591] __do_page_fault+0x549/0xad0 [ 541.950725] ? spurious_fault+0x640/0x640 [ 541.954950] ? do_page_fault+0x60/0x500 [ 541.958916] ? page_fault+0x2f/0x50 [ 541.962534] page_fault+0x45/0x50 [ 541.965976] RIP: 0001:0xc0000541e0 [ 541.969498] RSP: 2e380:000000c00003fde0 EFLAGS: 00000000 [ 541.980028] lowmem_reserve[]: 0 0 0 0 0 [ 541.989702] Node 1 Normal free:27048kB min:53696kB low:67120kB high:80544kB active_anon:624kB inactive_anon:18784kB active_file:8kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:436kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 542.020534] Mem-Info: [ 542.020545] lowmem_reserve[]: 0 0 0 0 0 [ 542.029755] Node 0 DMA: 2*4kB (UM) 0*8kB 6*16kB (U) 6*32kB (U) 1*64kB (M) 1*128kB (M) 1*256kB (M) 2*512kB (UM) 1*1024kB (M) 0*2048kB 2*4096kB (UM) = 10984kB [ 542.032521] active_anon:13471 inactive_anon:18922 isolated_anon:0 [ 542.032521] active_file:0 inactive_file:3 isolated_file:0 [ 542.032521] unevictable:0 dirty:0 writeback:0 unstable:0 [ 542.032521] slab_reclaimable:12401 slab_unreclaimable:114432 [ 542.032521] mapped:52963 shmem:19226 pagetables:797 bounce:0 [ 542.032521] free:14108 free_pcp:81 free_cma:0 [ 542.049606] Node 0 DMA32: 899*4kB (UME) 918*8kB (ME) 246*16kB (ME) 61*32kB (UME) 5*64kB (UM) 4*128kB (UM) 3*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18428kB [ 542.098763] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 542.111949] Node 1 Normal: 42*4kB (UM) 16*8kB (UM) 8*16kB (UM) 7*32kB (UM) 3*64kB (UM) 1*128kB (M) 2*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 1*2048kB (M) 5*4096kB (U) = 27080kB [ 542.130236] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 542.145585] Node 0 active_anon:53260kB inactive_anon:56904kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:133336kB dirty:0kB writeback:0kB shmem:57992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 542.173841] Bluetooth: hci1 command 0x0419 tx timeout [ 542.181405] Bluetooth: hci3 command 0x0419 tx timeout [ 542.186685] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 542.197616] Bluetooth: hci0 command 0x0419 tx timeout [ 542.207028] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 542.218439] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 542.223653] Node 1 active_anon:624kB inactive_anon:18784kB active_file:8kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:78516kB dirty:0kB writeback:0kB shmem:18912kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 542.227261] 19252 total pagecache pages [ 542.260685] 0 pages in swap cache [ 542.264180] Swap cache stats: add 0, delete 0, find 0/0 [ 542.269538] Free swap = 0kB [ 542.272542] Total swap = 0kB [ 542.277971] 2097051 pages RAM [ 542.281072] 0 pages HighMem/MovableOnly [ 542.289222] 363840 pages reserved [ 542.292674] 0 pages cma reserved [ 542.302937] Node 0 DMA free:10988kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 542.393365] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 542.398470] Node 0 DMA32 free:217468kB min:36200kB low:45248kB high:54296kB active_anon:53260kB inactive_anon:56844kB active_file:92kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:8000kB pagetables:2752kB bounce:0kB free_pcp:320kB local_pcp:288kB free_cma:0kB [ 542.532729] lowmem_reserve[]: 0 0 0 0 0 [ 542.542753] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 542.568849] lowmem_reserve[]: 0 0 0 0 0 [ 542.572909] Node 1 Normal free:573000kB min:53696kB low:67120kB high:80544kB active_anon:624kB inactive_anon:18784kB active_file:8kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:436kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 542.601525] lowmem_reserve[]: 0 0 0 0 0 [ 542.642807] Node 0 DMA: 2*4kB (UM) 0*8kB 6*16kB (U) 6*32kB (U) 6*64kB (UM) 2*128kB (UM) 2*256kB (UM) 2*512kB (UM) 1*1024kB (M) 0*2048kB 2*4096kB (UM) = 11688kB [ 542.673292] Node 0 DMA32: 995*4kB (UMEH) 1598*8kB (UMEH) 2952*16kB (UMEH) 386*32kB (UMEH) 1628*64kB (UMH) 226*128kB (UM) 99*256kB (UM) 35*512kB (U) 23*1024kB (U) 1*2048kB (U) 0*4096kB = 278332kB [ 542.716157] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 542.746063] Node 1 Normal: 42*4kB (UM) 16*8kB (UM) 8*16kB (UM) 7*32kB (UM) 4948*64kB (UM) 452*128kB (UM) 159*256kB (UM) 87*512kB (UM) 72*1024kB (UM) 9*2048kB (UM) 5*4096kB (U) = 573064kB [ 542.769338] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 542.778474] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 542.783074] device hsr_slave_0 entered promiscuous mode [ 542.788834] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 542.818204] device hsr_slave_1 entered promiscuous mode [ 542.826074] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 542.827923] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 542.873618] 19844 total pagecache pages [ 542.882801] 0 pages in swap cache [ 542.882807] Swap cache stats: add 0, delete 0, find 0/0 [ 542.882810] Free swap = 0kB [ 542.882813] Total swap = 0kB [ 542.882819] 2097051 pages RAM [ 542.882823] 0 pages HighMem/MovableOnly [ 542.882826] 363840 pages reserved [ 542.882828] 0 pages cma reserved [ 542.882836] Out of memory (oom_kill_allocating_task): Kill process 7964 (syz-fuzzer) score 0 or sacrifice child [ 542.883333] Killed process 18710 (syz-executor.0) total-vm:85024kB, anon-rss:1732kB, file-rss:4kB, shmem-rss:0kB [ 542.984885] oom_reaper: reaped process 18710 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 543.028932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 543.047897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 543.189122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 543.261441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 543.290059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 543.364698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 543.434066] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 543.488674] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 543.579467] device hsr_slave_0 entered promiscuous mode [ 543.611333] device hsr_slave_1 entered promiscuous mode [ 543.651356] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 543.712816] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 543.863677] kworker/u4:3 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 [ 543.874525] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 543.888511] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 543.897099] CPU: 1 PID: 18784 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 543.905002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 543.913850] kworker/u4:3 cpuset= [ 543.914347] Call Trace: [ 543.914369] dump_stack+0x1b2/0x281 [ 543.914385] warn_alloc.cold+0x96/0x1cc [ 543.917936] / [ 543.920474] ? zone_watermark_ok_safe+0x220/0x220 [ 543.920499] __alloc_pages_nodemask+0x2127/0x2720 [ 543.939705] ? lock_acquire+0x170/0x3f0 [ 543.943691] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 543.944802] mems_allowed=0-1 [ 543.948531] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 543.957145] ? lock_release+0x441/0x870 [ 543.961125] ? __mutex_unlock_slowpath+0x75/0x770 [ 543.965975] alloc_pages_current+0x155/0x260 [ 543.970385] ion_page_pool_alloc+0x118/0x1b0 [ 543.974778] ion_system_heap_allocate+0x133/0x8c0 [ 543.979608] ? _raw_spin_unlock+0x29/0x40 [ 543.983831] ? _ion_heap_freelist_drain+0x6e/0x410 [ 543.988756] ? ion_system_contig_heap_create+0x130/0x130 [ 543.994200] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 543.999216] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 544.004059] ion_alloc+0x27a/0x810 [ 544.007612] ? ion_dma_buf_release+0x40/0x40 [ 544.012020] ? __might_fault+0x177/0x1b0 [ 544.016072] ion_ioctl+0xea/0x1f0 [ 544.019515] ? ion_query_heaps+0x360/0x360 [ 544.023737] ? lock_acquire+0x170/0x3f0 [ 544.027705] ? lock_downgrade+0x740/0x740 [ 544.031849] ? ion_query_heaps+0x360/0x360 [ 544.036080] do_vfs_ioctl+0x75a/0xff0 [ 544.039864] ? ioctl_preallocate+0x1a0/0x1a0 [ 544.044280] ? lock_downgrade+0x740/0x740 [ 544.048429] ? __fget+0x225/0x360 [ 544.051882] ? do_vfs_ioctl+0xff0/0xff0 [ 544.055856] ? security_file_ioctl+0x83/0xb0 [ 544.060282] SyS_ioctl+0x7f/0xb0 [ 544.063644] ? do_vfs_ioctl+0xff0/0xff0 [ 544.067616] do_syscall_64+0x1d5/0x640 [ 544.071500] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 544.076682] RIP: 0033:0x45e219 [ 544.079860] RSP: 002b:00007f39dd445c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 544.087556] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 544.094809] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 544.102058] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 544.109335] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 544.116583] R13: 00007ffc799adfff R14: 00007f39dd4469c0 R15: 000000000119bf8c [ 544.123848] CPU: 0 PID: 19259 Comm: kworker/u4:3 Not tainted 4.14.217-syzkaller #0 [ 544.127049] Mem-Info: [ 544.131559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 544.134030] active_anon:12598 inactive_anon:18919 isolated_anon:0 [ 544.134030] active_file:56 inactive_file:25 isolated_file:0 [ 544.134030] unevictable:0 dirty:0 writeback:0 unstable:0 [ 544.134030] slab_reclaimable:12397 slab_unreclaimable:114716 [ 544.134030] mapped:35595 shmem:19223 pagetables:729 bounce:0 [ 544.134030] free:19151 free_pcp:15 free_cma:0 [ 544.143303] Call Trace: [ 544.143327] dump_stack+0x1b2/0x281 [ 544.143340] dump_header+0x178/0x82f [ 544.143351] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 544.143362] ? ___ratelimit+0x2cd/0x530 [ 544.143382] oom_kill_process.cold+0x10/0xb18 [ 544.178592] Node 0 active_anon:49600kB inactive_anon:56904kB active_file:112kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:63856kB dirty:0kB writeback:0kB shmem:57992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 544.179094] ? lock_downgrade+0x740/0x740 [ 544.182739] Node 1 active_anon:792kB inactive_anon:18772kB active_file:112kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:78524kB dirty:0kB writeback:0kB shmem:18900kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 544.186419] out_of_memory+0x2dc/0x1190 [ 544.191487] Node 0 [ 544.195444] ? oom_killer_disable+0x1c0/0x1c0 [ 544.195454] ? mutex_trylock+0x152/0x1a0 [ 544.195465] __alloc_pages_nodemask+0x23e1/0x2720 [ 544.195483] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 544.195490] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 544.195499] ? finish_task_switch+0x178/0x610 [ 544.195507] ? finish_task_switch+0x14d/0x610 [ 544.201761] DMA free:10988kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 544.227669] alloc_pages_current+0x155/0x260 [ 544.227681] ? put_timespec64+0xf0/0xf0 [ 544.227689] get_zeroed_page+0x19/0x50 [ 544.227697] __pud_alloc+0x33/0x200 [ 544.227705] __handle_mm_fault+0x1012/0x4620 [ 544.227714] ? vm_insert_page+0x7c0/0x7c0 [ 544.227725] ? touch_atime+0xce/0x250 [ 544.227741] handle_mm_fault+0x391/0x860 [ 544.227754] __get_user_pages+0x445/0x11d0 [ 544.232230] lowmem_reserve[]: [ 544.259032] ? follow_page_mask+0x18a0/0x18a0 [ 544.259047] get_user_pages_remote+0x1c5/0x3c0 [ 544.259061] copy_strings.isra.0+0x44f/0x8a0 [ 544.259075] ? open_exec+0x60/0x60 [ 544.259081] ? prepare_binprm+0x5c0/0x7e0 [ 544.259091] copy_strings_kernel+0x9e/0x110 [ 544.259099] do_execveat_common+0xd96/0x1f30 [ 544.259110] ? copy_strings_kernel+0x110/0x110 [ 544.259121] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 544.259133] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 544.265012] 0 [ 544.265325] do_execve+0x33/0x50 [ 544.269790] 2717 [ 544.273934] call_usermodehelper_exec_async+0x2ed/0x510 [ 544.273942] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 544.273954] ret_from_fork+0x24/0x30 [ 544.295768] Mem-Info: [ 544.305766] 2718 [ 544.340389] active_anon:12605 inactive_anon:18918 isolated_anon:0 [ 544.340389] active_file:16 inactive_file:16 isolated_file:0 [ 544.340389] unevictable:0 dirty:0 writeback:0 unstable:0 [ 544.340389] slab_reclaimable:12397 slab_unreclaimable:114716 [ 544.340389] mapped:35584 shmem:19219 pagetables:723 bounce:0 [ 544.340389] free:19291 free_pcp:15 free_cma:0 [ 544.346496] 2718 [ 544.354273] Node 0 active_anon:49564kB inactive_anon:56904kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:63820kB dirty:0kB writeback:0kB shmem:57980kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 544.355442] 2718 [ 544.359696] Node 1 active_anon:856kB inactive_anon:18768kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:78516kB dirty:0kB writeback:0kB shmem:18896kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 544.379103] Node 0 [ 544.380322] Node 0 [ 544.386542] DMA free:10988kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 544.395630] DMA32 free:31076kB min:36200kB low:45248kB high:54296kB active_anon:49564kB inactive_anon:56844kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7936kB pagetables:2424kB bounce:0kB free_pcp:60kB local_pcp:60kB free_cma:0kB [ 544.399323] lowmem_reserve[]: [ 544.406162] lowmem_reserve[]: [ 544.410911] 0 [ 544.411918] 0 [ 544.413726] 2717 2718 2718 2718 [ 544.413741] Node 0 DMA32 free:31076kB min:36200kB low:45248kB high:54296kB active_anon:49564kB inactive_anon:56844kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7936kB pagetables:2424kB bounce:0kB free_pcp:60kB local_pcp:0kB free_cma:0kB [ 544.413757] lowmem_reserve[]: 0 0 0 0 0 [ 544.413810] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 544.413825] lowmem_reserve[]: 0 [ 544.422240] 0 [ 544.429867] 0 [ 544.438742] 0 [ 544.483819] 0 [ 544.511012] 0 [ 544.539889] 0 [ 544.567003] 0 [ 544.595603] 0 [ 544.674381] Node 0 [ 544.679793] Node 1 [ 544.680157] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 544.682376] Normal free:35204kB min:53696kB low:67120kB high:80544kB active_anon:856kB inactive_anon:18768kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:468kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 544.696649] lowmem_reserve[]: [ 544.714670] lowmem_reserve[]: 0 0 0 0 0 [ 544.750616] 0 0 [ 544.751174] Node 0 DMA: 1*4kB (M) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (M) 1*128kB (M) 2*256kB (UM) 2*512kB (UM) 1*1024kB (M) 0*2048kB 2*4096kB (UM) = 10988kB [ 544.756582] 0 [ 544.767788] Node 0 DMA32: 981*4kB (UMEH) 988*8kB (UMEH) 289*16kB (UMEH) 89*32kB (UMEH) 24*64kB (UMH) 12*128kB (UM) 8*256kB (UM) 11*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 31076kB [ 544.767853] Node 0 Normal: 0*4kB 0*8kB [ 544.781680] 0 [ 544.791334] 0*16kB [ 544.792011] 0 [ 544.793198] 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 544.793228] Node 1 Normal: 105*4kB (UM) 44*8kB (UM) 32*16kB (UM) 28*32kB (UM) 26*64kB (UM) 21*128kB (UM) 12*256kB (UM) 50*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 35204kB [ 544.793292] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 544.793297] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 544.793304] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 544.825545] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 544.841496] Node 1 [ 544.852117] 19251 total pagecache pages [ 544.861986] 0 pages in swap cache [ 544.868221] Normal free:35204kB min:53696kB low:67120kB high:80544kB active_anon:856kB inactive_anon:18768kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:468kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 544.870861] Swap cache stats: add 0, delete 0, find 0/0 [ 544.908394] lowmem_reserve[]: 0 0 0 0 0 [ 544.910129] Free swap = 0kB [ 544.915574] Total swap = 0kB [ 544.917609] Node 0 DMA: 1*4kB (M) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (M) 1*128kB (M) 2*256kB (UM) 2*512kB (UM) 1*1024kB (M) 0*2048kB 2*4096kB (UM) = 10988kB [ 544.918654] 2097051 pages RAM [ 544.918661] 0 pages HighMem/MovableOnly [ 544.943808] Node 0 DMA32: 981*4kB (UMEH) 988*8kB (UMEH) 289*16kB (UMEH) 89*32kB (UMEH) 24*64kB (UMH) 12*128kB (UM) 8*256kB (UM) 11*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 31076kB [ 544.947311] 363840 pages reserved [ 544.971991] 0 pages cma reserved [ 544.972351] Node 0 [ 544.975408] Out of memory: Kill process 18765 (syz-executor.3) score 1005 or sacrifice child [ 544.975632] Killed process 18767 (syz-executor.3) total-vm:93348kB, anon-rss:2204kB, file-rss:34816kB, shmem-rss:0kB [ 544.977700] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 545.018659] oom_reaper: reaped process 18767 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 545.021995] Node 1 Normal: 105*4kB (UM) 44*8kB (UM) 32*16kB (UM) 28*32kB (UM) 26*64kB (UM) 21*128kB (UM) 12*256kB (UM) 50*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 35204kB [ 545.064357] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 545.075961] kworker/1:4 invoked oom-killer: gfp_mask=0x14142c0(GFP_KERNEL|__GFP_NOWARN|__GFP_COMP|__GFP_NOMEMALLOC), nodemask=(null), order=1, oom_score_adj=0 [ 545.080501] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 545.092527] kworker/1:4 cpuset=/ mems_allowed=0-1 [ 545.104838] CPU: 1 PID: 16711 Comm: kworker/1:4 Not tainted 4.14.217-syzkaller #0 [ 545.112478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 545.112858] syz-executor.3: page allocation failure: order:0 [ 545.121860] Workqueue: events linkwatch_event [ 545.127793] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 545.132222] Call Trace: [ 545.141079] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 545.143610] dump_stack+0x1b2/0x281 [ 545.143624] dump_header+0x178/0x82f [ 545.150691] (null) [ 545.154299] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 545.154310] ? ___ratelimit+0x2cd/0x530 [ 545.154320] oom_kill_process.cold+0x10/0xb18 [ 545.158105] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 545.160228] ? lock_downgrade+0x740/0x740 [ 545.165352] syz-executor.3 cpuset= [ 545.169289] out_of_memory+0x2dc/0x1190 [ 545.173776] 19251 total pagecache pages [ 545.182313] ? oom_killer_disable+0x1c0/0x1c0 [ 545.186465] / [ 545.189964] ? mutex_trylock+0x152/0x1a0 [ 545.193930] mems_allowed=0-1 [ 545.197866] __alloc_pages_nodemask+0x23e1/0x2720 [ 545.202442] 0 pages in swap cache [ 545.204037] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 545.208109] Swap cache stats: add 0, delete 0, find 0/0 [ 545.211193] ? kthread+0x30d/0x420 [ 545.232436] Free swap = 0kB [ 545.233231] ? ret_from_fork+0x24/0x30 [ 545.236220] Total swap = 0kB [ 545.240092] ? mark_held_locks+0xa6/0xf0 [ 545.243130] 2097051 pages RAM [ 545.247166] ? cache_grow_begin+0x41/0x630 [ 545.250240] 0 pages HighMem/MovableOnly [ 545.254543] cache_grow_begin+0x91/0x630 [ 545.254552] ? cache_grow_begin+0x91/0x630 [ 545.254564] fallback_alloc+0x207/0x2c0 [ 545.270707] kmem_cache_alloc_node_trace+0xed/0x400 [ 545.275704] __kmalloc_node_track_caller+0x38/0x70 [ 545.280614] __alloc_skb+0x96/0x510 [ 545.282429] 363840 pages reserved [ 545.284225] rtmsg_ifinfo_build_skb+0x65/0x130 [ 545.287655] 0 pages cma reserved [ 545.292228] rtmsg_ifinfo+0x68/0x100 [ 545.299272] netdev_state_change+0xde/0xf0 [ 545.303515] ? netdev_upper_dev_unlink+0x200/0x200 [ 545.308451] linkwatch_do_dev+0x8a/0xf0 [ 545.312416] __linkwatch_run_queue+0x260/0x480 [ 545.316988] ? linkwatch_fire_event+0x1a0/0x1a0 [ 545.321641] linkwatch_event+0x3c/0x50 [ 545.325531] process_one_work+0x793/0x14a0 [ 545.329750] ? work_busy+0x320/0x320 [ 545.333445] ? worker_thread+0x158/0xff0 [ 545.337490] ? _raw_spin_unlock_irq+0x24/0x80 [ 545.341964] worker_thread+0x5cc/0xff0 [ 545.345849] ? rescuer_thread+0xc80/0xc80 [ 545.349977] kthread+0x30d/0x420 [ 545.353810] ? kthread_create_on_node+0xd0/0xd0 [ 545.358462] ret_from_fork+0x24/0x30 [ 545.362168] CPU: 0 PID: 18767 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 545.364244] Mem-Info: [ 545.370068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 545.372528] active_anon:12072 inactive_anon:18918 isolated_anon:0 [ 545.372528] active_file:9 inactive_file:23 isolated_file:0 [ 545.372528] unevictable:0 dirty:0 writeback:0 unstable:0 [ 545.372528] slab_reclaimable:12389 slab_unreclaimable:114708 [ 545.372528] mapped:35584 shmem:19219 pagetables:723 bounce:0 [ 545.372528] free:13934 free_pcp:78 free_cma:0 [ 545.381944] Call Trace: [ 545.416990] Node 0 active_anon:47432kB inactive_anon:56904kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:63820kB dirty:0kB writeback:0kB shmem:57980kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 545.417587] dump_stack+0x1b2/0x281 [ 545.446910] Node 1 active_anon:856kB inactive_anon:18768kB active_file:4kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:78516kB dirty:0kB writeback:0kB shmem:18896kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 545.448759] warn_alloc.cold+0x96/0x1cc [ 545.477756] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 545.479827] ? zone_watermark_ok_safe+0x220/0x220 [ 545.479843] ? usleep_range+0x130/0x130 [ 545.507818] lowmem_reserve[]: [ 545.510859] ? try_to_free_pages+0x23f/0x6e0 [ 545.514862] 0 [ 545.517895] ? _find_next_bit+0xdb/0x100 [ 545.522269] 2717 [ 545.524057] ? run_timer_softirq+0x5a0/0x5a0 [ 545.524075] __alloc_pages_nodemask+0x2127/0x2720 [ 545.524100] ? lock_acquire+0x170/0x3f0 [ 545.524114] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 545.524130] ? ion_page_pool_alloc+0x9e/0x1b0 [ 545.529863] 2718 [ 545.530214] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 545.534628] 2718 [ 545.539415] ? __sanitizer_cov_trace_pc+0x41/0x50 [ 545.545069] 2718 [ 545.548192] alloc_pages_current+0x155/0x260 [ 545.554724] ion_page_pool_alloc+0x118/0x1b0 [ 545.560171] Node 0 [ 545.562218] ion_system_heap_allocate+0x133/0x8c0 [ 545.568858] DMA32 free:17996kB min:36200kB low:45248kB high:54296kB active_anon:47432kB inactive_anon:56844kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7936kB pagetables:2424kB bounce:0kB free_pcp:192kB local_pcp:60kB free_cma:0kB [ 545.569078] ? ion_alloc+0x187/0x810 [ 545.573553] lowmem_reserve[]: [ 545.577905] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 545.580130] 0 [ 545.584963] ? ion_system_contig_heap_create+0x130/0x130 [ 545.584974] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 545.584986] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 545.584997] ion_alloc+0x204/0x810 [ 545.585011] ? ion_dma_buf_release+0x40/0x40 [ 545.585022] ? __might_fault+0x177/0x1b0 [ 545.585034] ion_ioctl+0xea/0x1f0 [ 545.585043] ? ion_query_heaps+0x360/0x360 [ 545.585057] ? lock_acquire+0x170/0x3f0 [ 545.585069] ? lock_downgrade+0x740/0x740 [ 545.616315] 0 [ 545.618181] ? ion_query_heaps+0x360/0x360 [ 545.621682] 0 0 [ 545.627122] do_vfs_ioctl+0x75a/0xff0 [ 545.627134] ? ioctl_preallocate+0x1a0/0x1a0 [ 545.627144] ? lock_downgrade+0x740/0x740 [ 545.627157] ? __fget+0x225/0x360 [ 545.627167] ? do_vfs_ioctl+0xff0/0xff0 [ 545.628941] 0 [ 545.634374] ? security_file_ioctl+0x83/0xb0 [ 545.634384] SyS_ioctl+0x7f/0xb0 [ 545.634393] ? do_vfs_ioctl+0xff0/0xff0 [ 545.634405] do_syscall_64+0x1d5/0x640 [ 545.634423] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 545.634432] RIP: 0033:0x45e219 [ 545.634436] RSP: 002b:00007f1c98502c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 545.634446] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 545.634451] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 545.634455] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 545.634462] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 545.644275] R13: 00007ffef867e34f R14: 00007f1c985039c0 R15: 000000000119bf8c [ 545.657655] syz-executor.1: [ 545.661409] Node 0 [ 545.673349] page allocation failure: order:0 [ 545.676252] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 545.678200] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 545.680153] lowmem_reserve[]: [ 545.701657] (null) [ 545.702451] 0 [ 545.713008] syz-executor.1 cpuset= [ 545.714904] 0 [ 545.717504] / [ 545.722759] 0 [ 545.739500] mems_allowed=0-1 [ 545.742421] 0 [ 545.755264] CPU: 0 PID: 18784 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 545.755941] 0 [ 545.762785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 545.762790] Call Trace: [ 545.762814] dump_stack+0x1b2/0x281 [ 545.762828] warn_alloc.cold+0x96/0x1cc [ 545.762841] ? zone_watermark_ok_safe+0x220/0x220 [ 545.762852] ? usleep_range+0x130/0x130 [ 545.762863] ? try_to_free_pages+0x23f/0x6e0 [ 545.773125] ? _find_next_bit+0xdb/0x100 [ 545.773136] ? run_timer_softirq+0x5a0/0x5a0 [ 545.773153] __alloc_pages_nodemask+0x2127/0x2720 [ 545.773170] ? lock_acquire+0x170/0x3f0 [ 545.773184] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 545.773197] ? ion_page_pool_alloc+0x9e/0x1b0 [ 545.773212] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 545.777160] Node 1 [ 545.779838] ? lock_release+0x441/0x870 [ 545.806939] Normal free:26772kB min:53696kB low:67120kB high:80544kB active_anon:856kB inactive_anon:18768kB active_file:4kB inactive_file:60kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:468kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 545.812287] alloc_pages_current+0x155/0x260 [ 545.815401] lowmem_reserve[]: [ 545.817503] ion_page_pool_alloc+0x118/0x1b0 [ 545.819268] 0 [ 545.822794] ion_system_heap_allocate+0x133/0x8c0 [ 545.822808] ? _raw_spin_unlock+0x29/0x40 [ 545.822817] ? _ion_heap_freelist_drain+0x6e/0x410 [ 545.822826] ? ion_system_contig_heap_create+0x130/0x130 [ 545.822837] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 545.822848] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 545.822858] ion_alloc+0x27a/0x810 [ 545.822873] ? ion_dma_buf_release+0x40/0x40 [ 545.826334] 0 [ 545.826351] ? __might_fault+0x177/0x1b0 [ 545.828128] 0 [ 545.831224] ion_ioctl+0xea/0x1f0 [ 545.833057] 0 [ 545.840866] ? ion_query_heaps+0x360/0x360 [ 545.844404] 0 [ 545.851998] ? lock_acquire+0x170/0x3f0 [ 545.858179] ? lock_downgrade+0x740/0x740 [ 545.862124] Node 0 [ 545.867317] ? ion_query_heaps+0x360/0x360 [ 545.867329] do_vfs_ioctl+0x75a/0xff0 [ 545.867340] ? ioctl_preallocate+0x1a0/0x1a0 [ 545.867347] ? lock_downgrade+0x740/0x740 [ 545.867360] ? __fget+0x225/0x360 [ 545.867369] ? do_vfs_ioctl+0xff0/0xff0 [ 545.867379] ? security_file_ioctl+0x83/0xb0 [ 545.867389] SyS_ioctl+0x7f/0xb0 [ 545.873075] DMA: [ 545.875734] ? do_vfs_ioctl+0xff0/0xff0 [ 545.879847] 2*4kB [ 545.884167] do_syscall_64+0x1d5/0x640 [ 545.884186] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 545.884195] RIP: 0033:0x45e219 [ 545.884200] RSP: 002b:00007f39dd445c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 545.884209] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 545.884217] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 545.889041] (UM) [ 545.893009] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 545.893014] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 545.893018] R13: 00007ffc799adfff R14: 00007f39dd4469c0 R15: 000000000119bf8c [ 545.909082] Mem-Info: [ 545.910093] 0*8kB [ 545.923492] active_anon:12072 inactive_anon:18918 isolated_anon:0 [ 545.923492] active_file:9 inactive_file:23 isolated_file:0 [ 545.923492] unevictable:0 dirty:0 writeback:0 unstable:0 [ 545.923492] slab_reclaimable:12389 slab_unreclaimable:114708 [ 545.923492] mapped:35584 shmem:19219 pagetables:723 bounce:0 [ 545.923492] free:13934 free_pcp:74 free_cma:0 [ 545.942129] 1*16kB [ 545.962349] Node 0 active_anon:47432kB inactive_anon:56904kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:63820kB dirty:0kB writeback:0kB shmem:57980kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 545.966281] (U) [ 545.971155] Node 1 active_anon:856kB inactive_anon:18768kB active_file:4kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:78516kB dirty:0kB writeback:0kB shmem:18896kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 545.976629] 0*32kB 1*64kB (M) 1*128kB (M) 2*256kB (UM) 2*512kB (UM) 1*1024kB (M) 0*2048kB 2*4096kB (UM) = 10968kB [ 545.976675] Node 0 DMA32: 897*4kB (MEH) 925*8kB (MEH) 252*16kB (UMEH) 65*32kB (UMEH) 8*64kB (UH) 3*128kB (U) 0*256kB 0*512kB 0*1024kB [ 545.996782] Node 0 [ 546.000485] 0*2048kB [ 546.002285] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 546.005734] 0*4096kB = 17996kB [ 546.005742] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 546.005785] Node 1 Normal: 41*4kB (M) 16*8kB (M) 9*16kB (M) 10*32kB (UM) 5*64kB (UM) 3*128kB (M) 3*256kB (M) 48*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26804kB [ 546.005854] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 546.005858] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 546.005863] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 546.005868] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 546.005872] 19251 total pagecache pages [ 546.005882] 0 pages in swap cache [ 546.020532] lowmem_reserve[]: [ 546.032423] Swap cache stats: add 0, delete 0, find 0/0 [ 546.106652] 0 [ 546.212436] Free swap = 0kB [ 546.492688] 2717 2718 2718 2718 [ 546.496142] Node 0 DMA32 free:183052kB min:36200kB low:45248kB high:54296kB active_anon:47712kB inactive_anon:56844kB active_file:220kB inactive_file:9344kB unevictable:0kB writepending:148kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:8000kB pagetables:2568kB bounce:0kB free_pcp:648kB local_pcp:520kB free_cma:0kB [ 546.592370] lowmem_reserve[]: 0 0 0 0 0 [ 546.596443] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 546.632452] Total swap = 0kB [ 546.635753] 2097051 pages RAM [ 546.638853] 0 pages HighMem/MovableOnly [ 546.652414] 363840 pages reserved [ 546.656025] 0 pages cma reserved [ 546.656377] lowmem_reserve[]: [ 546.659382] Out of memory: Kill process 18782 (syz-executor.4) score 1005 or sacrifice child [ 546.659385] 0 0 [ 546.672639] Killed process 18785 (syz-executor.4) total-vm:93348kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB [ 546.685902] 0 0 0 [ 546.688121] Node 1 Normal free:182236kB min:53696kB low:67120kB high:80544kB active_anon:856kB inactive_anon:18768kB active_file:28kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:468kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 546.735058] oom_reaper: reaped process 18785 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 546.766822] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 546.789257] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 546.794560] CPU: 1 PID: 18767 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 546.802450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 546.811812] Call Trace: [ 546.814415] dump_stack+0x1b2/0x281 [ 546.818068] warn_alloc.cold+0x96/0x1cc [ 546.822065] ? zone_watermark_ok_safe+0x220/0x220 [ 546.822333] lowmem_reserve[]: 0 0 0 0 [ 546.826940] __alloc_pages_nodemask+0x2127/0x2720 [ 546.826958] ? lock_acquire+0x170/0x3f0 [ 546.830739] 0 [ 546.835569] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 546.835587] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 546.835596] ? __mutex_unlock_slowpath+0x75/0x770 [ 546.835615] ? __list_del_entry_valid+0xb3/0xf0 [ 546.835628] alloc_pages_current+0x155/0x260 [ 546.835646] ion_page_pool_alloc+0x118/0x1b0 [ 546.857286] ion_system_heap_allocate+0x133/0x8c0 [ 546.861924] Node 0 [ 546.866321] ? _raw_spin_unlock+0x29/0x40 [ 546.866329] ? _ion_heap_freelist_drain+0x6e/0x410 [ 546.866338] ? ion_system_contig_heap_create+0x130/0x130 [ 546.866349] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 546.866365] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 546.892330] DMA: [ 546.892391] ion_alloc+0x27a/0x810 [ 546.897381] 2*4kB [ 546.902219] ? ion_dma_buf_release+0x40/0x40 [ 546.912315] (UM) 0*8kB [ 546.914347] ? __might_fault+0x177/0x1b0 [ 546.914365] ion_ioctl+0xea/0x1f0 [ 546.916928] 1*16kB [ 546.920976] ? ion_query_heaps+0x360/0x360 [ 546.931325] ? lock_acquire+0x170/0x3f0 [ 546.935303] ? lock_downgrade+0x740/0x740 [ 546.939453] ? ion_query_heaps+0x360/0x360 [ 546.942306] (U) 0*32kB [ 546.943685] do_vfs_ioctl+0x75a/0xff0 [ 546.943698] ? ioctl_preallocate+0x1a0/0x1a0 [ 546.946295] 6*64kB [ 546.950079] ? lock_downgrade+0x740/0x740 [ 546.960836] ? __fget+0x225/0x360 [ 546.964295] ? do_vfs_ioctl+0xff0/0xff0 [ 546.968273] ? security_file_ioctl+0x83/0xb0 [ 546.972311] (UM) 1*128kB [ 546.974074] SyS_ioctl+0x7f/0xb0 [ 546.974083] ? do_vfs_ioctl+0xff0/0xff0 [ 546.977104] (M) [ 546.980461] do_syscall_64+0x1d5/0x640 [ 546.990291] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 546.995481] RIP: 0033:0x45e219 [ 546.998669] RSP: 002b:00007f1c98502c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 547.002312] 3*256kB [ 547.006373] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 547.006379] (UM) [ 547.008685] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 547.022296] 3*512kB [ 547.026724] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 547.026731] (UM) [ 547.029035] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 547.046564] R13: 00007ffef867e34f R14: 00007f1c985039c0 R15: 000000000119bf8c [ 547.052302] 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 11032kB [ 547.061040] warn_alloc_show_mem: 1 callbacks suppressed [ 547.061043] Mem-Info: [ 547.071239] active_anon:11634 inactive_anon:18918 isolated_anon:0 [ 547.071239] active_file:69 inactive_file:2390 isolated_file:0 [ 547.071239] unevictable:0 dirty:29 writeback:0 unstable:0 [ 547.071239] slab_reclaimable:12339 slab_unreclaimable:117274 [ 547.071239] mapped:54744 shmem:19219 pagetables:816 bounce:0 [ 547.071239] free:72397 free_pcp:364 free_cma:0 [ 547.078957] Node 0 [ 547.111074] Node 0 active_anon:45660kB inactive_anon:56904kB active_file:328kB inactive_file:9504kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:140480kB dirty:208kB writeback:0kB shmem:57980kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 547.149573] DMA32: 1251*4kB (UMEH) 2185*8kB (UEH) 5483*16kB (UMEH) 2688*32kB (UMEH) 382*64kB (UMH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 220676kB [ 547.151132] Node 1 active_anon:856kB inactive_anon:18768kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:78516kB dirty:8kB writeback:0kB shmem:18896kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 547.182292] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 547.206617] Node 0 DMA free:11032kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 547.232285] Node 1 Normal: 1937*4kB (UM) 1783*8kB (UM) 1413*16kB (UM) 1357*32kB (UM) 441*64kB (UM) 33*128kB (UM) 22*256kB (UM) 49*512kB (UM) 0*1024kB 0*2048kB 0*4096kB [ 547.236012] lowmem_reserve[]: [ 547.236529] = 151212kB [ 547.253784] 0 2717 2718 2718 2718 [ 547.267909] Node 0 DMA32 free:221364kB min:36200kB low:45248kB high:54296kB active_anon:45760kB inactive_anon:56844kB active_file:428kB inactive_file:9804kB unevictable:0kB writepending:208kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:8096kB pagetables:2792kB bounce:0kB free_pcp:752kB local_pcp:128kB free_cma:0kB [ 547.272310] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 547.299358] lowmem_reserve[]: 0 0 0 0 0 [ 547.315428] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 547.348027] lowmem_reserve[]: 0 0 0 0 0 [ 547.352067] Node 1 Normal free:212308kB min:53696kB low:67120kB high:80544kB active_anon:856kB inactive_anon:18768kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:468kB bounce:0kB free_pcp:664kB local_pcp:0kB free_cma:0kB [ 547.364587] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 547.388574] lowmem_reserve[]: [ 547.393646] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 547.393654] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 547.393661] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 547.393665] 21843 total pagecache pages [ 547.393679] 0 pages in swap cache [ 547.399236] 0 [ 547.412271] Swap cache stats: add 0, delete 0, find 0/0 [ 547.418874] 0 0 0 0 [ 547.442378] Free swap = 0kB [ 547.444442] Node 0 [ 547.447390] Total swap = 0kB [ 547.447396] DMA: [ 547.449609] 2097051 pages RAM [ 547.459644] 0 pages HighMem/MovableOnly [ 547.460335] 2*4kB [ 547.463676] 363840 pages reserved [ 547.463679] 0 pages cma reserved [ 547.504759] (UM) 0*8kB 1*16kB (U) 0*32kB 6*64kB (UM) 1*128kB (M) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 11032kB [ 547.550675] Node 0 DMA32: 1157*4kB (UEH) 2214*8kB (UMEH) 5481*16kB (UEH) 2691*32kB (UEH) 631*64kB (UMH) 1*128kB (M) 0*256kB 1*512kB (M) 25*1024kB (UM) 0*2048kB 0*4096kB = 262772kB [ 547.573915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.589140] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 547.607793] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 547.614159] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 547.629007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 547.637704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 547.651899] Node 1 Normal: 2234*4kB (UM) 2085*8kB (UM) 1708*16kB (UM) 1652*32kB (UM) 3854*64kB (UM) 62*128kB (UM) 35*256kB (UM) 63*512kB (UM) 94*1024kB (U) 18*2048kB (U) 12*4096kB (U) = 583888kB [ 547.679822] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 547.687779] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 547.700420] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.708916] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 547.727056] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 547.736875] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 547.746534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 547.758795] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 547.772025] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 547.785572] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.791974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 547.799402] 22484 total pagecache pages [ 547.803533] 0 pages in swap cache [ 547.806988] Swap cache stats: add 0, delete 0, find 0/0 [ 547.815572] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 547.826142] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 547.836864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 547.847177] Free swap = 0kB [ 547.850215] Total swap = 0kB [ 547.857860] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 547.866530] 2097051 pages RAM [ 547.869649] 0 pages HighMem/MovableOnly [ 547.876856] 363840 pages reserved [ 547.880351] 0 pages cma reserved [ 547.884843] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.891268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 547.918718] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 547.938683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 547.959181] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 547.976952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 548.003561] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 548.010507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 548.035122] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 548.057526] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 548.077529] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 548.093134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 548.101015] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 548.134078] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 548.166242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 548.193428] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 548.226335] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 548.253497] device bridge_slave_1 left promiscuous mode [ 548.259377] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.283635] device bridge_slave_0 left promiscuous mode [ 548.302445] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.310244] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 548.333848] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 548.341943] device bridge_slave_1 left promiscuous mode [ 548.362652] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.369918] device bridge_slave_0 left promiscuous mode [ 548.382391] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.422235] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 548.447273] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 548.496952] bond0 (unregistering): Released all slaves [ 548.517171] device hsr_slave_1 left promiscuous mode [ 548.542463] device hsr_slave_0 left promiscuous mode [ 548.573288] team0 (unregistering): Port device team_slave_1 removed [ 548.595447] team0 (unregistering): Port device team_slave_0 removed [ 548.609943] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 548.637917] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 548.710191] bond0 (unregistering): Released all slaves [ 548.816194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 548.831803] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 548.849540] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 548.882808] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 548.890305] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 548.912340] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 548.926285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 549.232757] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 549.252874] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 549.260035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 549.272762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 549.442981] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 549.463138] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 549.476316] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 549.498948] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 549.515662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 549.535496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 549.554664] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 549.562130] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 549.584284] device veth0_vlan entered promiscuous mode [ 549.605278] device veth1_vlan entered promiscuous mode [ 549.623434] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 549.643526] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 549.677049] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 549.693644] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 549.700595] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 549.712764] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 549.721633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 549.741501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 549.751761] device veth0_macvtap entered promiscuous mode [ 549.763495] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 549.785382] device veth1_macvtap entered promiscuous mode [ 549.806440] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 549.829042] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 549.852241] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 549.860253] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 549.874865] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 549.887444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 549.898903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.911719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 549.925464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.937464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 549.948429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.962855] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 549.969865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 549.982201] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 550.002767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 550.024888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 550.042868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.062860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 550.094460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.115283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 550.135054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.163110] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 550.170441] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 550.214492] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 550.232714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 550.390171] IPVS: ftp: loaded support on port[0] = 21 [ 550.509313] IPVS: ftp: loaded support on port[0] = 21 [ 550.734395] chnl_net:caif_netlink_parms(): no params data found [ 550.792528] Bluetooth: hci0 command 0x0409 tx timeout [ 550.792646] Bluetooth: hci1 command 0x0409 tx timeout [ 551.010944] chnl_net:caif_netlink_parms(): no params data found [ 551.094723] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.109397] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.131116] device bridge_slave_0 entered promiscuous mode [ 551.227121] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.235869] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.253615] device bridge_slave_1 entered promiscuous mode [ 551.347389] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 551.378907] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 551.487172] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 551.503399] team0: Port device team_slave_0 added [ 551.518788] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.526695] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.565255] device bridge_slave_0 entered promiscuous mode [ 551.585112] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 551.598522] team0: Port device team_slave_1 added [ 551.610496] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.619311] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.635819] device bridge_slave_1 entered promiscuous mode [ 551.686224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 551.693200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 551.741915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 551.773702] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 551.780413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 551.839778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 551.879789] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 551.900984] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 551.923716] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 551.936689] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 552.007639] device hsr_slave_0 entered promiscuous mode [ 552.021404] device hsr_slave_1 entered promiscuous mode [ 552.034406] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 552.044144] team0: Port device team_slave_0 added [ 552.055118] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 552.064235] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 552.096227] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 552.104837] team0: Port device team_slave_1 added [ 552.157857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 552.168463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 552.225919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 552.267673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 552.274083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 552.321843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 552.353276] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 552.363961] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 552.427581] device hsr_slave_0 entered promiscuous mode [ 552.441363] device hsr_slave_1 entered promiscuous mode [ 552.454082] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 552.463382] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 552.659867] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 552.683076] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 552.778891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 552.797015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 552.807010] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 552.837454] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 552.847329] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 552.864357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 552.871624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 552.887145] Bluetooth: hci1 command 0x041b tx timeout [ 552.893542] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 552.899671] Bluetooth: hci0 command 0x041b tx timeout [ 552.907290] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 552.922098] 8021q: adding VLAN 0 to HW filter on device team0 [ 552.928454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 552.938140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 552.951384] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 552.959152] 8021q: adding VLAN 0 to HW filter on device team0 [ 552.969444] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 552.977928] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 552.990262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 553.000068] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.006494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 553.021495] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 553.036629] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 553.049421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 553.057560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 553.069991] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 553.078165] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.084636] bridge0: port 1(bridge_slave_0) entered forwarding state [ 553.097659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 553.105813] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 553.118645] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.125656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 553.140572] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 553.151237] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 553.163203] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 553.170880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 553.183542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 553.191355] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.197804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 553.209654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 553.220935] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 553.236665] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 553.245098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 553.254193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 553.266891] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 553.284209] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 553.294525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 553.305049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 553.315521] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 553.326346] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 553.338419] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 553.350464] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 553.361944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 553.369891] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 553.383293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 553.391252] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 553.405831] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 553.417017] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 553.426475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 553.439225] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 553.451422] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 553.471697] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 553.481391] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 553.494923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 553.505166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 553.523529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 553.539656] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 553.556249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 553.572930] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 553.595201] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 553.601434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 553.629169] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 553.640542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 553.653699] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 553.669703] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 553.683534] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 553.689705] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 553.700795] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 553.708324] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 553.715741] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 553.731541] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 553.746142] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 553.759463] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 553.775174] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 553.792610] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 553.806475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 553.956906] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 553.970395] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 553.984261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 554.002721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 554.014422] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 554.031141] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 554.046295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 554.055420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 554.125206] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 554.139704] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 554.146958] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 554.164770] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 554.171506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 554.184014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 554.197155] device veth0_vlan entered promiscuous mode [ 554.204257] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 554.211441] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 554.230640] device veth1_vlan entered promiscuous mode [ 554.239178] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 554.253644] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 554.263255] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 554.270587] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 554.283476] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 554.295137] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 554.303643] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 554.311154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 554.321236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 554.332338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 554.346270] device veth0_vlan entered promiscuous mode [ 554.356993] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 554.367873] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready 21:25:37 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x80000001, 0x4) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0xc0241, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) [ 554.378212] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 554.395446] device veth1_vlan entered promiscuous mode [ 554.415212] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 554.428442] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 554.444160] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 554.453533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 554.462715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 554.474319] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 554.484699] device veth0_macvtap entered promiscuous mode [ 554.493331] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 554.505806] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 554.518347] device veth1_macvtap entered promiscuous mode [ 554.526502] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 554.544795] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 554.555939] device veth0_macvtap entered promiscuous mode [ 554.564736] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 554.571806] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 554.580598] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 554.589425] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 554.600596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 554.609718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 554.625814] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 554.640936] device veth1_macvtap entered promiscuous mode [ 554.650627] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 554.661309] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 554.670364] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 554.685769] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 554.699143] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 554.711006] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 554.724164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 554.734556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.745987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 554.756304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.766191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 554.776566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.786373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 554.797219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.808717] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 554.816645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 554.825749] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 554.834991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 554.844435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 554.858897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.878215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 554.895596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.904854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 554.919663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.935091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 554.945228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.961645] Bluetooth: hci0 command 0x040f tx timeout [ 554.963952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 554.967059] Bluetooth: hci1 command 0x040f tx timeout [ 554.981337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.997037] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 555.004686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 555.012937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 555.028037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.038285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 555.055901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.065169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 555.079658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.091005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 555.112042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.139780] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 555.155185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 555.166272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 555.186425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 555.225803] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 555.234008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 555.268289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 555.278587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.304529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 555.322211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.342496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 555.363603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.381704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 555.402625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.420774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 555.446151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.476443] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 555.496715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 555.513402] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 555.532437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 556.557995] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 556.574534] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 556.579856] CPU: 1 PID: 19823 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 556.587756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 556.597131] Call Trace: [ 556.599758] dump_stack+0x1b2/0x281 [ 556.603415] warn_alloc.cold+0x96/0x1cc [ 556.607414] ? zone_watermark_ok_safe+0x220/0x220 [ 556.612451] __alloc_pages_nodemask+0x2127/0x2720 [ 556.617344] ? lock_acquire+0x170/0x3f0 [ 556.621353] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 556.626256] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 556.631766] ? __mutex_unlock_slowpath+0x75/0x770 [ 556.636629] alloc_pages_current+0x155/0x260 [ 556.641079] ion_page_pool_alloc+0x118/0x1b0 [ 556.645527] ion_system_heap_allocate+0x133/0x8c0 [ 556.650415] ? ion_alloc+0x187/0x810 [ 556.654142] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 556.659616] ? ion_system_contig_heap_create+0x130/0x130 [ 556.665081] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 556.670116] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 556.674999] ion_alloc+0x204/0x810 [ 556.678576] ? ion_dma_buf_release+0x40/0x40 [ 556.683094] ? __might_fault+0x177/0x1b0 [ 556.687168] ion_ioctl+0xea/0x1f0 [ 556.690639] ? ion_query_heaps+0x360/0x360 [ 556.694902] ? lock_acquire+0x170/0x3f0 [ 556.698904] ? lock_downgrade+0x740/0x740 [ 556.703066] ? ion_query_heaps+0x360/0x360 [ 556.707338] do_vfs_ioctl+0x75a/0xff0 [ 556.711144] ? ioctl_preallocate+0x1a0/0x1a0 [ 556.715582] ? lock_downgrade+0x740/0x740 [ 556.719739] ? __fget+0x225/0x360 [ 556.723206] ? do_vfs_ioctl+0xff0/0xff0 [ 556.727201] ? security_file_ioctl+0x83/0xb0 [ 556.731632] SyS_ioctl+0x7f/0xb0 [ 556.735013] ? do_vfs_ioctl+0xff0/0xff0 [ 556.738998] do_syscall_64+0x1d5/0x640 [ 556.742915] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 556.748234] RIP: 0033:0x45e219 [ 556.751425] RSP: 002b:00007f994610dc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 556.759150] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 556.766450] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 556.773751] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 556.781027] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 556.788311] R13: 00007ffd6a5a041f R14: 00007f994610e9c0 R15: 000000000119bf8c [ 556.813540] Mem-Info: [ 556.818421] active_anon:11632 inactive_anon:18896 isolated_anon:48 [ 556.818421] active_file:2207 inactive_file:2402 isolated_file:0 [ 556.818421] unevictable:0 dirty:111 writeback:0 unstable:0 [ 556.818421] slab_reclaimable:12371 slab_unreclaimable:114752 [ 556.818421] mapped:55927 shmem:19226 pagetables:790 bounce:0 [ 556.818421] free:280781 free_pcp:113 free_cma:0 [ 556.862366] Node 0 active_anon:45884kB inactive_anon:56900kB active_file:7680kB inactive_file:8120kB unevictable:0kB isolated(anon):96kB isolated(file):0kB mapped:144684kB dirty:400kB writeback:0kB shmem:57976kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 556.894166] Node 1 active_anon:644kB inactive_anon:18684kB active_file:1148kB inactive_file:1488kB unevictable:0kB isolated(anon):96kB isolated(file):0kB mapped:79024kB dirty:44kB writeback:0kB shmem:18928kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 556.923450] Node 0 DMA free:11076kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 556.955940] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 556.961226] Node 0 DMA32 free:759460kB min:36200kB low:45248kB high:54296kB active_anon:45992kB inactive_anon:56844kB active_file:7464kB inactive_file:8100kB unevictable:0kB writepending:436kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:8000kB pagetables:2740kB bounce:0kB free_pcp:572kB local_pcp:352kB free_cma:0kB [ 556.993327] lowmem_reserve[]: 0 0 0 0 0 [ 557.000742] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 557.036702] Bluetooth: hci1 command 0x0419 tx timeout [ 557.042251] Bluetooth: hci0 command 0x0419 tx timeout [ 557.057962] lowmem_reserve[]: 0 0 0 0 0 [ 557.066945] Node 1 Normal free:406228kB min:53696kB low:67120kB high:80544kB active_anon:628kB inactive_anon:18780kB active_file:1148kB inactive_file:1488kB unevictable:0kB writepending:48kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:436kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 557.140197] lowmem_reserve[]: 0 0 0 0 0 [ 557.152726] Node 0 DMA: 11*4kB (UM) 11*8kB (U) 8*16kB (U) 6*32kB (U) 2*64kB (UM) 2*128kB (UM) 2*256kB (UM) 1*512kB (M) 1*1024kB (M) 0*2048kB 2*4096kB (UM) = 11076kB [ 557.192371] Node 0 DMA32: 15465*4kB (UEH) 20659*8kB (UEH) 15341*16kB (UEH) 8941*32kB (UEH) 1669*64kB (UH) 288*128kB (U) 112*256kB (U) 23*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 943852kB [ 557.229757] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 557.255459] Node 1 Normal: 3729*4kB (U) 3552*8kB (U) 2823*16kB (U) 2417*32kB (UM) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 33*1024kB (U) 72*2048kB (U) 10*4096kB (U) = 388628kB [ 557.289011] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 557.311441] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 557.320093] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 557.351680] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 557.360462] 23877 total pagecache pages [ 557.375073] 0 pages in swap cache [ 557.383071] Swap cache stats: add 0, delete 0, find 0/0 [ 557.399325] Free swap = 0kB [ 557.402629] Total swap = 0kB [ 557.405738] 2097051 pages RAM [ 557.408934] 0 pages HighMem/MovableOnly [ 557.417832] 363840 pages reserved [ 557.421988] 0 pages cma reserved 21:25:42 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0xc0241, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:25:42 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x80000001, 0x4) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0xc0241, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:25:42 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x80000001, 0x4) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0xc0241, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:25:42 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x80000001, 0x4) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0xc0241, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:25:42 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0xc0241, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:25:42 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:25:42 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:25:42 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:25:42 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 21:25:42 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 21:25:43 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 21:25:43 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0x12}) [ 560.491543] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 560.492461] syz-executor.0: [ 560.506929] syz-executor.3: [ 560.510155] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 560.519214] syz-executor.1 cpuset= [ 560.528656] syz-executor.2: [ 560.536963] page allocation failure: order:4 [ 560.538214] / [ 560.540612] page allocation failure: order:4 [ 560.547400] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 560.554660] mems_allowed=0-1 [ 560.556285] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 560.567512] page allocation failure: order:4 [ 560.572792] CPU: 0 PID: 19837 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 560.575185] (null) [ 560.579032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 560.579037] Call Trace: [ 560.579059] dump_stack+0x1b2/0x281 [ 560.579074] warn_alloc.cold+0x96/0x1cc [ 560.579089] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 560.587339] (null) [ 560.589436] ? zone_watermark_ok_safe+0x220/0x220 [ 560.589462] __alloc_pages_nodemask+0x2127/0x2720 [ 560.589482] ? lock_acquire+0x170/0x3f0 [ 560.600327] syz-executor.5 cpuset= [ 560.602520] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 560.602540] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 560.602553] ? __mutex_unlock_slowpath+0x75/0x770 [ 560.602570] alloc_pages_current+0x155/0x260 [ 560.602586] ion_page_pool_alloc+0x118/0x1b0 [ 560.602596] ion_system_heap_allocate+0x133/0x8c0 [ 560.602605] ? ion_alloc+0x187/0x810 [ 560.602615] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 560.602626] ? ion_system_contig_heap_create+0x130/0x130 [ 560.607301] / [ 560.610222] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 560.615816] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 560.617349] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 560.617367] ion_alloc+0x204/0x810 [ 560.617381] ? ion_dma_buf_release+0x40/0x40 [ 560.617393] ? __might_fault+0x177/0x1b0 [ 560.622368] syz-executor.3 cpuset= [ 560.627054] ion_ioctl+0xea/0x1f0 [ 560.627068] ? ion_query_heaps+0x360/0x360 [ 560.627083] ? lock_acquire+0x170/0x3f0 [ 560.627093] ? lock_downgrade+0x740/0x740 [ 560.634290] (null) [ 560.634595] ? ion_query_heaps+0x360/0x360 [ 560.642586] mems_allowed=0-1 [ 560.645479] do_vfs_ioctl+0x75a/0xff0 [ 560.645493] ? ioctl_preallocate+0x1a0/0x1a0 [ 560.645503] ? lock_downgrade+0x740/0x740 [ 560.645516] ? __fget+0x225/0x360 [ 560.650434] syz-executor.2 cpuset= [ 560.654752] ? do_vfs_ioctl+0xff0/0xff0 [ 560.654763] ? security_file_ioctl+0x83/0xb0 [ 560.654772] SyS_ioctl+0x7f/0xb0 [ 560.654779] ? do_vfs_ioctl+0xff0/0xff0 [ 560.654791] do_syscall_64+0x1d5/0x640 [ 560.654811] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 560.654820] RIP: 0033:0x45e219 [ 560.654824] RSP: 002b:00007f39dd445c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 560.654833] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 560.654838] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 560.654842] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 560.654847] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 560.654855] R13: 00007ffc799adfff R14: 00007f39dd4469c0 R15: 000000000119bf8c [ 560.662849] syz-executor.0 cpuset= [ 560.741087] CPU: 0 PID: 19838 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 560.743372] / [ 560.747623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 560.751843] mems_allowed=0-1 [ 560.755192] Call Trace: [ 560.755213] dump_stack+0x1b2/0x281 [ 560.755229] warn_alloc.cold+0x96/0x1cc [ 560.796578] / [ 560.801736] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 560.822112] mems_allowed=0-1 [ 560.823501] ? zone_watermark_ok_safe+0x220/0x220 [ 560.823523] __alloc_pages_nodemask+0x2127/0x2720 [ 560.874802] / [ 560.876192] ? __schedule+0x893/0x1de0 [ 560.891425] ? lock_acquire+0x170/0x3f0 [ 560.892996] mems_allowed=0-1 [ 560.895389] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 560.895407] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 560.908754] ? __mutex_unlock_slowpath+0x75/0x770 [ 560.913627] ? retint_kernel+0x2d/0x2d [ 560.917506] alloc_pages_current+0x155/0x260 [ 560.921903] ion_page_pool_alloc+0x118/0x1b0 [ 560.926296] ion_system_heap_allocate+0x133/0x8c0 [ 560.931122] ? ion_alloc+0x187/0x810 [ 560.934821] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 560.940258] ? ion_system_contig_heap_create+0x130/0x130 [ 560.945702] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 560.950790] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 560.955671] ion_alloc+0x204/0x810 [ 560.959208] ? ion_dma_buf_release+0x40/0x40 [ 560.963605] ? __might_fault+0x177/0x1b0 [ 560.967651] ion_ioctl+0xea/0x1f0 [ 560.971089] ? ion_query_heaps+0x360/0x360 [ 560.975308] ? lock_acquire+0x170/0x3f0 [ 560.979265] ? lock_downgrade+0x740/0x740 [ 560.983395] ? ion_query_heaps+0x360/0x360 [ 560.987611] do_vfs_ioctl+0x75a/0xff0 [ 560.991397] ? ioctl_preallocate+0x1a0/0x1a0 [ 560.995790] ? lock_downgrade+0x740/0x740 [ 560.999928] ? __fget+0x225/0x360 [ 561.004697] ? do_vfs_ioctl+0xff0/0xff0 [ 561.008656] ? security_file_ioctl+0x83/0xb0 [ 561.013050] SyS_ioctl+0x7f/0xb0 [ 561.016404] ? do_vfs_ioctl+0xff0/0xff0 [ 561.020365] do_syscall_64+0x1d5/0x640 [ 561.024247] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 561.029420] RIP: 0033:0x45e219 [ 561.032855] RSP: 002b:00007f32980c7c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 561.035123] Mem-Info: [ 561.040577] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 561.040582] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 561.040587] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 561.040591] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 561.040599] R13: 00007ffd1e850b6f R14: 00007f32980c89c0 R15: 000000000119bf8c [ 561.070821] active_anon:12239 inactive_anon:18921 isolated_anon:0 [ 561.070821] active_file:2281 inactive_file:2501 isolated_file:0 [ 561.070821] unevictable:0 dirty:138 writeback:0 unstable:0 [ 561.070821] slab_reclaimable:12316 slab_unreclaimable:113460 [ 561.070821] mapped:56025 shmem:19226 pagetables:799 bounce:0 [ 561.070821] free:71957 free_pcp:202 free_cma:0 [ 561.114239] CPU: 1 PID: 19829 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 561.122272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 561.131637] Call Trace: [ 561.134904] dump_stack+0x1b2/0x281 [ 561.139090] warn_alloc.cold+0x96/0x1cc [ 561.144226] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 561.149260] ? zone_watermark_ok_safe+0x220/0x220 [ 561.154130] __alloc_pages_nodemask+0x2127/0x2720 [ 561.159025] ? lock_acquire+0x170/0x3f0 [ 561.163036] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 561.167895] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 561.173352] ? __mutex_unlock_slowpath+0x75/0x770 [ 561.178206] alloc_pages_current+0x155/0x260 [ 561.182630] ion_page_pool_alloc+0x118/0x1b0 [ 561.187048] ion_system_heap_allocate+0x133/0x8c0 [ 561.191898] ? ion_alloc+0x187/0x810 [ 561.195615] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 561.201067] ? ion_system_contig_heap_create+0x130/0x130 [ 561.206521] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 561.211546] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 561.216423] ion_alloc+0x204/0x810 [ 561.219973] ? ion_dma_buf_release+0x40/0x40 [ 561.224407] ? __might_fault+0x177/0x1b0 [ 561.228475] ion_ioctl+0xea/0x1f0 [ 561.231936] ? ion_query_heaps+0x360/0x360 [ 561.236175] ? lock_acquire+0x170/0x3f0 [ 561.240153] ? lock_downgrade+0x740/0x740 [ 561.244302] ? ion_query_heaps+0x360/0x360 [ 561.249585] do_vfs_ioctl+0x75a/0xff0 [ 561.253397] ? ioctl_preallocate+0x1a0/0x1a0 [ 561.258766] ? lock_downgrade+0x740/0x740 [ 561.262947] ? __fget+0x225/0x360 [ 561.266405] ? do_vfs_ioctl+0xff0/0xff0 [ 561.270385] ? security_file_ioctl+0x83/0xb0 [ 561.274800] SyS_ioctl+0x7f/0xb0 [ 561.278166] ? do_vfs_ioctl+0xff0/0xff0 [ 561.282143] do_syscall_64+0x1d5/0x640 [ 561.286041] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 561.291230] RIP: 0033:0x45e219 [ 561.294414] RSP: 002b:00007f994610dc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 561.302270] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 561.309555] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 561.316831] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 561.324108] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 561.331386] R13: 00007ffd6a5a041f R14: 00007f994610e9c0 R15: 000000000119bf8c [ 561.340502] CPU: 1 PID: 19834 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 561.348511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 561.357868] Call Trace: [ 561.360474] dump_stack+0x1b2/0x281 [ 561.364122] warn_alloc.cold+0x96/0x1cc [ 561.368112] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 561.374099] ? zone_watermark_ok_safe+0x220/0x220 [ 561.378971] __alloc_pages_nodemask+0x2127/0x2720 [ 561.383833] ? lock_acquire+0x170/0x3f0 [ 561.387820] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 561.392679] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 561.398231] ? __mutex_unlock_slowpath+0x75/0x770 [ 561.403098] alloc_pages_current+0x155/0x260 [ 561.407525] ion_page_pool_alloc+0x118/0x1b0 [ 561.410006] Node 0 active_anon:48296kB inactive_anon:56908kB active_file:7972kB inactive_file:8520kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:145040kB dirty:492kB writeback:0kB shmem:57984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 561.411937] ion_system_heap_allocate+0x133/0x8c0 [ 561.411949] ? ion_alloc+0x187/0x810 [ 561.411962] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 561.411972] ? ion_system_contig_heap_create+0x130/0x130 [ 561.411986] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 561.464730] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 561.469608] ion_alloc+0x204/0x810 [ 561.473270] ? ion_dma_buf_release+0x40/0x40 [ 561.476969] Node 1 active_anon:620kB inactive_anon:18776kB active_file:1152kB inactive_file:1484kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:79048kB dirty:60kB writeback:0kB shmem:18920kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 561.477682] ? __might_fault+0x177/0x1b0 [ 561.509355] ion_ioctl+0xea/0x1f0 [ 561.512825] ? ion_query_heaps+0x360/0x360 [ 561.517097] ? lock_acquire+0x170/0x3f0 [ 561.521082] ? lock_downgrade+0x740/0x740 [ 561.525238] ? ion_query_heaps+0x360/0x360 [ 561.529511] do_vfs_ioctl+0x75a/0xff0 [ 561.533322] ? ioctl_preallocate+0x1a0/0x1a0 [ 561.537737] ? lock_downgrade+0x740/0x740 [ 561.542327] ? __fget+0x225/0x360 [ 561.544143] Node 0 [ 561.545779] ? do_vfs_ioctl+0xff0/0xff0 [ 561.545793] ? security_file_ioctl+0x83/0xb0 [ 561.545805] SyS_ioctl+0x7f/0xb0 [ 561.554294] DMA free:11116kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 561.556403] ? do_vfs_ioctl+0xff0/0xff0 [ 561.556419] do_syscall_64+0x1d5/0x640 [ 561.556442] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 561.566726] lowmem_reserve[]: [ 561.585606] RIP: 0033:0x45e219 [ 561.585612] RSP: 002b:00007f1c98502c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 561.585622] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 561.585627] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 561.585632] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 561.585635] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 561.585644] R13: 00007ffef867e34f R14: 00007f1c985039c0 R15: 000000000119bf8c [ 561.592402] CPU: 1 PID: 19836 Comm: syz-executor.0 Not tainted 4.14.217-syzkaller #0 [ 561.657117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 561.660339] 0 [ 561.666480] Call Trace: [ 561.666508] dump_stack+0x1b2/0x281 [ 561.666524] warn_alloc.cold+0x96/0x1cc [ 561.666540] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 561.683493] ? zone_watermark_ok_safe+0x220/0x220 [ 561.684006] 2717 [ 561.688351] __alloc_pages_nodemask+0x2127/0x2720 [ 561.688373] ? lock_acquire+0x170/0x3f0 [ 561.699297] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 561.700205] 2718 [ 561.704152] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 561.704165] ? __mutex_unlock_slowpath+0x75/0x770 [ 561.704183] alloc_pages_current+0x155/0x260 [ 561.704200] ion_page_pool_alloc+0x118/0x1b0 [ 561.718410] 2718 [ 561.721981] ion_system_heap_allocate+0x133/0x8c0 [ 561.721991] ? ion_alloc+0x187/0x810 [ 561.722002] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 561.722014] ? ion_system_contig_heap_create+0x130/0x130 [ 561.735966] 2718 [ 561.737122] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 561.737137] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 561.737153] ion_alloc+0x204/0x810 [ 561.760021] ? ion_dma_buf_release+0x40/0x40 [ 561.767970] ? __might_fault+0x177/0x1b0 [ 561.772238] ion_ioctl+0xea/0x1f0 [ 561.772630] Node 0 [ 561.775698] ? ion_query_heaps+0x360/0x360 [ 561.775714] ? lock_acquire+0x170/0x3f0 [ 561.775726] ? lock_downgrade+0x740/0x740 [ 561.786570] DMA32 free:731032kB min:36200kB low:45248kB high:54296kB active_anon:48296kB inactive_anon:56848kB active_file:7972kB inactive_file:8520kB unevictable:0kB writepending:492kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7968kB pagetables:2992kB bounce:0kB free_pcp:204kB local_pcp:32kB free_cma:0kB [ 561.790293] ? ion_query_heaps+0x360/0x360 [ 561.790307] do_vfs_ioctl+0x75a/0xff0 [ 561.790319] ? ioctl_preallocate+0x1a0/0x1a0 [ 561.834150] ? lock_downgrade+0x740/0x740 [ 561.838362] ? __fget+0x225/0x360 [ 561.841823] ? do_vfs_ioctl+0xff0/0xff0 [ 561.845906] ? security_file_ioctl+0x83/0xb0 [ 561.850317] SyS_ioctl+0x7f/0xb0 [ 561.853684] ? do_vfs_ioctl+0xff0/0xff0 [ 561.857667] do_syscall_64+0x1d5/0x640 [ 561.861563] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 561.866787] RIP: 0033:0x45e219 [ 561.869975] RSP: 002b:00007f3154555c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 561.877719] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 561.885953] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 561.893234] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 561.898496] lowmem_reserve[]: [ 561.900508] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 561.900514] R13: 00007ffd70bb297f R14: 00007f31545569c0 R15: 000000000119bf8c [ 561.933788] 0 0 0 0 0 [ 561.964418] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 562.005170] lowmem_reserve[]: 0 0 0 0 0 [ 562.011623] Node 1 Normal free:227848kB min:53696kB low:67120kB high:80544kB active_anon:620kB inactive_anon:18776kB active_file:1152kB inactive_file:1484kB unevictable:0kB writepending:60kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:436kB bounce:0kB free_pcp:688kB local_pcp:0kB free_cma:0kB [ 562.106569] lowmem_reserve[]: 0 0 0 0 0 [ 562.120498] Node 0 DMA: 5*4kB (UM) 2*8kB (U) 3*16kB (U) 6*32kB (U) 4*64kB (UM) 1*128kB (M) 1*256kB (M) 2*512kB (UM) 1*1024kB (M) 0*2048kB 2*4096kB (UM) = 11156kB [ 562.162579] Node 0 DMA32: 355*4kB (UMEH) 584*8kB (UMEH) 9305*16kB (UEH) 8031*32kB (UEH) 1247*64kB (UH) 81*128kB (U) 2*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 502652kB [ 562.178513] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 562.199324] Node 1 Normal: 2680*4kB (UM) 3132*8kB (UM) 2317*16kB (UM) 1949*32kB (U) 633*64kB (UM) 345*128kB (UM) 100*256kB (UM) 18*512kB (U) 68*1024kB (U) 0*2048kB 0*4096kB = 324336kB [ 562.264731] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 562.291445] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 562.303599] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 562.331222] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 562.346793] 24026 total pagecache pages [ 562.357243] 0 pages in swap cache [ 562.370993] Swap cache stats: add 0, delete 0, find 0/0 [ 562.380996] Free swap = 0kB [ 562.387526] Total swap = 0kB [ 562.395095] 2097051 pages RAM [ 562.401645] 0 pages HighMem/MovableOnly [ 562.409099] 363840 pages reserved [ 562.417241] 0 pages cma reserved [ 563.662383] oom_reaper: reaped process 19834 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 563.725950] oom_reaper: reaped process 19838 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 563.768625] oom_reaper: reaped process 19837 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 563.806775] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 563.837142] systemd-journal cpuset=/ mems_allowed=0-1 [ 563.853419] CPU: 1 PID: 18150 Comm: systemd-journal Not tainted 4.14.217-syzkaller #0 [ 563.861456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 563.870803] Call Trace: [ 563.873404] dump_stack+0x1b2/0x281 [ 563.877030] dump_header+0x178/0x82f [ 563.880740] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 563.883930] syz-executor.5: [ 563.885859] ? ___ratelimit+0x2cd/0x530 [ 563.885867] page allocation failure: order:0 [ 563.888876] oom_kill_process.cold+0x10/0xb18 [ 563.892869] syz-executor.0: [ 563.897236] out_of_memory+0xe3e/0x1190 [ 563.901734] syz-executor.3: [ 563.904704] ? oom_killer_disable+0x1c0/0x1c0 [ 563.908649] page allocation failure: order:0 [ 563.911658] ? mutex_trylock+0x152/0x1a0 [ 563.911671] __alloc_pages_nodemask+0x23e1/0x2720 [ 563.911691] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 563.916184] syz-executor.1: [ 563.920574] alloc_pages_current+0x155/0x260 [ 563.927567] page allocation failure: order:0 [ 563.931257] filemap_fault+0xea3/0x1980 [ 563.931281] ext4_filemap_fault+0x84/0xb0 [ 563.936108] page allocation failure: order:0 [ 563.939111] __do_fault+0xfa/0x380 [ 563.943528] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 563.947879] __handle_mm_fault+0x2497/0x4620 [ 563.951868] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 563.955970] ? ep_poll+0x1ab/0xa50 [ 563.960347] (null) [ 563.963864] ? vm_insert_page+0x7c0/0x7c0 [ 563.963886] handle_mm_fault+0x391/0x860 [ 563.970995] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 563.975453] __do_page_fault+0x549/0xad0 [ 563.982568] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 563.986059] ? spurious_fault+0x640/0x640 [ 563.988176] (null) [ 563.992309] ? do_page_fault+0x60/0x500 [ 563.992321] ? page_fault+0x2f/0x50 [ 563.992329] page_fault+0x45/0x50 [ 563.996521] (null) [ 564.003592] RIP: 0001:0xffffffffffffffff [ 564.003597] RSP: a40831e0:00007ffcc175efa0 EFLAGS: 7ffcc175edb0 [ 564.009343] Mem-Info: [ 564.019293] (null) [ 564.023198] syz-executor.3 cpuset= [ 564.028507] syz-executor.1 cpuset= [ 564.028843] / [ 564.056733] / [ 564.058911] active_anon:12159 inactive_anon:18921 isolated_anon:0 [ 564.058911] active_file:11 inactive_file:11 isolated_file:0 [ 564.058911] unevictable:0 dirty:0 writeback:0 unstable:0 [ 564.058911] slab_reclaimable:12300 slab_unreclaimable:113741 [ 564.058911] mapped:53118 shmem:19226 pagetables:857 bounce:0 [ 564.058911] free:13843 free_pcp:82 free_cma:0 [ 564.060303] syz-executor.0 cpuset= [ 564.060643] Node 0 active_anon:48000kB inactive_anon:56908kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:133956kB dirty:0kB writeback:0kB shmem:57984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 564.096902] syz-executor.5 cpuset= [ 564.100636] mems_allowed=0-1 [ 564.128270] / mems_allowed=0-1 [ 564.135707] Node 1 active_anon:636kB inactive_anon:18776kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:78516kB dirty:0kB writeback:0kB shmem:18920kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 564.136342] CPU: 0 PID: 19836 Comm: syz-executor.0 Not tainted 4.14.217-syzkaller #0 [ 564.172207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 564.181726] Call Trace: [ 564.184321] dump_stack+0x1b2/0x281 [ 564.186002] mems_allowed=0-1 [ 564.187943] warn_alloc.cold+0x96/0x1cc [ 564.195176] ? zone_watermark_ok_safe+0x220/0x220 [ 564.200003] ? usleep_range+0x130/0x130 [ 564.203966] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 564.206031] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 564.209076] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 564.209088] ? run_timer_softirq+0x5a0/0x5a0 [ 564.249451] __alloc_pages_nodemask+0x2127/0x2720 [ 564.255193] ? lock_acquire+0x170/0x3f0 [ 564.260685] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 564.271798] ? ion_page_pool_alloc+0x9e/0x1b0 [ 564.276295] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 564.281752] alloc_pages_current+0x155/0x260 [ 564.286194] ion_page_pool_alloc+0x118/0x1b0 [ 564.290608] ion_system_heap_allocate+0x133/0x8c0 [ 564.295471] ? ion_alloc+0x187/0x810 [ 564.299170] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 564.304770] ? ion_system_contig_heap_create+0x130/0x130 [ 564.310233] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 564.315246] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 564.320074] ion_alloc+0x204/0x810 [ 564.323616] ? ion_dma_buf_release+0x40/0x40 [ 564.328021] ? __might_fault+0x177/0x1b0 [ 564.330720] lowmem_reserve[]: 0 [ 564.332089] ion_ioctl+0xea/0x1f0 [ 564.332101] ? ion_query_heaps+0x360/0x360 [ 564.335365] 2717 [ 564.338807] ? lock_acquire+0x170/0x3f0 [ 564.349106] ? lock_downgrade+0x740/0x740 [ 564.353243] ? ion_query_heaps+0x360/0x360 [ 564.357459] do_vfs_ioctl+0x75a/0xff0 [ 564.361253] ? ioctl_preallocate+0x1a0/0x1a0 [ 564.365697] ? lock_downgrade+0x740/0x740 [ 564.369842] ? __fget+0x225/0x360 [ 564.373281] ? do_vfs_ioctl+0xff0/0xff0 [ 564.377257] ? security_file_ioctl+0x83/0xb0 [ 564.381656] SyS_ioctl+0x7f/0xb0 [ 564.385032] ? do_vfs_ioctl+0xff0/0xff0 [ 564.385998] 2718 2718 [ 564.389000] do_syscall_64+0x1d5/0x640 [ 564.389020] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 564.400525] RIP: 0033:0x45e219 [ 564.403702] RSP: 002b:00007f3154555c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 564.410776] 2718 [ 564.411407] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 564.411420] Node 0 [ 564.413456] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 564.413463] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 564.437470] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 564.444734] R13: 00007ffd70bb297f R14: 00007f31545569c0 R15: 000000000119bf8c [ 564.452945] CPU: 1 PID: 19837 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 564.456792] / [ 564.460966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 564.460976] Call Trace: [ 564.462758] mems_allowed=0-1 [ 564.472049] dump_stack+0x1b2/0x281 [ 564.472066] warn_alloc.cold+0x96/0x1cc [ 564.485875] ? zone_watermark_ok_safe+0x220/0x220 [ 564.490784] ? usleep_range+0x130/0x130 [ 564.494737] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 564.499834] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 564.504857] ? run_timer_softirq+0x5a0/0x5a0 [ 564.509251] __alloc_pages_nodemask+0x2127/0x2720 [ 564.514078] ? lock_acquire+0x170/0x3f0 [ 564.518035] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 564.522878] ? ion_page_pool_alloc+0x9e/0x1b0 [ 564.527363] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 564.532807] alloc_pages_current+0x155/0x260 [ 564.537198] ion_page_pool_alloc+0x118/0x1b0 [ 564.541590] ion_system_heap_allocate+0x133/0x8c0 [ 564.546427] ? ion_alloc+0x187/0x810 [ 564.550135] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 564.555572] ? ion_system_contig_heap_create+0x130/0x130 [ 564.561019] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 564.566030] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 564.570857] ion_alloc+0x204/0x810 [ 564.574403] ? ion_dma_buf_release+0x40/0x40 [ 564.578803] ? __might_fault+0x177/0x1b0 [ 564.582847] ion_ioctl+0xea/0x1f0 [ 564.586281] ? ion_query_heaps+0x360/0x360 [ 564.590497] ? lock_acquire+0x170/0x3f0 [ 564.594451] ? lock_downgrade+0x740/0x740 [ 564.598591] ? ion_query_heaps+0x360/0x360 [ 564.602814] do_vfs_ioctl+0x75a/0xff0 [ 564.606598] ? ioctl_preallocate+0x1a0/0x1a0 [ 564.610985] ? lock_downgrade+0x740/0x740 [ 564.615119] ? __fget+0x225/0x360 [ 564.618728] ? do_vfs_ioctl+0xff0/0xff0 [ 564.622683] ? security_file_ioctl+0x83/0xb0 [ 564.627072] SyS_ioctl+0x7f/0xb0 [ 564.630418] ? do_vfs_ioctl+0xff0/0xff0 [ 564.634375] do_syscall_64+0x1d5/0x640 [ 564.638263] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 564.643433] RIP: 0033:0x45e219 [ 564.646602] RSP: 002b:00007f39dd445c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 564.654726] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 564.662240] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 564.669500] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 564.676760] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 564.684010] R13: 00007ffc799adfff R14: 00007f39dd4469c0 R15: 000000000119bf8c [ 564.691274] CPU: 0 PID: 19838 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 564.697132] DMA32 free:18112kB min:36200kB low:45248kB high:54296kB active_anon:48000kB inactive_anon:56848kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7968kB pagetables:2992kB bounce:0kB free_pcp:204kB local_pcp:204kB free_cma:0kB [ 564.699155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 564.736855] Call Trace: [ 564.739704] dump_stack+0x1b2/0x281 [ 564.743321] warn_alloc.cold+0x96/0x1cc [ 564.747286] ? zone_watermark_ok_safe+0x220/0x220 [ 564.752118] ? usleep_range+0x130/0x130 [ 564.756082] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 564.761176] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 564.766183] ? run_timer_softirq+0x5a0/0x5a0 [ 564.770580] __alloc_pages_nodemask+0x2127/0x2720 [ 564.774196] lowmem_reserve[]: 0 0 [ 564.775433] ? lock_acquire+0x170/0x3f0 [ 564.775449] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 564.778879] 0 [ 564.782852] ? ion_page_pool_alloc+0x9e/0x1b0 [ 564.782868] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 564.782886] alloc_pages_current+0x155/0x260 [ 564.782898] ion_page_pool_alloc+0x118/0x1b0 [ 564.782909] ion_system_heap_allocate+0x133/0x8c0 [ 564.782918] ? ion_alloc+0x187/0x810 [ 564.782929] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 564.782937] ? ion_system_contig_heap_create+0x130/0x130 [ 564.782950] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 564.800693] 0 [ 564.804116] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 564.808488] 0 [ 564.813326] ion_alloc+0x204/0x810 [ 564.813342] ? ion_dma_buf_release+0x40/0x40 [ 564.813354] ? __might_fault+0x177/0x1b0 [ 564.813366] ion_ioctl+0xea/0x1f0 [ 564.813376] ? ion_query_heaps+0x360/0x360 [ 564.813390] ? lock_acquire+0x170/0x3f0 [ 564.813400] ? lock_downgrade+0x740/0x740 [ 564.844244] Node 0 [ 564.844879] ? ion_query_heaps+0x360/0x360 [ 564.849280] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 564.853334] do_vfs_ioctl+0x75a/0xff0 [ 564.853346] ? ioctl_preallocate+0x1a0/0x1a0 [ 564.853358] ? lock_downgrade+0x740/0x740 [ 564.853371] ? __fget+0x225/0x360 [ 564.853379] ? do_vfs_ioctl+0xff0/0xff0 [ 564.853390] ? security_file_ioctl+0x83/0xb0 [ 564.853400] SyS_ioctl+0x7f/0xb0 [ 564.873687] lowmem_reserve[]: [ 564.875611] ? do_vfs_ioctl+0xff0/0xff0 [ 564.936261] do_syscall_64+0x1d5/0x640 [ 564.940139] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 564.945315] RIP: 0033:0x45e219 [ 564.945890] 0 [ 564.948490] RSP: 002b:00007f32980c7c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 564.950282] 0 [ 564.957963] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 564.957968] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 564.957972] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 564.957976] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 564.957981] R13: 00007ffd1e850b6f R14: 00007f32980c89c0 R15: 000000000119bf8c [ 564.975447] warn_alloc_show_mem: 4 callbacks suppressed [ 564.975452] Mem-Info: [ 564.991743] CPU: 1 PID: 19834 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 564.998433] active_anon:12159 inactive_anon:18921 isolated_anon:0 [ 564.998433] active_file:11 inactive_file:11 isolated_file:0 [ 564.998433] unevictable:0 dirty:0 writeback:0 unstable:0 [ 564.998433] slab_reclaimable:12275 slab_unreclaimable:113715 [ 564.998433] mapped:53118 shmem:19226 pagetables:857 bounce:0 [ 564.998433] free:13838 free_pcp:159 free_cma:0 [ 565.001890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 565.001894] Call Trace: [ 565.001917] dump_stack+0x1b2/0x281 [ 565.001933] warn_alloc.cold+0x96/0x1cc [ 565.004327] Node 0 active_anon:48000kB inactive_anon:56908kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:133956kB dirty:0kB writeback:0kB shmem:57984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 565.012181] ? zone_watermark_ok_safe+0x220/0x220 [ 565.012192] ? usleep_range+0x130/0x130 [ 565.012213] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 565.045789] Node 1 active_anon:636kB inactive_anon:18776kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:78516kB dirty:0kB writeback:0kB shmem:18920kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 565.054881] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 565.054891] ? run_timer_softirq+0x5a0/0x5a0 [ 565.054907] __alloc_pages_nodemask+0x2127/0x2720 [ 565.054920] ? lock_acquire+0x170/0x3f0 [ 565.054933] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 565.054948] ? ion_page_pool_alloc+0x9e/0x1b0 [ 565.054971] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 565.054994] alloc_pages_current+0x155/0x260 [ 565.055007] ion_page_pool_alloc+0x118/0x1b0 [ 565.055019] ion_system_heap_allocate+0x133/0x8c0 [ 565.055030] ? ion_alloc+0x187/0x810 [ 565.055041] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 565.055052] ? ion_system_contig_heap_create+0x130/0x130 [ 565.055064] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 565.055076] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 565.055089] ion_alloc+0x204/0x810 [ 565.055101] ? ion_dma_buf_release+0x40/0x40 [ 565.055113] ? __might_fault+0x177/0x1b0 [ 565.057692] Node 0 [ 565.061301] ion_ioctl+0xea/0x1f0 [ 565.061311] ? ion_query_heaps+0x360/0x360 [ 565.061322] ? lock_acquire+0x170/0x3f0 [ 565.065282] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 565.092920] ? lock_downgrade+0x740/0x740 [ 565.092929] ? ion_query_heaps+0x360/0x360 [ 565.092939] do_vfs_ioctl+0x75a/0xff0 [ 565.092950] ? ioctl_preallocate+0x1a0/0x1a0 [ 565.097767] lowmem_reserve[]: [ 565.101721] ? lock_downgrade+0x740/0x740 [ 565.101734] ? __fget+0x225/0x360 [ 565.101743] ? do_vfs_ioctl+0xff0/0xff0 [ 565.107157] 0 [ 565.133985] ? security_file_ioctl+0x83/0xb0 [ 565.133996] SyS_ioctl+0x7f/0xb0 [ 565.134006] ? do_vfs_ioctl+0xff0/0xff0 [ 565.139000] 2717 [ 565.143388] do_syscall_64+0x1d5/0x640 [ 565.143405] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 565.143413] RIP: 0033:0x45e219 [ 565.148238] 2718 [ 565.152195] RSP: 002b:00007f1c98502c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 565.152205] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 565.152210] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 565.152218] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 565.170625] 2718 [ 565.171347] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 565.175730] 2718 [ 565.180553] R13: 00007ffef867e34f R14: 00007f1c985039c0 R15: 000000000119bf8c [ 565.190708] 0 [ 565.231156] Node 0 [ 565.270674] 0 [ 565.390669] DMA32 free:30512kB min:36200kB low:45248kB high:54296kB active_anon:48000kB inactive_anon:56848kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7968kB pagetables:2992kB bounce:0kB free_pcp:560kB local_pcp:148kB free_cma:0kB [ 565.390673] lowmem_reserve[]: 0 0 0 0 0 [ 565.390689] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 565.390707] lowmem_reserve[]: 0 0 0 0 0 [ 565.390726] Node 1 Normal free:260732kB min:53696kB low:67120kB high:80544kB active_anon:636kB inactive_anon:18776kB active_file:16kB inactive_file:2316kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:436kB bounce:0kB free_pcp:200kB local_pcp:200kB free_cma:0kB [ 565.390747] lowmem_reserve[]: 0 0 0 0 0 [ 565.390765] Node 0 DMA: 2*4kB (UM) 1*8kB (U) 0*16kB 2*32kB (U) 4*64kB (UM) 1*128kB (M) 1*256kB (M) 2*512kB (UM) 1*1024kB (M) 0*2048kB 2*4096kB (UM) = 10960kB [ 565.544775] 0 [ 565.546646] Node 1 Normal free:426104kB min:53696kB low:67120kB high:80544kB active_anon:636kB inactive_anon:18776kB active_file:16kB inactive_file:2316kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:436kB bounce:0kB free_pcp:908kB local_pcp:708kB free_cma:0kB [ 565.570603] Node 0 DMA32: 2100*4kB (UME) 923*8kB (UME) 284*16kB (UME) 69*32kB (UME) 383*64kB (UME) 56*128kB (UM) 27*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 61640kB [ 565.630685] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 565.640601] lowmem_reserve[]: 0 0 0 0 0 [ 565.645493] Node 0 DMA: 2*4kB (UM) 1*8kB (U) 0*16kB 2*32kB (U) 4*64kB (UM) 1*128kB (M) 1*256kB (M) 2*512kB (UM) 1*1024kB (M) 0*2048kB 2*4096kB (UM) = 10960kB [ 565.650594] Node 1 Normal: 1514*4kB (U) 4*8kB (U) 1*16kB (M) 1*32kB (M) 4562*64kB (UM) 391*128kB (U) 58*256kB (U) 19*512kB (UM) 32*1024kB (U) 18*2048kB (U) 0*4096kB = 442360kB [ 565.710620] Node 0 DMA32: 2069*4kB (UME) 923*8kB (UME) 284*16kB (UME) 69*32kB (UME) 383*64kB (UME) 56*128kB (UM) 27*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 61516kB [ 565.746851] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 565.757837] Node 1 Normal: 1514*4kB (U) 4*8kB (U) 1*16kB (M) 1*32kB (M) 5463*64kB (UM) 401*128kB (U) 58*256kB (U) 19*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 431672kB [ 565.770573] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 565.776766] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 565.794646] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 565.810599] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 565.820575] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 565.829505] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 565.838617] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 565.860585] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 565.873896] 19841 total pagecache pages [ 565.877931] 0 pages in swap cache [ 565.880568] 19841 total pagecache pages [ 565.885380] 0 pages in swap cache [ 565.888848] Swap cache stats: add 0, delete 0, find 0/0 [ 565.894281] Swap cache stats: add 0, delete 0, find 0/0 [ 565.894289] Free swap = 0kB [ 565.920574] Free swap = 0kB [ 565.923633] Total swap = 0kB [ 565.926644] 2097051 pages RAM [ 565.929734] 0 pages HighMem/MovableOnly [ 565.940595] Total swap = 0kB [ 565.943676] 2097051 pages RAM [ 565.946783] 0 pages HighMem/MovableOnly [ 565.970561] 363840 pages reserved [ 565.974008] 363840 pages reserved [ 565.974055] 0 pages cma reserved [ 565.977492] 0 pages cma reserved [ 566.010684] Out of memory (oom_kill_allocating_task): Kill process 18150 (systemd-journal) score 0 or sacrifice child [ 566.050654] Killed process 18150 (systemd-journal) total-vm:46096kB, anon-rss:480kB, file-rss:4kB, shmem-rss:3420kB [ 566.106386] oom_reaper: reaped process 19836 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 566.161658] oom_reaper: reaped process 18150 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:3576kB [ 566.392511] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 566.402656] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 566.425903] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 566.425951] syz-executor.5: [ 566.443796] syz-executor.3: [ 566.451148] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 566.460944] syz-executor.1 cpuset= [ 566.468065] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 566.468084] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 566.468108] CPU: 1 PID: 19834 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 566.468113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 566.468117] Call Trace: [ 566.468138] dump_stack+0x1b2/0x281 [ 566.481171] systemd[1]: Stopped Journal Service. [ 566.482063] warn_alloc.cold+0x96/0x1cc [ 566.482078] ? zone_watermark_ok_safe+0x220/0x220 [ 566.482104] __alloc_pages_nodemask+0x2127/0x2720 [ 566.482119] ? lock_acquire+0x170/0x3f0 [ 566.482132] ? lock_acquire+0x170/0x3f0 [ 566.482147] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 566.482168] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 566.482180] ? __mutex_unlock_slowpath+0x75/0x770 [ 566.482198] alloc_pages_current+0x155/0x260 [ 566.482214] ion_page_pool_alloc+0x118/0x1b0 [ 566.514608] systemd[1]: Starting Journal Service... [ 566.515513] ion_system_heap_allocate+0x133/0x8c0 [ 566.523401] / [ 566.524297] ? _raw_spin_unlock+0x29/0x40 [ 566.540711] mems_allowed=0-1 [ 566.542343] ? _ion_heap_freelist_drain+0x6e/0x410 [ 566.542354] ? ion_system_contig_heap_create+0x130/0x130 [ 566.542366] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 566.542380] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 566.542391] ion_alloc+0x27a/0x810 [ 566.604035] ? ion_dma_buf_release+0x40/0x40 [ 566.608429] ? __might_fault+0x177/0x1b0 [ 566.612492] ion_ioctl+0xea/0x1f0 [ 566.615926] ? ion_query_heaps+0x360/0x360 [ 566.620148] ? lock_acquire+0x170/0x3f0 [ 566.624110] ? lock_downgrade+0x740/0x740 [ 566.628236] ? ion_query_heaps+0x360/0x360 [ 566.632451] do_vfs_ioctl+0x75a/0xff0 [ 566.636255] ? ioctl_preallocate+0x1a0/0x1a0 [ 566.640646] ? lock_downgrade+0x740/0x740 [ 566.644791] ? __fget+0x225/0x360 [ 566.648754] ? do_vfs_ioctl+0xff0/0xff0 [ 566.652711] ? security_file_ioctl+0x83/0xb0 [ 566.657100] SyS_ioctl+0x7f/0xb0 [ 566.660446] ? do_vfs_ioctl+0xff0/0xff0 [ 566.664407] do_syscall_64+0x1d5/0x640 [ 566.668283] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 566.673453] RIP: 0033:0x45e219 [ 566.676621] RSP: 002b:00007f1c98502c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 566.684315] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 566.691562] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 566.698822] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 566.706083] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 566.713333] R13: 00007ffef867e34f R14: 00007f1c985039c0 R15: 000000000119bf8c [ 566.722188] CPU: 0 PID: 19837 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 566.730098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 566.730706] page allocation failure: order:4 [ 566.739485] Call Trace: [ 566.739491] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 566.743892] dump_stack+0x1b2/0x281 [ 566.743907] warn_alloc.cold+0x96/0x1cc [ 566.743921] ? zone_watermark_ok_safe+0x220/0x220 [ 566.743941] __alloc_pages_nodemask+0x2127/0x2720 [ 566.743960] ? lock_acquire+0x170/0x3f0 [ 566.750508] syz-executor.0 cpuset= [ 566.754133] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 566.757729] / [ 566.761691] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 566.780546] syz-executor.5 cpuset= [ 566.783688] ? __mutex_unlock_slowpath+0x75/0x770 [ 566.785372] / [ 566.790823] alloc_pages_current+0x155/0x260 [ 566.794938] mems_allowed=0-1 [ 566.799162] ion_page_pool_alloc+0x118/0x1b0 [ 566.812726] ion_system_heap_allocate+0x133/0x8c0 [ 566.817556] ? _raw_spin_unlock+0x29/0x40 [ 566.820511] mems_allowed=0-1 [ 566.821688] ? _ion_heap_freelist_drain+0x6e/0x410 [ 566.829699] ? ion_system_contig_heap_create+0x130/0x130 [ 566.835149] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 566.840172] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 566.845011] ion_alloc+0x27a/0x810 [ 566.848537] ? ion_dma_buf_release+0x40/0x40 [ 566.852930] ? __might_fault+0x177/0x1b0 [ 566.856978] ion_ioctl+0xea/0x1f0 [ 566.860414] ? ion_query_heaps+0x360/0x360 [ 566.865169] ? lock_acquire+0x170/0x3f0 [ 566.869148] ? lock_downgrade+0x740/0x740 [ 566.873288] ? ion_query_heaps+0x360/0x360 [ 566.877508] do_vfs_ioctl+0x75a/0xff0 [ 566.881293] ? ioctl_preallocate+0x1a0/0x1a0 [ 566.885703] ? lock_downgrade+0x740/0x740 [ 566.889849] ? __fget+0x225/0x360 [ 566.893311] ? do_vfs_ioctl+0xff0/0xff0 [ 566.897283] ? security_file_ioctl+0x83/0xb0 [ 566.901693] SyS_ioctl+0x7f/0xb0 [ 566.905058] ? do_vfs_ioctl+0xff0/0xff0 [ 566.909038] do_syscall_64+0x1d5/0x640 [ 566.912959] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 566.918135] RIP: 0033:0x45e219 [ 566.921303] RSP: 002b:00007f39dd445c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 566.929017] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 566.936278] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 566.943570] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 566.950837] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 566.958124] R13: 00007ffc799adfff R14: 00007f39dd4469c0 R15: 000000000119bf8c [ 566.965392] CPU: 1 PID: 19838 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 566.973283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 566.982643] Call Trace: [ 566.985241] dump_stack+0x1b2/0x281 [ 566.988873] warn_alloc.cold+0x96/0x1cc [ 566.992852] ? zone_watermark_ok_safe+0x220/0x220 [ 566.997716] __alloc_pages_nodemask+0x2127/0x2720 [ 567.002597] ? lock_acquire+0x170/0x3f0 [ 567.006589] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 567.011462] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 567.016920] ? __mutex_unlock_slowpath+0x75/0x770 [ 567.021789] alloc_pages_current+0x155/0x260 [ 567.026199] ion_page_pool_alloc+0x118/0x1b0 [ 567.030618] ion_system_heap_allocate+0x133/0x8c0 [ 567.035478] ? _raw_spin_unlock+0x29/0x40 [ 567.039642] ? _ion_heap_freelist_drain+0x6e/0x410 [ 567.044588] ? ion_system_contig_heap_create+0x130/0x130 [ 567.050057] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 567.055090] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 567.059947] ion_alloc+0x27a/0x810 [ 567.063494] ? ion_dma_buf_release+0x40/0x40 [ 567.067901] ? __might_fault+0x177/0x1b0 [ 567.071967] ion_ioctl+0xea/0x1f0 [ 567.075427] ? ion_query_heaps+0x360/0x360 [ 567.079679] ? lock_acquire+0x170/0x3f0 [ 567.083661] ? lock_downgrade+0x740/0x740 [ 567.087820] ? ion_query_heaps+0x360/0x360 [ 567.092065] do_vfs_ioctl+0x75a/0xff0 [ 567.095876] ? ioctl_preallocate+0x1a0/0x1a0 [ 567.100288] ? lock_downgrade+0x740/0x740 [ 567.104424] ? __fget+0x225/0x360 [ 567.107859] ? do_vfs_ioctl+0xff0/0xff0 [ 567.111817] ? security_file_ioctl+0x83/0xb0 [ 567.116214] SyS_ioctl+0x7f/0xb0 [ 567.119569] ? do_vfs_ioctl+0xff0/0xff0 [ 567.123533] do_syscall_64+0x1d5/0x640 [ 567.127421] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 567.132603] RIP: 0033:0x45e219 [ 567.135770] RSP: 002b:00007f32980c7c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 567.143469] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 567.150718] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 567.157969] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 567.165233] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 567.172495] R13: 00007ffd1e850b6f R14: 00007f32980c89c0 R15: 000000000119bf8c [ 567.190488] CPU: 1 PID: 19836 Comm: syz-executor.0 Not tainted 4.14.217-syzkaller #0 [ 567.198850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 567.208402] Call Trace: [ 567.211024] dump_stack+0x1b2/0x281 [ 567.214667] warn_alloc.cold+0x96/0x1cc [ 567.218655] ? zone_watermark_ok_safe+0x220/0x220 [ 567.223543] __alloc_pages_nodemask+0x2127/0x2720 [ 567.228416] ? lock_acquire+0x170/0x3f0 [ 567.232419] ? lock_acquire+0x170/0x3f0 [ 567.236500] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 567.241390] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 567.246842] ? __mutex_unlock_slowpath+0x75/0x770 [ 567.251681] alloc_pages_current+0x155/0x260 [ 567.256090] ion_page_pool_alloc+0x118/0x1b0 [ 567.260507] ion_system_heap_allocate+0x133/0x8c0 [ 567.265343] ? _raw_spin_unlock+0x29/0x40 [ 567.269478] ? _ion_heap_freelist_drain+0x6e/0x410 [ 567.274408] ? ion_system_contig_heap_create+0x130/0x130 [ 567.279871] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 567.284893] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 567.290429] ion_alloc+0x27a/0x810 [ 567.293957] ? ion_dma_buf_release+0x40/0x40 [ 567.298372] ? __might_fault+0x177/0x1b0 [ 567.302450] ion_ioctl+0xea/0x1f0 [ 567.305896] ? ion_query_heaps+0x360/0x360 [ 567.310125] ? lock_acquire+0x170/0x3f0 [ 567.314102] ? lock_downgrade+0x740/0x740 [ 567.318237] ? ion_query_heaps+0x360/0x360 [ 567.322481] do_vfs_ioctl+0x75a/0xff0 [ 567.326269] ? ioctl_preallocate+0x1a0/0x1a0 [ 567.330658] ? lock_downgrade+0x740/0x740 [ 567.334793] ? __fget+0x225/0x360 [ 567.338226] ? do_vfs_ioctl+0xff0/0xff0 [ 567.342216] ? security_file_ioctl+0x83/0xb0 [ 567.346609] SyS_ioctl+0x7f/0xb0 [ 567.349954] ? do_vfs_ioctl+0xff0/0xff0 [ 567.353922] do_syscall_64+0x1d5/0x640 [ 567.357821] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 567.362993] RIP: 0033:0x45e219 [ 567.366172] RSP: 002b:00007f3154555c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 567.373876] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 567.381134] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 567.388394] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 567.395644] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 567.402892] R13: 00007ffd70bb297f R14: 00007f31545569c0 R15: 000000000119bf8c [ 567.418139] warn_alloc_show_mem: 3 callbacks suppressed [ 567.418145] Mem-Info: [ 567.429592] active_anon:12125 inactive_anon:18920 isolated_anon:0 [ 567.429592] active_file:193 inactive_file:212 isolated_file:47 [ 567.429592] unevictable:0 dirty:0 writeback:0 unstable:0 [ 567.429592] slab_reclaimable:12261 slab_unreclaimable:113255 [ 567.429592] mapped:52502 shmem:19226 pagetables:882 bounce:0 [ 567.429592] free:25106 free_pcp:568 free_cma:0 [ 567.472654] Node 0 active_anon:47860kB inactive_anon:56904kB active_file:68kB inactive_file:180kB unevictable:0kB isolated(anon):0kB isolated(file):60kB mapped:130388kB dirty:0kB writeback:0kB shmem:57984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 567.508560] Node 1 active_anon:640kB inactive_anon:18776kB active_file:0kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:78520kB dirty:0kB writeback:0kB shmem:18920kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 567.536670] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 567.576637] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 567.581982] Node 0 DMA32 free:20040kB min:36200kB low:45248kB high:54296kB active_anon:45732kB inactive_anon:56844kB active_file:152kB inactive_file:60kB unevictable:0kB writepending:8kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:8000kB pagetables:3092kB bounce:0kB free_pcp:356kB local_pcp:0kB free_cma:0kB [ 567.610956] lowmem_reserve[]: 0 0 0 0 0 [ 567.611227] oom_reaper: reaped process 19829 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 567.614963] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 567.654885] ion_system_heap invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=0, oom_score_adj=0 [ 567.671387] ion_system_heap cpuset=/ mems_allowed=0-1 [ 567.676618] CPU: 0 PID: 4245 Comm: ion_system_heap Not tainted 4.14.217-syzkaller #0 [ 567.684488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 567.690519] lowmem_reserve[]: [ 567.693846] Call Trace: [ 567.693852] 0 [ 567.696963] dump_stack+0x1b2/0x281 [ 567.699566] 0 0 [ 567.701369] dump_header+0x178/0x82f [ 567.701381] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 567.701391] ? ___ratelimit+0x2cd/0x530 [ 567.701400] oom_kill_process.cold+0x10/0xb18 [ 567.701414] ? lock_downgrade+0x740/0x740 [ 567.701430] out_of_memory+0x2dc/0x1190 [ 567.701444] ? oom_killer_disable+0x1c0/0x1c0 [ 567.736793] ? mutex_trylock+0x152/0x1a0 [ 567.737837] 0 [ 567.740851] __alloc_pages_nodemask+0x23e1/0x2720 [ 567.740872] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 567.740889] ? kmem_cache_alloc_node_trace+0x153/0x400 [ 567.740900] ? cache_grow_begin+0x41/0x630 [ 567.749025] 0 [ 567.752553] cache_grow_begin+0x91/0x630 [ 567.752562] ? cache_grow_begin+0x91/0x630 [ 567.752571] fallback_alloc+0x207/0x2c0 [ 567.752583] kmem_cache_alloc_node_trace+0xed/0x400 [ 567.752594] alloc_vmap_area+0xf0/0x7c0 [ 567.752607] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 567.752613] ? purge_vmap_area_lazy+0xb0/0xb0 [ 567.752618] ? __get_vm_area_node+0xed/0x340 [ 567.752625] ? kmem_cache_alloc_node_trace+0x383/0x400 [ 567.752636] __get_vm_area_node+0x126/0x340 [ 567.772318] vmap+0xd5/0x290 [ 567.776267] Node 1 [ 567.781288] ? ion_heap_clear_pages+0x23/0x70 [ 567.781296] ? vunmap+0x50/0x50 [ 567.781300] ? __vunmap+0x21c/0x300 [ 567.781311] ion_heap_clear_pages+0x23/0x70 [ 567.781319] ion_heap_sglist_zero+0x165/0x220 [ 567.781328] ? ion_heap_clear_pages+0x70/0x70 [ 567.781343] ? debug_check_no_obj_freed+0x2c0/0x680 [ 567.781368] ? pagerange_is_ram_callback+0x100/0x100 [ 567.815358] Normal free:26772kB min:53696kB low:67120kB high:80544kB active_anon:640kB inactive_anon:18776kB active_file:0kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:436kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 567.818888] ? ion_heap_deferred_free+0x222/0x470 [ 567.823988] lowmem_reserve[]: [ 567.825755] ion_system_heap_free+0x1d0/0x240 [ 567.830061] 0 [ 567.834553] ion_buffer_destroy+0x132/0x190 [ 567.834562] ion_heap_deferred_free+0x22a/0x470 [ 567.834572] ? __schedule+0x7f7/0x1de0 [ 567.834581] ? ion_heap_shrink_scan+0x1a0/0x1a0 [ 567.834594] ? wait_woken+0x230/0x230 [ 567.834604] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 567.834612] ? ion_heap_shrink_scan+0x1a0/0x1a0 [ 567.834622] kthread+0x30d/0x420 [ 567.834630] ? kthread_create_on_node+0xd0/0xd0 [ 567.834638] ret_from_fork+0x24/0x30 [ 567.864109] Mem-Info: [ 567.877061] syz-executor.0: [ 567.894750] syz-executor.2: [ 567.932086] page allocation failure: order:0 [ 567.958115] page allocation failure: order:0 [ 567.960437] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 567.964708] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 567.967392] (null) [ 567.980298] active_anon:11593 inactive_anon:18920 isolated_anon:0 [ 567.980298] active_file:31 inactive_file:1004 isolated_file:0 [ 567.980298] unevictable:0 dirty:2 writeback:0 unstable:0 [ 567.980298] slab_reclaimable:12261 slab_unreclaimable:113247 [ 567.980298] mapped:52883 shmem:19226 pagetables:882 bounce:0 [ 567.980298] free:44027 free_pcp:19 free_cma:0 [ 567.981766] syz-executor.0 cpuset= [ 567.999948] (null) [ 568.018058] 0 0 0 0 [ 568.025740] Node 0 DMA: 1*4kB (M) 11*8kB (U) 4*16kB (U) 2*32kB (U) 2*64kB (UM) 1*128kB (M) 1*256kB (M) 2*512kB (UM) 1*1024kB (M) 0*2048kB 2*4096kB (UM) = 10972kB [ 568.041364] Node 0 DMA32: 688*4kB (UME) 776*8kB (UME) 211*16kB (ME) 107*32kB (UME) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 17872kB [ 568.056190] / mems_allowed=0-1 [ 568.059406] CPU: 1 PID: 19836 Comm: syz-executor.0 Not tainted 4.14.217-syzkaller #0 [ 568.067345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 568.076708] Call Trace: [ 568.076940] syz-executor.2 cpuset=/ [ 568.079302] dump_stack+0x1b2/0x281 [ 568.079316] warn_alloc.cold+0x96/0x1cc [ 568.083330] mems_allowed=0-1 [ 568.086546] ? zone_watermark_ok_safe+0x220/0x220 [ 568.098438] ? usleep_range+0x130/0x130 [ 568.102415] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 568.107532] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 568.112543] ? run_timer_softirq+0x5a0/0x5a0 [ 568.116960] __alloc_pages_nodemask+0x2127/0x2720 [ 568.121808] ? lock_acquire+0x170/0x3f0 [ 568.125858] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 568.130690] ? ion_page_pool_alloc+0x9e/0x1b0 [ 568.135204] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 568.140674] alloc_pages_current+0x155/0x260 [ 568.145087] ion_page_pool_alloc+0x118/0x1b0 [ 568.149484] ion_system_heap_allocate+0x133/0x8c0 [ 568.154336] ? _raw_spin_unlock+0x29/0x40 [ 568.158503] ? _ion_heap_freelist_drain+0x6e/0x410 [ 568.163467] ? ion_system_contig_heap_create+0x130/0x130 [ 568.168904] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 568.173919] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 568.178780] ion_alloc+0x27a/0x810 [ 568.182325] ? ion_dma_buf_release+0x40/0x40 [ 568.186725] ? __might_fault+0x177/0x1b0 [ 568.190796] ion_ioctl+0xea/0x1f0 [ 568.194255] ? ion_query_heaps+0x360/0x360 [ 568.198494] ? lock_acquire+0x170/0x3f0 [ 568.202555] ? lock_downgrade+0x740/0x740 [ 568.206687] ? ion_query_heaps+0x360/0x360 [ 568.210916] do_vfs_ioctl+0x75a/0xff0 [ 568.214721] ? ioctl_preallocate+0x1a0/0x1a0 [ 568.219131] ? lock_downgrade+0x740/0x740 [ 568.223319] ? __fget+0x225/0x360 [ 568.226794] ? do_vfs_ioctl+0xff0/0xff0 [ 568.230764] ? security_file_ioctl+0x83/0xb0 [ 568.235156] SyS_ioctl+0x7f/0xb0 [ 568.238503] ? do_vfs_ioctl+0xff0/0xff0 [ 568.242463] do_syscall_64+0x1d5/0x640 [ 568.246336] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 568.251516] RIP: 0033:0x45e219 [ 568.254696] RSP: 002b:00007f3154555c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 568.262485] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 568.269737] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 568.277001] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 568.284551] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 568.291820] R13: 00007ffd70bb297f R14: 00007f31545569c0 R15: 000000000119bf8c [ 568.299092] CPU: 0 PID: 19829 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 568.300997] Node 0 [ 568.307010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 568.307012] Normal: 0*4kB [ 568.309234] Call Trace: [ 568.318742] 0*8kB [ 568.321430] dump_stack+0x1b2/0x281 [ 568.321446] warn_alloc.cold+0x96/0x1cc [ 568.323998] 0*16kB [ 568.326132] ? zone_watermark_ok_safe+0x220/0x220 [ 568.329723] 0*32kB [ 568.333675] ? usleep_range+0x130/0x130 [ 568.333684] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 568.333696] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 568.333707] ? run_timer_softirq+0x5a0/0x5a0 [ 568.333724] __alloc_pages_nodemask+0x2127/0x2720 [ 568.333740] ? lock_acquire+0x170/0x3f0 [ 568.335979] 0*64kB [ 568.340777] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 568.340788] ? ion_page_pool_alloc+0x9e/0x1b0 [ 568.340804] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 568.343007] 0*128kB [ 568.346986] ? alloc_pages_current+0xe3/0x260 [ 568.352131] 0*256kB [ 568.357071] alloc_pages_current+0x155/0x260 [ 568.361474] 0*512kB [ 568.366305] ion_page_pool_alloc+0x118/0x1b0 [ 568.370244] 0*1024kB [ 568.372475] ion_system_heap_allocate+0x133/0x8c0 [ 568.372486] ? ion_alloc+0x187/0x810 [ 568.372498] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 568.372508] ? ion_system_contig_heap_create+0x130/0x130 [ 568.372519] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 568.372530] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 568.372541] ion_alloc+0x204/0x810 [ 568.372556] ? ion_dma_buf_release+0x40/0x40 [ 568.377406] 0*2048kB [ 568.381855] ? __might_fault+0x177/0x1b0 [ 568.381868] ion_ioctl+0xea/0x1f0 [ 568.381880] ? ion_query_heaps+0x360/0x360 [ 568.387312] 0*4096kB [ 568.389618] ? lock_acquire+0x170/0x3f0 [ 568.394227] = 0kB [ 568.396406] ? lock_downgrade+0x740/0x740 [ 568.400819] Node 1 [ 568.403095] ? ion_query_heaps+0x360/0x360 [ 568.407558] Normal: [ 568.409953] do_vfs_ioctl+0x75a/0xff0 [ 568.414865] 1*4kB [ 568.418461] ? ioctl_preallocate+0x1a0/0x1a0 [ 568.430447] (U) [ 568.434906] ? lock_downgrade+0x740/0x740 [ 568.439716] 1*8kB [ 568.443239] ? __fget+0x225/0x360 [ 568.443249] ? do_vfs_ioctl+0xff0/0xff0 [ 568.443261] ? security_file_ioctl+0x83/0xb0 [ 568.443271] SyS_ioctl+0x7f/0xb0 [ 568.443280] ? do_vfs_ioctl+0xff0/0xff0 [ 568.460352] (U) [ 568.461771] do_syscall_64+0x1d5/0x640 [ 568.464150] 98*16kB [ 568.468158] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 568.470186] (UM) [ 568.474673] RIP: 0033:0x45e219 [ 568.474678] RSP: 002b:00007f994610dc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 568.474686] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 568.474691] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 568.474695] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 568.474700] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 568.474704] R13: 00007ffd6a5a041f R14: 00007f994610e9c0 R15: 000000000119bf8c [ 568.495140] warn_alloc_show_mem: 3 callbacks suppressed [ 568.495145] Mem-Info: [ 568.530380] 756*32kB (UM) 2388*64kB (UM) 81*128kB (UM) 35*256kB (UM) [ 568.540151] active_anon:11586 inactive_anon:18920 isolated_anon:0 [ 568.540151] active_file:58 inactive_file:1989 isolated_file:0 [ 568.540151] unevictable:0 dirty:15 writeback:0 unstable:0 [ 568.540151] slab_reclaimable:12259 slab_unreclaimable:113242 [ 568.540151] mapped:53218 shmem:19226 pagetables:885 bounce:0 [ 568.540151] free:209836 free_pcp:119 free_cma:0 [ 568.540908] 44*512kB (U) 247*1024kB (UM) 65*2048kB (U) 2*4096kB (U) [ 568.558968] Node 0 active_anon:45612kB inactive_anon:56904kB active_file:60kB inactive_file:652kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:130584kB dirty:8kB writeback:0kB shmem:57984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 568.563409] = 614700kB [ 568.563424] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 568.587946] Node 1 active_anon:732kB inactive_anon:18776kB active_file:172kB inactive_file:7504kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:82488kB dirty:52kB writeback:0kB shmem:18920kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 568.590751] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 568.590758] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 568.590764] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 568.590768] 21512 total pagecache pages [ 568.590777] 0 pages in swap cache [ 568.590782] Swap cache stats: add 0, delete 0, find 0/0 [ 568.590785] Free swap = 0kB [ 568.590788] Total swap = 0kB [ 568.590795] 2097051 pages RAM [ 568.600773] Node 0 [ 568.636023] 0 pages HighMem/MovableOnly [ 568.691601] DMA free:11164kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 568.715435] 363840 pages reserved [ 568.750318] lowmem_reserve[]: [ 568.756259] 0 pages cma reserved [ 568.758134] 0 2717 2718 2718 2718 [ 568.808217] Node 0 DMA32 free:72304kB min:36200kB low:45248kB high:54296kB active_anon:45612kB inactive_anon:56844kB active_file:60kB inactive_file:1652kB unevictable:0kB writepending:8kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7968kB pagetables:3088kB bounce:0kB free_pcp:876kB local_pcp:700kB free_cma:0kB [ 568.838311] lowmem_reserve[]: 0 0 0 0 0 [ 568.842644] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 568.868675] lowmem_reserve[]: 0 0 0 0 0 [ 568.873047] Node 1 Normal free:997928kB min:53696kB low:67120kB high:80544kB active_anon:732kB inactive_anon:18776kB active_file:472kB inactive_file:7332kB unevictable:0kB writepending:52kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:452kB bounce:0kB free_pcp:892kB local_pcp:740kB free_cma:0kB [ 568.902637] lowmem_reserve[]: 0 0 0 0 0 [ 568.906754] Node 0 DMA: 1*4kB (M) 6*8kB (U) 4*16kB (U) 2*32kB (U) 3*64kB (UM) 2*128kB (UM) 1*256kB (M) 2*512kB (UM) 1*1024kB (M) 0*2048kB 2*4096kB (UM) = 11124kB [ 568.921859] Node 0 DMA32: 367*4kB (UE) 652*8kB (ME) 212*16kB (UME) 36*32kB (UME) 6*64kB (UME) 56*128kB (U) 57*256kB (U) 1*512kB (U) 9*1024kB (U) 1*2048kB (M) 0*4096kB = 45148kB [ 568.938613] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 568.949443] Node 1 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 5068*64kB (U) 575*128kB (U) 139*256kB (UM) 69*512kB (UM) 306*1024kB (U) 79*2048kB (U) 4*4096kB (U) = 960400kB [ 568.964873] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 568.974059] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 568.983031] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 568.992095] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 569.001016] 22044 total pagecache pages [ 569.005099] 0 pages in swap cache [ 569.009462] Swap cache stats: add 0, delete 0, find 0/0 [ 569.014933] Free swap = 0kB [ 569.018232] Total swap = 0kB [ 569.021272] 2097051 pages RAM [ 569.024366] 0 pages HighMem/MovableOnly [ 569.028330] 363840 pages reserved [ 569.035364] 0 pages cma reserved [ 569.044926] Node 0 active_anon:45560kB inactive_anon:56904kB active_file:144kB inactive_file:2208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:132188kB dirty:44kB writeback:0kB shmem:57984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 569.075061] Node 1 active_anon:644kB inactive_anon:18776kB active_file:548kB inactive_file:8424kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:83788kB dirty:64kB writeback:0kB shmem:18920kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 569.108750] Node 0 DMA free:11124kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 569.139541] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 569.145588] Node 0 DMA32 free:44920kB min:36200kB low:45248kB high:54296kB active_anon:45360kB inactive_anon:56844kB active_file:144kB inactive_file:2208kB unevictable:0kB writepending:44kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7968kB pagetables:2872kB bounce:0kB free_pcp:1384kB local_pcp:852kB free_cma:0kB [ 569.175822] lowmem_reserve[]: 0 0 0 0 0 [ 569.181897] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 569.217705] lowmem_reserve[]: 0 0 0 0 0 [ 569.222440] Node 1 Normal free:888108kB min:53696kB low:67120kB high:80544kB active_anon:944kB inactive_anon:18776kB active_file:1948kB inactive_file:7424kB unevictable:0kB writepending:64kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:436kB bounce:0kB free_pcp:728kB local_pcp:548kB free_cma:0kB [ 569.255706] lowmem_reserve[]: 0 0 0 0 0 [ 569.260802] Node 0 DMA: 1*4kB (M) 6*8kB (U) 4*16kB (U) 2*32kB (U) 3*64kB (UM) 2*128kB (UM) 1*256kB (M) 2*512kB (UM) 1*1024kB (M) 0*2048kB 2*4096kB (UM) = 11124kB [ 569.276293] Node 0 DMA32: 368*4kB (UME) 636*8kB (ME) 212*16kB (UME) 36*32kB (UME) 5*64kB (ME) 53*128kB (U) 57*256kB (U) 1*512kB (U) 9*1024kB (U) 1*2048kB (M) 0*4096kB = 44576kB [ 569.293252] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 569.307796] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 2*16kB (UM) 2*32kB (UM) 3957*64kB (U) 576*128kB (UM) 139*256kB (UM) 68*512kB (U) 307*1024kB (UM) 80*2048kB (UM) 3*4096kB (U) = 887984kB [ 569.326106] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 569.336155] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 569.346915] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 569.365816] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 569.378778] 22294 total pagecache pages [ 569.381170] systemd-journald[19862]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 569.410322] 0 pages in swap cache [ 569.420577] Swap cache stats: add 0, delete 0, find 0/0 [ 569.426074] Free swap = 0kB [ 569.429083] Total swap = 0kB [ 569.720385] 2097051 pages RAM [ 569.723531] 0 pages HighMem/MovableOnly [ 569.727500] 363840 pages reserved [ 569.913910] 0 pages cma reserved [ 569.919003] systemd[1]: Started Journal Service. [ 569.928909] Out of memory: Kill process 18707 (syz-executor.5) score 4 or sacrifice child [ 569.939085] Killed process 18707 (syz-executor.5) total-vm:93216kB, anon-rss:112kB, file-rss:34816kB, shmem-rss:0kB [ 569.999787] oom_reaper: reaped process 18707 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 21:25:53 executing program 2: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0xc0241, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:25:53 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0xc0241, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:25:53 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0x12}) 21:25:55 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0xc0241, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:25:55 executing program 0: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0xc0241, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:25:55 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0xc0241, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:25:55 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0x12}) 21:25:55 executing program 2: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0xc0241, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:25:55 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x80000001, 0x4) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0xc0241, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:25:55 executing program 0: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0xc0241, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:25:55 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001}) 21:25:55 executing program 2: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0xc0241, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:25:55 executing program 0: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0xc0241, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:25:55 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:25:55 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001}) [ 573.517954] warn_alloc: 2 callbacks suppressed [ 573.517959] syz-executor.3: [ 573.518023] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 573.534986] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 573.558183] syz-executor.1 cpuset= [ 573.558959] syz-executor.2: [ 573.564443] / mems_allowed=0-1 [ 573.571861] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 573.573856] syz-executor.3 cpuset= [ 573.583174] CPU: 0 PID: 19897 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 573.595355] / [ 573.595455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 573.595464] Call Trace: [ 573.599380] mems_allowed=0-1 [ 573.606529] dump_stack+0x1b2/0x281 [ 573.606544] warn_alloc.cold+0x96/0x1cc [ 573.606562] ? zone_watermark_ok_safe+0x220/0x220 [ 573.606585] __alloc_pages_nodemask+0x2127/0x2720 [ 573.606597] ? retint_kernel+0x2d/0x2d [ 573.606614] ? lock_acquire+0x170/0x3f0 [ 573.606628] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 573.606643] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 573.606655] ? __mutex_unlock_slowpath+0x75/0x770 [ 573.652596] alloc_pages_current+0x155/0x260 [ 573.657046] ion_page_pool_alloc+0x118/0x1b0 [ 573.661471] ion_system_heap_allocate+0x133/0x8c0 [ 573.666760] ? ion_alloc+0x187/0x810 [ 573.670486] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 573.675946] ? ion_system_contig_heap_create+0x130/0x130 [ 573.681405] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 573.686431] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 573.691283] ion_alloc+0x204/0x810 [ 573.694840] ? ion_dma_buf_release+0x40/0x40 [ 573.699249] ? __might_fault+0x177/0x1b0 [ 573.703351] ion_ioctl+0xea/0x1f0 [ 573.706823] ? ion_query_heaps+0x360/0x360 [ 573.711062] ? lock_acquire+0x170/0x3f0 [ 573.715044] ? lock_downgrade+0x740/0x740 [ 573.719196] ? ion_query_heaps+0x360/0x360 [ 573.723433] do_vfs_ioctl+0x75a/0xff0 [ 573.727260] ? ioctl_preallocate+0x1a0/0x1a0 [ 573.731667] ? lock_downgrade+0x740/0x740 [ 573.735838] ? __fget+0x225/0x360 [ 573.739306] ? do_vfs_ioctl+0xff0/0xff0 [ 573.743275] ? security_file_ioctl+0x83/0xb0 [ 573.747700] SyS_ioctl+0x7f/0xb0 [ 573.751066] ? do_vfs_ioctl+0xff0/0xff0 [ 573.755038] do_syscall_64+0x1d5/0x640 [ 573.758939] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 573.764123] RIP: 0033:0x45e219 [ 573.767332] RSP: 002b:00007f39dd445c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 573.775038] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 573.782330] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 573.789605] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 573.796878] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 573.804149] R13: 00007ffc799adfff R14: 00007f39dd4469c0 R15: 000000000119bf8c [ 573.814394] CPU: 1 PID: 19898 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 573.820957] syz-executor.2 cpuset= [ 573.822303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 573.822308] Call Trace: [ 573.822330] dump_stack+0x1b2/0x281 [ 573.822345] warn_alloc.cold+0x96/0x1cc [ 573.827018] / [ 573.835230] ? zone_watermark_ok_safe+0x220/0x220 [ 573.847940] mems_allowed=0-1 [ 573.851940] __alloc_pages_nodemask+0x2127/0x2720 [ 573.851955] ? retint_kernel+0x2d/0x2d [ 573.851973] ? lock_acquire+0x170/0x3f0 [ 573.869809] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 573.874647] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 573.880093] ? __mutex_unlock_slowpath+0x75/0x770 [ 573.884921] ? retint_kernel+0x2d/0x2d [ 573.888793] alloc_pages_current+0x155/0x260 [ 573.893187] ion_page_pool_alloc+0x118/0x1b0 [ 573.897581] ion_system_heap_allocate+0x133/0x8c0 [ 573.902407] ? ion_alloc+0x187/0x810 [ 573.906102] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 573.911550] ? ion_system_contig_heap_create+0x130/0x130 [ 573.916998] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 573.922014] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 573.926860] ion_alloc+0x204/0x810 [ 573.930432] ? ion_dma_buf_release+0x40/0x40 [ 573.934862] ? __might_fault+0x177/0x1b0 [ 573.938907] ion_ioctl+0xea/0x1f0 [ 573.942343] ? ion_query_heaps+0x360/0x360 [ 573.946562] ? lock_acquire+0x170/0x3f0 [ 573.950518] ? lock_downgrade+0x740/0x740 [ 573.954649] ? ion_query_heaps+0x360/0x360 [ 573.958868] do_vfs_ioctl+0x75a/0xff0 [ 573.962652] ? ioctl_preallocate+0x1a0/0x1a0 [ 573.967061] ? lock_downgrade+0x740/0x740 [ 573.971199] ? __fget+0x225/0x360 [ 573.974631] ? do_vfs_ioctl+0xff0/0xff0 [ 573.978586] ? security_file_ioctl+0x83/0xb0 [ 573.982976] SyS_ioctl+0x7f/0xb0 [ 573.986321] ? do_vfs_ioctl+0xff0/0xff0 [ 573.990278] do_syscall_64+0x1d5/0x640 [ 573.994153] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 573.999323] RIP: 0033:0x45e219 [ 574.002492] RSP: 002b:00007f1c98502c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 574.010179] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 574.017435] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 574.024685] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 574.033249] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 574.040499] R13: 00007ffef867e34f R14: 00007f1c985039c0 R15: 000000000119bf8c [ 574.047774] CPU: 0 PID: 19914 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 574.055661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 574.065023] Call Trace: [ 574.067628] dump_stack+0x1b2/0x281 [ 574.071708] warn_alloc.cold+0x96/0x1cc [ 574.075697] ? zone_watermark_ok_safe+0x220/0x220 [ 574.080559] __alloc_pages_nodemask+0x2127/0x2720 [ 574.085415] ? lock_acquire+0x170/0x3f0 [ 574.089405] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 574.094266] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 574.099739] ? __mutex_unlock_slowpath+0x75/0x770 [ 574.104596] ? retint_kernel+0x2d/0x2d [ 574.108498] alloc_pages_current+0x155/0x260 [ 574.112924] ion_page_pool_alloc+0x118/0x1b0 [ 574.117345] ion_system_heap_allocate+0x133/0x8c0 [ 574.122194] ? ion_alloc+0x187/0x810 [ 574.125916] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 574.131377] ? ion_system_contig_heap_create+0x130/0x130 [ 574.136837] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 574.141865] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 574.146725] ion_alloc+0x204/0x810 [ 574.150283] ? ion_dma_buf_release+0x40/0x40 [ 574.154706] ? __might_fault+0x177/0x1b0 [ 574.158782] ion_ioctl+0xea/0x1f0 [ 574.162855] ? ion_query_heaps+0x360/0x360 [ 574.167101] ? lock_acquire+0x170/0x3f0 [ 574.171086] ? lock_downgrade+0x740/0x740 [ 574.175257] ? ion_query_heaps+0x360/0x360 [ 574.180284] do_vfs_ioctl+0x75a/0xff0 [ 574.184098] ? ioctl_preallocate+0x1a0/0x1a0 [ 574.188513] ? lock_downgrade+0x740/0x740 [ 574.192685] ? __fget+0x225/0x360 [ 574.196147] ? do_vfs_ioctl+0xff0/0xff0 [ 574.200131] ? security_file_ioctl+0x83/0xb0 [ 574.204548] SyS_ioctl+0x7f/0xb0 [ 574.207920] ? do_vfs_ioctl+0xff0/0xff0 [ 574.211901] do_syscall_64+0x1d5/0x640 [ 574.215802] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 574.220994] RIP: 0033:0x45e219 [ 574.224180] RSP: 002b:00007f994610dc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 574.231893] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 574.239375] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 574.246648] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 574.253925] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 574.261205] R13: 00007ffd6a5a041f R14: 00007f994610e9c0 R15: 000000000119bf8c [ 574.275017] warn_alloc_show_mem: 1 callbacks suppressed [ 574.275115] Mem-Info: [ 574.284087] active_anon:11560 inactive_anon:20951 isolated_anon:0 [ 574.284087] active_file:1011 inactive_file:6362 isolated_file:0 [ 574.284087] unevictable:0 dirty:20 writeback:0 unstable:0 [ 574.284087] slab_reclaimable:12266 slab_unreclaimable:117321 [ 574.284087] mapped:49207 shmem:21271 pagetables:774 bounce:0 [ 574.284087] free:440052 free_pcp:99 free_cma:0 [ 574.318499] Node 0 active_anon:45184kB inactive_anon:56844kB active_file:4020kB inactive_file:25420kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:138196kB dirty:60kB writeback:0kB shmem:57980kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 574.347807] Node 1 active_anon:1056kB inactive_anon:26960kB active_file:24kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:64832kB dirty:20kB writeback:0kB shmem:27104kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 574.375546] Node 0 DMA free:11452kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 574.403018] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 574.408249] Node 0 DMA32 free:888764kB min:36200kB low:45248kB high:54296kB active_anon:45184kB inactive_anon:56784kB active_file:4020kB inactive_file:25220kB unevictable:0kB writepending:60kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:8032kB pagetables:2616kB bounce:0kB free_pcp:332kB local_pcp:192kB free_cma:0kB [ 574.438363] lowmem_reserve[]: 0 0 0 0 0 [ 574.451636] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 574.478590] lowmem_reserve[]: 0 0 0 0 0 [ 574.483118] Node 1 Normal free:868716kB min:53696kB low:67120kB high:80544kB active_anon:1056kB inactive_anon:26960kB active_file:24kB inactive_file:28kB unevictable:0kB writepending:20kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:480kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 574.512811] lowmem_reserve[]: 0 0 0 0 0 [ 574.516985] Node 0 DMA: 9*4kB (UM) 17*8kB (U) 15*16kB (U) 9*32kB (U) 4*64kB (UM) 2*128kB (UM) 2*256kB (UM) 1*512kB (M) 1*1024kB (M) 0*2048kB 2*4096kB (UM) = 11452kB [ 574.536232] Node 0 DMA32: 8*4kB (UE) 3197*8kB (UME) 14374*16kB (UME) 8899*32kB (UME) 2417*64kB (UME) 530*128kB (UME) 106*256kB (UM) 13*512kB (U) 2*1024kB (U) 0*2048kB 0*4096kB = 798728kB [ 574.556351] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 574.568435] Node 1 Normal: 3597*4kB (UM) 3291*8kB (U) 1694*16kB (U) 1370*32kB (U) 8850*64kB (U) 902*128kB (U) 178*256kB (U) 46*512kB (U) 6*1024kB (U) 0*2048kB 0*4096kB = 868780kB [ 574.585166] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 574.601659] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 574.610762] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 574.620959] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 574.632132] 28430 total pagecache pages [ 574.640680] 0 pages in swap cache [ 574.648704] Swap cache stats: add 0, delete 0, find 0/0 [ 574.662350] Free swap = 0kB [ 574.665513] Total swap = 0kB [ 574.668661] 2097051 pages RAM [ 574.676364] 0 pages HighMem/MovableOnly [ 574.682515] 363840 pages reserved [ 574.686452] 0 pages cma reserved [ 574.972473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 574.979288] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 575.013905] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 575.030807] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 575.045092] device bridge_slave_1 left promiscuous mode [ 575.064450] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.082185] device bridge_slave_0 left promiscuous mode [ 575.087977] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.099207] device veth1_macvtap left promiscuous mode [ 575.110916] device veth0_macvtap left promiscuous mode [ 575.116653] device veth1_vlan left promiscuous mode [ 575.143469] device veth0_vlan left promiscuous mode [ 575.420658] device hsr_slave_1 left promiscuous mode [ 575.465193] device hsr_slave_0 left promiscuous mode [ 575.553755] team0 (unregistering): Port device team_slave_1 removed [ 575.584797] team0 (unregistering): Port device team_slave_0 removed [ 575.616019] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 575.654011] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 575.751447] bond0 (unregistering): Released all slaves [ 576.463706] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 576.509693] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 576.514530] CPU: 0 PID: 7963 Comm: syz-fuzzer Not tainted 4.14.217-syzkaller #0 [ 576.521977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 576.531337] Call Trace: [ 576.533946] dump_stack+0x1b2/0x281 [ 576.537571] dump_header+0x178/0x82f [ 576.541279] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 576.546371] ? ___ratelimit+0x2cd/0x530 [ 576.550354] oom_kill_process.cold+0x10/0xb18 [ 576.554860] out_of_memory+0xe3e/0x1190 [ 576.558843] ? oom_killer_disable+0x1c0/0x1c0 [ 576.563432] ? mutex_trylock+0x152/0x1a0 [ 576.567580] __alloc_pages_nodemask+0x23e1/0x2720 [ 576.572439] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 576.577382] alloc_pages_current+0x155/0x260 [ 576.581787] filemap_fault+0xea3/0x1980 [ 576.585763] ext4_filemap_fault+0x84/0xb0 [ 576.589908] __do_fault+0xfa/0x380 [ 576.593443] __handle_mm_fault+0x2497/0x4620 [ 576.597948] ? vm_insert_page+0x7c0/0x7c0 [ 576.602096] ? free_object+0xe4/0x240 [ 576.605913] handle_mm_fault+0x391/0x860 [ 576.610017] __do_page_fault+0x549/0xad0 [ 576.614080] ? spurious_fault+0x640/0x640 [ 576.618224] ? do_page_fault+0x60/0x500 [ 576.622198] ? page_fault+0x2f/0x50 [ 576.625819] page_fault+0x45/0x50 [ 576.629263] RIP: 0000:0xb358f8 [ 576.632449] RSP: 0014:000000c00003df28 EFLAGS: 00438920 [ 576.642533] Mem-Info: [ 576.653686] active_anon:11627 inactive_anon:20954 isolated_anon:0 [ 576.653686] active_file:19 inactive_file:0 isolated_file:0 [ 576.653686] unevictable:0 dirty:33 writeback:0 unstable:0 [ 576.653686] slab_reclaimable:12265 slab_unreclaimable:115971 [ 576.653686] mapped:52667 shmem:21275 pagetables:822 bounce:0 [ 576.653686] free:13902 free_pcp:60 free_cma:0 [ 576.694891] Node 0 active_anon:45300kB inactive_anon:56844kB active_file:32kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:145740kB dirty:108kB writeback:0kB shmem:57980kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 576.719700] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 576.729497] Node 1 active_anon:1208kB inactive_anon:26972kB active_file:44kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:64928kB dirty:24kB writeback:0kB shmem:27120kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 576.753250] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 576.769334] CPU: 1 PID: 19914 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 576.777212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 576.779586] Node 0 [ 576.786556] Call Trace: [ 576.786573] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 576.788839] dump_stack+0x1b2/0x281 [ 576.799572] lowmem_reserve[]: [ 576.816988] warn_alloc.cold+0x96/0x1cc [ 576.817003] ? zone_watermark_ok_safe+0x220/0x220 [ 576.832556] ? usleep_range+0x130/0x130 [ 576.836524] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 576.839575] 0 2717 [ 576.841620] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 576.841632] ? run_timer_softirq+0x5a0/0x5a0 [ 576.844124] 2718 [ 576.849144] __alloc_pages_nodemask+0x2127/0x2720 [ 576.860402] ? lock_acquire+0x170/0x3f0 [ 576.864383] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 576.869223] ? ion_page_pool_alloc+0x9e/0x1b0 [ 576.869569] 2718 2718 [ 576.873716] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 576.876230] alloc_pages_current+0x155/0x260 [ 576.886055] ion_page_pool_alloc+0x118/0x1b0 [ 576.889565] Node 0 DMA32 free:17808kB min:36200kB low:45248kB high:54296kB active_anon:45200kB inactive_anon:56784kB active_file:604kB inactive_file:396kB unevictable:0kB writepending:108kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:8032kB pagetables:2808kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 576.890464] ion_system_heap_allocate+0x133/0x8c0 [ 576.890475] ? ion_alloc+0x187/0x810 [ 576.928086] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 576.933536] ? ion_system_contig_heap_create+0x130/0x130 [ 576.938980] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 576.943993] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 576.948834] ion_alloc+0x204/0x810 [ 576.949561] lowmem_reserve[]: 0 0 [ 576.952393] ? ion_dma_buf_release+0x40/0x40 [ 576.952405] ? __might_fault+0x177/0x1b0 [ 576.955838] 0 [ 576.960232] ion_ioctl+0xea/0x1f0 [ 576.960242] ? ion_query_heaps+0x360/0x360 [ 576.960255] ? lock_acquire+0x170/0x3f0 [ 576.960264] ? lock_downgrade+0x740/0x740 [ 576.979557] 0 [ 576.981909] ? ion_query_heaps+0x360/0x360 [ 576.981915] 0 [ 576.983704] do_vfs_ioctl+0x75a/0xff0 [ 576.989720] ? ioctl_preallocate+0x1a0/0x1a0 [ 576.989731] ? lock_downgrade+0x740/0x740 [ 576.989745] ? __fget+0x225/0x360 [ 577.005506] ? do_vfs_ioctl+0xff0/0xff0 [ 577.009487] ? security_file_ioctl+0x83/0xb0 [ 577.009568] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 577.013899] SyS_ioctl+0x7f/0xb0 [ 577.013909] ? do_vfs_ioctl+0xff0/0xff0 [ 577.046864] do_syscall_64+0x1d5/0x640 [ 577.050757] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 577.055941] RIP: 0033:0x45e219 [ 577.057441] lowmem_reserve[]: [ 577.059144] RSP: 002b:00007f994610dc68 EFLAGS: 00000246 [ 577.059151] 0 [ 577.062231] ORIG_RAX: 0000000000000010 [ 577.062237] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 577.062242] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 577.062246] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 577.062251] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 577.062256] R13: 00007ffd6a5a041f R14: 00007f994610e9c0 R15: 000000000119bf8c [ 577.069321] warn_alloc_show_mem: 2 callbacks suppressed [ 577.069324] Mem-Info: [ 577.086025] 0 [ 577.093230] active_anon:11637 inactive_anon:20954 isolated_anon:0 [ 577.093230] active_file:35 inactive_file:2 isolated_file:0 [ 577.093230] unevictable:0 dirty:4 writeback:8 unstable:0 [ 577.093230] slab_reclaimable:12265 slab_unreclaimable:115851 [ 577.093230] mapped:52652 shmem:21275 pagetables:822 bounce:0 [ 577.093230] free:14080 free_pcp:62 free_cma:0 [ 577.103195] 0 [ 577.114657] Node 0 active_anon:45328kB inactive_anon:56844kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:145688kB dirty:0kB writeback:0kB shmem:57980kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 577.121744] 0 [ 577.160118] Node 1 active_anon:1220kB inactive_anon:26972kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:64876kB dirty:0kB writeback:0kB shmem:27120kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 577.191623] 0 [ 577.220417] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 577.248556] Node 1 Normal free:26624kB min:53696kB low:67120kB high:80544kB active_anon:1220kB inactive_anon:26972kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:480kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 577.254416] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 577.289789] Node 0 DMA32 free:18520kB min:36200kB low:45248kB high:54296kB active_anon:45328kB inactive_anon:56784kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:8032kB pagetables:2808kB bounce:0kB free_pcp:148kB local_pcp:120kB free_cma:0kB [ 577.302096] lowmem_reserve[]: [ 577.325254] lowmem_reserve[]: [ 577.327628] 0 [ 577.328441] 0 [ 577.331824] 0 [ 577.333400] 0 [ 577.335318] 0 [ 577.336988] 0 0 0 [ 577.349474] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 577.356910] 0 [ 577.384146] lowmem_reserve[]: 0 0 0 0 0 [ 577.390062] Node 1 Normal free:26624kB min:53696kB low:67120kB high:80544kB active_anon:1220kB inactive_anon:26972kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:480kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 577.409528] 0 [ 577.425380] lowmem_reserve[]: 0 0 0 0 0 [ 577.429411] Node 0 DMA: 1*4kB (M) 1*8kB (U) 0*16kB 6*32kB (U) 4*64kB (UM) 2*128kB (UM) 2*256kB (UM) 1*512kB (M) 1*1024kB (M) 0*2048kB 2*4096kB (UM) = 10956kB [ 577.439534] Node 0 DMA: 1*4kB (M) 1*8kB (U) 0*16kB 6*32kB (U) 4*64kB (UM) 2*128kB (UM) 2*256kB (UM) 1*512kB (M) 1*1024kB (M) 0*2048kB 2*4096kB (UM) = 10956kB [ 577.450568] Node 0 DMA32: 910*4kB (ME) 1030*8kB (UME) 287*16kB (UME) 62*32kB (UME) 12*64kB (UME) 4*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19736kB [ 577.472936] Node 0 DMA32: [ 577.486748] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 577.496692] 910*4kB (ME) 1030*8kB (UME) 287*16kB (UME) 62*32kB (UME) 12*64kB (UME) 4*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19736kB [ 577.506233] Node 1 Normal: 12*4kB (M) 22*8kB (UM) 5*16kB (UM) 5*32kB (UM) 6*64kB (UM) 2*128kB (UM) 0*256kB 40*512kB (UM) 5*1024kB (U) 0*2048kB 0*4096kB = 26704kB [ 577.514713] Bluetooth: hci3 command 0x0409 tx timeout [ 577.535032] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 577.543965] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 577.559284] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 577.565978] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 577.568256] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 577.593181] 21307 total pagecache pages [ 577.597185] 0 pages in swap cache [ 577.599522] Node 1 Normal: 12*4kB (M) 22*8kB (UM) 5*16kB (UM) 5*32kB (UM) 6*64kB (UM) 2*128kB (UM) 0*256kB 40*512kB (UM) 5*1024kB (U) 0*2048kB 0*4096kB = 26704kB [ 577.602639] Swap cache stats: add 0, delete 0, find 0/0 [ 577.625997] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 577.633739] IPVS: ftp: loaded support on port[0] = 21 [ 577.639047] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 577.648667] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 577.649395] Free swap = 0kB [ 577.661261] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 577.670467] Total swap = 0kB [ 577.670475] 2097051 pages RAM [ 577.670478] 0 pages HighMem/MovableOnly [ 577.670481] 363840 pages reserved [ 577.670484] 0 pages cma reserved [ 577.709764] 21529 total pagecache pages [ 577.724865] 0 pages in swap cache [ 577.728869] Swap cache stats: add 0, delete 0, find 0/0 [ 577.751763] Free swap = 0kB [ 577.754932] Total swap = 0kB [ 577.757945] 2097051 pages RAM [ 577.771485] 0 pages HighMem/MovableOnly [ 577.775911] 363840 pages reserved [ 577.779372] 0 pages cma reserved [ 577.790853] Out of memory (oom_kill_allocating_task): Kill process 7963 (syz-fuzzer) score 0 or sacrifice child [ 577.839655] Killed process 19920 (syz-executor.5) total-vm:85024kB, anon-rss:72kB, file-rss:4kB, shmem-rss:0kB [ 577.885720] oom_reaper: reaped process 19914 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 577.945876] oom_reaper: reaped process 19920 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 578.472822] Bluetooth: hci4 command 0x0406 tx timeout [ 578.783182] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 578.802696] oom_reaper: reaped process 19898 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 578.850111] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 578.855280] CPU: 0 PID: 19914 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 578.863223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 578.872584] Call Trace: [ 578.875172] dump_stack+0x1b2/0x281 [ 578.878786] warn_alloc.cold+0x96/0x1cc [ 578.886059] ? zone_watermark_ok_safe+0x220/0x220 [ 578.890896] __alloc_pages_nodemask+0x2127/0x2720 [ 578.898503] ? _raw_spin_unlock_irq+0x5a/0x80 [ 578.902992] ? finish_task_switch+0x178/0x610 [ 578.907484] ? finish_task_switch+0x14d/0x610 [ 578.911966] ? lock_acquire+0x170/0x3f0 [ 578.915928] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 578.920851] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 578.926315] ? __mutex_unlock_slowpath+0x75/0x770 [ 578.931158] ? alloc_pages_current+0x84/0x260 [ 578.935907] alloc_pages_current+0x155/0x260 [ 578.940314] ion_page_pool_alloc+0x118/0x1b0 [ 578.944708] ion_system_heap_allocate+0x133/0x8c0 [ 578.949568] ? _raw_spin_unlock+0x29/0x40 [ 578.953708] ? _ion_heap_freelist_drain+0x6e/0x410 [ 578.958646] ? ion_system_contig_heap_create+0x130/0x130 [ 578.964081] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 578.969080] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 578.974602] ion_alloc+0x27a/0x810 [ 578.978286] ? ion_dma_buf_release+0x40/0x40 [ 578.982705] ? __might_fault+0x177/0x1b0 [ 578.987533] ion_ioctl+0xea/0x1f0 [ 578.991058] ? ion_query_heaps+0x360/0x360 [ 578.995830] ? lock_acquire+0x170/0x3f0 [ 579.001145] ? lock_downgrade+0x740/0x740 [ 579.005376] ? ion_query_heaps+0x360/0x360 [ 579.009898] do_vfs_ioctl+0x75a/0xff0 [ 579.014329] ? ioctl_preallocate+0x1a0/0x1a0 [ 579.019137] ? lock_downgrade+0x740/0x740 [ 579.026324] ? __fget+0x225/0x360 [ 579.031096] ? do_vfs_ioctl+0xff0/0xff0 [ 579.036957] ? security_file_ioctl+0x83/0xb0 [ 579.043657] SyS_ioctl+0x7f/0xb0 [ 579.052309] ? do_vfs_ioctl+0xff0/0xff0 [ 579.056726] do_syscall_64+0x1d5/0x640 [ 579.060930] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 579.067321] RIP: 0033:0x45e219 [ 579.070725] RSP: 002b:00007f994610dc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 579.080905] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 579.088720] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 579.096287] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 579.103664] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 579.111706] R13: 00007ffd6a5a041f R14: 00007f994610e9c0 R15: 000000000119bf8c [ 579.123773] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 579.144509] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 579.150045] CPU: 0 PID: 19898 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 579.157925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 579.168053] Call Trace: [ 579.171969] dump_stack+0x1b2/0x281 [ 579.175694] warn_alloc.cold+0x96/0x1cc [ 579.179765] ? zone_watermark_ok_safe+0x220/0x220 [ 579.184592] ? usleep_range+0x130/0x130 [ 579.188549] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 579.193640] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 579.198667] ? run_timer_softirq+0x5a0/0x5a0 [ 579.203076] __alloc_pages_nodemask+0x2127/0x2720 [ 579.207906] ? lock_acquire+0x170/0x3f0 [ 579.211872] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 579.216872] ? ion_page_pool_alloc+0x9e/0x1b0 [ 579.221354] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 579.226808] ? alloc_pages_current+0xe3/0x260 [ 579.231288] alloc_pages_current+0x155/0x260 [ 579.235706] ion_page_pool_alloc+0x118/0x1b0 [ 579.240100] ion_system_heap_allocate+0x133/0x8c0 [ 579.246070] ? ion_alloc+0x187/0x810 [ 579.249781] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 579.255700] ? ion_system_contig_heap_create+0x130/0x130 [ 579.261133] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 579.266246] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 579.271088] ion_alloc+0x204/0x810 [ 579.274615] ? ion_dma_buf_release+0x40/0x40 [ 579.279162] ? __might_fault+0x177/0x1b0 [ 579.283225] ion_ioctl+0xea/0x1f0 [ 579.286668] ? ion_query_heaps+0x360/0x360 [ 579.290890] ? lock_acquire+0x170/0x3f0 [ 579.294868] ? lock_downgrade+0x740/0x740 [ 579.299020] ? ion_query_heaps+0x360/0x360 [ 579.303256] do_vfs_ioctl+0x75a/0xff0 [ 579.307141] ? ioctl_preallocate+0x1a0/0x1a0 [ 579.311539] ? lock_downgrade+0x740/0x740 [ 579.315847] ? __fget+0x225/0x360 [ 579.319300] ? do_vfs_ioctl+0xff0/0xff0 [ 579.323287] ? security_file_ioctl+0x83/0xb0 [ 579.327684] SyS_ioctl+0x7f/0xb0 [ 579.331033] ? do_vfs_ioctl+0xff0/0xff0 [ 579.335000] do_syscall_64+0x1d5/0x640 [ 579.339051] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 579.344229] RIP: 0033:0x45e219 [ 579.347403] RSP: 002b:00007f1c98502c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 579.355197] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 579.362452] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 579.370137] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 579.378172] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 579.385441] R13: 00007ffef867e34f R14: 00007f1c985039c0 R15: 000000000119bf8c [ 579.399941] Mem-Info: [ 579.401292] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null) [ 579.402395] active_anon:11516 inactive_anon:20951 isolated_anon:0 [ 579.402395] active_file:16 inactive_file:15 isolated_file:0 [ 579.402395] unevictable:0 dirty:0 writeback:0 unstable:0 [ 579.402395] slab_reclaimable:12265 slab_unreclaimable:115212 [ 579.402395] mapped:43965 shmem:21271 pagetables:774 bounce:0 [ 579.402395] free:14067 free_pcp:73 free_cma:0 [ 579.402413] Node 0 active_anon:44908kB inactive_anon:56844kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:110872kB dirty:0kB writeback:0kB shmem:57980kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 579.429269] , order=0, oom_score_adj=0 [ 579.497372] in:imklog cpuset=/ mems_allowed=0-1 [ 579.505488] CPU: 1 PID: 18016 Comm: in:imklog Not tainted 4.14.217-syzkaller #0 [ 579.513607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 579.515171] Node 1 active_anon:1156kB inactive_anon:26960kB active_file:48kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:64988kB dirty:0kB writeback:0kB shmem:27104kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 579.522956] Call Trace: [ 579.522985] dump_stack+0x1b2/0x281 [ 579.523000] dump_header+0x178/0x82f [ 579.558556] Node 0 [ 579.561893] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 579.561904] ? ___ratelimit+0x2cd/0x530 [ 579.561915] oom_kill_process.cold+0x10/0xb18 [ 579.565542] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 579.569245] out_of_memory+0xe3e/0x1190 [ 579.571488] lowmem_reserve[]: [ 579.576636] ? oom_killer_disable+0x1c0/0x1c0 [ 579.580788] 0 [ 579.587007] ? mutex_trylock+0x152/0x1a0 [ 579.613729] 2717 [ 579.617686] __alloc_pages_nodemask+0x23e1/0x2720 [ 579.621297] 2718 [ 579.625860] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 579.627631] 2718 [ 579.631690] alloc_pages_current+0x155/0x260 [ 579.631703] filemap_fault+0xea3/0x1980 [ 579.633745] 2718 [ 579.639274] ext4_filemap_fault+0x84/0xb0 [ 579.648074] __do_fault+0xfa/0x380 [ 579.651651] Node 0 [ 579.656052] __handle_mm_fault+0x2497/0x4620 [ 579.660049] DMA32 free:18024kB min:36200kB low:45248kB high:54296kB active_anon:44908kB inactive_anon:56784kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7968kB pagetables:2616kB bounce:0kB free_pcp:336kB local_pcp:148kB free_cma:0kB [ 579.662070] ? vm_insert_page+0x7c0/0x7c0 [ 579.668994] lowmem_reserve[]: [ 579.672628] ? lock_downgrade+0x740/0x740 [ 579.672646] handle_mm_fault+0x391/0x860 [ 579.672660] __do_page_fault+0x549/0xad0 [ 579.675046] 0 [ 579.679919] ? spurious_fault+0x640/0x640 [ 579.679928] ? do_page_fault+0x60/0x500 [ 579.679942] ? page_fault+0x2f/0x50 [ 579.708749] 0 [ 579.712875] page_fault+0x45/0x50 [ 579.712884] RIP: 1fa0:0x1f9f [ 579.712891] RSP: 0000:000055c4100869d0 EFLAGS: 7fb0556eada0 [ 579.715987] 0 [ 579.723785] Mem-Info: [ 579.724216] 0 [ 579.728799] active_anon:11516 inactive_anon:20951 isolated_anon:0 [ 579.728799] active_file:16 inactive_file:15 isolated_file:0 [ 579.728799] unevictable:0 dirty:0 writeback:0 unstable:0 [ 579.728799] slab_reclaimable:12265 slab_unreclaimable:115212 [ 579.728799] mapped:43965 shmem:21271 pagetables:774 bounce:0 [ 579.728799] free:13940 free_pcp:115 free_cma:0 [ 579.733404] syz-executor.2: [ 579.734600] Node 0 active_anon:44908kB inactive_anon:56844kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:110872kB dirty:0kB writeback:0kB shmem:57980kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 579.738475] page allocation failure: order:0 [ 579.745039] Node 1 active_anon:1156kB inactive_anon:26960kB active_file:48kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:64988kB dirty:0kB writeback:0kB shmem:27104kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 579.754727] 0 [ 579.757620] Node 0 [ 579.765717] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 579.802673] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 579.829208] lowmem_reserve[]: [ 579.837701] (null) [ 579.868871] 0 [ 579.888155] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 579.927776] lowmem_reserve[]: 0 0 0 0 0 [ 579.931817] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 579.932410] 2717 2718 [ 579.936930] CPU: 0 PID: 19914 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 579.936936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 579.956719] Call Trace: [ 579.959313] dump_stack+0x1b2/0x281 [ 579.962981] warn_alloc.cold+0x96/0x1cc [ 579.966337] 2718 2718 [ 579.966962] ? zone_watermark_ok_safe+0x220/0x220 [ 579.966975] ? usleep_range+0x130/0x130 [ 579.974287] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 579.978226] Node 0 [ 579.983312] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 579.983322] ? run_timer_softirq+0x5a0/0x5a0 [ 579.983339] __alloc_pages_nodemask+0x2127/0x2720 [ 579.983354] ? lock_acquire+0x170/0x3f0 [ 579.983369] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 579.983383] ? ion_page_pool_alloc+0x9e/0x1b0 [ 579.983397] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 579.983413] ? alloc_pages_current+0x84/0x260 [ 579.983423] alloc_pages_current+0x155/0x260 [ 579.983436] ion_page_pool_alloc+0x118/0x1b0 [ 580.017392] DMA32 free:18024kB min:36200kB low:45248kB high:54296kB active_anon:44908kB inactive_anon:56784kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7968kB pagetables:2616kB bounce:0kB free_pcp:368kB local_pcp:220kB free_cma:0kB [ 580.019162] ion_system_heap_allocate+0x133/0x8c0 [ 580.041060] lowmem_reserve[]: [ 580.060695] ? _raw_spin_unlock+0x29/0x40 [ 580.060710] ? _ion_heap_freelist_drain+0x6e/0x410 [ 580.060721] ? ion_system_contig_heap_create+0x130/0x130 [ 580.060733] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 580.060748] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 580.060759] ion_alloc+0x27a/0x810 [ 580.060773] ? ion_dma_buf_release+0x40/0x40 [ 580.060787] ? __might_fault+0x177/0x1b0 [ 580.060798] ion_ioctl+0xea/0x1f0 [ 580.060808] ? ion_query_heaps+0x360/0x360 [ 580.060821] ? lock_acquire+0x170/0x3f0 [ 580.060832] ? lock_downgrade+0x740/0x740 [ 580.115711] 0 [ 580.116786] ? ion_query_heaps+0x360/0x360 [ 580.126922] do_vfs_ioctl+0x75a/0xff0 [ 580.130726] ? ioctl_preallocate+0x1a0/0x1a0 [ 580.135129] ? lock_downgrade+0x740/0x740 [ 580.135716] 0 [ 580.139288] ? __fget+0x225/0x360 [ 580.139298] ? do_vfs_ioctl+0xff0/0xff0 [ 580.139309] ? security_file_ioctl+0x83/0xb0 [ 580.139318] SyS_ioctl+0x7f/0xb0 [ 580.139327] ? do_vfs_ioctl+0xff0/0xff0 [ 580.139339] do_syscall_64+0x1d5/0x640 [ 580.139358] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 580.139367] RIP: 0033:0x45e219 [ 580.139372] RSP: 002b:00007f994610dc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 580.162831] 0 [ 580.164130] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 580.189217] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 580.195724] 0 [ 580.196498] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 580.196504] 0 [ 580.198279] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 580.198286] R13: 00007ffd6a5a041f R14: 00007f994610e9c0 R15: 000000000119bf8c [ 580.222766] Node 1 Normal free:26760kB min:53696kB low:67120kB high:80544kB active_anon:1156kB inactive_anon:26960kB active_file:48kB inactive_file:44kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:480kB bounce:0kB free_pcp:124kB local_pcp:124kB free_cma:0kB [ 580.222794] Node 0 [ 580.252264] lowmem_reserve[]: 0 0 0 0 0 [ 580.252287] Node 0 DMA: 2*4kB (UM) 1*8kB (U) 1*16kB (U) 0*32kB 7*64kB (UM) 2*128kB (UM) 2*256kB (UM) 1*512kB (M) 1*1024kB (M) 0*2048kB 2*4096kB (UM) = 10976kB [ 580.275641] Node 0 DMA32: 770*4kB (UME) 954*8kB (UME) 291*16kB (UME) 83*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18024kB [ 580.289395] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 580.300206] Node 1 Normal: 68*4kB (UM) 53*8kB (UM) 45*16kB (UM) 38*32kB (UM) 15*64kB (M) 3*128kB (UM) 5*256kB (UM) 40*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 26760kB [ 580.315738] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 580.324634] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 580.326378] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 580.333249] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 580.333256] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 580.333259] 21302 total pagecache pages [ 580.333269] 0 pages in swap cache [ 580.333274] Swap cache stats: add 0, delete 0, find 0/0 [ 580.333277] Free swap = 0kB [ 580.333280] Total swap = 0kB [ 580.333287] 2097051 pages RAM [ 580.333289] 0 pages HighMem/MovableOnly [ 580.333293] 363840 pages reserved [ 580.333296] 0 pages cma reserved [ 580.569821] lowmem_reserve[]: 0 0 0 0 0 [ 580.589392] Node 1 Normal free:349220kB min:53696kB low:67120kB high:80544kB active_anon:1156kB inactive_anon:26960kB active_file:48kB inactive_file:4644kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:480kB bounce:0kB free_pcp:224kB local_pcp:76kB free_cma:0kB [ 580.722521] lowmem_reserve[]: 0 0 0 0 0 [ 580.726570] Node 0 DMA: 2*4kB (UM) 1*8kB (U) 1*16kB (U) 0*32kB 6*64kB (UM) 4*128kB (UM) 2*256kB (UM) 1*512kB (M) 1*1024kB (M) 0*2048kB 2*4096kB (UM) = 11168kB [ 580.802534] Node 0 DMA32: 706*4kB (UME) 803*8kB (UME) 363*16kB (UME) 1104*32kB (UME) 547*64kB (U) 11*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 86800kB [ 580.859287] warn_alloc_show_mem: 1 callbacks suppressed [ 580.859291] Mem-Info: [ 580.862092] Node 0 [ 580.864715] active_anon:11541 inactive_anon:20951 isolated_anon:0 [ 580.864715] active_file:16 inactive_file:1640 isolated_file:0 [ 580.864715] unevictable:0 dirty:0 writeback:0 unstable:0 [ 580.864715] slab_reclaimable:12265 slab_unreclaimable:115217 [ 580.864715] mapped:53865 shmem:21271 pagetables:811 bounce:0 [ 580.864715] free:182550 free_pcp:394 free_cma:0 [ 580.867102] Normal: [ 580.889277] Node 0 active_anon:45008kB inactive_anon:56844kB active_file:16kB inactive_file:1916kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:146972kB dirty:0kB writeback:0kB shmem:57980kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 581.029252] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 581.038959] Node 1 Normal: 1188*4kB (UM) 1112*8kB (UM) 644*16kB (UM) 239*32kB (UM) 4180*64kB (UM) 196*128kB (UM) 29*256kB (UM) 35*512kB (U) 216*1024kB (UM) 36*2048kB (U) 1*4096kB (U) = 648560kB [ 581.069282] Node 1 active_anon:1156kB inactive_anon:26960kB active_file:52kB inactive_file:4704kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:68568kB dirty:28kB writeback:0kB shmem:27104kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 581.120896] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 581.154381] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 581.156163] Node 0 DMA free:11368kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 581.200405] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 581.269276] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 581.274371] Node 0 DMA32 free:232184kB min:36200kB low:45248kB high:54296kB active_anon:45036kB inactive_anon:56784kB active_file:720kB inactive_file:6428kB unevictable:0kB writepending:20kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:8000kB pagetables:2764kB bounce:0kB free_pcp:1288kB local_pcp:620kB free_cma:0kB [ 581.319264] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 581.327885] 24277 total pagecache pages [ 581.359236] 0 pages in swap cache [ 581.362731] Swap cache stats: add 0, delete 0, find 0/0 [ 581.368091] Free swap = 0kB [ 581.369218] lowmem_reserve[]: 0 0 0 0 0 [ 581.375961] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 581.399307] Total swap = 0kB [ 581.404598] 2097051 pages RAM [ 581.407728] 0 pages HighMem/MovableOnly [ 581.439558] 363840 pages reserved [ 581.443109] 0 pages cma reserved [ 581.446594] Out of memory (oom_kill_allocating_task): Kill process 18016 (in:imklog) score 0 or sacrifice child [ 581.469212] lowmem_reserve[]: 0 0 0 0 0 [ 581.473253] Node 1 Normal free:784100kB min:53696kB low:67120kB high:80544kB active_anon:1156kB inactive_anon:26960kB active_file:52kB inactive_file:4704kB unevictable:0kB writepending:28kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:480kB bounce:0kB free_pcp:868kB local_pcp:708kB free_cma:0kB [ 581.523230] Killed process 18012 (rsyslogd) total-vm:254332kB, anon-rss:1172kB, file-rss:0kB, shmem-rss:0kB [ 581.563852] oom_reaper: reaped process 18012 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 581.589864] lowmem_reserve[]: 0 0 0 0 0 [ 581.609217] Node 0 DMA: 46*4kB (UM) 2*8kB (U) 2*16kB (U) 0*32kB 6*64kB (UM) 4*128kB (UM) 2*256kB (UM) 1*512kB (M) 1*1024kB (M) 0*2048kB 2*4096kB (UM) = 11368kB [ 581.609295] Node 0 DMA32: 1307*4kB (UME) 1239*8kB (UME) 838*16kB (UME) 2086*32kB (UME) 1747*64kB (UM) 117*128kB (UM) 22*256kB (U) 6*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 230788kB [ 581.609362] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 581.725489] Node 1 Normal: 2874*4kB (UM) 2796*8kB (UM) 2322*16kB (UM) 2107*32kB (UM) 6061*64kB (UM) 1450*128kB (UM) 503*256kB (UM) 225*512kB (U) 9*1024kB (U) 0*2048kB 0*4096kB = 965128kB [ 581.759199] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 581.768330] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 581.789226] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 581.798585] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 581.829292] 24610 total pagecache pages [ 581.833357] 0 pages in swap cache [ 581.837242] Swap cache stats: add 0, delete 0, find 0/0 [ 581.869257] Free swap = 0kB [ 581.872388] Total swap = 0kB [ 581.875421] 2097051 pages RAM [ 581.878533] 0 pages HighMem/MovableOnly [ 581.909192] 363840 pages reserved [ 581.914052] 0 pages cma reserved [ 585.059853] IPVS: ftp: loaded support on port[0] = 21 [ 585.187898] chnl_net:caif_netlink_parms(): no params data found [ 585.285878] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.292548] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.300132] device bridge_slave_0 entered promiscuous mode [ 585.307039] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.314438] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.322031] device bridge_slave_1 entered promiscuous mode [ 585.342008] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 585.352787] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 585.374220] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 585.381725] team0: Port device team_slave_0 added [ 585.387158] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 585.395213] team0: Port device team_slave_1 added [ 585.412742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 585.419225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 585.445181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 585.456749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 585.463256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 585.488535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 585.499603] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 585.507057] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 585.530199] device hsr_slave_0 entered promiscuous mode [ 585.535895] device hsr_slave_1 entered promiscuous mode [ 585.542455] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 585.549819] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 585.623696] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.630094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 585.636671] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.643078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 585.675332] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 585.682100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 585.692610] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 585.702124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 585.710279] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.717006] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.727087] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 585.733683] 8021q: adding VLAN 0 to HW filter on device team0 [ 585.742881] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 585.750692] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.757055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 585.769741] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 585.777439] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.783885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 585.798039] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 585.815447] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 585.826245] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 585.837080] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 585.844414] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 585.852009] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 585.860668] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 585.868248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 585.876564] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 585.891487] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 585.899690] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 585.906470] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 585.918112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 585.975083] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 585.986959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 586.045605] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 586.053668] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 586.060985] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 586.071363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 586.079695] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 586.086826] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 586.095618] device veth0_vlan entered promiscuous mode [ 586.107086] device veth1_vlan entered promiscuous mode [ 586.113367] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 586.123042] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 586.136219] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 586.146054] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 586.153706] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 586.161913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 586.169994] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 586.180397] device veth0_macvtap entered promiscuous mode [ 586.190116] device veth1_macvtap entered promiscuous mode [ 586.199591] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 586.210129] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 586.221102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 586.231175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.241519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 586.251928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.261207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 586.271082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.280308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 586.290498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.299830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 586.309855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.320183] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 586.327169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 586.335242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 586.343293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 586.353559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 586.364103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.374162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 586.384104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.393421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 586.403872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.413123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 586.422880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.433976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 586.444506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.459005] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 586.466713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 586.476576] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 586.485418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 587.109865] Bluetooth: hci3 command 0x0409 tx timeout 21:26:10 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0xc0241, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:26:10 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001}) 21:26:10 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:26:10 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:26:10 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0xc0241, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:26:10 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x80000001, 0x4) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0xc0241, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:26:10 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:26:10 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0xc0241, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:26:10 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:26:10 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 21:26:10 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 21:26:10 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) [ 588.752660] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 588.765485] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 588.767665] syz-executor.1: [ 588.778633] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 588.795250] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 588.801944] syz-executor.0 cpuset=/ [ 588.801977] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 588.812616] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 588.818225] mems_allowed=0-1 [ 588.826309] CPU: 1 PID: 20223 Comm: syz-executor.0 Not tainted 4.14.217-syzkaller #0 [ 588.833780] page allocation failure: order:4 [ 588.834217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 588.834228] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 588.838630] Call Trace: [ 588.838649] dump_stack+0x1b2/0x281 [ 588.838665] warn_alloc.cold+0x96/0x1cc [ 588.838678] ? zone_watermark_ok_safe+0x220/0x220 [ 588.838700] __alloc_pages_nodemask+0x2127/0x2720 [ 588.875051] ? lock_acquire+0x170/0x3f0 [ 588.879014] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 588.883849] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 588.889299] ? __mutex_unlock_slowpath+0x75/0x770 [ 588.895058] alloc_pages_current+0x155/0x260 [ 588.901728] ion_page_pool_alloc+0x118/0x1b0 [ 588.906286] ion_system_heap_allocate+0x133/0x8c0 [ 588.911113] ? ion_alloc+0x187/0x810 [ 588.914812] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 588.920256] ? ion_system_contig_heap_create+0x130/0x130 [ 588.925690] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 588.930703] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 588.935537] ion_alloc+0x204/0x810 [ 588.939062] ? ion_dma_buf_release+0x40/0x40 [ 588.943456] ? __might_fault+0x177/0x1b0 [ 588.947628] ion_ioctl+0xea/0x1f0 [ 588.951164] ? ion_query_heaps+0x360/0x360 [ 588.955484] ? lock_acquire+0x170/0x3f0 [ 588.959455] ? lock_downgrade+0x740/0x740 [ 588.963583] ? ion_query_heaps+0x360/0x360 [ 588.967811] do_vfs_ioctl+0x75a/0xff0 [ 588.971597] ? ioctl_preallocate+0x1a0/0x1a0 [ 588.976001] ? lock_downgrade+0x740/0x740 [ 588.980136] ? __fget+0x225/0x360 [ 588.983569] ? do_vfs_ioctl+0xff0/0xff0 [ 588.987552] ? security_file_ioctl+0x83/0xb0 [ 588.991947] SyS_ioctl+0x7f/0xb0 [ 588.995293] ? do_vfs_ioctl+0xff0/0xff0 [ 588.999250] do_syscall_64+0x1d5/0x640 [ 589.003146] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 589.008322] RIP: 0033:0x45e219 [ 589.011493] RSP: 002b:00007f3154555c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 589.019198] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 589.026537] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 589.033824] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 589.041163] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 589.048434] R13: 00007ffd70bb297f R14: 00007f31545569c0 R15: 000000000119bf8c [ 589.058112] CPU: 1 PID: 20227 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 589.066067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 589.075443] Call Trace: [ 589.076406] (null) [ 589.078037] dump_stack+0x1b2/0x281 [ 589.083783] warn_alloc.cold+0x96/0x1cc [ 589.087743] ? zone_watermark_ok_safe+0x220/0x220 [ 589.092491] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 589.092597] __alloc_pages_nodemask+0x2127/0x2720 [ 589.092613] ? __schedule+0x893/0x1de0 [ 589.106511] ? lock_acquire+0x170/0x3f0 [ 589.110494] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 589.115343] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 589.120781] ? __mutex_unlock_slowpath+0x75/0x770 [ 589.125613] alloc_pages_current+0x155/0x260 [ 589.130013] ion_page_pool_alloc+0x118/0x1b0 [ 589.134427] ion_system_heap_allocate+0x133/0x8c0 [ 589.139261] ? ion_alloc+0x187/0x810 [ 589.142969] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 589.148410] ? ion_system_contig_heap_create+0x130/0x130 [ 589.153847] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 589.158864] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 589.163691] ion_alloc+0x204/0x810 [ 589.167215] ? ion_dma_buf_release+0x40/0x40 [ 589.171617] ? __might_fault+0x177/0x1b0 [ 589.175668] ion_ioctl+0xea/0x1f0 [ 589.179119] ? ion_query_heaps+0x360/0x360 [ 589.183335] ? lock_acquire+0x170/0x3f0 [ 589.187288] ? lock_downgrade+0x740/0x740 [ 589.188860] Bluetooth: hci3 command 0x041b tx timeout [ 589.191432] ? ion_query_heaps+0x360/0x360 [ 589.191445] do_vfs_ioctl+0x75a/0xff0 [ 589.204653] ? ioctl_preallocate+0x1a0/0x1a0 [ 589.209059] ? lock_downgrade+0x740/0x740 [ 589.213194] ? __fget+0x225/0x360 [ 589.216738] ? do_vfs_ioctl+0xff0/0xff0 [ 589.220700] ? security_file_ioctl+0x83/0xb0 [ 589.225101] SyS_ioctl+0x7f/0xb0 [ 589.228451] ? do_vfs_ioctl+0xff0/0xff0 [ 589.232426] do_syscall_64+0x1d5/0x640 [ 589.236322] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 589.241517] RIP: 0033:0x45e219 [ 589.244700] RSP: 002b:00007f1c98502c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 589.252397] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 589.259739] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 589.266995] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 589.274246] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 589.281505] R13: 00007ffef867e34f R14: 00007f1c985039c0 R15: 000000000119bf8c [ 589.288531] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 589.294577] Mem-Info: [ 589.298307] active_anon:12126 inactive_anon:20953 isolated_anon:0 [ 589.298307] active_file:1883 inactive_file:1804 isolated_file:0 [ 589.298307] unevictable:0 dirty:18 writeback:2 unstable:0 [ 589.298307] slab_reclaimable:12322 slab_unreclaimable:115430 [ 589.298307] mapped:55030 shmem:21275 pagetables:880 bounce:0 [ 589.298307] free:182770 free_pcp:233 free_cma:0 [ 589.298641] CPU: 0 PID: 20236 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 589.339970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 589.349330] Call Trace: [ 589.351940] dump_stack+0x1b2/0x281 [ 589.355572] warn_alloc.cold+0x96/0x1cc [ 589.359552] ? zone_watermark_ok_safe+0x220/0x220 [ 589.364412] __alloc_pages_nodemask+0x2127/0x2720 [ 589.369269] ? lock_acquire+0x170/0x3f0 [ 589.372232] Node 0 active_anon:47748kB inactive_anon:56856kB active_file:7432kB inactive_file:7172kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:154904kB dirty:68kB writeback:8kB shmem:58000kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 589.373269] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 589.373289] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 589.373301] ? __mutex_unlock_slowpath+0x75/0x770 [ 589.416471] ? retint_kernel+0x2d/0x2d [ 589.420375] alloc_pages_current+0x155/0x260 [ 589.424797] ion_page_pool_alloc+0x118/0x1b0 [ 589.429216] ion_system_heap_allocate+0x133/0x8c0 [ 589.433394] Node 1 active_anon:756kB inactive_anon:26956kB active_file:100kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:65216kB dirty:4kB writeback:0kB shmem:27100kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 589.434058] ? ion_alloc+0x187/0x810 [ 589.465986] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 589.471581] ? ion_system_contig_heap_create+0x130/0x130 [ 589.477049] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 589.482082] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 589.486944] ion_alloc+0x204/0x810 [ 589.490498] ? ion_dma_buf_release+0x40/0x40 [ 589.494925] ? __might_fault+0x177/0x1b0 [ 589.495631] Node 0 [ 589.498990] ion_ioctl+0xea/0x1f0 [ 589.499003] ? ion_query_heaps+0x360/0x360 [ 589.499016] ? lock_acquire+0x170/0x3f0 [ 589.499025] ? lock_downgrade+0x740/0x740 [ 589.499031] ? ion_query_heaps+0x360/0x360 [ 589.499043] do_vfs_ioctl+0x75a/0xff0 [ 589.505346] DMA free:11068kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 589.505426] ? ioctl_preallocate+0x1a0/0x1a0 [ 589.515288] lowmem_reserve[]: [ 589.517753] ? lock_downgrade+0x740/0x740 [ 589.517771] ? __fget+0x225/0x360 [ 589.528515] 0 [ 589.552009] ? do_vfs_ioctl+0xff0/0xff0 [ 589.552023] ? security_file_ioctl+0x83/0xb0 [ 589.552032] SyS_ioctl+0x7f/0xb0 [ 589.552041] ? do_vfs_ioctl+0xff0/0xff0 [ 589.552053] do_syscall_64+0x1d5/0x640 [ 589.552072] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 589.582188] 2717 [ 589.584715] RIP: 0033:0x45e219 [ 589.584720] RSP: 002b:00007fd20c681c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 589.584730] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 589.584738] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 589.596442] 2718 [ 589.599025] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 589.599031] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 589.599037] R13: 00007fff87e85fff R14: 00007fd20c6829c0 R15: 000000000119bf8c [ 589.607543] CPU: 0 PID: 20228 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 589.649524] 2718 [ 589.653116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 589.653120] Call Trace: [ 589.653145] dump_stack+0x1b2/0x281 [ 589.653160] warn_alloc.cold+0x96/0x1cc [ 589.662074] 2718 [ 589.664563] ? zone_watermark_ok_safe+0x220/0x220 [ 589.664584] __alloc_pages_nodemask+0x2127/0x2720 [ 589.674752] ? lock_acquire+0x170/0x3f0 [ 589.683392] Node 0 [ 589.686555] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 589.686575] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 589.703025] ? __mutex_unlock_slowpath+0x75/0x770 [ 589.705833] DMA32 free:516868kB min:36200kB low:45248kB high:54296kB active_anon:47748kB inactive_anon:56796kB active_file:7432kB inactive_file:7572kB unevictable:0kB writepending:76kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:8160kB pagetables:3068kB bounce:0kB free_pcp:192kB local_pcp:164kB free_cma:0kB [ 589.707872] alloc_pages_current+0x155/0x260 [ 589.707891] ion_page_pool_alloc+0x118/0x1b0 [ 589.745478] ion_system_heap_allocate+0x133/0x8c0 [ 589.750331] ? ion_alloc+0x187/0x810 [ 589.754041] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 589.759485] ? ion_system_contig_heap_create+0x130/0x130 [ 589.764947] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 589.770014] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 589.775121] ion_alloc+0x204/0x810 [ 589.778662] ? ion_dma_buf_release+0x40/0x40 [ 589.783072] ? __might_fault+0x177/0x1b0 [ 589.787120] ion_ioctl+0xea/0x1f0 [ 589.790562] ? ion_query_heaps+0x360/0x360 [ 589.794798] ? lock_acquire+0x170/0x3f0 [ 589.798772] ? lock_downgrade+0x740/0x740 [ 589.799812] lowmem_reserve[]: [ 589.802911] ? ion_query_heaps+0x360/0x360 [ 589.802923] do_vfs_ioctl+0x75a/0xff0 [ 589.802935] ? ioctl_preallocate+0x1a0/0x1a0 [ 589.813683] 0 [ 589.814024] ? lock_downgrade+0x740/0x740 [ 589.824623] ? __fget+0x225/0x360 [ 589.828073] ? do_vfs_ioctl+0xff0/0xff0 [ 589.828277] 0 [ 589.832034] ? security_file_ioctl+0x83/0xb0 [ 589.832044] SyS_ioctl+0x7f/0xb0 [ 589.832053] ? do_vfs_ioctl+0xff0/0xff0 [ 589.832066] do_syscall_64+0x1d5/0x640 [ 589.832085] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 589.841519] 0 [ 589.841602] RIP: 0033:0x45e219 [ 589.854330] 0 [ 589.854606] RSP: 002b:00007f39dd445c68 EFLAGS: 00000246 [ 589.860786] 0 [ 589.861346] ORIG_RAX: 0000000000000010 [ 589.872432] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 589.879701] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 589.886959] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 589.886965] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 589.886970] R13: 00007ffc799adfff R14: 00007f39dd4469c0 R15: 000000000119bf8c [ 589.910585] CPU: 1 PID: 20219 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 589.918480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 589.927835] Call Trace: [ 589.930435] dump_stack+0x1b2/0x281 [ 589.934159] warn_alloc.cold+0x96/0x1cc [ 589.938144] ? zone_watermark_ok_safe+0x220/0x220 [ 589.943010] __alloc_pages_nodemask+0x2127/0x2720 [ 589.947880] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 589.952821] ? migrate_swap_stop+0x880/0x880 [ 589.957233] ? lock_acquire+0x170/0x3f0 [ 589.961208] ? wake_up_q+0x82/0xd0 [ 589.964753] ? __mutex_unlock_slowpath+0x261/0x770 [ 589.969694] ? retint_kernel+0x2d/0x2d [ 589.974022] alloc_pages_current+0x155/0x260 [ 589.978444] ion_page_pool_alloc+0x118/0x1b0 [ 589.982850] ion_system_heap_allocate+0x133/0x8c0 [ 589.988057] ? ion_alloc+0x187/0x810 [ 589.991770] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 589.997226] ? ion_system_contig_heap_create+0x130/0x130 [ 590.002678] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 590.007906] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 590.012764] ion_alloc+0x204/0x810 [ 590.016313] ? ion_dma_buf_release+0x40/0x40 [ 590.020727] ? __might_fault+0x177/0x1b0 [ 590.024826] ion_ioctl+0xea/0x1f0 [ 590.028281] ? ion_query_heaps+0x360/0x360 [ 590.032526] ? lock_acquire+0x170/0x3f0 [ 590.036586] ? lock_downgrade+0x740/0x740 [ 590.040734] ? ion_query_heaps+0x360/0x360 [ 590.044968] do_vfs_ioctl+0x75a/0xff0 [ 590.049034] ? ioctl_preallocate+0x1a0/0x1a0 [ 590.053439] ? lock_downgrade+0x740/0x740 [ 590.057593] ? __fget+0x225/0x360 [ 590.061046] ? do_vfs_ioctl+0xff0/0xff0 [ 590.065026] ? security_file_ioctl+0x83/0xb0 [ 590.069435] SyS_ioctl+0x7f/0xb0 [ 590.072811] ? do_vfs_ioctl+0xff0/0xff0 [ 590.076785] do_syscall_64+0x1d5/0x640 [ 590.080682] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 590.085871] RIP: 0033:0x45e219 [ 590.089056] RSP: 002b:00007faf520eec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 590.096772] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 590.104043] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 590.111308] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 590.118572] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 590.125847] R13: 00007ffc58d08e3f R14: 00007faf520ef9c0 R15: 000000000119bf8c [ 590.134502] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 590.160492] lowmem_reserve[]: 0 0 0 0 0 [ 590.165829] Node 1 Normal free:55808kB min:53696kB low:67120kB high:80544kB active_anon:756kB inactive_anon:26956kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:452kB bounce:0kB free_pcp:652kB local_pcp:0kB free_cma:0kB [ 590.195376] lowmem_reserve[]: 0 0 0 0 0 [ 590.202214] Node 0 DMA: 9*4kB (UM) 17*8kB (U) 15*16kB (U) 9*32kB (U) 2*64kB (UM) 4*128kB (UM) 2*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 11068kB [ 590.220902] Node 0 DMA32: 56*4kB (UME) 529*8kB (UE) 230*16kB (UE) 8779*32kB (UE) 53*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 292456kB [ 590.237728] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 590.262917] Node 1 Normal: 560*4kB (UM) 866*8kB (UM) 751*16kB (UM) 554*32kB (UM) 34*64kB (UM) 9*128kB (UM) 5*256kB (UM) 22*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 55808kB [ 590.279118] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 590.288225] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 590.298954] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 590.308351] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 590.319137] 25137 total pagecache pages [ 590.323371] 0 pages in swap cache [ 590.326980] Swap cache stats: add 0, delete 0, find 0/0 [ 590.334232] Free swap = 0kB [ 590.337425] Total swap = 0kB [ 590.342079] 2097051 pages RAM [ 590.345375] 0 pages HighMem/MovableOnly [ 590.351727] 363840 pages reserved [ 590.355357] 0 pages cma reserved [ 590.364513] warn_alloc_show_mem: 2 callbacks suppressed [ 590.366782] Mem-Info: [ 590.402894] active_anon:12053 inactive_anon:20953 isolated_anon:0 [ 590.402894] active_file:1892 inactive_file:1986 isolated_file:0 [ 590.402894] unevictable:0 dirty:20 writeback:0 unstable:0 [ 590.402894] slab_reclaimable:12322 slab_unreclaimable:116202 [ 590.402894] mapped:54948 shmem:21275 pagetables:880 bounce:0 [ 590.402894] free:57015 free_pcp:291 free_cma:0 [ 590.449619] Node 0 active_anon:47456kB inactive_anon:56856kB active_file:7552kB inactive_file:7928kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:154528kB dirty:80kB writeback:0kB shmem:58000kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 590.504407] Node 1 active_anon:756kB inactive_anon:26956kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:65264kB dirty:0kB writeback:0kB shmem:27100kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 590.620479] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 590.706879] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 590.715636] Node 0 DMA32 free:37804kB min:36200kB low:45248kB high:54296kB active_anon:47456kB inactive_anon:56796kB active_file:924kB inactive_file:700kB unevictable:0kB writepending:80kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:8128kB pagetables:3068kB bounce:0kB free_pcp:704kB local_pcp:660kB free_cma:0kB [ 590.749342] lowmem_reserve[]: 0 0 0 0 0 [ 590.753577] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 590.796821] lowmem_reserve[]: 0 0 0 0 0 [ 590.805069] Node 1 Normal free:53692kB min:53696kB low:67120kB high:80544kB active_anon:756kB inactive_anon:26956kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:452kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 590.837934] lowmem_reserve[]: 0 0 0 0 0 [ 590.842492] Node 0 DMA: 9*4kB (UM) 17*8kB (U) 15*16kB (U) 9*32kB (U) 2*64kB (UM) 4*128kB (UM) 2*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 11068kB [ 590.858324] Node 0 DMA32: 636*4kB (ME) 829*8kB (ME) 247*16kB (ME) 547*32kB (UME) 69*64kB (UM) 4*128kB (UM) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35816kB [ 590.874025] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 590.884824] Node 1 Normal: 23*4kB (UM) 767*8kB (UM) 737*16kB (UM) 546*32kB (UM) 21*64kB (UM) 8*128kB (UM) 4*256kB (UM) 21*512kB (UM) 2*1024kB (M) 1*2048kB (M) 0*4096kB = 53732kB [ 590.901529] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 590.928131] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 590.936853] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 590.945826] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 590.955731] 21338 total pagecache pages [ 590.960476] 0 pages in swap cache [ 590.963935] Swap cache stats: add 0, delete 0, find 0/0 [ 590.969416] Free swap = 0kB [ 590.972434] Total swap = 0kB [ 590.975469] 2097051 pages RAM [ 590.978727] 0 pages HighMem/MovableOnly [ 590.982782] 363840 pages reserved [ 590.986258] 0 pages cma reserved [ 591.037416] oom_reaper: reaped process 20228 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 591.124941] oom_reaper: reaped process 20236 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 591.210714] oom_reaper: reaped process 20223 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 591.268437] Bluetooth: hci3 command 0x040f tx timeout [ 591.280537] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 591.310547] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 591.317340] in:imklog cpuset=/ mems_allowed=0-1 [ 591.327129] CPU: 1 PID: 19971 Comm: in:imklog Not tainted 4.14.217-syzkaller #0 [ 591.334574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 591.334861] syz-executor.0 cpuset= [ 591.343921] Call Trace: [ 591.343948] dump_stack+0x1b2/0x281 [ 591.343962] dump_header+0x178/0x82f [ 591.343974] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 591.343986] ? ___ratelimit+0x2cd/0x530 [ 591.358383] syz-executor.4: [ 591.362494] oom_kill_process.cold+0x10/0xb18 [ 591.366439] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 591.369458] out_of_memory+0xe3e/0x1190 [ 591.369471] ? oom_killer_disable+0x1c0/0x1c0 [ 591.369481] ? mutex_trylock+0x152/0x1a0 [ 591.369490] __alloc_pages_nodemask+0x23e1/0x2720 [ 591.369510] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 591.379793] / [ 591.383861] alloc_pages_current+0x155/0x260 [ 591.387803] mems_allowed=0-1 [ 591.392289] filemap_fault+0xea3/0x1980 [ 591.392309] ext4_filemap_fault+0x84/0xb0 [ 591.392321] __do_fault+0xfa/0x380 [ 591.392330] __handle_mm_fault+0x2497/0x4620 [ 591.392342] ? vm_insert_page+0x7c0/0x7c0 [ 591.399820] (null) [ 591.401231] ? lock_downgrade+0x740/0x740 [ 591.406047] syz-executor.4 cpuset= [ 591.407784] handle_mm_fault+0x391/0x860 [ 591.440248] syz-executor.1: [ 591.442107] __do_page_fault+0x549/0xad0 [ 591.445631] page allocation failure: order:0 [ 591.449706] ? spurious_fault+0x640/0x640 [ 591.449715] ? do_page_fault+0x60/0x500 [ 591.449727] ? page_fault+0x2f/0x50 [ 591.449734] page_fault+0x45/0x50 [ 591.449741] RIP: b4c640b0:0x1f9f [ 591.449745] RSP: b6457fe6:00007f03b4c640a0 EFLAGS: 7f03b4c641d8 [ 591.467116] / [ 591.471334] CPU: 0 PID: 20223 Comm: syz-executor.0 Not tainted 4.14.217-syzkaller #0 [ 591.485806] mems_allowed=0-1 [ 591.485884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 591.507887] Call Trace: [ 591.510506] dump_stack+0x1b2/0x281 [ 591.514137] warn_alloc.cold+0x96/0x1cc [ 591.518099] ? zone_watermark_ok_safe+0x220/0x220 [ 591.522928] ? usleep_range+0x130/0x130 [ 591.526886] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 591.531975] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 591.536989] ? run_timer_softirq+0x5a0/0x5a0 [ 591.541386] __alloc_pages_nodemask+0x2127/0x2720 [ 591.546216] ? lock_acquire+0x170/0x3f0 [ 591.550175] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 591.555003] ? ion_page_pool_alloc+0x9e/0x1b0 [ 591.559483] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 591.565623] ? retint_kernel+0x2d/0x2d [ 591.569495] alloc_pages_current+0x155/0x260 [ 591.573889] ion_page_pool_alloc+0x118/0x1b0 [ 591.579236] ion_system_heap_allocate+0x133/0x8c0 [ 591.584062] ? ion_alloc+0x187/0x810 [ 591.587759] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 591.593192] ? ion_system_contig_heap_create+0x130/0x130 [ 591.598972] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 591.603972] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 591.608799] ion_alloc+0x204/0x810 [ 591.612325] ? ion_dma_buf_release+0x40/0x40 [ 591.616728] ? __might_fault+0x177/0x1b0 [ 591.620948] ion_ioctl+0xea/0x1f0 [ 591.624383] ? ion_query_heaps+0x360/0x360 [ 591.628377] Mem-Info: [ 591.628604] ? lock_acquire+0x170/0x3f0 [ 591.631014] active_anon:11948 inactive_anon:20952 isolated_anon:0 [ 591.631014] active_file:15 inactive_file:0 isolated_file:0 [ 591.631014] unevictable:0 dirty:0 writeback:0 unstable:0 [ 591.631014] slab_reclaimable:12322 slab_unreclaimable:115542 [ 591.631014] mapped:52745 shmem:21274 pagetables:857 bounce:0 [ 591.631014] free:13960 free_pcp:133 free_cma:0 [ 591.634970] ? lock_downgrade+0x740/0x740 [ 591.672231] ? ion_query_heaps+0x360/0x360 [ 591.676454] do_vfs_ioctl+0x75a/0xff0 [ 591.680262] ? ioctl_preallocate+0x1a0/0x1a0 [ 591.684658] ? lock_downgrade+0x740/0x740 [ 591.688794] ? __fget+0x225/0x360 [ 591.692228] ? do_vfs_ioctl+0xff0/0xff0 [ 591.696184] ? security_file_ioctl+0x83/0xb0 [ 591.700573] SyS_ioctl+0x7f/0xb0 [ 591.703940] ? do_vfs_ioctl+0xff0/0xff0 [ 591.707898] do_syscall_64+0x1d5/0x640 [ 591.708318] Node 0 active_anon:47040kB inactive_anon:56852kB active_file:48kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:145688kB dirty:0kB writeback:0kB shmem:57996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 591.711794] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 591.744808] RIP: 0033:0x45e219 [ 591.747979] RSP: 002b:00007f3154555c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 591.755667] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 591.762918] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 591.770268] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 591.777520] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 591.778312] Node 1 active_anon:752kB inactive_anon:26956kB active_file:12kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:65292kB dirty:0kB writeback:0kB shmem:27100kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 591.784785] R13: 00007ffd70bb297f R14: 00007f31545569c0 R15: 000000000119bf8c [ 591.790026] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 591.822443] syz-executor.3: [ 591.829792] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 591.837558] CPU: 1 PID: 20236 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 591.845792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 591.855139] Call Trace: [ 591.857721] dump_stack+0x1b2/0x281 [ 591.861356] warn_alloc.cold+0x96/0x1cc [ 591.865317] ? zone_watermark_ok_safe+0x220/0x220 [ 591.870144] ? usleep_range+0x130/0x130 [ 591.874096] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 591.879189] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 591.884287] ? run_timer_softirq+0x5a0/0x5a0 [ 591.888682] __alloc_pages_nodemask+0x2127/0x2720 [ 591.893512] ? lock_acquire+0x170/0x3f0 [ 591.897471] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 591.902300] ? ion_page_pool_alloc+0x9e/0x1b0 [ 591.906804] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 591.908514] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 591.912249] ? __alloc_pages_nodemask+0x277/0x2720 [ 591.912265] alloc_pages_current+0x155/0x260 [ 591.931530] ion_page_pool_alloc+0x118/0x1b0 [ 591.935921] ion_system_heap_allocate+0x133/0x8c0 [ 591.940749] ? ion_alloc+0x187/0x810 [ 591.944450] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 591.948299] (null) [ 591.949883] ? ion_system_contig_heap_create+0x130/0x130 [ 591.952010] syz-executor.3 cpuset= [ 591.957439] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 591.957454] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 591.968297] / mems_allowed=0-1 [ 591.970790] ion_alloc+0x204/0x810 [ 591.970806] ? ion_dma_buf_release+0x40/0x40 [ 591.982064] ? __might_fault+0x177/0x1b0 [ 591.986115] ion_ioctl+0xea/0x1f0 [ 591.989554] ? ion_query_heaps+0x360/0x360 [ 591.993791] ? lock_acquire+0x170/0x3f0 [ 591.997752] ? lock_downgrade+0x740/0x740 [ 592.001888] ? ion_query_heaps+0x360/0x360 [ 592.006105] do_vfs_ioctl+0x75a/0xff0 [ 592.009889] ? ioctl_preallocate+0x1a0/0x1a0 [ 592.014279] ? lock_downgrade+0x740/0x740 [ 592.018417] ? __fget+0x225/0x360 [ 592.021857] ? do_vfs_ioctl+0xff0/0xff0 [ 592.025826] ? security_file_ioctl+0x83/0xb0 [ 592.030302] SyS_ioctl+0x7f/0xb0 [ 592.033650] ? do_vfs_ioctl+0xff0/0xff0 [ 592.037605] do_syscall_64+0x1d5/0x640 [ 592.041483] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 592.046655] RIP: 0033:0x45e219 [ 592.050273] RSP: 002b:00007fd20c681c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 592.058050] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 592.067594] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 592.074868] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 592.082121] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 592.089372] R13: 00007fff87e85fff R14: 00007fd20c6829c0 R15: 000000000119bf8c [ 592.096639] CPU: 0 PID: 20227 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 592.104530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 592.114318] Call Trace: [ 592.116919] dump_stack+0x1b2/0x281 [ 592.117537] Node 0 [ 592.120549] warn_alloc.cold+0x96/0x1cc [ 592.120561] ? zone_watermark_ok_safe+0x220/0x220 [ 592.120573] ? usleep_range+0x130/0x130 [ 592.120584] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 592.122841] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 592.126789] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 592.131626] lowmem_reserve[]: [ 592.135557] ? run_timer_softirq+0x5a0/0x5a0 [ 592.140656] 0 [ 592.166220] __alloc_pages_nodemask+0x2127/0x2720 [ 592.166236] ? lock_acquire+0x170/0x3f0 [ 592.171613] 2717 [ 592.174331] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 592.178760] 2718 [ 592.180523] ? ion_page_pool_alloc+0x9e/0x1b0 [ 592.185333] 2718 [ 592.189294] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 592.189315] alloc_pages_current+0x155/0x260 [ 592.191347] 2718 [ 592.196173] ion_page_pool_alloc+0x118/0x1b0 [ 592.202681] ion_system_heap_allocate+0x133/0x8c0 [ 592.202692] ? ion_alloc+0x187/0x810 [ 592.202705] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 592.204745] Node 0 [ 592.210172] ? ion_system_contig_heap_create+0x130/0x130 [ 592.210182] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 592.210195] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 592.214586] DMA32 free:18056kB min:36200kB low:45248kB high:54296kB active_anon:47032kB inactive_anon:56792kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:8128kB pagetables:2976kB bounce:0kB free_pcp:372kB local_pcp:40kB free_cma:0kB [ 592.216621] ion_alloc+0x204/0x810 [ 592.221037] lowmem_reserve[]: [ 592.225847] ? ion_dma_buf_release+0x40/0x40 [ 592.229564] warn_alloc_show_mem: 1 callbacks suppressed [ 592.229567] Mem-Info: [ 592.234978] ? __might_fault+0x177/0x1b0 [ 592.237198] active_anon:11945 inactive_anon:20952 isolated_anon:0 [ 592.237198] active_file:11 inactive_file:10 isolated_file:0 [ 592.237198] unevictable:0 dirty:0 writeback:0 unstable:0 [ 592.237198] slab_reclaimable:12321 slab_unreclaimable:115516 [ 592.237198] mapped:52745 shmem:21274 pagetables:857 bounce:0 [ 592.237198] free:13960 free_pcp:133 free_cma:0 [ 592.242632] ion_ioctl+0xea/0x1f0 [ 592.242643] ? ion_query_heaps+0x360/0x360 [ 592.242657] ? lock_acquire+0x170/0x3f0 [ 592.247670] 0 [ 592.252488] ? lock_downgrade+0x740/0x740 [ 592.252497] ? ion_query_heaps+0x360/0x360 [ 592.252508] do_vfs_ioctl+0x75a/0xff0 [ 592.252519] ? ioctl_preallocate+0x1a0/0x1a0 [ 592.280798] Node 0 active_anon:47032kB inactive_anon:56852kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:145688kB dirty:0kB writeback:0kB shmem:57996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 592.284362] ? lock_downgrade+0x740/0x740 [ 592.287442] Node 1 active_anon:748kB inactive_anon:26956kB active_file:16kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:65292kB dirty:0kB writeback:0kB shmem:27100kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 592.291826] ? __fget+0x225/0x360 [ 592.291835] ? do_vfs_ioctl+0xff0/0xff0 [ 592.291847] ? security_file_ioctl+0x83/0xb0 [ 592.291857] SyS_ioctl+0x7f/0xb0 [ 592.297221] Node 0 [ 592.299622] ? do_vfs_ioctl+0xff0/0xff0 [ 592.299637] do_syscall_64+0x1d5/0x640 [ 592.299655] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 592.299665] RIP: 0033:0x45e219 [ 592.303738] 0 [ 592.336937] RSP: 002b:00007f1c98502c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 592.336946] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 592.336951] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 592.336955] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 592.336960] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 592.336965] R13: 00007ffef867e34f R14: 00007f1c985039c0 R15: 000000000119bf8c [ 592.340563] CPU: 0 PID: 20228 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 592.340570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 592.340573] Call Trace: [ 592.340593] dump_stack+0x1b2/0x281 [ 592.340609] warn_alloc.cold+0x96/0x1cc [ 592.340623] ? zone_watermark_ok_safe+0x220/0x220 [ 592.340634] ? usleep_range+0x130/0x130 [ 592.340642] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 592.340655] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 592.340666] ? run_timer_softirq+0x5a0/0x5a0 [ 592.340683] __alloc_pages_nodemask+0x2127/0x2720 [ 592.340706] ? lock_acquire+0x170/0x3f0 [ 592.340722] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 592.340735] ? ion_page_pool_alloc+0x9e/0x1b0 [ 592.340748] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 592.340767] alloc_pages_current+0x155/0x260 [ 592.340776] ion_page_pool_alloc+0x118/0x1b0 [ 592.340786] ion_system_heap_allocate+0x133/0x8c0 [ 592.340795] ? ion_alloc+0x187/0x810 [ 592.340804] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 592.340813] ? ion_system_contig_heap_create+0x130/0x130 [ 592.340823] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 592.340834] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 592.340845] ion_alloc+0x204/0x810 [ 592.340858] ? ion_dma_buf_release+0x40/0x40 [ 592.340870] ? __might_fault+0x177/0x1b0 [ 592.357645] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 592.359203] ion_ioctl+0xea/0x1f0 [ 592.359214] ? ion_query_heaps+0x360/0x360 [ 592.359230] ? lock_acquire+0x170/0x3f0 [ 592.363005] lowmem_reserve[]: [ 592.367398] ? lock_downgrade+0x740/0x740 [ 592.396391] 0 [ 592.400167] ? ion_query_heaps+0x360/0x360 [ 592.400179] do_vfs_ioctl+0x75a/0xff0 [ 592.400194] ? ioctl_preallocate+0x1a0/0x1a0 [ 592.427279] 0 [ 592.430695] ? lock_downgrade+0x740/0x740 [ 592.430712] ? __fget+0x225/0x360 [ 592.434656] 2717 [ 592.439056] ? do_vfs_ioctl+0xff0/0xff0 [ 592.439067] ? security_file_ioctl+0x83/0xb0 [ 592.439078] SyS_ioctl+0x7f/0xb0 [ 592.442415] 2718 [ 592.444631] ? do_vfs_ioctl+0xff0/0xff0 [ 592.448690] 2718 [ 592.452580] do_syscall_64+0x1d5/0x640 [ 592.457750] 2718 [ 592.460945] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 592.460954] RIP: 0033:0x45e219 [ 592.460959] RSP: 002b:00007f39dd445c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 592.460968] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 592.460972] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 592.460980] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 592.462778] 0 [ 592.470441] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 592.470446] R13: 00007ffc799adfff R14: 00007f39dd4469c0 R15: 000000000119bf8c [ 592.512423] syz-executor.1: [ 592.527584] page allocation failure: order:4 [ 592.538549] Node 0 [ 592.541922] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 592.544045] DMA32 free:33156kB min:36200kB low:45248kB high:54296kB active_anon:47032kB inactive_anon:56792kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:8128kB pagetables:2976kB bounce:0kB free_pcp:724kB local_pcp:40kB free_cma:0kB [ 592.549143] (null) [ 592.549148] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 592.549171] CPU: 0 PID: 20228 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 592.549177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 592.549180] Call Trace: [ 592.549203] dump_stack+0x1b2/0x281 [ 592.549218] warn_alloc.cold+0x96/0x1cc [ 592.549232] ? zone_watermark_ok_safe+0x220/0x220 [ 592.549253] __alloc_pages_nodemask+0x2127/0x2720 [ 592.549266] ? lock_acquire+0x170/0x3f0 [ 592.549276] ? lock_acquire+0x170/0x3f0 [ 592.549289] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 592.549304] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 592.549316] ? __mutex_unlock_slowpath+0x75/0x770 [ 592.549333] alloc_pages_current+0x155/0x260 [ 592.549352] ion_page_pool_alloc+0x118/0x1b0 [ 592.578263] lowmem_reserve[]: [ 592.582444] ion_system_heap_allocate+0x133/0x8c0 [ 592.586818] 0 [ 592.591208] ? _raw_spin_unlock+0x29/0x40 [ 592.591218] ? _ion_heap_freelist_drain+0x6e/0x410 [ 592.591227] ? ion_system_contig_heap_create+0x130/0x130 [ 592.591242] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 592.608254] 0 [ 592.610626] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 592.615625] 0 [ 592.620450] ion_alloc+0x27a/0x810 [ 592.620465] ? ion_dma_buf_release+0x40/0x40 [ 592.620478] ? __might_fault+0x177/0x1b0 [ 592.638258] 0 [ 592.658106] ion_ioctl+0xea/0x1f0 [ 592.658118] ? ion_query_heaps+0x360/0x360 [ 592.661584] 0 [ 592.665792] ? lock_acquire+0x170/0x3f0 [ 592.678252] 0 [ 592.678837] ? lock_downgrade+0x740/0x740 [ 592.686849] ? ion_query_heaps+0x360/0x360 [ 592.720413] do_vfs_ioctl+0x75a/0xff0 [ 592.722451] Node 0 [ 592.726331] ? ioctl_preallocate+0x1a0/0x1a0 [ 592.728398] Node 0 [ 592.733532] ? lock_downgrade+0x740/0x740 [ 592.733546] ? __fget+0x225/0x360 [ 592.736978] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 592.744668] ? do_vfs_ioctl+0xff0/0xff0 [ 592.744679] ? security_file_ioctl+0x83/0xb0 [ 592.744688] SyS_ioctl+0x7f/0xb0 [ 592.744696] ? do_vfs_ioctl+0xff0/0xff0 [ 592.744714] do_syscall_64+0x1d5/0x640 [ 592.758267] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 592.759411] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 592.766653] lowmem_reserve[]: [ 592.768439] RIP: 0033:0x45e219 [ 592.768444] RSP: 002b:00007f39dd445c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 592.768453] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 592.768458] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 592.768462] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 592.768469] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 592.788251] lowmem_reserve[]: [ 592.790483] R13: 00007ffc799adfff R14: 00007f39dd4469c0 R15: 000000000119bf8c [ 592.792712] 0 [ 592.872899] 0 0 0 0 0 [ 592.877055] 0 [ 592.928234] 0 [ 593.001650] Node 1 [ 593.002540] 0 0 [ 593.174087] Node 1 Normal free:377096kB min:53696kB low:67120kB high:80544kB active_anon:748kB inactive_anon:26956kB active_file:12kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:452kB bounce:0kB free_pcp:776kB local_pcp:40kB free_cma:0kB [ 593.179121] Normal free:377096kB min:53696kB low:67120kB high:80544kB active_anon:748kB inactive_anon:26956kB active_file:12kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:452kB bounce:0kB free_pcp:776kB local_pcp:736kB free_cma:0kB [ 593.207036] lowmem_reserve[]: 0 0 0 0 0 [ 593.272310] Node 0 DMA: 9*4kB (UM) 17*8kB (U) 15*16kB (U) 9*32kB (U) 1*64kB (M) 4*128kB (UM) 2*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 11004kB [ 593.278240] lowmem_reserve[]: 0 0 0 0 0 [ 593.308226] Node 0 DMA: 9*4kB (UM) 17*8kB (U) 15*16kB (U) 9*32kB (U) 1*64kB (M) 4*128kB (UM) 2*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 11004kB [ 593.338228] Node 0 DMA32: 468*4kB (UE) 528*8kB (E) 3031*16kB (UME) 440*32kB (UME) 1206*64kB (U) 17*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 148032kB [ 593.353244] Bluetooth: hci3 command 0x0419 tx timeout [ 593.378211] Node 0 DMA32: 388*4kB (E) 529*8kB (UE) 1777*16kB (UME) 441*32kB (UME) 1541*64kB (U) 68*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 155656kB [ 593.388310] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 593.438593] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 593.441705] Node 1 [ 593.468201] Node 1 [ 593.468218] Normal: 26*4kB [ 593.472896] Normal: [ 593.472903] (UM) [ 593.475808] 26*4kB [ 593.478111] 544*8kB [ 593.508259] (UM) 544*8kB (UM) 354*16kB (UM) 266*32kB (U) 9*64kB (M) 4*128kB (UM) 0*256kB 14*512kB (U) 19*1024kB (U) 39*2048kB (U) 10*4096kB (U) = 167176kB [ 593.538374] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 593.542233] (UM) [ 593.547283] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 593.547286] 354*16kB (UM) [ 593.557813] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 593.581768] 266*32kB (U) 9*64kB (M) 4*128kB (UM) 0*256kB 14*512kB (U) 19*1024kB (U) 39*2048kB (U) 10*4096kB (U) = 167176kB [ 593.608194] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 593.608470] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 593.617072] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 593.688178] 22258 total pagecache pages [ 593.692223] 0 pages in swap cache [ 593.695673] Swap cache stats: add 0, delete 0, find 0/0 [ 593.698213] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 593.718230] Free swap = 0kB [ 593.721280] Total swap = 0kB [ 593.724298] 2097051 pages RAM [ 593.727395] 0 pages HighMem/MovableOnly [ 593.756096] 363840 pages reserved [ 593.759794] 0 pages cma reserved [ 593.768229] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 593.776829] 22008 total pagecache pages [ 593.781008] 0 pages in swap cache [ 593.798188] Swap cache stats: add 0, delete 0, find 0/0 [ 593.808172] Free swap = 0kB [ 593.811191] Total swap = 0kB [ 593.814216] 2097051 pages RAM [ 593.817331] 0 pages HighMem/MovableOnly [ 593.828357] 363840 pages reserved [ 593.851983] 0 pages cma reserved [ 593.855425] Out of memory (oom_kill_allocating_task): Kill process 19971 (in:imklog) score 0 or sacrifice child [ 593.903232] Killed process 19969 (rsyslogd) total-vm:254332kB, anon-rss:656kB, file-rss:0kB, shmem-rss:0kB [ 593.905542] syz-executor.0: [ 593.942730] oom_reaper: reaped process 20227 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 593.959918] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 593.960317] syz-executor.4: [ 593.970426] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 593.970451] CPU: 0 PID: 20223 Comm: syz-executor.0 Not tainted 4.14.217-syzkaller #0 [ 593.970456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 593.970459] Call Trace: [ 593.970480] dump_stack+0x1b2/0x281 [ 593.970495] warn_alloc.cold+0x96/0x1cc [ 593.975762] page allocation failure: order:4 [ 593.979294] ? zone_watermark_ok_safe+0x220/0x220 [ 593.979316] __alloc_pages_nodemask+0x2127/0x2720 [ 593.979329] ? lock_acquire+0x170/0x3f0 [ 593.979346] ? lock_acquire+0x170/0x3f0 [ 593.987212] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 593.996558] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 593.996574] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 593.996586] ? __mutex_unlock_slowpath+0x75/0x770 [ 593.999178] (null) [ 594.002781] alloc_pages_current+0x155/0x260 [ 594.006720] syz-executor.4 cpuset= [ 594.011115] ion_page_pool_alloc+0x118/0x1b0 [ 594.011125] ion_system_heap_allocate+0x133/0x8c0 [ 594.011139] ? _raw_spin_unlock+0x29/0x40 [ 594.015950] / [ 594.020777] ? _ion_heap_freelist_drain+0x6e/0x410 [ 594.024827] mems_allowed=0-1 [ 594.028770] ? ion_system_contig_heap_create+0x130/0x130 [ 594.028780] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 594.028793] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 594.099582] ion_alloc+0x27a/0x810 [ 594.103727] ? ion_dma_buf_release+0x40/0x40 [ 594.108118] ? __might_fault+0x177/0x1b0 [ 594.112159] ion_ioctl+0xea/0x1f0 [ 594.115595] ? ion_query_heaps+0x360/0x360 [ 594.119839] ? lock_acquire+0x170/0x3f0 [ 594.123798] ? lock_downgrade+0x740/0x740 [ 594.127939] ? ion_query_heaps+0x360/0x360 [ 594.132155] do_vfs_ioctl+0x75a/0xff0 [ 594.135950] ? ioctl_preallocate+0x1a0/0x1a0 [ 594.140338] ? lock_downgrade+0x740/0x740 [ 594.144470] ? __fget+0x225/0x360 [ 594.147903] ? do_vfs_ioctl+0xff0/0xff0 [ 594.151860] ? security_file_ioctl+0x83/0xb0 [ 594.156250] SyS_ioctl+0x7f/0xb0 [ 594.159613] ? do_vfs_ioctl+0xff0/0xff0 [ 594.163581] do_syscall_64+0x1d5/0x640 [ 594.167475] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 594.172735] RIP: 0033:0x45e219 [ 594.176005] RSP: 002b:00007f3154555c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 594.183711] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 594.190962] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 594.198212] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 594.205460] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 594.212720] R13: 00007ffd70bb297f R14: 00007f31545569c0 R15: 000000000119bf8c [ 594.219986] CPU: 1 PID: 20236 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 594.226522] syz-executor.3: page allocation failure: order:4 [ 594.227892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 594.227899] Call Trace: [ 594.246068] dump_stack+0x1b2/0x281 [ 594.248143] syz-executor.1: page allocation failure: order:0 [ 594.249701] warn_alloc.cold+0x96/0x1cc [ 594.249715] ? zone_watermark_ok_safe+0x220/0x220 [ 594.255492] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 594.259462] __alloc_pages_nodemask+0x2127/0x2720 [ 594.259477] ? lock_acquire+0x170/0x3f0 [ 594.259489] ? lock_acquire+0x170/0x3f0 [ 594.259504] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 594.259524] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 594.259536] ? __mutex_unlock_slowpath+0x75/0x770 [ 594.268261] oom_reaper: reaped process 19969 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 594.271477] alloc_pages_current+0x155/0x260 [ 594.276314] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 594.280256] ion_page_pool_alloc+0x118/0x1b0 [ 594.280268] ion_system_heap_allocate+0x133/0x8c0 [ 594.280282] ? _raw_spin_unlock+0x29/0x40 [ 594.280290] ? _ion_heap_freelist_drain+0x6e/0x410 [ 594.280301] ? ion_system_contig_heap_create+0x130/0x130 [ 594.280313] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 594.280326] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 594.293805] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask= [ 594.294602] ion_alloc+0x27a/0x810 [ 594.306817] (null) [ 594.308867] ? ion_dma_buf_release+0x40/0x40 [ 594.308881] ? __might_fault+0x177/0x1b0 [ 594.308892] ion_ioctl+0xea/0x1f0 [ 594.308899] ? ion_query_heaps+0x360/0x360 [ 594.308910] ? lock_acquire+0x170/0x3f0 [ 594.308917] ? lock_downgrade+0x740/0x740 [ 594.308923] ? ion_query_heaps+0x360/0x360 [ 594.308933] do_vfs_ioctl+0x75a/0xff0 [ 594.308943] ? ioctl_preallocate+0x1a0/0x1a0 [ 594.308951] ? lock_downgrade+0x740/0x740 [ 594.308964] ? __fget+0x225/0x360 [ 594.308974] ? do_vfs_ioctl+0xff0/0xff0 [ 594.308986] ? security_file_ioctl+0x83/0xb0 [ 594.308994] SyS_ioctl+0x7f/0xb0 [ 594.309002] ? do_vfs_ioctl+0xff0/0xff0 [ 594.309014] do_syscall_64+0x1d5/0x640 [ 594.309032] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 594.309040] RIP: 0033:0x45e219 [ 594.309044] RSP: 002b:00007fd20c681c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 594.309052] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 594.309056] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 594.309060] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 594.309065] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 594.309069] R13: 00007fff87e85fff R14: 00007fd20c6829c0 R15: 000000000119bf8c [ 594.323468] warn_alloc_show_mem: 4 callbacks suppressed [ 594.323473] Mem-Info: [ 594.328141] (null) [ 594.334021] active_anon:11693 inactive_anon:20952 isolated_anon:0 [ 594.334021] active_file:10 inactive_file:11 isolated_file:0 [ 594.334021] unevictable:0 dirty:0 writeback:0 unstable:0 [ 594.334021] slab_reclaimable:12319 slab_unreclaimable:116992 [ 594.334021] mapped:52784 shmem:21274 pagetables:857 bounce:0 [ 594.334021] free:13846 free_pcp:108 free_cma:0 [ 594.334591] syz-executor.3 cpuset= [ 594.339615] Node 0 active_anon:46028kB inactive_anon:56852kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:145688kB dirty:0kB writeback:0kB shmem:57996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 594.344999] (null) [ 594.353423] Node 1 active_anon:744kB inactive_anon:26956kB active_file:12kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:65448kB dirty:0kB writeback:0kB shmem:27100kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 594.378154] , order=1, oom_score_adj=0 [ 594.382915] syz-executor.1 cpuset= [ 594.386135] systemd-journal cpuset= [ 594.390157] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 594.390177] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 594.390194] Node 0 DMA32 free:17588kB min:36200kB low:45248kB high:54296kB active_anon:46424kB inactive_anon:56792kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:8032kB pagetables:2976kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 594.390215] lowmem_reserve[]: 0 0 0 0 0 [ 594.390234] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 594.390249] lowmem_reserve[]: 0 0 0 0 0 [ 594.390268] Node 1 Normal free:26840kB min:53696kB low:67120kB high:80544kB active_anon:744kB inactive_anon:26956kB active_file:12kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:452kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 594.390287] lowmem_reserve[]: 0 0 0 0 0 [ 594.390307] Node 0 DMA: 1*4kB (M) 7*8kB (U) 15*16kB (U) 9*32kB (U) 2*64kB (UM) 4*128kB (UM) 2*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 10956kB [ 594.390387] Node 0 DMA32: 796*4kB (UME) 821*8kB [ 594.397206] / [ 594.749193] / [ 594.754161] / mems_allowed=0-1 [ 594.759133] CPU: 0 PID: 19862 Comm: systemd-journal Not tainted 4.14.217-syzkaller #0 [ 594.759256] (ME) [ 594.767084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 594.767090] 225*16kB [ 594.769128] Call Trace: [ 594.769151] dump_stack+0x1b2/0x281 [ 594.769166] dump_header+0x178/0x82f [ 594.791862] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 594.796963] ? ___ratelimit+0x2cd/0x530 [ 594.798799] (UME) 41*32kB [ 594.800959] oom_kill_process.cold+0x10/0xb18 [ 594.800984] out_of_memory+0xe3e/0x1190 [ 594.803816] (UME) [ 594.808300] ? oom_killer_disable+0x1c0/0x1c0 [ 594.808309] ? mutex_trylock+0x152/0x1a0 [ 594.808320] __alloc_pages_nodemask+0x23e1/0x2720 [ 594.808340] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 594.812282] 5*64kB [ 594.814435] ? cache_grow_begin+0x41/0x630 [ 594.818917] (E) [ 594.822936] cache_grow_begin+0x91/0x630 [ 594.827748] 0*128kB [ 594.832569] ? cache_grow_begin+0x91/0x630 [ 594.832579] fallback_alloc+0x207/0x2c0 [ 594.832592] kmem_cache_alloc+0x1e5/0x3c0 [ 594.834802] 12*256kB [ 594.839023] getname_flags+0xc8/0x550 [ 594.839035] do_sys_open+0x1ce/0x410 [ 594.839044] ? filp_open+0x60/0x60 [ 594.840996] (U) [ 594.845036] ? do_syscall_64+0x4c/0x640 [ 594.847330] 0*512kB [ 594.851541] ? do_sys_open+0x410/0x410 [ 594.851549] do_syscall_64+0x1d5/0x640 [ 594.851568] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 594.855512] 0*1024kB [ 594.859724] RIP: 0033:0x7f84e5b38840 [ 594.859728] RSP: 002b:00007ffc88faa438 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 594.859737] RAX: ffffffffffffffda RBX: 00007ffc88faa740 RCX: 00007f84e5b38840 [ 594.859744] RDX: 00000000000001a0 RSI: 0000000000080042 RDI: 000055e16327c810 [ 594.862129] 0*2048kB [ 594.865989] RBP: 000000000000000d R08: 000000000000ffc0 R09: 00000000ffffffff [ 594.865995] R10: 0000000000000069 R11: 0000000000000246 R12: 00000000ffffffff [ 594.869718] 0*4096kB [ 594.873216] R13: 000055e163277040 R14: 00007ffc88faa700 R15: 000055e16327c350 [ 594.875290] Mem-Info: [ 594.882739] syz-executor.5: [ 594.885872] active_anon:11693 inactive_anon:20952 isolated_anon:0 [ 594.885872] active_file:10 inactive_file:11 isolated_file:0 [ 594.885872] unevictable:0 dirty:0 writeback:0 unstable:0 [ 594.885872] slab_reclaimable:12319 slab_unreclaimable:116992 [ 594.885872] mapped:52784 shmem:21274 pagetables:857 bounce:0 [ 594.885872] free:13846 free_pcp:0 free_cma:0 [ 594.891182] = 18056kB [ 594.895652] Node 0 active_anon:46028kB inactive_anon:56852kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:145688kB dirty:0kB writeback:0kB shmem:57996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 594.896857] Node 0 [ 594.901325] Node 1 active_anon:744kB inactive_anon:26956kB active_file:12kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:65448kB dirty:0kB writeback:0kB shmem:27100kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 594.911802] page allocation failure: order:0 [ 594.915677] Node 0 [ 594.924938] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 594.927215] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 594.936091] Normal: [ 594.941904] lowmem_reserve[]: [ 594.944245] (null) [ 594.950206] 0 [ 594.959401] 0*4kB [ 594.990660] 2717 [ 594.996132] syz-executor.5 cpuset= [ 595.053003] 2718 [ 595.055133] 0*8kB [ 595.084067] 2718 [ 595.087948] / [ 595.097747] 2718 [ 595.099696] 0*16kB [ 595.110413] mems_allowed=0-1 [ 595.113239] Node 0 [ 595.113459] CPU: 1 PID: 20219 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 595.115154] DMA32 free:18080kB min:36200kB low:45248kB high:54296kB active_anon:46424kB inactive_anon:56792kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:8032kB pagetables:2976kB bounce:0kB free_pcp:244kB local_pcp:124kB free_cma:0kB [ 595.117208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 595.119536] syz-executor.0: [ 595.122502] Call Trace: [ 595.124718] page allocation failure: order:0 [ 595.132591] dump_stack+0x1b2/0x281 [ 595.132607] warn_alloc.cold+0x96/0x1cc [ 595.132619] ? afs_vnode_setattr+0x120/0x170 [ 595.132631] ? zone_watermark_ok_safe+0x220/0x220 [ 595.132645] ? usleep_range+0x130/0x130 [ 595.168524] lowmem_reserve[]: [ 595.170344] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 595.173354] 0 [ 595.175925] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 595.187375] 0 [ 595.187873] ? run_timer_softirq+0x5a0/0x5a0 [ 595.192297] 0 [ 595.197088] __alloc_pages_nodemask+0x2127/0x2720 [ 595.208339] 0 [ 595.209227] ? lock_acquire+0x170/0x3f0 [ 595.210991] 0 [ 595.215994] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 595.222156] ? ion_page_pool_alloc+0x9e/0x1b0 [ 595.222174] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 595.222193] alloc_pages_current+0x155/0x260 [ 595.222205] ion_page_pool_alloc+0x118/0x1b0 [ 595.222217] ion_system_heap_allocate+0x133/0x8c0 [ 595.222227] ? ion_alloc+0x187/0x810 [ 595.222239] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 595.222249] ? ion_system_contig_heap_create+0x130/0x130 [ 595.222260] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 595.222271] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 595.222280] ion_alloc+0x204/0x810 [ 595.222295] ? ion_dma_buf_release+0x40/0x40 [ 595.231150] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 595.234646] ? __might_fault+0x177/0x1b0 [ 595.236417] (null) [ 595.241242] ion_ioctl+0xea/0x1f0 [ 595.241253] ? ion_query_heaps+0x360/0x360 [ 595.241266] ? lock_acquire+0x170/0x3f0 [ 595.241275] ? lock_downgrade+0x740/0x740 [ 595.241282] ? ion_query_heaps+0x360/0x360 [ 595.241293] do_vfs_ioctl+0x75a/0xff0 [ 595.241305] ? ioctl_preallocate+0x1a0/0x1a0 [ 595.241313] ? lock_downgrade+0x740/0x740 [ 595.241327] ? __fget+0x225/0x360 [ 595.251670] Node 0 [ 595.255623] ? do_vfs_ioctl+0xff0/0xff0 [ 595.262921] syz-executor.0 cpuset= [ 595.264836] ? security_file_ioctl+0x83/0xb0 [ 595.273420] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 595.273973] SyS_ioctl+0x7f/0xb0 [ 595.282797] / [ 595.284389] ? do_vfs_ioctl+0xff0/0xff0 [ 595.293376] lowmem_reserve[]: [ 595.297281] do_syscall_64+0x1d5/0x640 [ 595.312179] mems_allowed=0-1 [ 595.313988] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 595.331758] 0 [ 595.334295] RIP: 0033:0x45e219 [ 595.351798] 0 [ 595.352540] RSP: 002b:00007faf520eec68 EFLAGS: 00000246 [ 595.356240] 0 [ 595.360714] ORIG_RAX: 0000000000000010 [ 595.360719] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 595.360723] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 595.360727] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 595.360731] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 595.360736] R13: 00007ffc58d08e3f R14: 00007faf520ef9c0 R15: 000000000119bf8c [ 595.368113] 0*32kB [ 595.389730] CPU: 0 PID: 20223 Comm: syz-executor.0 Not tainted 4.14.217-syzkaller #0 [ 595.399620] 0*64kB [ 595.402033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 595.405120] 0*128kB [ 595.410281] Call Trace: [ 595.410305] dump_stack+0x1b2/0x281 [ 595.410323] warn_alloc.cold+0x96/0x1cc [ 595.412120] 0*256kB [ 595.415309] ? zone_watermark_ok_safe+0x220/0x220 [ 595.417079] 0*512kB [ 595.422419] ? usleep_range+0x130/0x130 [ 595.422427] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 595.422442] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 595.422453] ? run_timer_softirq+0x5a0/0x5a0 [ 595.424228] 0*1024kB [ 595.428199] __alloc_pages_nodemask+0x2127/0x2720 [ 595.428216] ? lock_acquire+0x170/0x3f0 [ 595.435477] 0*2048kB [ 595.442749] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 595.442762] ? ion_page_pool_alloc+0x9e/0x1b0 [ 595.442779] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 595.450035] 0*4096kB [ 595.457311] alloc_pages_current+0x155/0x260 [ 595.464792] = 0kB [ 595.466965] ion_page_pool_alloc+0x118/0x1b0 [ 595.474845] Node 1 [ 595.477037] ion_system_heap_allocate+0x133/0x8c0 [ 595.486386] Normal: [ 595.488683] ? _raw_spin_unlock+0x29/0x40 [ 595.488695] ? _ion_heap_freelist_drain+0x6e/0x410 [ 595.491275] 23*4kB [ 595.494880] ? ion_system_contig_heap_create+0x130/0x130 [ 595.498846] (UM) [ 595.501133] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 595.501145] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 595.505959] 6*8kB [ 595.508265] ion_alloc+0x27a/0x810 [ 595.508280] ? ion_dma_buf_release+0x40/0x40 [ 595.508293] ? __might_fault+0x177/0x1b0 [ 595.512244] (M) [ 595.517339] ion_ioctl+0xea/0x1f0 [ 595.522371] 2*16kB [ 595.526753] ? ion_query_heaps+0x360/0x360 [ 595.529152] (UM) [ 595.533964] ? lock_acquire+0x170/0x3f0 [ 595.537921] 0*32kB [ 595.540316] ? lock_downgrade+0x740/0x740 [ 595.540325] ? ion_query_heaps+0x360/0x360 [ 595.540336] do_vfs_ioctl+0x75a/0xff0 [ 595.540348] ? ioctl_preallocate+0x1a0/0x1a0 [ 595.545181] mems_allowed=0-1 [ 595.549646] ? lock_downgrade+0x740/0x740 [ 595.549660] ? __fget+0x225/0x360 [ 595.549668] ? do_vfs_ioctl+0xff0/0xff0 [ 595.549681] ? security_file_ioctl+0x83/0xb0 [ 595.557985] 9*64kB [ 595.561874] SyS_ioctl+0x7f/0xb0 [ 595.563907] (M) [ 595.568295] ? do_vfs_ioctl+0xff0/0xff0 [ 595.568307] do_syscall_64+0x1d5/0x640 [ 595.568326] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 595.587979] 4*128kB [ 595.589849] RIP: 0033:0x45e219 [ 595.595268] (UM) [ 595.597309] RSP: 002b:00007f3154555c68 EFLAGS: 00000246 [ 595.617986] 0*256kB [ 595.621161] ORIG_RAX: 0000000000000010 [ 595.623129] 0*512kB [ 595.626559] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 595.637975] 1*1024kB [ 595.638982] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 595.641192] (U) [ 595.645319] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 595.645326] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 595.657976] 8*2048kB [ 595.660779] R13: 00007ffd70bb297f R14: 00007f31545569c0 R15: 000000000119bf8c [ 595.664911] (U) [ 595.673362] 0 [ 595.676852] CPU: 1 PID: 20228 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 595.676860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 595.679174] 0 [ 595.682453] Call Trace: [ 595.688380] dump_stack+0x1b2/0x281 [ 595.688396] warn_alloc.cold+0x96/0x1cc [ 595.688409] ? zone_watermark_ok_safe+0x220/0x220 [ 595.688419] ? usleep_range+0x130/0x130 [ 595.688429] ? try_to_free_pages+0x23f/0x6e0 [ 595.688439] ? _find_next_bit+0xdb/0x100 [ 595.688451] ? run_timer_softirq+0x5a0/0x5a0 [ 595.696163] Node 1 [ 595.697511] __alloc_pages_nodemask+0x2127/0x2720 [ 595.699905] Normal free:26840kB min:53696kB low:67120kB high:80544kB active_anon:744kB inactive_anon:26956kB active_file:12kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:452kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 595.703015] ? lock_acquire+0x170/0x3f0 [ 595.705304] lowmem_reserve[]: [ 595.710658] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 595.710671] ? ion_page_pool_alloc+0x9e/0x1b0 [ 595.710687] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 595.710707] alloc_pages_current+0x155/0x260 [ 595.710718] ion_page_pool_alloc+0x118/0x1b0 [ 595.710729] ion_system_heap_allocate+0x133/0x8c0 [ 595.710742] ? _raw_spin_unlock+0x29/0x40 [ 595.716837] 0 [ 595.717127] ? _ion_heap_freelist_drain+0x6e/0x410 [ 595.719461] 0 [ 595.726683] ? ion_system_contig_heap_create+0x130/0x130 [ 595.732831] mems_allowed=0-1 [ 595.736341] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 595.751605] 0 [ 595.752810] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 595.755197] 0 [ 595.762467] ion_alloc+0x27a/0x810 [ 595.762481] ? ion_dma_buf_release+0x40/0x40 [ 595.762493] ? __might_fault+0x177/0x1b0 [ 595.762504] ion_ioctl+0xea/0x1f0 [ 595.762516] ? ion_query_heaps+0x360/0x360 [ 595.777984] 0 [ 595.783479] ? lock_acquire+0x170/0x3f0 [ 595.787825] ? lock_downgrade+0x740/0x740 [ 595.817981] Node 0 [ 595.819192] ? ion_query_heaps+0x360/0x360 [ 595.824003] DMA: [ 595.854909] do_vfs_ioctl+0x75a/0xff0 [ 595.854923] ? ioctl_preallocate+0x1a0/0x1a0 [ 595.854935] ? lock_downgrade+0x740/0x740 [ 595.854947] ? __fget+0x225/0x360 [ 595.854955] ? do_vfs_ioctl+0xff0/0xff0 [ 595.854966] ? security_file_ioctl+0x83/0xb0 [ 595.854975] SyS_ioctl+0x7f/0xb0 [ 595.854981] ? do_vfs_ioctl+0xff0/0xff0 [ 595.854994] do_syscall_64+0x1d5/0x640 [ 595.855014] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 595.922441] 1*4kB [ 595.928772] RIP: 0033:0x45e219 [ 595.928778] RSP: 002b:00007f39dd445c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 595.928787] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 595.928792] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 595.928796] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 595.928800] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 595.928804] R13: 00007ffc799adfff R14: 00007f39dd4469c0 R15: 000000000119bf8c [ 595.934772] 2*4096kB [ 595.944442] CPU: 0 PID: 20227 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 595.950920] warn_alloc_show_mem: 1 callbacks suppressed [ 595.950925] Mem-Info: [ 595.953949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 595.953958] Call Trace: [ 595.961518] (U) [ 595.963247] dump_stack+0x1b2/0x281 [ 595.966845] = 26860kB [ 595.971505] warn_alloc.cold+0x96/0x1cc [ 595.971524] ? zone_watermark_ok_safe+0x220/0x220 [ 595.971547] __alloc_pages_nodemask+0x2127/0x2720 [ 595.976036] active_anon:11693 inactive_anon:20952 isolated_anon:0 [ 595.976036] active_file:10 inactive_file:11 isolated_file:0 [ 595.976036] unevictable:0 dirty:0 writeback:0 unstable:0 [ 595.976036] slab_reclaimable:12319 slab_unreclaimable:116908 [ 595.976036] mapped:52784 shmem:21274 pagetables:857 bounce:0 [ 595.976036] free:13969 free_pcp:59 free_cma:0 [ 595.979444] ? lock_acquire+0x170/0x3f0 [ 595.979457] ? lock_acquire+0x170/0x3f0 [ 595.979473] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 595.984306] Node 0 active_anon:46028kB inactive_anon:56852kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:145688kB dirty:0kB writeback:0kB shmem:57996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 595.986086] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 595.990161] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 595.995279] ? __mutex_unlock_slowpath+0x75/0x770 [ 595.997490] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 596.001740] ? __list_add_valid+0x75/0xa0 [ 596.001756] alloc_pages_current+0x155/0x260 [ 596.001777] ion_page_pool_alloc+0x118/0x1b0 [ 596.004097] Node 1 active_anon:744kB inactive_anon:26956kB active_file:12kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:65448kB dirty:0kB writeback:0kB shmem:27100kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 596.007879] ion_system_heap_allocate+0x133/0x8c0 [ 596.012388] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 596.016477] ? _raw_spin_unlock+0x29/0x40 [ 596.019929] Node 0 [ 596.023970] ? _ion_heap_freelist_drain+0x6e/0x410 [ 596.029041] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 596.032438] ? ion_system_contig_heap_create+0x130/0x130 [ 596.036811] 21295 total pagecache pages [ 596.040683] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 596.040701] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 596.040719] ion_alloc+0x27a/0x810 [ 596.045922] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 596.048032] ? ion_dma_buf_release+0x40/0x40 [ 596.048048] ? __might_fault+0x177/0x1b0 [ 596.051360] lowmem_reserve[]: [ 596.059251] ion_ioctl+0xea/0x1f0 [ 596.059261] ? ion_query_heaps+0x360/0x360 [ 596.059276] ? lock_acquire+0x170/0x3f0 [ 596.066559] 0 pages in swap cache [ 596.073924] ? lock_downgrade+0x740/0x740 [ 596.073933] ? ion_query_heaps+0x360/0x360 [ 596.073943] do_vfs_ioctl+0x75a/0xff0 [ 596.073955] ? ioctl_preallocate+0x1a0/0x1a0 [ 596.081235] 0 [ 596.088471] ? lock_downgrade+0x740/0x740 [ 596.088485] ? __fget+0x225/0x360 [ 596.088495] ? do_vfs_ioctl+0xff0/0xff0 [ 596.095751] Swap cache stats: add 0, delete 0, find 0/0 [ 596.098143] ? security_file_ioctl+0x83/0xb0 [ 596.098153] SyS_ioctl+0x7f/0xb0 [ 596.098163] ? do_vfs_ioctl+0xff0/0xff0 [ 596.106020] Free swap = 0kB [ 596.111365] do_syscall_64+0x1d5/0x640 [ 596.111393] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 596.113776] 2717 [ 596.123122] RIP: 0033:0x45e219 [ 596.123127] RSP: 002b:00007f1c98502c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 596.123141] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 596.125703] Total swap = 0kB [ 596.127675] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 596.131301] 2718 [ 596.133668] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 596.133675] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 596.137624] 2718 [ 596.142445] R13: 00007ffef867e34f R14: 00007f1c985039c0 R15: 000000000119bf8c [ 596.146832] (M) [ 596.147303] 2097051 pages RAM [ 596.184145] 7*8kB [ 596.188039] 2718 [ 596.188689] (U) [ 596.225417] 15*16kB [ 596.231713] 0 pages HighMem/MovableOnly [ 596.236154] (U) [ 596.245533] 363840 pages reserved [ 596.253202] 9*32kB [ 596.254832] 0 pages cma reserved [ 596.259307] (U) 2*64kB (UM) 4*128kB (UM) 2*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 10956kB [ 596.259352] Node 0 DMA32: 796*4kB (UME) 825*8kB (UME) 225*16kB (UME) 41*32kB (UME) [ 596.267575] Node 0 [ 596.296858] 6*64kB [ 596.321429] DMA32 free:18020kB min:36200kB low:45248kB high:54296kB active_anon:45984kB inactive_anon:56792kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:8032kB pagetables:2976kB bounce:0kB free_pcp:292kB local_pcp:180kB free_cma:0kB [ 596.326247] (UE) [ 596.347983] lowmem_reserve[]: [ 596.356117] 0*128kB [ 596.417980] 0 [ 596.495657] 12*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18152kB [ 596.623720] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 596.634504] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 2*16kB (UM) 1*32kB (U) 0*64kB 1*128kB (M) 2*256kB (UM) 2*512kB (UM) 44*1024kB (U) 21*2048kB (UM) 3*4096kB (U) = 102104kB [ 596.650761] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 596.660142] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 596.669298] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 596.686216] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 596.697123] 0 0 0 0 [ 596.707978] 22010 total pagecache pages [ 596.711993] 0 pages in swap cache [ 596.716757] Swap cache stats: add 0, delete 0, find 0/0 [ 596.723113] Free swap = 0kB [ 596.723202] Node 0 [ 596.726185] Total swap = 0kB [ 596.726194] 2097051 pages RAM [ 596.743303] 0 pages HighMem/MovableOnly [ 596.743332] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 596.747385] 363840 pages reserved [ 596.775791] lowmem_reserve[]: 0 0 0 0 0 [ 596.776240] 0 pages cma reserved [ 596.779956] Node 1 [ 596.783293] Out of memory (oom_kill_allocating_task): Kill process 19862 (systemd-journal) score 0 or sacrifice child [ 596.783323] Killed process 19862 (systemd-journal) total-vm:46096kB, anon-rss:468kB, file-rss:4kB, shmem-rss:2116kB [ 596.795721] Normal free:68004kB min:53696kB low:67120kB high:80544kB active_anon:744kB inactive_anon:26956kB active_file:76kB inactive_file:2828kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:452kB bounce:0kB free_pcp:356kB local_pcp:236kB free_cma:0kB [ 596.849621] oom_reaper: reaped process 20219 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 596.865096] lowmem_reserve[]: 0 0 0 0 0 [ 596.902343] Node 0 DMA: 1*4kB (M) 7*8kB (U) 15*16kB (U) 9*32kB (U) 2*64kB (UM) 4*128kB (UM) 2*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 10956kB [ 596.944339] Node 0 DMA32: 796*4kB (UME) 822*8kB (UME) 225*16kB (UME) 45*32kB (UME) 5*64kB (E) 0*128kB 12*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 20240kB [ 596.969491] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 596.980742] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 2*16kB (UM) 1*32kB (M) 2*64kB (UM) 1*128kB (U) 1*256kB (U) 0*512kB 14*1024kB (U) 35*2048kB (U) 2*4096kB (U) = 94800kB [ 596.997261] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 597.006282] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 597.015350] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 597.025527] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 597.026584] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 597.046699] 24042 total pagecache pages [ 597.047028] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 597.057902] 0 pages in swap cache [ 597.063023] Swap cache stats: add 0, delete 0, find 0/0 [ 597.072954] Free swap = 0kB [ 597.075984] Total swap = 0kB [ 597.091517] 2097051 pages RAM [ 597.093844] systemd[1]: rsyslog.service: Unit entered failed state. [ 597.104110] 0 pages HighMem/MovableOnly [ 597.116228] systemd[1]: rsyslog.service: Failed with result 'signal'. [ 597.122979] 363840 pages reserved [ 597.123726] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 597.126456] 0 pages cma reserved [ 597.169861] systemd[1]: Stopped Journal Service. [ 597.193137] systemd[1]: Starting Journal Service... [ 597.230332] systemd[1]: rsyslog.service: Service hold-off time over, scheduling restart. [ 597.253285] systemd[1]: Stopped System Logging Service. [ 597.274435] systemd[1]: Starting System Logging Service... [ 597.706492] rsyslogd invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 597.720075] rsyslogd cpuset=/ mems_allowed=0-1 [ 597.724996] CPU: 0 PID: 20252 Comm: rsyslogd Not tainted 4.14.217-syzkaller #0 [ 597.732530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 597.741864] Call Trace: [ 597.744793] dump_stack+0x1b2/0x281 [ 597.748403] dump_header+0x178/0x82f [ 597.752112] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 597.757193] ? ___ratelimit+0x2cd/0x530 [ 597.761152] oom_kill_process.cold+0x10/0xb18 [ 597.765649] out_of_memory+0xe3e/0x1190 [ 597.769628] ? oom_killer_disable+0x1c0/0x1c0 [ 597.774121] ? mutex_trylock+0x152/0x1a0 [ 597.778189] __alloc_pages_nodemask+0x23e1/0x2720 [ 597.783030] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 597.787879] ? mark_held_locks+0xa6/0xf0 [ 597.791938] ? cache_grow_begin+0x41/0x630 [ 597.796163] cache_grow_begin+0x91/0x630 [ 597.800205] ? cache_grow_begin+0x91/0x630 [ 597.804433] fallback_alloc+0x207/0x2c0 [ 597.808400] kmem_cache_alloc+0x1e5/0x3c0 [ 597.812531] ima_d_path+0x4d/0x1e0 [ 597.816225] process_measurement+0x905/0xb20 [ 597.820626] ? ima_rdwr_violation_check+0x3a0/0x3a0 [ 597.825622] ? generic_file_open+0x68/0x90 [ 597.829840] ? ext4_release_file+0x2d0/0x2d0 [ 597.834229] ? apparmor_file_alloc_security+0x800/0x800 [ 597.839573] ? lock_downgrade+0x740/0x740 [ 597.843705] ? file_ra_state_init+0xc4/0x1e0 [ 597.848106] ? do_dentry_open+0x698/0xec0 [ 597.852319] ? ext4_release_file+0x2d0/0x2d0 [ 597.856708] ? __inode_permission+0xcd/0x2f0 [ 597.861095] ? vfs_open+0x10d/0x220 [ 597.864714] path_openat+0x10ad/0x2970 [ 597.868588] ? path_lookupat+0x780/0x780 [ 597.872637] ? trace_hardirqs_on+0x10/0x10 [ 597.877284] ? trace_hardirqs_on+0x10/0x10 [ 597.881513] do_filp_open+0x179/0x3c0 [ 597.885296] ? may_open_dev+0xe0/0xe0 [ 597.889079] ? lock_downgrade+0x740/0x740 [ 597.893226] ? do_raw_spin_unlock+0x164/0x220 [ 597.897701] ? _raw_spin_unlock+0x29/0x40 [ 597.901837] ? __alloc_fd+0x1be/0x490 [ 597.905621] ? _raw_spin_unlock_irq+0x24/0x80 [ 597.910097] do_sys_open+0x296/0x410 [ 597.913790] ? filp_open+0x60/0x60 [ 597.917398] ? do_syscall_64+0x4c/0x640 [ 597.921348] ? do_sys_open+0x410/0x410 [ 597.925215] do_syscall_64+0x1d5/0x640 [ 597.929084] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 597.934260] RIP: 0033:0x7fd6787eb34a [ 597.937948] RSP: 002b:00007ffe5b1042f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000002 [ 597.945640] RAX: ffffffffffffffda RBX: 0000560183d93460 RCX: 00007fd6787eb34a [ 597.952888] RDX: 00000000000001b6 RSI: 0000000000080000 RDI: 00007fd6788dca48 [ 597.960155] RBP: 0000000000000008 R08: 0000000000000008 R09: 0000000000000001 [ 597.967403] R10: 0000000000080000 R11: 0000000000000202 R12: 00007fd6788d9633 [ 597.974660] R13: 0000000000000001 R14: 00007ffe5b104660 R15: 0000000000000000 [ 597.985605] Mem-Info: [ 597.988521] active_anon:11234 inactive_anon:20951 isolated_anon:0 [ 597.988521] active_file:115 inactive_file:104 isolated_file:0 [ 597.988521] unevictable:0 dirty:15 writeback:0 unstable:0 [ 597.988521] slab_reclaimable:12313 slab_unreclaimable:117622 [ 597.988521] mapped:52400 shmem:21274 pagetables:810 bounce:0 [ 597.988521] free:14006 free_pcp:141 free_cma:0 [ 598.023121] Node 0 active_anon:43340kB inactive_anon:56844kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:145684kB dirty:0kB writeback:0kB shmem:57988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 598.050924] Node 1 active_anon:1500kB inactive_anon:26960kB active_file:340kB inactive_file:384kB unevictable:0kB isolated(anon):0kB isolated(file):68kB mapped:63724kB dirty:0kB writeback:0kB shmem:27108kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 598.079167] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 598.108953] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 598.114017] Node 0 DMA32 free:18044kB min:36200kB low:45248kB high:54296kB active_anon:43340kB inactive_anon:56784kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7904kB pagetables:2632kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 598.142704] lowmem_reserve[]: 0 0 0 0 0 [ 598.146705] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 598.175087] lowmem_reserve[]: 0 0 0 0 0 [ 598.179210] Node 1 Normal free:26816kB min:53696kB low:67120kB high:80544kB active_anon:1500kB inactive_anon:26960kB active_file:340kB inactive_file:384kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:504kB bounce:0kB free_pcp:68kB local_pcp:0kB free_cma:0kB [ 598.209433] lowmem_reserve[]: 0 0 0 0 0 [ 598.213426] Node 0 DMA: 1*4kB (M) 7*8kB (U) 15*16kB (U) 9*32kB (U) 2*64kB (UM) 4*128kB (UM) 2*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 10956kB [ 598.229384] Node 0 DMA32: 802*4kB (ME) 827*8kB (UME) 229*16kB (ME) 43*32kB (ME) 6*64kB (UE) 0*128kB 11*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18064kB [ 598.245557] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 598.256399] Node 1 Normal: 102*4kB (ME) 63*8kB (ME) 50*16kB (ME) 37*32kB (ME) 41*64kB (UME) 15*128kB (M) 7*256kB (UME) 5*512kB (UME) 3*1024kB (ME) 4*2048kB (UME) 1*4096kB (U) = 27152kB [ 598.273503] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 598.282484] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 598.291147] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 598.300025] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 598.308915] 21358 total pagecache pages [ 598.312911] 0 pages in swap cache [ 598.316353] Swap cache stats: add 0, delete 0, find 0/0 [ 598.321752] Free swap = 0kB [ 598.324756] Total swap = 0kB [ 598.327886] 2097051 pages RAM [ 598.330978] 0 pages HighMem/MovableOnly [ 598.334942] 363840 pages reserved [ 598.338416] 0 pages cma reserved [ 598.341773] Out of memory (oom_kill_allocating_task): Kill process 20252 (rsyslogd) score 0 or sacrifice child [ 598.352472] Killed process 20252 (rsyslogd) total-vm:25752kB, anon-rss:264kB, file-rss:88kB, shmem-rss:0kB [ 598.362780] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 598.376956] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 598.382911] CPU: 0 PID: 20219 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 598.390801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 598.392012] oom_reaper: reaped process 20252 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 598.400160] Call Trace: [ 598.400190] dump_stack+0x1b2/0x281 [ 598.400205] warn_alloc.cold+0x96/0x1cc [ 598.400219] ? zone_watermark_ok_safe+0x220/0x220 [ 598.424756] __alloc_pages_nodemask+0x2127/0x2720 [ 598.429583] ? lock_acquire+0x170/0x3f0 [ 598.433577] ? lock_acquire+0x170/0x3f0 [ 598.437533] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 598.442380] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 598.447810] ? __mutex_unlock_slowpath+0x75/0x770 [ 598.452757] alloc_pages_current+0x155/0x260 [ 598.457196] ion_page_pool_alloc+0x118/0x1b0 [ 598.461611] ion_system_heap_allocate+0x133/0x8c0 [ 598.464699] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null) [ 598.466459] ? _raw_spin_unlock+0x29/0x40 [ 598.466462] , order=0, oom_score_adj=0 [ 598.466469] syz-fuzzer cpuset= [ 598.476703] ? _ion_heap_freelist_drain+0x6e/0x410 [ 598.476715] ? ion_system_contig_heap_create+0x130/0x130 [ 598.476727] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 598.476739] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 598.476751] ion_alloc+0x27a/0x810 [ 598.480965] / [ 598.484864] ? ion_dma_buf_release+0x40/0x40 [ 598.488092] mems_allowed=0-1 [ 598.492982] ? __might_fault+0x177/0x1b0 [ 598.524995] ion_ioctl+0xea/0x1f0 [ 598.528432] ? ion_query_heaps+0x360/0x360 [ 598.532665] ? lock_acquire+0x170/0x3f0 [ 598.536620] ? lock_downgrade+0x740/0x740 [ 598.540746] ? ion_query_heaps+0x360/0x360 [ 598.544961] do_vfs_ioctl+0x75a/0xff0 [ 598.548759] ? ioctl_preallocate+0x1a0/0x1a0 [ 598.553152] ? lock_downgrade+0x740/0x740 [ 598.557280] ? __fget+0x225/0x360 [ 598.560713] ? do_vfs_ioctl+0xff0/0xff0 [ 598.566232] ? security_file_ioctl+0x83/0xb0 [ 598.570632] SyS_ioctl+0x7f/0xb0 [ 598.573978] ? do_vfs_ioctl+0xff0/0xff0 [ 598.577947] do_syscall_64+0x1d5/0x640 [ 598.582266] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 598.587437] RIP: 0033:0x45e219 [ 598.590608] RSP: 002b:00007faf520eec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 598.598306] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 598.605580] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 598.612857] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 598.620106] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 598.627357] R13: 00007ffc58d08e3f R14: 00007faf520ef9c0 R15: 000000000119bf8c [ 598.634624] CPU: 1 PID: 7963 Comm: syz-fuzzer Not tainted 4.14.217-syzkaller #0 [ 598.642082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 598.642929] warn_alloc_show_mem: 3 callbacks suppressed [ 598.642932] Mem-Info: [ 598.651426] Call Trace: [ 598.651448] dump_stack+0x1b2/0x281 [ 598.651460] dump_header+0x178/0x82f [ 598.651473] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 598.651483] ? ___ratelimit+0x2cd/0x530 [ 598.651491] oom_kill_process.cold+0x10/0xb18 [ 598.651511] out_of_memory+0xe3e/0x1190 [ 598.651524] ? oom_killer_disable+0x1c0/0x1c0 [ 598.651532] ? mutex_trylock+0x152/0x1a0 [ 598.651542] __alloc_pages_nodemask+0x23e1/0x2720 [ 598.651562] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 598.651586] alloc_pages_current+0x155/0x260 [ 598.656946] active_anon:11144 inactive_anon:20951 isolated_anon:0 [ 598.656946] active_file:15 inactive_file:17 isolated_file:0 [ 598.656946] unevictable:0 dirty:0 writeback:0 unstable:0 [ 598.656946] slab_reclaimable:12317 slab_unreclaimable:117630 [ 598.656946] mapped:52225 shmem:21274 pagetables:784 bounce:0 [ 598.656946] free:13864 free_pcp:96 free_cma:0 [ 598.659328] filemap_fault+0xea3/0x1980 [ 598.659346] ext4_filemap_fault+0x84/0xb0 [ 598.659358] __do_fault+0xfa/0x380 [ 598.659367] __handle_mm_fault+0x2497/0x4620 [ 598.659377] ? vm_insert_page+0x7c0/0x7c0 [ 598.659388] ? lock_downgrade+0x740/0x740 [ 598.659408] handle_mm_fault+0x391/0x860 [ 598.663192] syz-executor.4: [ 598.665580] __do_page_fault+0x549/0xad0 [ 598.671807] Node 0 active_anon:43292kB inactive_anon:56844kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:145684kB dirty:0kB writeback:0kB shmem:57988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 598.674370] ? spurious_fault+0x640/0x640 [ 598.678379] page allocation failure: order:0 [ 598.682827] ? do_page_fault+0x60/0x500 [ 598.686782] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 598.691254] ? page_fault+0x2f/0x50 [ 598.691261] page_fault+0x45/0x50 [ 598.691269] RIP: 0000:0xb358f8 [ 598.691273] RSP: 3b83c49d:000000c00003dec8 EFLAGS: 00438920 [ 598.738565] Mem-Info: [ 598.746284] Node 1 active_anon:1284kB inactive_anon:26960kB active_file:56kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:63216kB dirty:0kB writeback:0kB shmem:27108kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 598.757800] rsyslogd: [ 598.762302] Node 0 [ 598.763057] page allocation failure: order:1 [ 598.767198] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 598.774726] active_anon:11144 inactive_anon:20951 isolated_anon:0 [ 598.774726] active_file:15 inactive_file:17 isolated_file:0 [ 598.774726] unevictable:0 dirty:0 writeback:0 unstable:0 [ 598.774726] slab_reclaimable:12317 slab_unreclaimable:117630 [ 598.774726] mapped:52225 shmem:21274 pagetables:784 bounce:0 [ 598.774726] free:13864 free_pcp:30 free_cma:0 [ 598.782388] lowmem_reserve[]: [ 598.813711] , mode:0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask= [ 598.819085] 0 [ 598.828494] (null) [ 598.830048] (null) [ 598.833432] rsyslogd cpuset= [ 598.836574] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 598.836599] CPU: 0 PID: 20236 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 598.855011] / [ 598.871963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 598.871968] Call Trace: [ 598.871998] dump_stack+0x1b2/0x281 [ 598.874658] Node 0 active_anon:43292kB inactive_anon:56844kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:145684kB dirty:0kB writeback:0kB shmem:57988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 598.876823] warn_alloc.cold+0x96/0x1cc [ 598.881258] Node 1 active_anon:1284kB inactive_anon:26960kB active_file:56kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:63216kB dirty:0kB writeback:0kB shmem:27108kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 598.906920] ? zone_watermark_ok_safe+0x220/0x220 [ 598.906934] ? usleep_range+0x130/0x130 [ 598.906944] ? try_to_free_pages+0x23f/0x6e0 [ 598.906954] ? _find_next_bit+0xdb/0x100 [ 598.906977] ? run_timer_softirq+0x5a0/0x5a0 [ 598.940730] mems_allowed=0-1 [ 598.943790] __alloc_pages_nodemask+0x2127/0x2720 [ 598.997719] Node 0 [ 599.016791] ? lock_acquire+0x170/0x3f0 [ 599.016807] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 599.047716] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 599.048014] ? ion_page_pool_alloc+0x9e/0x1b0 [ 599.052823] lowmem_reserve[]: [ 599.057059] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 599.067709] 0 [ 599.069868] ? __sanitizer_cov_trace_pc+0x23/0x50 [ 599.072941] 2717 [ 599.077768] alloc_pages_current+0x155/0x260 [ 599.077796] ion_page_pool_alloc+0x118/0x1b0 [ 599.098020] 2718 [ 599.114368] ion_system_heap_allocate+0x133/0x8c0 [ 599.114384] ? _raw_spin_unlock+0x29/0x40 [ 599.137694] 2718 [ 599.140392] ? _ion_heap_freelist_drain+0x6e/0x410 [ 599.144770] 2718 [ 599.146903] ? ion_system_contig_heap_create+0x130/0x130 [ 599.170440] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 599.170447] Node 0 [ 599.175454] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 599.175466] DMA32 free:18064kB min:36200kB low:45248kB high:54296kB active_anon:43292kB inactive_anon:56784kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7904kB pagetables:2632kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 599.175471] lowmem_reserve[]: [ 599.177703] ion_alloc+0x27a/0x810 [ 599.177720] ? ion_dma_buf_release+0x40/0x40 [ 599.197693] 0 [ 599.210879] ? __might_fault+0x177/0x1b0 [ 599.210895] ion_ioctl+0xea/0x1f0 [ 599.227687] 0 [ 599.227959] ? ion_query_heaps+0x360/0x360 [ 599.231381] 0 [ 599.233180] ? lock_acquire+0x170/0x3f0 [ 599.237376] 0 [ 599.239169] ? lock_downgrade+0x740/0x740 [ 599.239183] ? ion_query_heaps+0x360/0x360 [ 599.239195] do_vfs_ioctl+0x75a/0xff0 [ 599.257307] ? ioctl_preallocate+0x1a0/0x1a0 [ 599.257685] 0 [ 599.261696] ? lock_downgrade+0x740/0x740 [ 599.263488] ? __fget+0x225/0x360 [ 599.271441] ? do_vfs_ioctl+0xff0/0xff0 [ 599.275404] ? security_file_ioctl+0x83/0xb0 [ 599.277702] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 599.279817] SyS_ioctl+0x7f/0xb0 [ 599.279827] ? do_vfs_ioctl+0xff0/0xff0 [ 599.312645] do_syscall_64+0x1d5/0x640 [ 599.316536] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 599.321721] RIP: 0033:0x45e219 [ 599.324891] RSP: 002b:00007fd20c681c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 599.332581] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 599.337676] lowmem_reserve[]: [ 599.339830] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 599.339837] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 599.342925] 0 [ 599.350179] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 599.350185] R13: 00007fff87e85fff R14: 00007fd20c6829c0 R15: 000000000119bf8c [ 599.355783] 2717 [ 599.357485] CPU: 1 PID: 20252 Comm: rsyslogd Not tainted 4.14.217-syzkaller #0 [ 599.359293] 2718 [ 599.366506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 599.377337] 2718 [ 599.383160] Call Trace: [ 599.383183] dump_stack+0x1b2/0x281 [ 599.383197] warn_alloc.cold+0x96/0x1cc [ 599.383209] ? zone_watermark_ok_safe+0x220/0x220 [ 599.385247] 2718 [ 599.394580] ? usleep_range+0x130/0x130 [ 599.394591] ? _find_next_bit+0xdb/0x100 [ 599.394600] ? run_timer_softirq+0x5a0/0x5a0 [ 599.394614] __alloc_pages_nodemask+0x2127/0x2720 [ 599.394636] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 599.402857] ? mark_held_locks+0xa6/0xf0 [ 599.406791] Node 0 [ 599.411633] ? cache_grow_begin+0x41/0x630 [ 599.411643] cache_grow_begin+0x91/0x630 [ 599.411653] ? cache_grow_begin+0x91/0x630 [ 599.411662] fallback_alloc+0x207/0x2c0 [ 599.411673] kmem_cache_alloc+0x1e5/0x3c0 [ 599.411687] ima_d_path+0x4d/0x1e0 [ 599.413752] DMA32 free:18504kB min:36200kB low:45248kB high:54296kB active_anon:43292kB inactive_anon:56784kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7904kB pagetables:2632kB bounce:0kB free_pcp:184kB local_pcp:64kB free_cma:0kB [ 599.417697] process_measurement+0x905/0xb20 [ 599.417708] ? ima_rdwr_violation_check+0x3a0/0x3a0 [ 599.417717] ? generic_file_open+0x68/0x90 [ 599.417732] ? ext4_release_file+0x2d0/0x2d0 [ 599.417742] ? apparmor_file_alloc_security+0x800/0x800 [ 599.417752] ? lock_downgrade+0x740/0x740 [ 599.417765] ? file_ra_state_init+0xc4/0x1e0 [ 599.417775] ? do_dentry_open+0x698/0xec0 [ 599.425523] lowmem_reserve[]: [ 599.426222] ? ext4_release_file+0x2d0/0x2d0 [ 599.432436] 0 [ 599.435887] ? __inode_permission+0xcd/0x2f0 [ 599.443582] 0 [ 599.446362] ? vfs_open+0x10d/0x220 [ 599.450496] 0 [ 599.454655] path_openat+0x10ad/0x2970 [ 599.462309] 0 [ 599.462750] ? path_lookupat+0x780/0x780 [ 599.466255] 0 [ 599.494361] ? trace_hardirqs_on+0x10/0x10 [ 599.494369] ? trace_hardirqs_on+0x10/0x10 [ 599.494380] do_filp_open+0x179/0x3c0 [ 599.494389] ? may_open_dev+0xe0/0xe0 [ 599.494401] ? lock_downgrade+0x740/0x740 [ 599.494411] ? do_raw_spin_unlock+0x164/0x220 [ 599.494424] ? _raw_spin_unlock+0x29/0x40 [ 599.494431] ? __alloc_fd+0x1be/0x490 [ 599.494440] ? _raw_spin_unlock_irq+0x24/0x80 [ 599.494449] do_sys_open+0x296/0x410 [ 599.494457] ? filp_open+0x60/0x60 [ 599.494470] ? do_syscall_64+0x4c/0x640 [ 599.504128] ? do_sys_open+0x410/0x410 [ 599.508389] Node 0 [ 599.512730] do_syscall_64+0x1d5/0x640 [ 599.521649] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 599.522203] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 599.526573] lowmem_reserve[]: [ 599.530700] RIP: 0033:0x7fd6787eb34a [ 599.530703] RSP: 002b:00007ffe5b1042f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000002 [ 599.530711] RAX: ffffffffffffffda RBX: 0000560183d93460 RCX: 00007fd6787eb34a [ 599.530715] RDX: 00000000000001b6 RSI: 0000000000080000 RDI: 00007fd6788dca48 [ 599.530719] RBP: 0000000000000008 R08: 0000000000000008 R09: 0000000000000001 [ 599.530723] R10: 0000000000080000 R11: 0000000000000202 R12: 00007fd6788d9633 [ 599.530727] R13: 0000000000000001 R14: 00007ffe5b104660 R15: 0000000000000000 [ 599.537692] syz-executor.3: [ 599.541930] 0 [ 599.544412] page allocation failure: order:0 [ 599.546193] 0 [ 599.554633] 0 [ 599.555532] 0 [ 599.557316] 0 [ 599.565028] 0 [ 599.567425] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 599.571673] 0 [ 599.571682] Node 1 Normal free:26772kB min:53696kB low:67120kB high:80544kB active_anon:1284kB inactive_anon:26960kB active_file:60kB inactive_file:56kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:504kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 599.571704] lowmem_reserve[]: 0 0 [ 599.578896] (null) [ 599.582931] 0 [ 599.583407] syz-executor.3 cpuset= [ 599.587938] 0 0 [ 599.587947] Node 0 DMA: 1*4kB (M) 7*8kB (U) 15*16kB (U) 9*32kB (U) 2*64kB (UM) 4*128kB (UM) 2*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 10956kB [ 599.588023] Node 0 [ 599.595511] 0 [ 599.595928] DMA32: [ 599.600443] 0 [ 599.600450] Node 1 Normal free:26772kB min:53696kB low:67120kB high:80544kB active_anon:1284kB inactive_anon:26960kB active_file:60kB inactive_file:56kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:504kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 599.600468] lowmem_reserve[]: 0 0 0 0 0 [ 599.607792] 815*4kB [ 599.615088] / [ 599.615776] (UME) [ 599.618023] mems_allowed=0-1 [ 599.618037] CPU: 1 PID: 20227 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 599.618042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 599.618046] Call Trace: [ 599.618075] dump_stack+0x1b2/0x281 [ 599.618092] warn_alloc.cold+0x96/0x1cc [ 599.623927] 832*8kB [ 599.646842] ? zone_watermark_ok_safe+0x220/0x220 [ 599.646854] ? usleep_range+0x130/0x130 [ 599.646863] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 599.646876] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 599.646887] ? run_timer_softirq+0x5a0/0x5a0 [ 599.646904] __alloc_pages_nodemask+0x2127/0x2720 [ 599.646919] ? lock_acquire+0x170/0x3f0 [ 599.646933] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 599.656152] (UME) [ 599.658896] ? ion_page_pool_alloc+0x9e/0x1b0 [ 599.658913] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 599.658933] alloc_pages_current+0x155/0x260 [ 599.666607] 235*16kB [ 599.673885] ion_page_pool_alloc+0x118/0x1b0 [ 599.673897] ion_system_heap_allocate+0x133/0x8c0 [ 599.673910] ? _raw_spin_unlock+0x29/0x40 [ 599.673919] ? _ion_heap_freelist_drain+0x6e/0x410 [ 599.673928] ? ion_system_contig_heap_create+0x130/0x130 [ 599.673939] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 599.673952] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 599.673966] ion_alloc+0x27a/0x810 [ 599.684826] (UME) [ 599.688492] ? ion_dma_buf_release+0x40/0x40 [ 599.688505] ? __might_fault+0x177/0x1b0 [ 599.688521] ion_ioctl+0xea/0x1f0 [ 599.697001] 44*32kB [ 599.704256] ? ion_query_heaps+0x360/0x360 [ 599.704270] ? lock_acquire+0x170/0x3f0 [ 599.704279] ? lock_downgrade+0x740/0x740 [ 599.704286] ? ion_query_heaps+0x360/0x360 [ 599.704296] do_vfs_ioctl+0x75a/0xff0 [ 599.704309] ? ioctl_preallocate+0x1a0/0x1a0 [ 599.704317] ? lock_downgrade+0x740/0x740 [ 599.704331] ? __fget+0x225/0x360 [ 599.711253] (UME) [ 599.713848] ? do_vfs_ioctl+0xff0/0xff0 [ 599.715624] 8*64kB [ 599.717409] ? security_file_ioctl+0x83/0xb0 [ 599.719219] (UE) [ 599.720962] SyS_ioctl+0x7f/0xb0 [ 599.722733] 1*128kB (U) [ 599.729817] ? do_vfs_ioctl+0xff0/0xff0 [ 599.729831] do_syscall_64+0x1d5/0x640 [ 599.729850] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 599.729859] RIP: 0033:0x45e219 [ 599.729864] RSP: 002b:00007f1c98502c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 599.735159] 11*256kB [ 599.759997] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 599.760002] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 599.760006] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 599.760011] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 599.760016] R13: 00007ffef867e34f R14: 00007f1c985039c0 R15: 000000000119bf8c [ 599.765672] (U) [ 599.767460] Node 0 [ 599.771030] 0*512kB 0*1024kB [ 599.785134] DMA: [ 599.788653] Mem-Info: [ 599.794109] 1*4kB [ 599.794447] active_anon:11144 inactive_anon:20951 isolated_anon:0 [ 599.794447] active_file:17 inactive_file:15 isolated_file:0 [ 599.794447] unevictable:0 dirty:0 writeback:0 unstable:0 [ 599.794447] slab_reclaimable:12317 slab_unreclaimable:117504 [ 599.794447] mapped:52225 shmem:21274 pagetables:784 bounce:0 [ 599.794447] free:14047 free_pcp:46 free_cma:0 [ 599.796243] (M) 7*8kB [ 599.824686] 0*2048kB [ 599.835734] (U) [ 599.838074] 0*4096kB [ 599.845800] 15*16kB [ 599.855214] Node 0 active_anon:43292kB inactive_anon:56844kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:145684kB dirty:0kB writeback:0kB shmem:57988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 599.855227] Node 1 active_anon:1284kB inactive_anon:26960kB active_file:60kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:63216kB dirty:0kB writeback:0kB shmem:27108kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 599.855230] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 599.855247] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 599.855262] Node 0 DMA32 free:18460kB min:36200kB low:45248kB high:54296kB active_anon:43292kB inactive_anon:56784kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7904kB pagetables:2632kB bounce:0kB free_pcp:184kB local_pcp:64kB free_cma:0kB [ 599.855279] lowmem_reserve[]: [ 599.865043] (U) [ 599.865468] 0 [ 599.867976] 9*32kB [ 599.872667] = 18540kB [ 599.876624] (U) [ 599.881778] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 599.881825] Node 1 Normal: 71*4kB (ME) 45*8kB (UME) 41*16kB (UME) 28*32kB (ME) [ 599.893852] 2*64kB [ 599.896204] 0 [ 599.904343] (UM) [ 599.905010] 0 [ 599.907151] 4*128kB [ 599.911697] 32*64kB (UME) 16*128kB (M) 8*256kB (UME) 4*512kB (UME) 4*1024kB (UME) 2*2048kB (ME) 2*4096kB (UM) = 26772kB [ 599.911744] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 599.911750] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 599.911756] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 599.911762] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 599.911766] 21306 total pagecache pages [ 599.911775] 0 pages in swap cache [ 599.911780] Swap cache stats: add 0, delete 0, find 0/0 [ 599.911783] Free swap = 0kB [ 599.911801] Total swap = 0kB [ 599.920085] (UM) [ 599.922157] 0 [ 599.924026] 2*256kB (UM) [ 599.928445] 2097051 pages RAM [ 599.928449] 0 pages HighMem/MovableOnly [ 599.928452] 363840 pages reserved [ 599.928455] 0 pages cma reserved [ 599.932451] 0 [ 599.939995] 2*512kB [ 599.964826] (UM) [ 599.981670] Node 0 [ 599.989446] 2*1024kB [ 599.994779] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 600.017667] (UM) [ 600.019511] syz-executor.5: [ 600.023834] 1*2048kB (U) [ 600.025883] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 600.066566] 1*4096kB [ 600.075332] lowmem_reserve[]: [ 600.117658] (M) [ 600.157644] (null) [ 600.341050] = 10956kB [ 600.431382] 0 0 0 0 0 [ 600.484367] Node 1 Normal free:562480kB min:53696kB low:67120kB high:80544kB active_anon:1284kB inactive_anon:26960kB active_file:60kB inactive_file:856kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:504kB bounce:0kB free_pcp:20kB local_pcp:0kB free_cma:0kB [ 600.521775] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 600.526962] CPU: 0 PID: 20219 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 600.534850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 600.544215] Call Trace: [ 600.546828] dump_stack+0x1b2/0x281 [ 600.547617] lowmem_reserve[]: 0 [ 600.550459] warn_alloc.cold+0x96/0x1cc [ 600.550473] ? afs_vnode_setattr+0x120/0x170 [ 600.553739] 0 [ 600.557697] ? zone_watermark_ok_safe+0x220/0x220 [ 600.557708] ? usleep_range+0x130/0x130 [ 600.557716] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 600.557729] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 600.557741] ? run_timer_softirq+0x5a0/0x5a0 [ 600.562134] Node 0 [ 600.563918] __alloc_pages_nodemask+0x2127/0x2720 [ 600.577618] DMA32: [ 600.577805] ? lock_acquire+0x170/0x3f0 [ 600.582791] 815*4kB [ 600.587189] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 600.597612] 0 [ 600.600442] ? ion_page_pool_alloc+0x9e/0x1b0 [ 600.602736] 0 [ 600.608002] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 600.608031] alloc_pages_current+0x155/0x260 [ 600.609812] (UME) [ 600.614298] ion_page_pool_alloc+0x118/0x1b0 [ 600.616085] 1002*8kB [ 600.621535] ion_system_heap_allocate+0x133/0x8c0 [ 600.621548] ? _raw_spin_unlock+0x29/0x40 [ 600.621556] ? _ion_heap_freelist_drain+0x6e/0x410 [ 600.621568] ? ion_system_contig_heap_create+0x130/0x130 [ 600.637609] 0 [ 600.639732] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 600.648766] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 600.648782] ion_alloc+0x27a/0x810 [ 600.648797] ? ion_dma_buf_release+0x40/0x40 [ 600.667609] (UME) [ 600.669407] ? __might_fault+0x177/0x1b0 [ 600.674416] 239*16kB (UME) [ 600.676564] ion_ioctl+0xea/0x1f0 [ 600.680654] Node 0 [ 600.683531] ? ion_query_heaps+0x360/0x360 [ 600.686954] DMA: [ 600.689175] ? lock_acquire+0x170/0x3f0 [ 600.689184] ? lock_downgrade+0x740/0x740 [ 600.689192] ? ion_query_heaps+0x360/0x360 [ 600.689204] do_vfs_ioctl+0x75a/0xff0 [ 600.707604] 45*32kB [ 600.708985] ? ioctl_preallocate+0x1a0/0x1a0 [ 600.712767] (UME) [ 600.715077] ? lock_downgrade+0x740/0x740 [ 600.719499] 1*4kB [ 600.721598] ? __fget+0x225/0x360 [ 600.725717] (M) [ 600.727850] ? do_vfs_ioctl+0xff0/0xff0 [ 600.727860] ? security_file_ioctl+0x83/0xb0 [ 600.727873] SyS_ioctl+0x7f/0xb0 [ 600.737598] 2060*64kB [ 600.741788] ? do_vfs_ioctl+0xff0/0xff0 [ 600.745140] (UE) [ 600.747623] do_syscall_64+0x1d5/0x640 [ 600.747642] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 600.747651] RIP: 0033:0x45e219 [ 600.757594] 7*8kB [ 600.762693] RSP: 002b:00007faf520eec68 EFLAGS: 00000246 [ 600.766312] (U) [ 600.768439] ORIG_RAX: 0000000000000010 [ 600.768444] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 600.768449] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 600.768453] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 600.768457] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 600.768462] R13: 00007ffc58d08e3f R14: 00007faf520ef9c0 R15: 000000000119bf8c [ 600.817639] 122*128kB (U) 11*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 166812kB [ 600.825564] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 600.847771] 15*16kB (U) 9*32kB (U) 2*64kB (UM) 4*128kB (UM) 2*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 10956kB [ 600.857614] Node 1 Normal: 2*4kB (ME) 3*8kB (UME) 25*16kB (UME) 28*32kB (ME) 1489*64kB (UME) 144*128kB (UM) 82*256kB (UME) 55*512kB (UME) 278*1024kB (UME) 129*2048kB (UME) 69*4096kB (UM) = 995696kB [ 600.863058] Node 0 DMA32: 816*4kB (UME) 1002*8kB (UME) 239*16kB (UME) 45*32kB (UME) 3638*64kB (UE) 303*128kB (U) 23*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 294048kB [ 600.898166] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 600.901879] Node 0 [ 600.907247] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 600.907249] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 600.927608] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 600.931952] Node 1 Normal: 2*4kB (ME) 3*8kB (UME) 25*16kB (UME) 28*32kB (ME) 1536*64kB (UME) 158*128kB (UM) 92*256kB (UME) 72*512kB (UME) 286*1024kB (UME) 143*2048kB (UME) 85*4096kB (UM) = 1114160kB [ 600.947614] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 600.967706] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 600.976567] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 600.977637] 21518 total pagecache pages [ 600.989206] 0 pages in swap cache [ 600.992659] Swap cache stats: add 0, delete 0, find 0/0 [ 600.997646] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 600.998273] Free swap = 0kB [ 601.006841] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 601.009933] Total swap = 0kB [ 601.009941] 2097051 pages RAM [ 601.009944] 0 pages HighMem/MovableOnly [ 601.009948] 363840 pages reserved [ 601.009951] 0 pages cma reserved [ 601.009958] Out of memory (oom_kill_allocating_task): Kill process 7963 (syz-fuzzer) score 0 or sacrifice child [ 601.010060] Killed process 19261 (syz-executor.0) total-vm:85024kB, anon-rss:68kB, file-rss:4kB, shmem-rss:0kB [ 601.037625] 21518 total pagecache pages [ 601.072105] 0 pages in swap cache [ 601.077210] Swap cache stats: add 0, delete 0, find 0/0 [ 601.088631] Free swap = 0kB [ 601.091979] Total swap = 0kB [ 601.095594] 2097051 pages RAM [ 601.102694] 0 pages HighMem/MovableOnly [ 601.107939] 363840 pages reserved [ 601.112187] 0 pages cma reserved 21:26:24 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:26:24 executing program 5: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0xc0241, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:26:24 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0xc0241, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:26:24 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0x12}) [ 601.193615] systemd-journald[20249]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. 21:26:24 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0xc0241, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:26:24 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0xc0241, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:26:24 executing program 5: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0xc0241, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:26:24 executing program 5: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0xc0241, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:26:24 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0x12}) 21:26:24 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:26:24 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0x12}) 21:26:24 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001}) [ 602.355510] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 602.359949] syz-executor.5: [ 602.369934] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 602.380936] page allocation failure: order:4 [ 602.400772] syz-executor.1 cpuset= [ 602.409678] syz-executor.4 cpuset= [ 602.414441] / [ 602.420321] / [ 602.423214] mems_allowed=0-1 [ 602.423716] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 602.426270] mems_allowed=0-1 [ 602.439180] CPU: 1 PID: 20271 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 602.440881] (null) [ 602.447064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 602.447068] Call Trace: [ 602.447109] dump_stack+0x1b2/0x281 [ 602.447125] warn_alloc.cold+0x96/0x1cc [ 602.463021] syz-executor.5 cpuset= [ 602.464804] ? zone_watermark_ok_safe+0x220/0x220 [ 602.464827] __alloc_pages_nodemask+0x2127/0x2720 [ 602.474283] / [ 602.477265] ? lock_acquire+0x170/0x3f0 [ 602.484177] mems_allowed=0-1 [ 602.484484] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 602.496736] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 602.502442] ? __mutex_unlock_slowpath+0x75/0x770 [ 602.507537] ? alloc_pages_current+0x123/0x260 [ 602.512202] alloc_pages_current+0x155/0x260 [ 602.516606] ion_page_pool_alloc+0x118/0x1b0 [ 602.521095] ion_system_heap_allocate+0x133/0x8c0 [ 602.527406] ? ion_alloc+0x187/0x810 [ 602.531454] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 602.537150] ? ion_system_contig_heap_create+0x130/0x130 [ 602.543137] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 602.548168] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 602.553452] ion_alloc+0x204/0x810 [ 602.557071] ? ion_dma_buf_release+0x40/0x40 [ 602.561585] ? __might_fault+0x177/0x1b0 [ 602.566115] ion_ioctl+0xea/0x1f0 [ 602.569745] ? ion_query_heaps+0x360/0x360 [ 602.573980] ? lock_acquire+0x170/0x3f0 [ 602.577946] ? lock_downgrade+0x740/0x740 [ 602.582087] ? ion_query_heaps+0x360/0x360 [ 602.586312] do_vfs_ioctl+0x75a/0xff0 [ 602.590111] ? ioctl_preallocate+0x1a0/0x1a0 [ 602.594601] ? lock_downgrade+0x740/0x740 [ 602.598771] ? __fget+0x225/0x360 [ 602.602210] ? do_vfs_ioctl+0xff0/0xff0 [ 602.606442] ? security_file_ioctl+0x83/0xb0 [ 602.613445] SyS_ioctl+0x7f/0xb0 [ 602.616810] ? do_vfs_ioctl+0xff0/0xff0 [ 602.620785] do_syscall_64+0x1d5/0x640 [ 602.624672] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 602.629856] RIP: 0033:0x45e219 [ 602.633034] RSP: 002b:00007f39dd445c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 602.640750] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 602.648008] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 602.655268] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 602.662521] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 602.669779] R13: 00007ffc799adfff R14: 00007f39dd4469c0 R15: 000000000119bf8c [ 602.677053] CPU: 0 PID: 20270 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 602.684950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 602.687440] warn_alloc_show_mem: 3 callbacks suppressed [ 602.687443] Mem-Info: [ 602.694320] Call Trace: [ 602.699716] active_anon:11452 inactive_anon:22984 isolated_anon:0 [ 602.699716] active_file:67 inactive_file:89 isolated_file:1 [ 602.699716] unevictable:0 dirty:30 writeback:25 unstable:0 [ 602.699716] slab_reclaimable:12470 slab_unreclaimable:119512 [ 602.699716] mapped:43931 shmem:23322 pagetables:779 bounce:0 [ 602.699716] free:26789 free_pcp:314 free_cma:0 [ 602.702078] dump_stack+0x1b2/0x281 [ 602.704645] Node 0 active_anon:44836kB inactive_anon:65036kB active_file:188kB inactive_file:340kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:112488kB dirty:112kB writeback:100kB shmem:66180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 602.738196] warn_alloc.cold+0x96/0x1cc [ 602.738211] ? zone_watermark_ok_safe+0x220/0x220 [ 602.738233] __alloc_pages_nodemask+0x2127/0x2720 [ 602.741839] Node 1 active_anon:972kB inactive_anon:26900kB active_file:80kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:63236kB dirty:8kB writeback:0kB shmem:27108kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 602.769946] ? lock_acquire+0x170/0x3f0 [ 602.769965] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 602.769984] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 602.773953] Node 0 [ 602.778801] ? __mutex_unlock_slowpath+0x75/0x770 [ 602.778810] ? __sanitizer_cov_trace_pc+0x23/0x50 [ 602.778829] alloc_pages_current+0x155/0x260 [ 602.783662] DMA free:11076kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 602.810714] ion_page_pool_alloc+0x118/0x1b0 [ 602.810725] ion_system_heap_allocate+0x133/0x8c0 [ 602.810736] ? ion_alloc+0x187/0x810 [ 602.814685] lowmem_reserve[]: [ 602.819539] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 602.819554] ? ion_system_contig_heap_create+0x130/0x130 [ 602.819568] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 602.824990] 0 [ 602.827213] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 602.832049] 2717 [ 602.836852] ion_alloc+0x204/0x810 [ 602.841246] 2718 [ 602.866811] ? ion_dma_buf_release+0x40/0x40 [ 602.866826] ? __might_fault+0x177/0x1b0 [ 602.871223] 2718 [ 602.876034] ion_ioctl+0xea/0x1f0 [ 602.879736] 2718 [ 602.882808] ? ion_query_heaps+0x360/0x360 [ 602.893664] ? lock_acquire+0x170/0x3f0 [ 602.898666] Node 0 [ 602.900432] ? lock_downgrade+0x740/0x740 [ 602.905261] DMA32 free:35816kB min:36200kB low:45248kB high:54296kB active_anon:44836kB inactive_anon:64976kB active_file:580kB inactive_file:628kB unevictable:0kB writepending:612kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:8064kB pagetables:2676kB bounce:0kB free_pcp:552kB local_pcp:0kB free_cma:0kB [ 602.907296] ? ion_query_heaps+0x360/0x360 [ 602.910843] lowmem_reserve[]: [ 602.912894] do_vfs_ioctl+0x75a/0xff0 [ 602.919744] 0 [ 602.923796] ? ioctl_preallocate+0x1a0/0x1a0 [ 602.925830] 0 [ 602.929262] ? lock_downgrade+0x740/0x740 [ 602.929276] ? __fget+0x225/0x360 [ 602.929286] ? do_vfs_ioctl+0xff0/0xff0 [ 602.931321] 0 [ 602.935551] ? security_file_ioctl+0x83/0xb0 [ 602.939510] 0 [ 602.941715] SyS_ioctl+0x7f/0xb0 [ 602.945833] 0 [ 602.976305] ? do_vfs_ioctl+0xff0/0xff0 [ 602.976318] do_syscall_64+0x1d5/0x640 [ 602.976339] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 602.983629] RIP: 0033:0x45e219 [ 602.987433] Node 0 [ 602.989193] RSP: 002b:00007fd20c681c68 EFLAGS: 00000246 [ 602.993586] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 602.995352] ORIG_RAX: 0000000000000010 [ 602.999488] lowmem_reserve[]: [ 603.002904] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 603.006849] 0 [ 603.008645] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 603.008650] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 603.008656] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 603.008661] R13: 00007fff87e85fff R14: 00007fd20c6829c0 R15: 000000000119bf8c [ 603.018329] CPU: 0 PID: 20280 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 603.038971] 0 [ 603.044036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 603.044041] Call Trace: [ 603.044063] dump_stack+0x1b2/0x281 [ 603.044078] warn_alloc.cold+0x96/0x1cc [ 603.069058] 0 [ 603.072938] ? zone_watermark_ok_safe+0x220/0x220 [ 603.072963] __alloc_pages_nodemask+0x2127/0x2720 [ 603.077696] 0 [ 603.084887] ? lock_acquire+0x170/0x3f0 [ 603.084900] ? lock_acquire+0x170/0x3f0 [ 603.084917] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 603.086746] 0 [ 603.093972] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 603.093985] ? __mutex_unlock_slowpath+0x75/0x770 [ 603.094001] alloc_pages_current+0x155/0x260 [ 603.094018] ion_page_pool_alloc+0x118/0x1b0 [ 603.108521] ion_system_heap_allocate+0x133/0x8c0 [ 603.108532] ? ion_alloc+0x187/0x810 [ 603.108542] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 603.108554] ? ion_system_contig_heap_create+0x130/0x130 [ 603.115846] Node 1 [ 603.123665] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 603.123677] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 603.123689] ion_alloc+0x204/0x810 [ 603.123703] ? ion_dma_buf_release+0x40/0x40 [ 603.125531] Normal free:54420kB min:53696kB low:67120kB high:80544kB active_anon:972kB inactive_anon:26900kB active_file:12kB inactive_file:4kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:440kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 603.135084] ? __might_fault+0x177/0x1b0 [ 603.135098] ion_ioctl+0xea/0x1f0 [ 603.135108] ? ion_query_heaps+0x360/0x360 [ 603.135121] ? lock_acquire+0x170/0x3f0 [ 603.137738] lowmem_reserve[]: [ 603.141290] ? lock_downgrade+0x740/0x740 [ 603.141300] ? ion_query_heaps+0x360/0x360 [ 603.141312] do_vfs_ioctl+0x75a/0xff0 [ 603.145298] 0 [ 603.147056] ? ioctl_preallocate+0x1a0/0x1a0 [ 603.147064] ? lock_downgrade+0x740/0x740 [ 603.147078] ? __fget+0x225/0x360 [ 603.151969] 0 [ 603.156724] ? do_vfs_ioctl+0xff0/0xff0 [ 603.156736] ? security_file_ioctl+0x83/0xb0 [ 603.156746] SyS_ioctl+0x7f/0xb0 [ 603.158595] 0 [ 603.162492] ? do_vfs_ioctl+0xff0/0xff0 [ 603.162506] do_syscall_64+0x1d5/0x640 [ 603.162526] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 603.166585] 0 [ 603.171381] RIP: 0033:0x45e219 [ 603.171386] RSP: 002b:00007faf520eec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 603.171396] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 603.171402] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 603.171407] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 603.171415] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 603.173231] 0 [ 603.178806] R13: 00007ffc58d08e3f R14: 00007faf520ef9c0 R15: 000000000119bf8c [ 603.315245] syz-executor.3: [ 603.331225] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 603.357124] page allocation failure: order:4 [ 603.368609] (null) [ 603.397206] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 603.421935] , order=0, oom_score_adj=0 [ 603.436168] systemd-journal cpuset=/ mems_allowed=0-1 [ 603.436302] (null) [ 603.446993] CPU: 1 PID: 20249 Comm: systemd-journal Not tainted 4.14.217-syzkaller #0 [ 603.453264] syz-executor.3 cpuset= [ 603.456487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 603.456492] Call Trace: [ 603.456518] dump_stack+0x1b2/0x281 [ 603.456532] dump_header+0x178/0x82f [ 603.467302] / [ 603.472396] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 603.484683] mems_allowed=0-1 [ 603.487856] ? ___ratelimit+0x2cd/0x530 [ 603.487873] oom_kill_process.cold+0x10/0xb18 [ 603.487900] out_of_memory+0xe3e/0x1190 [ 603.487913] ? oom_killer_disable+0x1c0/0x1c0 [ 603.487926] ? mutex_trylock+0x152/0x1a0 [ 603.487935] __alloc_pages_nodemask+0x23e1/0x2720 [ 603.487953] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 603.536496] alloc_pages_current+0x155/0x260 [ 603.540923] filemap_fault+0xea3/0x1980 [ 603.544901] ext4_filemap_fault+0x84/0xb0 [ 603.549127] __do_fault+0xfa/0x380 [ 603.552647] __handle_mm_fault+0x2497/0x4620 [ 603.557063] ? vm_insert_page+0x7c0/0x7c0 [ 603.561290] ? free_uid+0x24d/0x330 [ 603.564917] handle_mm_fault+0x391/0x860 [ 603.568973] __do_page_fault+0x549/0xad0 [ 603.573028] ? spurious_fault+0x640/0x640 [ 603.577170] ? do_page_fault+0x60/0x500 [ 603.581134] ? page_fault+0x2f/0x50 [ 603.584749] page_fault+0x45/0x50 [ 603.588189] RIP: 0000:0x7ffd8867d280 [ 603.591880] RSP: 8867d280:00007ffd8867a3a0 EFLAGS: 00000000 [ 603.591902] CPU: 0 PID: 20260 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 603.605536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 603.605540] Node 0 DMA: [ 603.614878] Call Trace: [ 603.614900] dump_stack+0x1b2/0x281 [ 603.614915] warn_alloc.cold+0x96/0x1cc [ 603.614929] ? zone_watermark_ok_safe+0x220/0x220 [ 603.617608] 1*4kB [ 603.620169] __alloc_pages_nodemask+0x2127/0x2720 [ 603.623755] (M) [ 603.627710] ? _raw_spin_unlock_irq+0x24/0x80 [ 603.627728] ? lock_acquire+0x170/0x3f0 [ 603.627743] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 603.632555] 0*8kB [ 603.634731] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 603.639559] 14*16kB [ 603.641507] ? __mutex_unlock_slowpath+0x75/0x770 [ 603.645969] (U) [ 603.649950] alloc_pages_current+0x155/0x260 [ 603.649969] ion_page_pool_alloc+0x118/0x1b0 [ 603.655039] 9*32kB [ 603.657170] ion_system_heap_allocate+0x133/0x8c0 [ 603.662615] (U) [ 603.664900] ? ion_alloc+0x187/0x810 [ 603.669815] 5*64kB [ 603.671770] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 603.677374] (UM) [ 603.681752] ? ion_system_contig_heap_create+0x130/0x130 [ 603.683958] 4*128kB [ 603.688779] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 603.688793] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 603.688806] ion_alloc+0x204/0x810 [ 603.690754] (UM) [ 603.694453] ? ion_dma_buf_release+0x40/0x40 [ 603.696669] 2*256kB (UM) [ 603.702127] ? __might_fault+0x177/0x1b0 [ 603.702139] ion_ioctl+0xea/0x1f0 [ 603.702150] ? ion_query_heaps+0x360/0x360 [ 603.704201] Mem-Info: [ 603.709620] ? lock_acquire+0x170/0x3f0 [ 603.709630] ? lock_downgrade+0x740/0x740 [ 603.709640] ? ion_query_heaps+0x360/0x360 [ 603.711955] active_anon:11454 inactive_anon:22984 isolated_anon:0 [ 603.711955] active_file:14 inactive_file:57 isolated_file:0 [ 603.711955] unevictable:0 dirty:0 writeback:0 unstable:0 [ 603.711955] slab_reclaimable:12456 slab_unreclaimable:119544 [ 603.711955] mapped:43913 shmem:23322 pagetables:779 bounce:0 [ 603.711955] free:25392 free_pcp:217 free_cma:0 [ 603.716949] do_vfs_ioctl+0x75a/0xff0 [ 603.721991] 2*512kB [ 603.725482] ? ioctl_preallocate+0x1a0/0x1a0 [ 603.727532] (UM) [ 603.731907] ? lock_downgrade+0x740/0x740 [ 603.734634] 2*1024kB (UM) [ 603.738685] ? __fget+0x225/0x360 [ 603.738697] ? do_vfs_ioctl+0xff0/0xff0 [ 603.742143] Node 0 active_anon:44844kB inactive_anon:65036kB active_file:28kB inactive_file:252kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:112420kB dirty:0kB writeback:0kB shmem:66180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 603.746342] ? security_file_ioctl+0x83/0xb0 [ 603.748755] Node 1 active_anon:972kB inactive_anon:26900kB active_file:28kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:63232kB dirty:0kB writeback:0kB shmem:27108kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 603.753114] SyS_ioctl+0x7f/0xb0 [ 603.757231] Node 0 [ 603.761464] ? do_vfs_ioctl+0xff0/0xff0 [ 603.761477] do_syscall_64+0x1d5/0x640 [ 603.761503] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 603.795357] 1*2048kB [ 603.799108] RIP: 0033:0x45e219 [ 603.799114] RSP: 002b:00007f1c98502c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 603.799125] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 603.801423] (U) [ 603.805808] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 603.807866] 1*4096kB [ 603.811976] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 603.814795] (M) [ 603.818222] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 603.818228] R13: 00007ffef867e34f R14: 00007f1c985039c0 R15: 000000000119bf8c [ 603.897433] warn_alloc_show_mem: 1 callbacks suppressed [ 603.897437] Mem-Info: [ 603.915314] DMA free:11076kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 603.923832] active_anon:11454 inactive_anon:22984 isolated_anon:0 [ 603.923832] active_file:44 inactive_file:26 isolated_file:4 [ 603.923832] unevictable:0 dirty:0 writeback:0 unstable:0 [ 603.923832] slab_reclaimable:12456 slab_unreclaimable:119544 [ 603.923832] mapped:43888 shmem:23322 pagetables:779 bounce:0 [ 603.923832] free:25191 free_pcp:105 free_cma:0 [ 603.927843] lowmem_reserve[]: [ 603.931490] Node 0 active_anon:44844kB inactive_anon:65036kB active_file:148kB inactive_file:84kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:112320kB dirty:0kB writeback:0kB shmem:66180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 603.933823] 0 [ 603.941121] Node 1 active_anon:972kB inactive_anon:26900kB active_file:28kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):16kB mapped:63232kB dirty:0kB writeback:0kB shmem:27108kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 603.941125] Node 0 DMA free:11076kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 603.941145] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 603.941162] Node 0 DMA32 free:36060kB min:36200kB low:45248kB high:54296kB active_anon:44844kB inactive_anon:64976kB active_file:56kB inactive_file:564kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:8032kB pagetables:2676kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 603.941180] lowmem_reserve[]: 0 0 0 0 [ 603.946479] 2717 [ 603.950974] 0 [ 603.961143] 2718 [ 603.965486] 2718 [ 603.992414] Node 0 [ 604.030033] = 11076kB [ 604.065360] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 604.085301] Node 0 [ 604.173303] 2718 [ 604.216174] Node 0 DMA32 free:36176kB min:36200kB low:45248kB high:54296kB active_anon:44844kB inactive_anon:64976kB active_file:44kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:8032kB pagetables:2676kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 604.224437] DMA32: 1094*4kB (UME) 1006*8kB (UME) 302*16kB (UME) 104*32kB (UME) 37*64kB (UME) 10*128kB (UME) 4*256kB (UM) 22*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 36520kB [ 604.263831] lowmem_reserve[]: [ 604.291042] Node 0 [ 604.292739] 0 [ 604.294162] Normal: [ 604.296425] 0 [ 604.310952] 0*4kB [ 604.311664] 0 [ 604.312771] 0*8kB [ 604.314905] 0 [ 604.316682] 0*16kB [ 604.323389] lowmem_reserve[]: 0 0 0 0 0 [ 604.327029] 0*32kB [ 604.337668] 0 [ 604.338739] 0*64kB [ 604.341706] 0*128kB 0*256kB [ 604.343918] Node 1 Normal free:53600kB min:53696kB low:67120kB high:80544kB active_anon:972kB inactive_anon:26900kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:440kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 604.346923] 0*512kB [ 604.386758] Node 0 [ 604.388913] 0*1024kB [ 604.389779] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 604.391453] 0*2048kB [ 604.393844] lowmem_reserve[]: 0 0 0 0 0 [ 604.427639] lowmem_reserve[]: 0 0 0 0 0 [ 604.431657] Node 0 DMA: 1*4kB (M) 0*8kB 14*16kB (U) 9*32kB (U) 5*64kB (UM) 4*128kB (UM) 2*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 11076kB [ 604.446055] 0*4096kB = 0kB [ 604.446747] Node 1 Normal free:53600kB min:53696kB low:67120kB high:80544kB active_anon:972kB inactive_anon:26900kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:440kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 604.482059] Node 0 DMA32: 1094*4kB (UME) 1006*8kB (UME) 302*16kB (UME) 104*32kB (UME) 37*64kB (UME) 10*128kB (UME) 4*256kB (UM) 22*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 36520kB [ 604.484902] Node 1 [ 604.502085] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 604.515083] lowmem_reserve[]: 0 0 0 0 0 [ 604.523390] Node 0 DMA: 1*4kB (M) 0*8kB 14*16kB (U) 9*32kB (U) 5*64kB (UM) 4*128kB (UM) 2*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 11076kB [ 604.542221] Node 1 Normal: 53*4kB (UM) 34*8kB (UM) 34*16kB (UM) 24*32kB (UM) 24*64kB (UM) 14*128kB (UM) 6*256kB (UM) 78*512kB (UM) 7*1024kB (UM) 0*2048kB 0*4096kB = 53764kB [ 604.561035] Node 0 DMA32: 1094*4kB (UME) 1006*8kB (UME) 302*16kB (UME) 104*32kB (UME) 37*64kB (UME) 10*128kB (UME) 4*256kB (UM) 22*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 36520kB [ 604.571880] Normal: 53*4kB (UM) 34*8kB (UM) 34*16kB (UM) 24*32kB (UM) 24*64kB (UM) 14*128kB [ 604.580291] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 604.601506] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 604.612297] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 604.624723] Node 1 Normal: 53*4kB (UM) 34*8kB (UM) 34*16kB (UM) 24*32kB (UM) 24*64kB (UM) 14*128kB [ 604.624782] (UM) [ 604.624784] (UM) 6*256kB [ 604.636105] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 604.648446] (UM) 78*512kB (UM) 7*1024kB (UM) 0*2048kB 0*4096kB = 53764kB [ 604.655322] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 604.659417] 6*256kB (UM) 78*512kB (UM) 7*1024kB (UM) 0*2048kB 0*4096kB = 53764kB [ 604.664208] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 604.680335] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 604.685236] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 604.688933] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 604.688939] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 604.688944] 23390 total pagecache pages [ 604.688963] 0 pages in swap cache [ 604.688967] Swap cache stats: add 0, delete 0, find 0/0 [ 604.688977] Free swap = 0kB [ 604.711369] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 604.715875] 23390 total pagecache pages [ 604.729279] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 604.731673] 0 pages in swap cache [ 604.750600] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 604.753212] Total swap = 0kB [ 604.756604] 23390 total pagecache pages [ 604.765208] Swap cache stats: add 0, delete 0, find 0/0 [ 604.765212] Free swap = 0kB [ 604.765215] Total swap = 0kB [ 604.765222] 2097051 pages RAM [ 604.765225] 0 pages HighMem/MovableOnly [ 604.765228] 363840 pages reserved [ 604.765232] 0 pages cma reserved [ 604.767034] 2097051 pages RAM [ 604.794389] 0 pages in swap cache [ 604.806555] 0 pages HighMem/MovableOnly [ 604.810581] 363840 pages reserved [ 604.814024] 0 pages cma reserved [ 604.825461] Out of memory (oom_kill_allocating_task): Kill process 20249 (systemd-journal) score 0 or sacrifice child [ 604.836374] Killed process 20249 (systemd-journal) total-vm:46096kB, anon-rss:468kB, file-rss:0kB, shmem-rss:1448kB [ 604.855244] oom_reaper: reaped process 20249 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1448kB [ 604.867082] Swap cache stats: add 0, delete 0, find 0/0 [ 604.906070] syz-executor.1 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 604.941580] Free swap = 0kB [ 604.944620] Total swap = 0kB [ 604.949594] 2097051 pages RAM [ 604.952710] 0 pages HighMem/MovableOnly [ 604.956670] 363840 pages reserved [ 604.960431] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 604.965551] CPU: 1 PID: 18447 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 604.973422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 604.982776] Call Trace: [ 604.985381] dump_stack+0x1b2/0x281 [ 604.989015] dump_header+0x178/0x82f [ 604.992738] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 604.995911] 0 pages cma reserved [ 604.997863] ? ___ratelimit+0x2cd/0x530 [ 604.997875] oom_kill_process.cold+0x10/0xb18 [ 604.997893] out_of_memory+0xe3e/0x1190 [ 604.997904] ? oom_killer_disable+0x1c0/0x1c0 [ 604.997914] ? mutex_trylock+0x152/0x1a0 [ 604.997923] __alloc_pages_nodemask+0x23e1/0x2720 [ 604.997940] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 604.997962] alloc_pages_current+0x155/0x260 [ 605.036965] filemap_fault+0xea3/0x1980 [ 605.040932] ext4_filemap_fault+0x84/0xb0 [ 605.045076] __do_fault+0xfa/0x380 [ 605.048605] __handle_mm_fault+0x2497/0x4620 [ 605.053029] ? vm_insert_page+0x7c0/0x7c0 [ 605.057167] ? free_object+0xe4/0x240 [ 605.060973] handle_mm_fault+0x391/0x860 [ 605.065016] __do_page_fault+0x549/0xad0 [ 605.069074] ? spurious_fault+0x640/0x640 [ 605.073214] ? do_page_fault+0x60/0x500 [ 605.077181] ? page_fault+0x2f/0x50 [ 605.080797] page_fault+0x45/0x50 [ 605.084237] RIP: 0002:0x32 [ 605.087068] RSP: 0bb8:0000000000093096 EFLAGS: 00000013 [ 605.143623] Mem-Info: [ 605.211008] active_anon:11338 inactive_anon:22983 isolated_anon:0 [ 605.211008] active_file:0 inactive_file:13 isolated_file:0 [ 605.211008] unevictable:0 dirty:0 writeback:0 unstable:0 [ 605.211008] slab_reclaimable:12453 slab_unreclaimable:119372 [ 605.211008] mapped:43521 shmem:23322 pagetables:755 bounce:0 [ 605.211008] free:25114 free_pcp:0 free_cma:0 [ 605.552850] Node 0 active_anon:44824kB inactive_anon:65032kB active_file:1548kB inactive_file:1412kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:113268kB dirty:0kB writeback:0kB shmem:66180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 605.647406] Node 1 active_anon:528kB inactive_anon:26900kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:63216kB dirty:0kB writeback:0kB shmem:27108kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 605.679464] Node 0 DMA free:11076kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 605.720630] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 605.744056] Node 0 DMA32 free:36164kB min:36200kB low:45248kB high:54296kB active_anon:44824kB inactive_anon:64972kB active_file:456kB inactive_file:504kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:8160kB pagetables:2668kB bounce:0kB free_pcp:404kB local_pcp:280kB free_cma:0kB [ 605.779083] lowmem_reserve[]: 0 0 0 0 0 [ 605.783114] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 605.813894] lowmem_reserve[]: 0 0 0 0 0 [ 605.817967] Node 1 Normal free:53244kB min:53696kB low:67120kB high:80544kB active_anon:528kB inactive_anon:26900kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:352kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 605.851054] lowmem_reserve[]: 0 0 0 0 0 [ 605.855097] Node 0 DMA: 1*4kB (M) 0*8kB 14*16kB (U) 9*32kB (U) 5*64kB (UM) 4*128kB (UM) 2*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 11076kB [ 605.875594] Node 0 DMA32: 747*4kB (ME) 878*8kB (ME) 273*16kB (UME) 76*32kB (UME) 87*64kB (UME) 10*128kB (UME) 5*256kB (UM) 22*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 36204kB [ 605.895606] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 605.906443] Node 1 Normal: 46*4kB (UM) 21*8kB (UM) 19*16kB (M) 13*32kB (UM) 15*64kB (M) 10*128kB (UM) 4*256kB (UM) 80*512kB (UM) 6*1024kB (U) 1*2048kB (M) 0*4096kB = 53488kB [ 605.925946] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 605.935436] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 605.947749] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 605.956685] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 605.968376] 23393 total pagecache pages [ 605.972374] 0 pages in swap cache [ 605.975822] Swap cache stats: add 0, delete 0, find 0/0 [ 605.983939] Free swap = 0kB [ 605.986972] Total swap = 0kB [ 605.995391] 2097051 pages RAM [ 606.001290] 0 pages HighMem/MovableOnly [ 606.011590] 363840 pages reserved [ 606.015104] 0 pages cma reserved [ 606.020912] Out of memory (oom_kill_allocating_task): Kill process 18447 (syz-executor.1) score 0 or sacrifice child [ 606.034864] Killed process 20271 (syz-executor.1) total-vm:93348kB, anon-rss:156kB, file-rss:34816kB, shmem-rss:0kB [ 606.124119] oom_reaper: reaped process 20271 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 606.153758] syz-executor.3 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 606.181863] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 606.187034] CPU: 0 PID: 17612 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 606.194933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 606.204462] Call Trace: [ 606.207067] dump_stack+0x1b2/0x281 [ 606.210702] dump_header+0x178/0x82f [ 606.214427] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 606.219676] ? ___ratelimit+0x2cd/0x530 [ 606.223655] oom_kill_process.cold+0x10/0xb18 [ 606.228262] out_of_memory+0xe3e/0x1190 [ 606.232265] ? oom_killer_disable+0x1c0/0x1c0 [ 606.236754] ? mutex_trylock+0x152/0x1a0 [ 606.240810] __alloc_pages_nodemask+0x23e1/0x2720 [ 606.245644] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 606.250667] alloc_pages_current+0x155/0x260 [ 606.255071] filemap_fault+0xea3/0x1980 [ 606.259081] ext4_filemap_fault+0x84/0xb0 [ 606.263216] __do_fault+0xfa/0x380 [ 606.266754] __handle_mm_fault+0x2497/0x4620 [ 606.271145] ? vm_insert_page+0x7c0/0x7c0 [ 606.275363] ? free_object+0xe4/0x240 [ 606.279151] handle_mm_fault+0x391/0x860 [ 606.283196] __do_page_fault+0x549/0xad0 [ 606.287247] ? spurious_fault+0x640/0x640 [ 606.291444] ? do_page_fault+0x60/0x500 [ 606.295456] ? page_fault+0x2f/0x50 [ 606.299075] page_fault+0x45/0x50 [ 606.302533] RIP: 0003:0x32 [ 606.305356] RSP: 0000:00007ffef867e5d0 EFLAGS: 00000015 [ 606.309090] Mem-Info: [ 606.315751] syz-executor.1: page allocation failure: order:0 [ 606.316874] active_anon:11331 inactive_anon:22983 isolated_anon:0 [ 606.316874] active_file:5 inactive_file:2 isolated_file:0 [ 606.316874] unevictable:0 dirty:0 writeback:0 unstable:0 [ 606.316874] slab_reclaimable:12441 slab_unreclaimable:118670 [ 606.316874] mapped:43521 shmem:23322 pagetables:762 bounce:0 [ 606.316874] free:13886 free_pcp:62 free_cma:0 [ 606.316888] Node 0 active_anon:44796kB inactive_anon:65032kB active_file:20kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:110868kB dirty:0kB writeback:0kB shmem:66180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 606.340173] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 606.357686] Node 1 active_anon:528kB inactive_anon:26900kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:63216kB dirty:0kB writeback:0kB shmem:27108kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 606.419112] (null) [ 606.421539] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 606.421716] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 606.426677] CPU: 1 PID: 20271 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 606.457250] lowmem_reserve[]: [ 606.460752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 606.460755] 0 2717 [ 606.463872] Call Trace: [ 606.475176] 2718 [ 606.475455] dump_stack+0x1b2/0x281 [ 606.478051] 2718 [ 606.480079] warn_alloc.cold+0x96/0x1cc [ 606.483948] 2718 [ 606.485997] ? zone_watermark_ok_safe+0x220/0x220 [ 606.492178] ? usleep_range+0x130/0x130 [ 606.496991] Node 0 [ 606.500976] ? try_to_free_pages+0x23f/0x6e0 [ 606.500987] ? _find_next_bit+0xdb/0x100 [ 606.500999] ? run_timer_softirq+0x5a0/0x5a0 [ 606.501015] __alloc_pages_nodemask+0x2127/0x2720 [ 606.501034] ? lock_acquire+0x170/0x3f0 [ 606.503251] DMA32 free:17752kB min:36200kB low:45248kB high:54296kB active_anon:44896kB inactive_anon:64972kB active_file:68kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:8032kB pagetables:2696kB bounce:0kB free_pcp:136kB local_pcp:16kB free_cma:0kB [ 606.507635] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 606.507647] ? ion_page_pool_alloc+0x9e/0x1b0 [ 606.507662] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 606.507681] alloc_pages_current+0x155/0x260 [ 606.507693] ion_page_pool_alloc+0x118/0x1b0 [ 606.514662] lowmem_reserve[]: [ 606.517848] ion_system_heap_allocate+0x133/0x8c0 [ 606.517859] ? ion_alloc+0x187/0x810 [ 606.517870] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 606.517881] ? ion_system_contig_heap_create+0x130/0x130 [ 606.522696] 0 [ 606.526657] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 606.555676] 0 [ 606.559919] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 606.559934] ion_alloc+0x204/0x810 [ 606.559948] ? ion_dma_buf_release+0x40/0x40 [ 606.564428] 0 [ 606.570212] ? __might_fault+0x177/0x1b0 [ 606.570225] ion_ioctl+0xea/0x1f0 [ 606.570236] ? ion_query_heaps+0x360/0x360 [ 606.570249] ? lock_acquire+0x170/0x3f0 [ 606.570259] ? lock_downgrade+0x740/0x740 [ 606.576524] 0 [ 606.579067] ? ion_query_heaps+0x360/0x360 [ 606.579083] do_vfs_ioctl+0x75a/0xff0 [ 606.579095] ? ioctl_preallocate+0x1a0/0x1a0 [ 606.579105] ? lock_downgrade+0x740/0x740 [ 606.579117] ? __fget+0x225/0x360 [ 606.579125] ? do_vfs_ioctl+0xff0/0xff0 [ 606.579136] ? security_file_ioctl+0x83/0xb0 [ 606.579146] SyS_ioctl+0x7f/0xb0 [ 606.582735] 0 [ 606.587059] ? do_vfs_ioctl+0xff0/0xff0 [ 606.596222] do_syscall_64+0x1d5/0x640 [ 606.601682] Node 0 [ 606.603440] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 606.610235] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 606.615063] RIP: 0033:0x45e219 [ 606.618615] lowmem_reserve[]: [ 606.622969] RSP: 002b:00007f39dd445c68 EFLAGS: 00000246 [ 606.624767] 0 [ 606.628803] ORIG_RAX: 0000000000000010 [ 606.628809] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 606.628814] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 606.628819] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 606.628824] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 606.628829] R13: 00007ffc799adfff R14: 00007f39dd4469c0 R15: 000000000119bf8c [ 606.679779] warn_alloc_show_mem: 1 callbacks suppressed [ 606.679783] Mem-Info: [ 606.692767] 0 [ 606.714303] active_anon:11331 inactive_anon:22983 isolated_anon:0 [ 606.714303] active_file:5 inactive_file:2 isolated_file:0 [ 606.714303] unevictable:0 dirty:0 writeback:0 unstable:0 [ 606.714303] slab_reclaimable:12441 slab_unreclaimable:118670 [ 606.714303] mapped:43521 shmem:23322 pagetables:762 bounce:0 [ 606.714303] free:13923 free_pcp:64 free_cma:0 [ 606.727044] 0 [ 606.752261] Node 0 active_anon:44796kB inactive_anon:65032kB active_file:20kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:110868kB dirty:0kB writeback:0kB shmem:66180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 606.757988] 0 [ 606.781060] Node 1 active_anon:528kB inactive_anon:26900kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:63216kB dirty:0kB writeback:0kB shmem:27108kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 606.788594] 0 [ 606.835029] Node 0 [ 606.919298] Node 1 Normal free:26828kB min:53696kB low:67120kB high:80544kB active_anon:528kB inactive_anon:26900kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:352kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 606.975843] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 606.996782] lowmem_reserve[]: [ 607.022932] lowmem_reserve[]: [ 607.025162] 0 [ 607.026167] 0 [ 607.047076] 0 0 0 0 [ 607.051262] Node 0 DMA: 1*4kB (M) 0*8kB 7*16kB (U) 9*32kB (U) 5*64kB (UM) 4*128kB (UM) 2*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 10964kB [ 607.051491] 2717 2718 2718 2718 [ 607.082427] Node 0 [ 607.085792] Node 0 [ 607.085800] DMA32: 717*4kB (UME) 851*8kB (UME) 254*16kB (UME) 63*32kB (UME) 28*64kB (UME) 4*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18060kB [ 607.104347] DMA32 free:18040kB min:36200kB low:45248kB high:54296kB active_anon:44792kB inactive_anon:64972kB active_file:52kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:8032kB pagetables:2696kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 607.125640] Node 0 [ 607.155821] lowmem_reserve[]: 0 0 0 0 0 [ 607.164134] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 607.166093] Normal: [ 607.199957] lowmem_reserve[]: 0 0 0 0 0 [ 607.206287] Node 1 Normal free:26928kB min:53696kB low:67120kB high:80544kB active_anon:528kB inactive_anon:26900kB active_file:24kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:352kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 607.210539] 0*4kB [ 607.240705] lowmem_reserve[]: 0 0 0 0 0 [ 607.246858] Node 0 DMA: 1*4kB (M) 0*8kB 7*16kB (U) 9*32kB (U) 5*64kB (UM) 4*128kB (UM) 2*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 10964kB [ 607.257905] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 607.266989] Node 0 DMA32: 717*4kB (UME) 851*8kB (UME) 254*16kB (UME) 63*32kB (UME) 28*64kB (UME) 4*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18060kB [ 607.292097] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 607.302937] Node 1 Normal: 31*4kB (UM) 17*8kB (M) 20*16kB (UM) 12*32kB (UM) 16*64kB (UM) 9*128kB (M) 3*256kB (M) 29*512kB (UM) 6*1024kB (U) 1*2048kB (M) 0*4096kB = 26948kB [ 607.309788] Node 1 [ 607.324649] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 607.335880] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 607.342170] Normal: 31*4kB (UM) 17*8kB (M) 20*16kB (UM) 12*32kB (UM) 16*64kB (UM) 9*128kB (M) 3*256kB (M) 29*512kB (UM) 6*1024kB (U) 1*2048kB (M) 0*4096kB = 26948kB [ 607.349833] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 607.374357] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 607.382980] 23354 total pagecache pages [ 607.384109] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 607.386946] 0 pages in swap cache [ 607.405277] Swap cache stats: add 0, delete 0, find 0/0 [ 607.410733] Free swap = 0kB [ 607.413744] Total swap = 0kB [ 607.414707] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 607.416751] 2097051 pages RAM [ 607.432208] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 607.435454] 0 pages HighMem/MovableOnly [ 607.445067] 363840 pages reserved [ 607.448547] 0 pages cma reserved [ 607.451194] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 607.461380] 23354 total pagecache pages [ 607.465368] 0 pages in swap cache [ 607.472215] Swap cache stats: add 0, delete 0, find 0/0 [ 607.478463] Free swap = 0kB [ 607.481481] Total swap = 0kB [ 607.484493] 2097051 pages RAM [ 607.490915] 0 pages HighMem/MovableOnly [ 607.494919] 363840 pages reserved [ 607.499092] 0 pages cma reserved [ 607.502456] Out of memory (oom_kill_allocating_task): Kill process 17612 (syz-executor.3) score 0 or sacrifice child [ 607.516266] Killed process 20260 (syz-executor.3) total-vm:93348kB, anon-rss:160kB, file-rss:34816kB, shmem-rss:0kB [ 607.542548] oom_reaper: reaped process 20260 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 607.579314] oom_reaper: reaped process 20270 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 607.648114] syz-executor.3 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 607.661161] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 607.666268] CPU: 1 PID: 17612 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 607.674230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 607.683563] Call Trace: [ 607.686142] dump_stack+0x1b2/0x281 [ 607.689761] dump_header+0x178/0x82f [ 607.693458] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 607.698552] ? ___ratelimit+0x2cd/0x530 [ 607.702533] oom_kill_process.cold+0x10/0xb18 [ 607.707138] out_of_memory+0xe3e/0x1190 [ 607.711094] ? oom_killer_disable+0x1c0/0x1c0 [ 607.715593] ? mutex_trylock+0x152/0x1a0 [ 607.719649] __alloc_pages_nodemask+0x23e1/0x2720 [ 607.724492] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 607.729324] alloc_pages_current+0x155/0x260 [ 607.733725] filemap_fault+0xea3/0x1980 [ 607.737683] ext4_filemap_fault+0x84/0xb0 [ 607.741832] __do_fault+0xfa/0x380 [ 607.745367] __handle_mm_fault+0x2497/0x4620 [ 607.750363] ? vm_insert_page+0x7c0/0x7c0 [ 607.754503] ? free_object+0xe4/0x240 [ 607.758304] handle_mm_fault+0x391/0x860 [ 607.762363] __do_page_fault+0x549/0xad0 [ 607.766418] ? spurious_fault+0x640/0x640 [ 607.770549] ? do_page_fault+0x60/0x500 [ 607.775547] ? page_fault+0x2f/0x50 [ 607.779167] page_fault+0x45/0x50 [ 607.782608] RIP: 0003:0x32 [ 607.786824] RSP: 0000:00007ffef867e5d0 EFLAGS: 00000015 [ 607.787602] Mem-Info: [ 607.793529] syz-executor.1: page allocation failure: order:4 [ 607.795394] active_anon:11278 inactive_anon:22983 isolated_anon:0 [ 607.795394] active_file:20 inactive_file:12 isolated_file:0 [ 607.795394] unevictable:0 dirty:0 writeback:0 unstable:0 [ 607.795394] slab_reclaimable:12439 slab_unreclaimable:118658 [ 607.795394] mapped:43521 shmem:23322 pagetables:762 bounce:0 [ 607.795394] free:13792 free_pcp:4 free_cma:0 [ 607.795408] Node 0 active_anon:44584kB inactive_anon:65032kB active_file:72kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:110868kB dirty:0kB writeback:0kB shmem:66180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 607.823926] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 607.858250] Node 1 active_anon:528kB inactive_anon:26900kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:63216kB dirty:0kB writeback:0kB shmem:27108kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 607.906295] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 607.932742] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 607.948736] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 607.953794] Node 0 DMA32 free:17372kB min:36200kB low:45248kB high:54296kB active_anon:44584kB inactive_anon:64972kB active_file:72kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:8032kB pagetables:2696kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 607.966602] (null) [ 607.982506] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 607.982539] CPU: 1 PID: 20260 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 607.982545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 607.982548] Call Trace: [ 607.982567] dump_stack+0x1b2/0x281 [ 607.982584] warn_alloc.cold+0x96/0x1cc [ 607.982597] ? zone_watermark_ok_safe+0x220/0x220 [ 607.982610] ? usleep_range+0x130/0x130 [ 607.990396] syz-executor.4: [ 607.997715] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 607.997731] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 607.997743] ? run_timer_softirq+0x5a0/0x5a0 [ 608.025167] syz-executor.1 cpuset= [ 608.027511] __alloc_pages_nodemask+0x2127/0x2720 [ 608.027531] ? lock_acquire+0x170/0x3f0 [ 608.030525] / [ 608.035619] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 608.040643] page allocation failure: order:0 [ 608.045100] ? ion_page_pool_alloc+0x9e/0x1b0 [ 608.048827] mems_allowed=0-1 [ 608.053637] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 608.057601] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 608.059289] ? alloc_pages_current+0x84/0x260 [ 608.064131] (null) [ 608.068571] alloc_pages_current+0x155/0x260 [ 608.068586] ion_page_pool_alloc+0x118/0x1b0 [ 608.068597] ion_system_heap_allocate+0x133/0x8c0 [ 608.086968] syz-executor.4 cpuset= [ 608.090004] ? ion_alloc+0x187/0x810 [ 608.094475] / [ 608.096612] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 608.116964] mems_allowed=0-1 [ 608.117525] ? ion_system_contig_heap_create+0x130/0x130 [ 608.133261] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 608.138262] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 608.143099] ion_alloc+0x204/0x810 [ 608.146627] ? ion_dma_buf_release+0x40/0x40 [ 608.151107] ? __might_fault+0x177/0x1b0 [ 608.155178] ion_ioctl+0xea/0x1f0 [ 608.158616] ? ion_query_heaps+0x360/0x360 [ 608.162833] ? lock_acquire+0x170/0x3f0 [ 608.166806] ? lock_downgrade+0x740/0x740 [ 608.170939] ? ion_query_heaps+0x360/0x360 [ 608.175156] do_vfs_ioctl+0x75a/0xff0 [ 608.179045] ? ioctl_preallocate+0x1a0/0x1a0 [ 608.183433] ? lock_downgrade+0x740/0x740 [ 608.187566] ? __fget+0x225/0x360 [ 608.191009] ? do_vfs_ioctl+0xff0/0xff0 [ 608.194965] ? security_file_ioctl+0x83/0xb0 [ 608.199354] SyS_ioctl+0x7f/0xb0 [ 608.202698] ? do_vfs_ioctl+0xff0/0xff0 [ 608.206658] do_syscall_64+0x1d5/0x640 [ 608.210534] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 608.215709] RIP: 0033:0x45e219 [ 608.218881] RSP: 002b:00007f1c98502c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 608.226688] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 608.234394] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 608.241661] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 608.248915] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 608.256349] R13: 00007ffef867e34f R14: 00007f1c985039c0 R15: 000000000119bf8c [ 608.263874] CPU: 0 PID: 20270 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 608.265228] lowmem_reserve[]: [ 608.271749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 608.271753] Call Trace: [ 608.271778] dump_stack+0x1b2/0x281 [ 608.271793] warn_alloc.cold+0x96/0x1cc [ 608.271807] ? zone_watermark_ok_safe+0x220/0x220 [ 608.274910] 0 [ 608.284272] ? usleep_range+0x130/0x130 [ 608.284282] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 608.284296] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 608.284306] ? run_timer_softirq+0x5a0/0x5a0 [ 608.284323] __alloc_pages_nodemask+0x2127/0x2720 [ 608.284338] ? lock_acquire+0x170/0x3f0 [ 608.284352] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 608.286917] 0 [ 608.290536] ? ion_page_pool_alloc+0x9e/0x1b0 [ 608.290552] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 608.290573] alloc_pages_current+0x155/0x260 [ 608.294517] 0 [ 608.299352] ion_page_pool_alloc+0x118/0x1b0 [ 608.299363] ion_system_heap_allocate+0x133/0x8c0 [ 608.299375] ? ion_alloc+0x187/0x810 [ 608.299388] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 608.301164] 0 [ 608.305137] ? ion_system_contig_heap_create+0x130/0x130 [ 608.310264] 0 [ 608.315259] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 608.315272] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 608.324511] ion_alloc+0x204/0x810 [ 608.328480] Node 0 [ 608.333287] ? ion_dma_buf_release+0x40/0x40 [ 608.335066] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 608.339640] ? __might_fault+0x177/0x1b0 [ 608.339653] ion_ioctl+0xea/0x1f0 [ 608.339663] ? ion_query_heaps+0x360/0x360 [ 608.339676] ? lock_acquire+0x170/0x3f0 [ 608.339686] ? lock_downgrade+0x740/0x740 [ 608.345109] lowmem_reserve[]: [ 608.349497] ? ion_query_heaps+0x360/0x360 [ 608.349509] do_vfs_ioctl+0x75a/0xff0 [ 608.349528] ? ioctl_preallocate+0x1a0/0x1a0 [ 608.351300] 0 [ 608.355686] ? lock_downgrade+0x740/0x740 [ 608.355700] ? __fget+0x225/0x360 [ 608.360559] 0 [ 608.364229] ? do_vfs_ioctl+0xff0/0xff0 [ 608.369694] 0 [ 608.371446] ? security_file_ioctl+0x83/0xb0 [ 608.376863] 0 [ 608.378650] SyS_ioctl+0x7f/0xb0 [ 608.378659] ? do_vfs_ioctl+0xff0/0xff0 [ 608.378671] do_syscall_64+0x1d5/0x640 [ 608.378690] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 608.378698] RIP: 0033:0x45e219 [ 608.383795] 0 [ 608.389049] RSP: 002b:00007fd20c681c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 608.389058] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 608.389063] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 608.389068] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 608.389073] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 608.389078] R13: 00007fff87e85fff R14: 00007fd20c6829c0 R15: 000000000119bf8c [ 608.419014] CPU: 0 PID: 20271 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 608.429804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 608.429809] Call Trace: [ 608.429836] dump_stack+0x1b2/0x281 [ 608.429858] warn_alloc.cold+0x96/0x1cc [ 608.433288] Node 1 [ 608.437506] ? zone_watermark_ok_safe+0x220/0x220 [ 608.437529] __alloc_pages_nodemask+0x2127/0x2720 [ 608.437552] ? lock_acquire+0x170/0x3f0 [ 608.441508] Normal free:26860kB min:53696kB low:67120kB high:80544kB active_anon:528kB inactive_anon:26900kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:352kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 608.445639] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 608.448744] lowmem_reserve[]: [ 608.452940] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 608.456792] 0 [ 608.461209] ? retint_kernel+0x2d/0x2d [ 608.461224] ? __mutex_unlock_slowpath+0x75/0x770 [ 608.461240] alloc_pages_current+0x155/0x260 [ 608.461259] ion_page_pool_alloc+0x118/0x1b0 [ 608.461270] ion_system_heap_allocate+0x133/0x8c0 [ 608.461280] ? _raw_spin_unlock+0x29/0x40 [ 608.461288] ? _ion_heap_freelist_drain+0x6e/0x410 [ 608.461300] ? ion_system_contig_heap_create+0x130/0x130 [ 608.463125] 0 [ 608.467258] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 608.467270] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 608.467281] ion_alloc+0x27a/0x810 [ 608.467294] ? ion_dma_buf_release+0x40/0x40 [ 608.467304] ? __might_fault+0x177/0x1b0 [ 608.467316] ion_ioctl+0xea/0x1f0 [ 608.467326] ? ion_query_heaps+0x360/0x360 [ 608.467340] ? lock_acquire+0x170/0x3f0 [ 608.467348] ? lock_downgrade+0x740/0x740 [ 608.467355] ? ion_query_heaps+0x360/0x360 [ 608.467366] do_vfs_ioctl+0x75a/0xff0 [ 608.467378] ? ioctl_preallocate+0x1a0/0x1a0 [ 608.467387] ? lock_downgrade+0x740/0x740 [ 608.467400] ? __fget+0x225/0x360 [ 608.467409] ? do_vfs_ioctl+0xff0/0xff0 [ 608.467420] ? security_file_ioctl+0x83/0xb0 [ 608.467428] SyS_ioctl+0x7f/0xb0 [ 608.467435] ? do_vfs_ioctl+0xff0/0xff0 [ 608.467447] do_syscall_64+0x1d5/0x640 [ 608.467463] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 608.470927] 0 [ 608.472687] RIP: 0033:0x45e219 [ 608.476637] 0 [ 608.478417] RSP: 002b:00007f39dd445c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 608.478426] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 608.478430] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 608.478435] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 608.478439] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 608.478444] R13: 00007ffc799adfff R14: 00007f39dd4469c0 R15: 000000000119bf8c [ 608.511061] Mem-Info: [ 608.514615] 0 [ 608.542998] active_anon:11278 inactive_anon:22983 isolated_anon:0 [ 608.542998] active_file:16 inactive_file:16 isolated_file:0 [ 608.542998] unevictable:0 dirty:0 writeback:0 unstable:0 [ 608.542998] slab_reclaimable:12439 slab_unreclaimable:118518 [ 608.542998] mapped:43521 shmem:23322 pagetables:762 bounce:0 [ 608.542998] free:13959 free_pcp:42 free_cma:0 [ 608.589249] Node 0 active_anon:44584kB inactive_anon:65032kB active_file:64kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:110868kB dirty:0kB writeback:0kB shmem:66180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 608.604831] syz-executor.3: [ 608.669395] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 608.676380] Node 0 [ 608.727289] Node 1 active_anon:528kB inactive_anon:26900kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:63216kB dirty:0kB writeback:0kB shmem:27108kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 608.736143] page allocation failure: order:4 [ 608.748978] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 608.773134] DMA: [ 608.812283] Node 0 [ 608.826578] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 608.877653] syz-executor.4: [ 608.895841] 1*4kB [ 608.926860] DMA free:10996kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 608.945343] (null) [ 608.954396] page allocation failure: order:4 [ 608.984337] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 608.992953] (M) [ 608.993833] Node 0 [ 608.993841] 0*8kB [ 608.995804] DMA32 free:23244kB min:36200kB low:45248kB high:54296kB active_anon:44584kB inactive_anon:64972kB active_file:40kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:8032kB pagetables:2696kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 609.006626] 14*16kB [ 609.034094] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 609.044169] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 609.046768] syz-executor.3 cpuset= [ 609.049332] CPU: 0 PID: 20270 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 609.049338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 609.049342] Call Trace: [ 609.049364] dump_stack+0x1b2/0x281 [ 609.049381] warn_alloc.cold+0x96/0x1cc [ 609.049394] ? zone_watermark_ok_safe+0x220/0x220 [ 609.049416] __alloc_pages_nodemask+0x2127/0x2720 [ 609.072823] / [ 609.076346] ? lock_acquire+0x170/0x3f0 [ 609.095793] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 609.100650] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 609.103329] (U) 9*32kB [ 609.106096] ? __mutex_unlock_slowpath+0x75/0x770 [ 609.106108] ? retint_kernel+0x2d/0x2d [ 609.117386] alloc_pages_current+0x155/0x260 [ 609.121798] ion_page_pool_alloc+0x118/0x1b0 [ 609.126210] ion_system_heap_allocate+0x133/0x8c0 [ 609.126564] mems_allowed=0-1 [ 609.131068] ? _raw_spin_unlock+0x29/0x40 [ 609.131078] ? _ion_heap_freelist_drain+0x6e/0x410 [ 609.131087] ? ion_system_contig_heap_create+0x130/0x130 [ 609.131098] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 609.131110] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 609.131121] ion_alloc+0x27a/0x810 [ 609.131135] ? ion_dma_buf_release+0x40/0x40 [ 609.131147] ? __might_fault+0x177/0x1b0 [ 609.131160] ion_ioctl+0xea/0x1f0 [ 609.131168] ? ion_query_heaps+0x360/0x360 [ 609.131181] ? lock_acquire+0x170/0x3f0 [ 609.131189] ? lock_downgrade+0x740/0x740 [ 609.131197] ? ion_query_heaps+0x360/0x360 [ 609.131208] do_vfs_ioctl+0x75a/0xff0 [ 609.174717] (U) [ 609.175412] ? ioctl_preallocate+0x1a0/0x1a0 [ 609.202104] ? lock_downgrade+0x740/0x740 [ 609.204667] 4*64kB (UM) 4*128kB [ 609.206250] ? __fget+0x225/0x360 [ 609.206262] ? do_vfs_ioctl+0xff0/0xff0 [ 609.217006] ? security_file_ioctl+0x83/0xb0 [ 609.221412] SyS_ioctl+0x7f/0xb0 [ 609.224767] ? do_vfs_ioctl+0xff0/0xff0 [ 609.228736] do_syscall_64+0x1d5/0x640 [ 609.232632] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 609.237824] RIP: 0033:0x45e219 [ 609.241021] RSP: 002b:00007fd20c681c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 609.248743] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 609.254473] (UM) [ 609.256014] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 609.256023] 2*256kB [ 609.258061] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 609.258066] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 609.258070] R13: 00007fff87e85fff R14: 00007fd20c6829c0 R15: 000000000119bf8c [ 609.269453] lowmem_reserve[]: [ 609.287519] CPU: 1 PID: 20260 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 609.301105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 609.302241] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 609.310450] Call Trace: [ 609.310477] dump_stack+0x1b2/0x281 [ 609.310491] warn_alloc.cold+0x96/0x1cc [ 609.310506] ? zone_watermark_ok_safe+0x220/0x220 [ 609.317190] 0 [ 609.319741] __alloc_pages_nodemask+0x2127/0x2720 [ 609.323328] 0 [ 609.327282] ? io_schedule_timeout+0x140/0x140 [ 609.327300] ? lock_acquire+0x170/0x3f0 [ 609.327315] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 609.332534] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 609.333919] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 609.338758] 0 [ 609.340522] ? __mutex_unlock_slowpath+0x75/0x770 [ 609.345069] 0 [ 609.349028] alloc_pages_current+0x155/0x260 [ 609.349049] ion_page_pool_alloc+0x118/0x1b0 [ 609.353979] 0 [ 609.360326] ion_system_heap_allocate+0x133/0x8c0 [ 609.360342] ? _raw_spin_unlock+0x29/0x40 [ 609.360355] ? _ion_heap_freelist_drain+0x6e/0x410 [ 609.367572] ? ion_system_contig_heap_create+0x130/0x130 [ 609.367584] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 609.367602] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 609.372416] Node 0 [ 609.374198] ion_alloc+0x27a/0x810 [ 609.378608] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 609.382977] ? ion_dma_buf_release+0x40/0x40 [ 609.384744] lowmem_reserve[]: [ 609.389709] ? __might_fault+0x177/0x1b0 [ 609.389727] ion_ioctl+0xea/0x1f0 [ 609.389742] ? ion_query_heaps+0x360/0x360 [ 609.394059] 0 [ 609.398989] ? lock_acquire+0x170/0x3f0 [ 609.398998] ? lock_downgrade+0x740/0x740 [ 609.399008] ? ion_query_heaps+0x360/0x360 [ 609.399020] do_vfs_ioctl+0x75a/0xff0 [ 609.404457] 0 [ 609.409459] ? ioctl_preallocate+0x1a0/0x1a0 [ 609.409467] ? lock_downgrade+0x740/0x740 [ 609.409481] ? __fget+0x225/0x360 [ 609.414297] 0 [ 609.416522] ? do_vfs_ioctl+0xff0/0xff0 [ 609.420067] 0 [ 609.445180] ? security_file_ioctl+0x83/0xb0 [ 609.445194] SyS_ioctl+0x7f/0xb0 [ 609.445203] ? do_vfs_ioctl+0xff0/0xff0 [ 609.445215] do_syscall_64+0x1d5/0x640 [ 609.445284] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 609.450112] 0 [ 609.452819] RIP: 0033:0x45e219 [ 609.460304] RSP: 002b:00007f1c98502c68 EFLAGS: 00000246 [ 609.464519] Node 1 [ 609.466296] ORIG_RAX: 0000000000000010 [ 609.470279] Normal free:26908kB min:53696kB low:67120kB high:80544kB active_anon:528kB inactive_anon:26900kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:352kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 609.474384] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 609.478623] lowmem_reserve[]: [ 609.482386] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 609.484161] 0 [ 609.488544] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 609.488549] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 609.488555] R13: 00007ffef867e34f R14: 00007f1c985039c0 R15: 000000000119bf8c [ 609.501234] (UM) [ 609.503671] device bridge_slave_1 left promiscuous mode [ 609.503860] 2*512kB [ 609.527600] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.539072] (UM) [ 609.555550] warn_alloc_show_mem: 2 callbacks suppressed [ 609.555555] Mem-Info: [ 609.581813] 2*1024kB [ 609.601208] 0 [ 609.613231] (UM) [ 609.621364] 0 [ 609.624387] 1*2048kB [ 609.635669] 0 [ 609.650665] (U) 1*4096kB (M) = 11012kB [ 609.656387] Node 0 DMA32: 711*4kB (UME) 957*8kB (UME) 389*16kB (UME) 210*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 23444kB [ 609.658009] active_anon:11278 inactive_anon:22983 isolated_anon:0 [ 609.658009] active_file:20 inactive_file:4 isolated_file:0 [ 609.658009] unevictable:0 dirty:0 writeback:0 unstable:0 [ 609.658009] slab_reclaimable:12439 slab_unreclaimable:118441 [ 609.658009] mapped:43546 shmem:23322 pagetables:762 bounce:0 [ 609.658009] free:15341 free_pcp:2 free_cma:0 [ 609.685251] Node 0 [ 609.708310] 0 [ 609.712372] Node 0 DMA: 1*4kB (M) 0*8kB 14*16kB (U) 9*32kB (U) 4*64kB (UM) 4*128kB (UM) 2*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 11012kB [ 609.726676] Normal: [ 609.731555] Node 0 DMA32: 711*4kB (UME) 957*8kB (UME) 389*16kB (UME) 210*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 23444kB [ 609.737237] device bridge_slave_0 left promiscuous mode [ 609.754729] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 609.771310] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 609.775878] Node 0 active_anon:44584kB inactive_anon:65032kB active_file:180kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:110968kB dirty:0kB writeback:0kB shmem:66180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 609.796533] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.815488] Node 1 Normal: 55*4kB (UM) 24*8kB (UM) 22*16kB (UM) 18*32kB (UM) 16*64kB (UM) 10*128kB (UM) 3*256kB (M) 28*512kB (UM) 6*1024kB (U) 1*2048kB (M) 0*4096kB = 26940kB [ 609.830933] Node 1 Normal: 55*4kB (UM) 24*8kB (UM) 22*16kB (UM) 18*32kB (UM) 16*64kB (UM) 10*128kB (UM) 3*256kB (M) 28*512kB (UM) 6*1024kB (U) 1*2048kB (M) 0*4096kB = 26940kB [ 609.838914] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 609.870414] Node 1 active_anon:528kB inactive_anon:26900kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:63216kB dirty:0kB writeback:0kB shmem:27108kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 609.873714] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 609.905159] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 609.916737] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 609.922903] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 609.932765] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 609.951535] Node 0 DMA free:10996kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 609.985273] device veth1_macvtap left promiscuous mode [ 609.989343] 23386 total pagecache pages [ 609.994550] 0 pages in swap cache [ 610.006879] Swap cache stats: add 0, delete 0, find 0/0 [ 610.012263] Free swap = 0kB [ 610.014500] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 610.015267] Total swap = 0kB [ 610.015274] 2097051 pages RAM [ 610.038498] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 610.043554] Node 0 DMA32 free:18020kB min:36200kB low:45248kB high:54296kB active_anon:44584kB inactive_anon:64972kB active_file:60kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:8032kB pagetables:2696kB bounce:0kB free_pcp:132kB local_pcp:0kB free_cma:0kB [ 610.044003] device veth0_macvtap left promiscuous mode [ 610.079846] 0 pages HighMem/MovableOnly [ 610.083822] 363840 pages reserved [ 610.093375] 0 pages cma reserved [ 610.122321] lowmem_reserve[]: 0 0 0 0 0 [ 610.126365] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 610.145875] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 610.189661] lowmem_reserve[]: 0 0 0 0 0 [ 610.193702] Node 1 Normal free:26816kB min:53696kB low:67120kB high:80544kB active_anon:528kB inactive_anon:26900kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:352kB bounce:0kB free_pcp:16kB local_pcp:0kB free_cma:0kB [ 610.230244] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 610.245829] 23354 total pagecache pages [ 610.246265] lowmem_reserve[]: 0 0 0 0 0 [ 610.261967] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 610.271211] Node 0 DMA: 1*4kB (M) 1*8kB (U) 11*16kB (U) 9*32kB (U) 4*64kB (UM) 4*128kB (UM) 2*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 10972kB [ 610.276666] 0 pages in swap cache [ 610.290680] CPU: 0 PID: 20271 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 610.298574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 610.307948] Call Trace: [ 610.310632] dump_stack+0x1b2/0x281 [ 610.314258] warn_alloc.cold+0x96/0x1cc [ 610.316230] Swap cache stats: add 0, delete 0, find 0/0 [ 610.318248] ? zone_watermark_ok_safe+0x220/0x220 [ 610.318260] ? usleep_range+0x130/0x130 [ 610.318268] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 610.318282] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 610.318291] ? run_timer_softirq+0x5a0/0x5a0 [ 610.318306] __alloc_pages_nodemask+0x2127/0x2720 [ 610.318321] ? lock_acquire+0x170/0x3f0 [ 610.318335] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 610.318348] ? ion_page_pool_alloc+0x9e/0x1b0 [ 610.318362] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 610.318372] ? retint_kernel+0x2d/0x2d [ 610.318390] alloc_pages_current+0x155/0x260 [ 610.318401] ion_page_pool_alloc+0x118/0x1b0 [ 610.318412] ion_system_heap_allocate+0x133/0x8c0 [ 610.318422] ? _raw_spin_unlock+0x29/0x40 [ 610.333902] syz-executor.3: [ 610.337647] ? _ion_heap_freelist_drain+0x6e/0x410 [ 610.337658] ? ion_system_contig_heap_create+0x130/0x130 [ 610.337670] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 610.337683] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 610.337693] ion_alloc+0x27a/0x810 [ 610.337709] ? ion_dma_buf_release+0x40/0x40 [ 610.337720] ? __might_fault+0x177/0x1b0 [ 610.337731] ion_ioctl+0xea/0x1f0 [ 610.337741] ? ion_query_heaps+0x360/0x360 [ 610.337758] ? lock_acquire+0x170/0x3f0 [ 610.355212] Free swap = 0kB [ 610.355921] ? lock_downgrade+0x740/0x740 [ 610.375661] page allocation failure: order:0 [ 610.378923] ? ion_query_heaps+0x360/0x360 [ 610.378937] do_vfs_ioctl+0x75a/0xff0 [ 610.378949] ? ioctl_preallocate+0x1a0/0x1a0 [ 610.378961] ? lock_downgrade+0x740/0x740 [ 610.378974] ? __fget+0x225/0x360 [ 610.378983] ? do_vfs_ioctl+0xff0/0xff0 [ 610.378995] ? security_file_ioctl+0x83/0xb0 [ 610.379003] SyS_ioctl+0x7f/0xb0 [ 610.379010] ? do_vfs_ioctl+0xff0/0xff0 [ 610.379022] do_syscall_64+0x1d5/0x640 [ 610.379040] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 610.398857] Total swap = 0kB [ 610.400682] RIP: 0033:0x45e219 [ 610.406110] 2097051 pages RAM [ 610.411113] RSP: 002b:00007f39dd445c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 610.411123] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 610.411127] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 610.411132] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 610.411137] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 610.411142] R13: 00007ffc799adfff R14: 00007f39dd4469c0 R15: 000000000119bf8c [ 610.418566] device veth1_vlan left promiscuous mode [ 610.434663] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 610.443924] Node 0 [ 610.462528] (null) [ 610.471496] device veth0_vlan left promiscuous mode [ 610.492432] syz-executor.3 cpuset= [ 610.504146] DMA32: [ 610.518772] 0 pages HighMem/MovableOnly [ 610.529507] 703*4kB [ 610.551222] / mems_allowed=0-1 [ 610.551284] CPU: 1 PID: 20260 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 610.551291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 610.551294] Call Trace: [ 610.551319] dump_stack+0x1b2/0x281 [ 610.551337] warn_alloc.cold+0x96/0x1cc [ 610.564611] (ME) [ 610.565661] ? zone_watermark_ok_safe+0x220/0x220 [ 610.567806] 823*8kB [ 610.572783] ? usleep_range+0x130/0x130 [ 610.576286] (ME) [ 610.578501] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 610.578514] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 610.578525] ? run_timer_softirq+0x5a0/0x5a0 [ 610.582485] 233*16kB [ 610.584799] __alloc_pages_nodemask+0x2127/0x2720 [ 610.587975] (ME) [ 610.595826] ? lock_acquire+0x170/0x3f0 [ 610.605170] 151*32kB [ 610.607722] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 610.607738] ? ion_page_pool_alloc+0x9e/0x1b0 [ 610.611342] (UME) [ 610.615300] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 610.617353] 1*64kB [ 610.622166] alloc_pages_current+0x155/0x260 [ 610.624451] (U) [ 610.628414] ion_page_pool_alloc+0x118/0x1b0 [ 610.628428] ion_system_heap_allocate+0x133/0x8c0 [ 610.630570] warn_alloc_show_mem: 1 callbacks suppressed [ 610.630574] Mem-Info: [ 610.635723] ? _raw_spin_unlock+0x29/0x40 [ 610.640748] active_anon:11278 inactive_anon:22983 isolated_anon:0 [ 610.640748] active_file:52 inactive_file:0 isolated_file:0 [ 610.640748] unevictable:0 dirty:0 writeback:0 unstable:0 [ 610.640748] slab_reclaimable:12425 slab_unreclaimable:118421 [ 610.640748] mapped:43521 shmem:23322 pagetables:762 bounce:0 [ 610.640748] free:13952 free_pcp:37 free_cma:0 [ 610.645101] ? _ion_heap_freelist_drain+0x6e/0x410 [ 610.647514] 0*128kB [ 610.652318] ? ion_system_contig_heap_create+0x130/0x130 [ 610.654350] 0*256kB 0*512kB [ 610.658309] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 610.658321] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 610.658357] ion_alloc+0x27a/0x810 [ 610.660757] Node 0 active_anon:44584kB inactive_anon:65032kB active_file:208kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:110868kB dirty:0kB writeback:0kB shmem:66180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 610.665566] ? ion_dma_buf_release+0x40/0x40 [ 610.670052] 0*1024kB [ 610.672165] ? __might_fault+0x177/0x1b0 [ 610.677615] Node 1 active_anon:528kB inactive_anon:26900kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:63216kB dirty:0kB writeback:0kB shmem:27108kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 610.679838] ion_ioctl+0xea/0x1f0 [ 610.684208] Node 0 [ 610.686166] ? ion_query_heaps+0x360/0x360 [ 610.690566] 0*2048kB [ 610.695386] ? lock_acquire+0x170/0x3f0 [ 610.700755] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 610.703140] ? lock_downgrade+0x740/0x740 [ 610.707280] 0*4096kB [ 610.740309] ? ion_query_heaps+0x360/0x360 [ 610.740322] do_vfs_ioctl+0x75a/0xff0 [ 610.740334] ? ioctl_preallocate+0x1a0/0x1a0 [ 610.745261] lowmem_reserve[]: [ 610.747568] ? lock_downgrade+0x740/0x740 [ 610.747582] ? __fget+0x225/0x360 [ 610.747592] ? do_vfs_ioctl+0xff0/0xff0 [ 610.753023] 0 [ 610.756027] ? security_file_ioctl+0x83/0xb0 [ 610.761028] 2717 [ 610.765835] SyS_ioctl+0x7f/0xb0 [ 610.769362] 2718 [ 610.797010] ? do_vfs_ioctl+0xff0/0xff0 [ 610.797023] do_syscall_64+0x1d5/0x640 [ 610.797043] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 610.801428] = 18020kB [ 610.803809] RIP: 0033:0x45e219 [ 610.807859] Node 0 [ 610.834706] RSP: 002b:00007f1c98502c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 610.834716] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 610.834721] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 610.834729] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 610.838190] 2718 [ 610.840386] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 610.844592] 2718 [ 610.846977] R13: 00007ffef867e34f R14: 00007f1c985039c0 R15: 000000000119bf8c [ 610.873944] 363840 pages reserved [ 610.885972] Normal: [ 610.897846] 0 pages cma reserved [ 610.911463] 0*4kB [ 610.922608] Out of memory (oom_kill_allocating_task): Kill process 17612 (syz-executor.3) score 0 or sacrifice child [ 610.935964] 0*8kB [ 610.950523] Killed process 17612 (syz-executor.3) total-vm:93216kB, anon-rss:112kB, file-rss:34012kB, shmem-rss:0kB [ 610.994882] oom_reaper: reaped process 17612 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 611.022934] 0*16kB [ 611.077058] syz-executor.3: page allocation failure: order:0, mode:0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null) [ 611.107677] Node 0 DMA32 free:18020kB min:36200kB low:45248kB high:54296kB active_anon:44584kB inactive_anon:64972kB active_file:68kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:8000kB pagetables:2548kB bounce:0kB free_pcp:248kB local_pcp:16kB free_cma:0kB [ 611.111400] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 611.197456] 0*32kB 0*64kB 0*128kB [ 611.202176] CPU: 1 PID: 17612 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 611.213643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 611.213647] Call Trace: [ 611.213668] dump_stack+0x1b2/0x281 [ 611.213681] warn_alloc.cold+0x96/0x1cc [ 611.213692] ? zone_watermark_ok_safe+0x220/0x220 [ 611.213702] ? usleep_range+0x130/0x130 [ 611.213709] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 611.213727] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 611.213737] ? run_timer_softirq+0x5a0/0x5a0 [ 611.213751] __alloc_pages_nodemask+0x2127/0x2720 [ 611.213770] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 611.213797] alloc_pages_current+0x155/0x260 [ 611.213812] filemap_fault+0xea3/0x1980 [ 611.246766] 0*256kB [ 611.247672] ext4_filemap_fault+0x84/0xb0 [ 611.252654] 0*512kB 0*1024kB [ 611.257094] __do_fault+0xfa/0x380 [ 611.257106] __handle_mm_fault+0x2497/0x4620 [ 611.257116] ? vm_insert_page+0x7c0/0x7c0 [ 611.257126] ? free_object+0xe4/0x240 [ 611.257144] handle_mm_fault+0x391/0x860 [ 611.276765] 0*2048kB [ 611.277500] __do_page_fault+0x549/0xad0 [ 611.281620] 0*4096kB [ 611.284715] ? spurious_fault+0x640/0x640 [ 611.296752] = 0kB [ 611.300567] ? do_page_fault+0x60/0x500 [ 611.304599] Node 1 [ 611.306988] ? page_fault+0x2f/0x50 [ 611.306995] page_fault+0x45/0x50 [ 611.307004] RIP: 0003:0x32 [ 611.307008] RSP: 0000:00007ffef867e5d0 EFLAGS: 00000015 [ 611.311555] lowmem_reserve[]: [ 611.354139] systemd[1]: systemd-journald.service: Main process exited, code=killed, status=9/KILL [ 611.376048] 0 0 0 0 0 [ 611.384753] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 611.396760] Normal: [ 611.432608] systemd[1]: Failed to start Journal Service. [ 611.441586] lowmem_reserve[]: 0 0 0 0 0 [ 611.445616] Node 1 Normal free:543340kB min:53696kB low:67120kB high:80544kB active_anon:528kB inactive_anon:26900kB active_file:1908kB inactive_file:6896kB unevictable:0kB writepending:148kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:352kB bounce:0kB free_pcp:500kB local_pcp:192kB free_cma:0kB [ 611.456759] 1*4kB [ 611.483365] systemd[1]: systemd-journald.service: Unit entered failed state. [ 611.485174] lowmem_reserve[]: 0 0 0 0 0 [ 611.497050] syz-executor.3 invoked oom-killer: gfp_mask=0x0(), nodemask=(null), order=0, oom_score_adj=0 [ 611.509739] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 611.513059] Node 0 DMA: 1*4kB (M) 0*8kB 14*16kB (U) 9*32kB (U) 4*64kB (UM) 4*128kB (UM) 2*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 11012kB [ 611.521210] (U) [ 611.533594] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 611.541838] CPU: 1 PID: 17612 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 611.549603] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 611.549718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 611.568839] Call Trace: [ 611.571449] dump_stack+0x1b2/0x281 [ 611.575092] dump_header+0x178/0x82f [ 611.578901] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 611.578993] 3*8kB [ 611.583996] ? ___ratelimit+0x2cd/0x530 [ 611.583998] (UME) 1*16kB [ 611.586136] oom_kill_process.cold+0x10/0xb18 [ 611.597383] out_of_memory+0xe3e/0x1190 [ 611.601368] ? pagefault_out_of_memory+0xaa/0xd0 [ 611.606131] ? oom_killer_disable+0x1c0/0x1c0 [ 611.609505] (U) [ 611.610625] ? mutex_trylock+0x152/0x1a0 [ 611.610628] 2*32kB (UM) [ 611.612590] ? pagefault_out_of_memory+0xaa/0xd0 [ 611.612601] pagefault_out_of_memory+0xbb/0xd0 [ 611.616646] 2024*64kB [ 611.619297] ? out_of_memory+0x1190/0x1190 [ 611.619310] ? lock_downgrade+0x740/0x740 [ 611.619322] mm_fault_error+0xad/0x2c0 [ 611.619332] __do_page_fault+0x93c/0xad0 [ 611.619342] ? spurious_fault+0x640/0x640 [ 611.619352] ? do_page_fault+0x60/0x500 [ 611.636716] (UM) [ 611.639482] ? page_fault+0x2f/0x50 [ 611.643340] 443*128kB [ 611.647381] page_fault+0x45/0x50 [ 611.647390] RIP: 0003:0x32 [ 611.647394] RSP: 0000:00007ffef867e5d0 EFLAGS: 00000015 [ 611.648885] Node 0 DMA32: 332*4kB (UE) 528*8kB (UE) 183*16kB (UME) 46*32kB (ME) 2571*64kB (UM) 436*128kB (U) 49*256kB (U) 25*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 255648kB [ 611.691379] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 611.692429] Node 0 [ 611.705953] (UM) [ 611.706756] Normal: [ 611.708280] 133*256kB [ 611.710324] 0*4kB [ 611.712586] (UE) 84*512kB (UME) 252*1024kB (UE) 28*2048kB (U) 0*4096kB = 578796kB [ 611.717755] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 611.735269] Node 1 Normal: 1*4kB (U) 3*8kB (UME) 1*16kB (U) 2*32kB (UM) 2026*64kB (UM) 448*128kB (UM) 134*256kB (UE) 95*512kB (UME) 252*1024kB (UE) 28*2048kB (U) 0*4096kB = 585452kB [ 611.754984] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 611.756473] systemd[1]: Stopped Journal Service. [ 611.769061] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 611.775757] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 611.796755] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 611.802924] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 611.805803] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 611.823343] Mem-Info: [ 611.825828] active_anon:11278 inactive_anon:22983 isolated_anon:0 [ 611.825828] active_file:844 inactive_file:2690 isolated_file:32 [ 611.825828] unevictable:0 dirty:50 writeback:0 unstable:0 [ 611.825828] slab_reclaimable:12450 slab_unreclaimable:118049 [ 611.825828] mapped:45846 shmem:23322 pagetables:725 bounce:0 [ 611.825828] free:206960 free_pcp:462 free_cma:0 [ 611.844158] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 611.864359] Node 0 active_anon:44584kB inactive_anon:65032kB active_file:568kB inactive_file:5052kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:113768kB dirty:0kB writeback:0kB shmem:66180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 611.879222] systemd[1]: Starting Journal Service... [ 611.921638] Node 1 active_anon:528kB inactive_anon:26900kB active_file:2908kB inactive_file:5708kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:69716kB dirty:200kB writeback:0kB shmem:27108kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 611.947025] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 611.953672] Node 0 DMA free:10992kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 611.969816] 27045 total pagecache pages [ 611.992057] systemd[1]: Started Load/Save RF Kill Switch Status. [ 612.016782] 27083 total pagecache pages [ 612.020808] 0 pages in swap cache [ 612.024261] Swap cache stats: add 0, delete 0, find 0/0 [ 612.029558] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 612.030539] 0 pages in swap cache [ 612.034839] Node 0 DMA32 free:172812kB min:36200kB low:45248kB high:54296kB active_anon:45140kB inactive_anon:64968kB active_file:840kB inactive_file:5396kB unevictable:0kB writepending:32kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:8032kB pagetables:2776kB bounce:0kB free_pcp:400kB local_pcp:208kB free_cma:0kB [ 612.040105] Free swap = 0kB [ 612.071636] device hsr_slave_1 left promiscuous mode [ 612.087327] Swap cache stats: add 0, delete 0, find 0/0 [ 612.092894] Free swap = 0kB [ 612.095919] Total swap = 0kB [ 612.101744] device hsr_slave_0 left promiscuous mode [ 612.107351] 2097051 pages RAM [ 612.110599] 0 pages HighMem/MovableOnly [ 612.114596] 363840 pages reserved [ 612.116769] lowmem_reserve[]: 0 0 0 0 0 [ 612.118263] 0 pages cma reserved [ 612.131861] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 612.134900] Total swap = 0kB [ 612.166080] team0 (unregistering): Port device team_slave_1 removed [ 612.177951] team0 (unregistering): Port device team_slave_0 removed [ 612.187950] 2097051 pages RAM [ 612.191086] 0 pages HighMem/MovableOnly [ 612.195070] 363840 pages reserved [ 612.200911] lowmem_reserve[]: 0 0 0 0 0 [ 612.203076] 0 pages cma reserved [ 612.208777] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 612.222550] systemd-journald[20299]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 612.227454] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 612.242877] Node 1 Normal free:585452kB min:53696kB low:67120kB high:80544kB active_anon:520kB inactive_anon:26896kB active_file:3548kB inactive_file:5064kB unevictable:0kB writepending:244kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:352kB bounce:0kB free_pcp:996kB local_pcp:436kB free_cma:0kB [ 612.319817] lowmem_reserve[]: 0 0 0 0 0 [ 612.323885] Node 0 DMA: 1*4kB (M) 0*8kB 14*16kB (U) 9*32kB (U) 4*64kB (UM) 4*128kB (UM) 2*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 11012kB [ 612.336255] bond0 (unregistering): Released all slaves [ 612.342626] Node 0 DMA32: 282*4kB (ME) 551*8kB (UE) 150*16kB (UE) 28*32kB (UE) 0*64kB 156*128kB (U) 49*256kB (U) 13*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 48000kB [ 612.380299] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 612.382618] systemd-journald[20299]: /dev/kmsg buffer overrun, some messages lost. [ 612.391365] Node 1 Normal: 1*4kB (M) 2*8kB (UE) 1*16kB (M) 1*32kB (M) 1680*64kB (UM) 447*128kB (U) 135*256kB (UME) 94*512kB (UE) 252*1024kB (UE) 28*2048kB (U) 0*4096kB = 562884kB [ 612.450875] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 612.490176] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 612.499004] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 612.530292] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 612.539054] 29145 total pagecache pages [ 612.543033] 0 pages in swap cache [ 612.546478] Swap cache stats: add 0, delete 0, find 0/0 [ 612.597060] Free swap = 0kB [ 612.600125] Total swap = 0kB [ 612.603139] 2097051 pages RAM [ 612.606238] 0 pages HighMem/MovableOnly [ 612.637041] 363840 pages reserved [ 612.640537] 0 pages cma reserved [ 612.643902] Out of memory (oom_kill_allocating_task): Kill process 17612 (syz-executor.3) score 0 or sacrifice child [ 612.708269] Killed process 17612 (syz-executor.3) total-vm:93216kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 614.175191] systemd[1]: Started Journal Service. 21:26:38 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001}) 21:26:38 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0xc0241, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:26:38 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:26:38 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0xc0241, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:26:38 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:26:38 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0xc0241, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:26:38 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:26:38 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001}) 21:26:38 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0xc0241, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:26:38 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0xc0241, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:26:38 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:26:38 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x80000001, 0x4) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0xc0241, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) [ 615.932564] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 615.945294] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 615.947443] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 615.950928] CPU: 1 PID: 20338 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 615.965887] syz-executor.4 cpuset= [ 615.970135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 615.970139] Call Trace: [ 615.970162] dump_stack+0x1b2/0x281 [ 615.970178] warn_alloc.cold+0x96/0x1cc [ 615.973732] / [ 615.983070] ? zone_watermark_ok_safe+0x220/0x220 [ 615.985690] mems_allowed=0-1 [ 615.989271] __alloc_pages_nodemask+0x2127/0x2720 [ 615.989288] ? _raw_spin_unlock_irq+0x5a/0x80 [ 616.012125] ? finish_task_switch+0x178/0x610 [ 616.016606] ? finish_task_switch+0x14d/0x610 [ 616.021084] ? lock_acquire+0x170/0x3f0 [ 616.025044] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 616.029874] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 616.035306] ? __mutex_unlock_slowpath+0x75/0x770 [ 616.040224] alloc_pages_current+0x155/0x260 [ 616.044620] ion_page_pool_alloc+0x118/0x1b0 [ 616.049012] ion_system_heap_allocate+0x133/0x8c0 [ 616.053838] ? ion_alloc+0x187/0x810 [ 616.057549] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 616.062983] ? ion_system_contig_heap_create+0x130/0x130 [ 616.068413] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 616.073412] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 616.078239] ion_alloc+0x204/0x810 [ 616.081765] ? ion_dma_buf_release+0x40/0x40 [ 616.086176] ? __might_fault+0x177/0x1b0 [ 616.090659] ion_ioctl+0xea/0x1f0 [ 616.094096] ? ion_query_heaps+0x360/0x360 [ 616.098312] ? lock_acquire+0x170/0x3f0 [ 616.102269] ? lock_downgrade+0x740/0x740 [ 616.106397] ? ion_query_heaps+0x360/0x360 [ 616.110615] do_vfs_ioctl+0x75a/0xff0 [ 616.114400] ? ioctl_preallocate+0x1a0/0x1a0 [ 616.118788] ? lock_downgrade+0x740/0x740 [ 616.122921] ? __fget+0x225/0x360 [ 616.126355] ? do_vfs_ioctl+0xff0/0xff0 [ 616.130400] ? security_file_ioctl+0x83/0xb0 [ 616.134789] SyS_ioctl+0x7f/0xb0 [ 616.138137] ? do_vfs_ioctl+0xff0/0xff0 [ 616.142093] do_syscall_64+0x1d5/0x640 [ 616.145969] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 616.151290] RIP: 0033:0x45e219 [ 616.154460] RSP: 002b:00007f994610dc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 616.162155] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 616.169405] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 616.176671] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 616.183923] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 616.191188] R13: 00007ffd6a5a041f R14: 00007f994610e9c0 R15: 000000000119bf8c [ 616.198453] CPU: 0 PID: 20319 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 616.200236] warn_alloc_show_mem: 2 callbacks suppressed [ 616.200240] Mem-Info: [ 616.206332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 616.206336] Call Trace: [ 616.206358] dump_stack+0x1b2/0x281 [ 616.206372] warn_alloc.cold+0x96/0x1cc [ 616.206385] ? zone_watermark_ok_safe+0x220/0x220 [ 616.206406] __alloc_pages_nodemask+0x2127/0x2720 [ 616.206419] ? _raw_spin_unlock_irq+0x24/0x80 [ 616.206435] ? lock_acquire+0x170/0x3f0 [ 616.211879] active_anon:11378 inactive_anon:25013 isolated_anon:0 [ 616.211879] active_file:1879 inactive_file:4312 isolated_file:0 [ 616.211879] unevictable:0 dirty:43 writeback:0 unstable:0 [ 616.211879] slab_reclaimable:12394 slab_unreclaimable:120310 [ 616.211879] mapped:39614 shmem:25363 pagetables:689 bounce:0 [ 616.211879] free:55462 free_pcp:74 free_cma:0 [ 616.214197] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 616.214217] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 616.214229] ? __mutex_unlock_slowpath+0x75/0x770 [ 616.223856] Node 0 active_anon:45096kB inactive_anon:72764kB active_file:7428kB inactive_file:16988kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:123028kB dirty:124kB writeback:0kB shmem:73964kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 616.226156] alloc_pages_current+0x155/0x260 [ 616.226175] ion_page_pool_alloc+0x118/0x1b0 [ 616.226191] ion_system_heap_allocate+0x133/0x8c0 [ 616.229905] Node 1 active_anon:416kB inactive_anon:27288kB active_file:88kB inactive_file:260kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:35428kB dirty:48kB writeback:0kB shmem:27488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 616.233757] ? ion_alloc+0x187/0x810 [ 616.233768] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 616.233777] ? ion_system_contig_heap_create+0x130/0x130 [ 616.233788] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 616.239817] Node 0 [ 616.243566] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 616.243585] ion_alloc+0x204/0x810 [ 616.248169] DMA free:11100kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 616.252190] ? ion_dma_buf_release+0x40/0x40 [ 616.252204] ? __might_fault+0x177/0x1b0 [ 616.252227] ion_ioctl+0xea/0x1f0 [ 616.299875] lowmem_reserve[]: [ 616.300995] ? ion_query_heaps+0x360/0x360 [ 616.301014] ? lock_acquire+0x170/0x3f0 [ 616.329620] 0 [ 616.333850] ? lock_downgrade+0x740/0x740 [ 616.333861] ? ion_query_heaps+0x360/0x360 [ 616.333873] do_vfs_ioctl+0x75a/0xff0 [ 616.338329] 2717 [ 616.343086] ? ioctl_preallocate+0x1a0/0x1a0 [ 616.343094] ? lock_downgrade+0x740/0x740 [ 616.343108] ? __fget+0x225/0x360 [ 616.370551] 2718 [ 616.374064] ? do_vfs_ioctl+0xff0/0xff0 [ 616.374076] ? security_file_ioctl+0x83/0xb0 [ 616.374086] SyS_ioctl+0x7f/0xb0 [ 616.379599] 2718 [ 616.385915] ? do_vfs_ioctl+0xff0/0xff0 [ 616.385930] do_syscall_64+0x1d5/0x640 [ 616.385949] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 616.391051] 2718 [ 616.393167] RIP: 0033:0x45e219 [ 616.393172] RSP: 002b:00007fd20c681c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 616.393186] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 616.401550] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 616.401556] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 616.401560] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 616.401565] R13: 00007fff87e85fff R14: 00007fd20c6829c0 R15: 000000000119bf8c [ 616.559454] Node 0 DMA32 free:67676kB min:36200kB low:45248kB high:54296kB active_anon:45072kB inactive_anon:72708kB active_file:7864kB inactive_file:17008kB unevictable:0kB writepending:152kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:8000kB pagetables:2508kB bounce:0kB free_pcp:196kB local_pcp:96kB free_cma:0kB [ 616.589982] lowmem_reserve[]: 0 0 0 0 0 [ 616.594734] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 616.624290] lowmem_reserve[]: 0 0 0 0 0 [ 616.628709] Node 1 Normal free:67048kB min:53696kB low:67120kB high:80544kB active_anon:344kB inactive_anon:27284kB active_file:88kB inactive_file:284kB unevictable:0kB writepending:60kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:276kB bounce:0kB free_pcp:228kB local_pcp:108kB free_cma:0kB [ 616.657984] lowmem_reserve[]: 0 0 0 0 0 [ 616.662049] Node 0 DMA: 1*4kB (M) 1*8kB (U) 4*16kB (U) 7*32kB (U) 5*64kB (UM) 4*128kB (UM) 3*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 11116kB [ 616.677324] Node 0 DMA32: 393*4kB (ME) 788*8kB (UME) 204*16kB (UME) 769*32kB (UME) 5*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36068kB [ 616.691837] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 616.703052] Node 1 Normal: 1*4kB (M) 1*8kB (M) 789*16kB (U) 1375*32kB (U) 1*64kB (M) 1*128kB (M) 1*256kB (M) 1*512kB (M) 3*1024kB (U) 0*2048kB 0*4096kB = 60668kB [ 616.719067] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 616.728062] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 616.737345] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 616.746617] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 616.761208] 27056 total pagecache pages [ 616.765865] 0 pages in swap cache [ 616.770373] Swap cache stats: add 0, delete 0, find 0/0 [ 616.776219] Free swap = 0kB [ 616.782328] Total swap = 0kB [ 616.785426] 2097051 pages RAM [ 616.792091] 0 pages HighMem/MovableOnly [ 616.799805] 363840 pages reserved [ 616.803329] 0 pages cma reserved [ 618.928529] oom_reaper: reaped process 20338 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 618.946952] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 618.960553] in:imklog cpuset=/ mems_allowed=0-1 [ 618.965257] CPU: 1 PID: 20286 Comm: in:imklog Not tainted 4.14.217-syzkaller #0 [ 618.972720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 618.982069] Call Trace: [ 618.984662] dump_stack+0x1b2/0x281 [ 618.988292] dump_header+0x178/0x82f [ 618.992004] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 618.997104] ? ___ratelimit+0x2cd/0x530 [ 619.001076] oom_kill_process.cold+0x10/0xb18 [ 619.005581] out_of_memory+0xe3e/0x1190 [ 619.009562] ? oom_killer_disable+0x1c0/0x1c0 [ 619.014078] ? mutex_trylock+0x152/0x1a0 [ 619.019012] __alloc_pages_nodemask+0x23e1/0x2720 [ 619.023891] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 619.028751] alloc_pages_current+0x155/0x260 [ 619.033184] filemap_fault+0xea3/0x1980 [ 619.037168] ext4_filemap_fault+0x84/0xb0 [ 619.041313] __do_fault+0xfa/0x380 [ 619.044848] __handle_mm_fault+0x2497/0x4620 [ 619.049254] ? vm_insert_page+0x7c0/0x7c0 [ 619.053398] ? lock_downgrade+0x740/0x740 [ 619.057558] handle_mm_fault+0x391/0x860 [ 619.063247] __do_page_fault+0x549/0xad0 [ 619.068653] ? spurious_fault+0x640/0x640 [ 619.073265] ? do_page_fault+0x60/0x500 [ 619.079869] ? page_fault+0x2f/0x50 [ 619.084638] page_fault+0x45/0x50 [ 619.089218] RIP: 1fa0:0x1f9f [ 619.093405] RSP: 0000:0000563e68c679d0 EFLAGS: 7fbba0c5eda0 [ 619.094116] Mem-Info: [ 619.100143] syz-executor.2: [ 619.103543] active_anon:11307 inactive_anon:25013 isolated_anon:0 [ 619.103543] active_file:17 inactive_file:66 isolated_file:0 [ 619.103543] unevictable:0 dirty:0 writeback:0 unstable:0 [ 619.103543] slab_reclaimable:12390 slab_unreclaimable:120343 [ 619.103543] mapped:52805 shmem:25363 pagetables:762 bounce:0 [ 619.103543] free:50634 free_pcp:407 free_cma:0 [ 619.113369] page allocation failure: order:0 [ 619.161573] Node 0 active_anon:44872kB inactive_anon:72764kB active_file:52kB inactive_file:248kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:123876kB dirty:0kB writeback:0kB shmem:73964kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 619.166520] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 619.167023] Node 1 active_anon:348kB inactive_anon:27284kB active_file:20kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87228kB dirty:0kB writeback:0kB shmem:27484kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 619.201652] (null) [ 619.206475] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 619.243757] syz-executor.2 cpuset= [ 619.271910] lowmem_reserve[]: [ 619.275077] / [ 619.275717] 0 [ 619.278985] mems_allowed=0-1 [ 619.280825] 2717 [ 619.282723] CPU: 0 PID: 20338 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 619.285800] 2718 [ 619.287534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 619.287538] Call Trace: [ 619.287558] dump_stack+0x1b2/0x281 [ 619.287573] warn_alloc.cold+0x96/0x1cc [ 619.287586] ? zone_watermark_ok_safe+0x220/0x220 [ 619.287598] ? usleep_range+0x130/0x130 [ 619.287606] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 619.287619] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 619.287632] ? run_timer_softirq+0x5a0/0x5a0 [ 619.295627] 2718 [ 619.297707] __alloc_pages_nodemask+0x2127/0x2720 [ 619.297728] ? lock_acquire+0x170/0x3f0 [ 619.297741] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 619.297754] ? ion_page_pool_alloc+0x9e/0x1b0 [ 619.297771] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 619.297789] alloc_pages_current+0x155/0x260 [ 619.297804] ion_page_pool_alloc+0x118/0x1b0 [ 619.297814] ion_system_heap_allocate+0x133/0x8c0 [ 619.297825] ? ion_alloc+0x187/0x810 [ 619.307359] 2718 [ 619.309837] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 619.317405] ? ion_system_contig_heap_create+0x130/0x130 [ 619.317415] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 619.317427] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 619.317438] ion_alloc+0x204/0x810 [ 619.317456] ? ion_dma_buf_release+0x40/0x40 [ 619.322270] Node 0 [ 619.326361] ? __might_fault+0x177/0x1b0 [ 619.326375] ion_ioctl+0xea/0x1f0 [ 619.326385] ? ion_query_heaps+0x360/0x360 [ 619.326396] ? lock_acquire+0x170/0x3f0 [ 619.326405] ? lock_downgrade+0x740/0x740 [ 619.326414] ? ion_query_heaps+0x360/0x360 [ 619.326425] do_vfs_ioctl+0x75a/0xff0 [ 619.331516] DMA32 free:163260kB min:36200kB low:45248kB high:54296kB active_anon:44872kB inactive_anon:72704kB active_file:52kB inactive_file:2148kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7936kB pagetables:2400kB bounce:0kB free_pcp:1440kB local_pcp:672kB free_cma:0kB [ 619.336519] ? ioctl_preallocate+0x1a0/0x1a0 [ 619.336528] ? lock_downgrade+0x740/0x740 [ 619.336542] ? __fget+0x225/0x360 [ 619.336551] ? do_vfs_ioctl+0xff0/0xff0 [ 619.336564] ? security_file_ioctl+0x83/0xb0 [ 619.340958] lowmem_reserve[]: [ 619.343021] SyS_ioctl+0x7f/0xb0 [ 619.347958] 0 [ 619.351848] ? do_vfs_ioctl+0xff0/0xff0 [ 619.356729] 0 [ 619.361160] do_syscall_64+0x1d5/0x640 [ 619.366625] 0 [ 619.371071] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 619.375461] 0 [ 619.380450] RIP: 0033:0x45e219 [ 619.380456] RSP: 002b:00007f994610dc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 619.380464] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 619.380469] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 619.380473] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 619.380477] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 619.380481] R13: 00007ffd6a5a041f R14: 00007f994610e9c0 R15: 000000000119bf8c [ 619.385575] warn_alloc_show_mem: 1 callbacks suppressed [ 619.385579] Mem-Info: [ 619.387308] 0 [ 619.393143] active_anon:11305 inactive_anon:25012 isolated_anon:0 [ 619.393143] active_file:18 inactive_file:741 isolated_file:0 [ 619.393143] unevictable:0 dirty:0 writeback:0 unstable:0 [ 619.393143] slab_reclaimable:12386 slab_unreclaimable:120374 [ 619.393143] mapped:53201 shmem:25362 pagetables:740 bounce:0 [ 619.393143] free:50080 free_pcp:379 free_cma:0 [ 619.407560] Node 0 active_anon:44872kB inactive_anon:72764kB active_file:152kB inactive_file:3248kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:125976kB dirty:0kB writeback:0kB shmem:73964kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 619.412865] Node 0 [ 619.421007] Node 1 active_anon:348kB inactive_anon:27284kB active_file:20kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87228kB dirty:0kB writeback:0kB shmem:27484kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 619.424428] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 619.427595] Bluetooth: hci2 command 0x0406 tx timeout [ 619.433680] lowmem_reserve[]: [ 619.435817] Node 0 [ 619.440184] 0 21:26:42 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) [ 619.446389] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 619.448237] 0 [ 619.478902] lowmem_reserve[]: [ 619.481881] 0 [ 619.485279] 0 [ 619.489570] 0 [ 619.495468] 2717 [ 619.498374] 0 [ 619.500425] 2718 [ 619.529112] 2718 [ 619.547843] Node 1 [ 619.552761] 2718 [ 619.561747] Normal free:26836kB min:53696kB low:67120kB high:80544kB active_anon:348kB inactive_anon:27284kB active_file:20kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:560kB bounce:0kB free_pcp:124kB local_pcp:4kB free_cma:0kB [ 619.581931] lowmem_reserve[]: [ 619.584630] Node 0 [ 619.618109] 0 [ 619.645343] DMA32 free:159516kB min:36200kB low:45248kB high:54296kB active_anon:44972kB inactive_anon:72704kB active_file:152kB inactive_file:8448kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7968kB pagetables:2400kB bounce:0kB free_pcp:1332kB local_pcp:724kB free_cma:0kB [ 619.669112] 0 [ 619.675841] lowmem_reserve[]: [ 619.729747] 0 [ 619.741610] 0 [ 619.748482] 0 0 [ 619.748492] Node 0 DMA: 2*4kB (UM) 1*8kB (U) 2*16kB (U) 5*32kB (U) 5*64kB (UM) 4*128kB [ 619.753336] 0 [ 619.755560] (UM) [ 619.760600] 0 [ 619.763711] 3*256kB [ 619.792621] 0 [ 619.796664] (UM) [ 619.828964] 0 [ 619.832720] 2*512kB [ 619.836970] (UM) [ 619.851552] Node 0 [ 619.852729] 2*1024kB [ 619.854127] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 619.857100] (UM) [ 619.863326] lowmem_reserve[]: [ 619.864771] 1*2048kB [ 619.870011] 0 0 0 0 0 [ 619.904994] (U) [ 619.906589] Node 1 [ 619.907445] 1*4096kB [ 619.908601] Normal free:26836kB min:53696kB low:67120kB high:80544kB active_anon:348kB inactive_anon:27284kB active_file:20kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:560kB bounce:0kB free_pcp:124kB local_pcp:120kB free_cma:0kB [ 619.910815] (M) [ 619.913204] lowmem_reserve[]: [ 619.943972] = 11024kB [ 619.950344] Node 0 DMA32: 1803*4kB (UME) 3236*8kB (UE) 5830*16kB (UME) 994*32kB (UE) 5*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 158508kB [ 619.953169] 0 [ 619.965465] Node 0 [ 619.969347] 0 [ 619.971130] Normal: [ 619.971598] 0 [ 619.973403] 0*4kB [ 619.975707] 0 [ 619.977765] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 619.983300] 0 [ 619.990689] Node 1 Normal: 9*4kB (M) 8*8kB (M) 4*16kB (M) 3*32kB (M) 4*64kB (UM) 4*128kB (UM) 1*256kB (M) 2*512kB (M) 4*1024kB (UM) 10*2048kB (U) 0*4096kB = 26884kB [ 620.007568] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 620.010274] Node 0 [ 620.016752] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 620.017515] DMA: [ 620.018991] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 620.031344] 2*4kB (UM) 1*8kB (U) 2*16kB (U) 5*32kB (U) 5*64kB (UM) 4*128kB (UM) 3*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 1*2048kB (U) [ 620.038936] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 620.038942] 28231 total pagecache pages [ 620.055151] 1*4096kB [ 620.059807] 0 pages in swap cache [ 620.064423] (M) [ 620.066271] Swap cache stats: add 0, delete 0, find 0/0 [ 620.066275] Free swap = 0kB [ 620.066279] Total swap = 0kB [ 620.066286] 2097051 pages RAM [ 620.066289] 0 pages HighMem/MovableOnly [ 620.066293] 363840 pages reserved [ 620.066296] 0 pages cma reserved [ 620.066306] Out of memory (oom_kill_allocating_task): Kill process 20286 (in:imklog) score 0 or sacrifice child [ 620.076253] = 11024kB [ 620.077188] Killed process 20268 (rsyslogd) total-vm:254332kB, anon-rss:756kB, file-rss:0kB, shmem-rss:0kB [ 620.121247] oom_reaper: reaped process 20268 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 620.123549] Node 0 DMA32: 1858*4kB (UME) 3253*8kB (UME) 5865*16kB (UME) 1005*32kB (UME) 5*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 159776kB [ 620.146321] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 620.157958] Node 1 Normal: 9*4kB (M) 8*8kB (M) 4*16kB (M) 3*32kB (M) 4*64kB (UM) 4*128kB (UM) 1*256kB (M) 2*512kB (M) 4*1024kB (UM) 10*2048kB (U) 0*4096kB = 26884kB [ 620.173600] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 620.183155] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 620.191894] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 620.200921] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 620.209674] 28416 total pagecache pages [ 620.213769] 0 pages in swap cache [ 620.217527] Swap cache stats: add 0, delete 0, find 0/0 [ 620.222997] Free swap = 0kB [ 620.226573] Total swap = 0kB [ 620.229626] 2097051 pages RAM [ 620.233102] 0 pages HighMem/MovableOnly [ 620.237248] 363840 pages reserved [ 620.247588] 0 pages cma reserved [ 620.827036] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 620.838934] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 620.844072] CPU: 0 PID: 20338 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 620.851958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 620.861487] Call Trace: [ 620.864095] dump_stack+0x1b2/0x281 [ 620.867735] warn_alloc.cold+0x96/0x1cc [ 620.871724] ? zone_watermark_ok_safe+0x220/0x220 [ 620.876587] __alloc_pages_nodemask+0x2127/0x2720 [ 620.881443] ? lock_acquire+0x170/0x3f0 [ 620.886292] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 620.891143] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 620.896601] ? __mutex_unlock_slowpath+0x75/0x770 [ 620.901449] ? retint_kernel+0x2d/0x2d [ 620.905340] alloc_pages_current+0x155/0x260 [ 620.909759] ion_page_pool_alloc+0x118/0x1b0 [ 620.914262] ion_system_heap_allocate+0x133/0x8c0 [ 620.919111] ? _raw_spin_unlock+0x29/0x40 [ 620.923260] ? _ion_heap_freelist_drain+0x6e/0x410 [ 620.928193] ? ion_system_contig_heap_create+0x130/0x130 [ 620.933645] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 620.938664] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 620.943510] ion_alloc+0x27a/0x810 [ 620.947058] ? ion_dma_buf_release+0x40/0x40 [ 620.951465] ? __might_fault+0x177/0x1b0 [ 620.955523] ion_ioctl+0xea/0x1f0 [ 620.958971] ? ion_query_heaps+0x360/0x360 [ 620.963233] ? lock_acquire+0x170/0x3f0 [ 620.967320] ? lock_downgrade+0x740/0x740 [ 620.971466] ? ion_query_heaps+0x360/0x360 [ 620.975701] do_vfs_ioctl+0x75a/0xff0 [ 620.979503] ? ioctl_preallocate+0x1a0/0x1a0 [ 620.983911] ? lock_downgrade+0x740/0x740 [ 620.988060] ? __fget+0x225/0x360 [ 620.991518] ? do_vfs_ioctl+0xff0/0xff0 [ 620.995491] ? security_file_ioctl+0x83/0xb0 [ 620.999899] SyS_ioctl+0x7f/0xb0 [ 621.003257] ? do_vfs_ioctl+0xff0/0xff0 [ 621.007229] do_syscall_64+0x1d5/0x640 [ 621.011124] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 621.016318] RIP: 0033:0x45e219 [ 621.020021] RSP: 002b:00007f994610dc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 621.027731] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 621.035001] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 621.042301] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 621.049576] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 621.056856] R13: 00007ffd6a5a041f R14: 00007f994610e9c0 R15: 000000000119bf8c [ 621.066058] Mem-Info: [ 621.068510] active_anon:11271 inactive_anon:25012 isolated_anon:0 [ 621.068510] active_file:916 inactive_file:3062 isolated_file:0 [ 621.068510] unevictable:0 dirty:35 writeback:0 unstable:0 [ 621.068510] slab_reclaimable:12379 slab_unreclaimable:120371 [ 621.068510] mapped:55211 shmem:25362 pagetables:739 bounce:0 [ 621.068510] free:191864 free_pcp:418 free_cma:0 [ 621.102338] Node 0 active_anon:44768kB inactive_anon:72764kB active_file:3636kB inactive_file:12240kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:133616kB dirty:116kB writeback:0kB shmem:73964kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 621.131429] Node 1 active_anon:316kB inactive_anon:27284kB active_file:28kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87228kB dirty:24kB writeback:0kB shmem:27484kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 621.159211] Node 0 DMA free:11032kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 621.185553] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 621.191686] Node 0 DMA32 free:495180kB min:36200kB low:45248kB high:54296kB active_anon:44768kB inactive_anon:72704kB active_file:3636kB inactive_file:12240kB unevictable:0kB writepending:116kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7936kB pagetables:2396kB bounce:0kB free_pcp:1072kB local_pcp:304kB free_cma:0kB [ 621.221665] lowmem_reserve[]: 0 0 0 0 0 [ 621.225662] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 621.251346] lowmem_reserve[]: 0 0 0 0 0 [ 621.255342] Node 1 Normal free:486252kB min:53696kB low:67120kB high:80544kB active_anon:316kB inactive_anon:27284kB active_file:28kB inactive_file:8kB unevictable:0kB writepending:24kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:560kB bounce:0kB free_pcp:624kB local_pcp:0kB free_cma:0kB [ 621.284407] lowmem_reserve[]: 0 0 0 0 0 [ 621.288491] Node 0 DMA: 17*4kB (UM) 8*8kB (U) 12*16kB (U) 4*32kB (U) 2*64kB (UM) 4*128kB (UM) 3*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 11076kB [ 621.304487] Node 0 DMA32: 17070*4kB (UE) 9547*8kB (UE) 9009*16kB (UME) 4539*32kB (UME) 1107*64kB (UM) 38*128kB (UM) 41*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 520768kB [ 621.321236] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 621.332932] Node 1 Normal: 2753*4kB (U) 3332*8kB (U) 3312*16kB (U) 2781*32kB (U) 2767*64kB (U) 761*128kB (U) 172*256kB (U) 43*512kB (U) 51*1024kB (U) 5*2048kB (U) 0*4096kB = 582660kB [ 621.350454] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 621.359559] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 621.368247] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 621.377170] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 621.385758] 29340 total pagecache pages [ 621.389821] 0 pages in swap cache [ 621.394238] Swap cache stats: add 0, delete 0, find 0/0 [ 621.399670] Free swap = 0kB [ 621.402688] Total swap = 0kB [ 621.405715] 2097051 pages RAM [ 621.408926] 0 pages HighMem/MovableOnly [ 621.412910] 363840 pages reserved [ 621.416433] 0 pages cma reserved [ 622.710904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 622.717871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 622.726010] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 622.732754] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 622.740942] device bridge_slave_1 left promiscuous mode [ 622.746869] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.754492] device bridge_slave_0 left promiscuous mode [ 622.760195] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.770296] device veth1_macvtap left promiscuous mode [ 622.775671] device veth0_macvtap left promiscuous mode [ 622.781363] device veth1_vlan left promiscuous mode [ 622.786686] device veth0_vlan left promiscuous mode [ 622.908691] device hsr_slave_1 left promiscuous mode [ 622.922636] device hsr_slave_0 left promiscuous mode [ 622.938952] team0 (unregistering): Port device team_slave_1 removed [ 622.953671] team0 (unregistering): Port device team_slave_0 removed [ 622.964738] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 622.981900] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 623.024440] bond0 (unregistering): Released all slaves [ 623.725491] IPVS: ftp: loaded support on port[0] = 21 [ 623.766540] IPVS: ftp: loaded support on port[0] = 21 [ 623.853382] chnl_net:caif_netlink_parms(): no params data found [ 623.955650] chnl_net:caif_netlink_parms(): no params data found [ 624.040367] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.049705] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.057593] device bridge_slave_0 entered promiscuous mode [ 624.064264] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.071177] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.078585] device bridge_slave_0 entered promiscuous mode [ 624.085194] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.092589] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.100583] device bridge_slave_1 entered promiscuous mode [ 624.107756] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.114104] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.122204] device bridge_slave_1 entered promiscuous mode [ 624.149034] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 624.163999] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 624.174361] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 624.190762] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 624.212489] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 624.219963] team0: Port device team_slave_0 added [ 624.233260] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 624.241340] team0: Port device team_slave_1 added [ 624.253849] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 624.261193] team0: Port device team_slave_0 added [ 624.267152] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 624.274446] team0: Port device team_slave_1 added [ 624.294355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 624.300715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 624.327743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 624.345457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 624.352424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 624.378162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 624.390142] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 624.398552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 624.404796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 624.432966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 624.444945] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 624.453780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 624.460534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 624.486567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 624.504806] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 624.520077] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 624.530647] device hsr_slave_0 entered promiscuous mode [ 624.536414] device hsr_slave_1 entered promiscuous mode [ 624.552392] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 624.565155] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 624.583472] device hsr_slave_0 entered promiscuous mode [ 624.589392] device hsr_slave_1 entered promiscuous mode [ 624.595534] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 624.604362] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 624.741596] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 624.754162] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 624.800675] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 624.807279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 624.815087] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 624.821759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 624.831558] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 624.841257] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 624.848937] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 624.860401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 624.867402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 624.879822] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 624.886041] 8021q: adding VLAN 0 to HW filter on device team0 [ 624.894278] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 624.901950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 624.909431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 624.919286] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 624.925377] 8021q: adding VLAN 0 to HW filter on device team0 [ 624.933197] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 624.943865] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 624.952334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 624.960686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 624.968988] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.975336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 624.982908] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 624.991588] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 624.999352] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.005773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 625.013257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 625.022932] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 625.032694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 625.041191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 625.050216] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.056644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 625.064260] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 625.071983] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 625.079905] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 625.089784] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 625.098413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 625.109174] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 625.118062] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 625.125509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 625.133760] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 625.141707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 625.150057] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 625.158131] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.164516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 625.172988] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 625.182650] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 625.192313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 625.201013] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 625.211146] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 625.220400] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 625.228464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 625.236880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 625.244413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 625.258037] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 625.265007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 625.276095] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 625.283486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 625.291898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 625.301969] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 625.308621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 625.319029] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 625.329658] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 625.337690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 625.345517] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 625.353729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 625.361552] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 625.369723] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 625.382637] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 625.391205] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 625.399811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 625.408115] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 625.416497] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 625.425469] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 625.434838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 625.445512] Bluetooth: hci4 command 0x0409 tx timeout [ 625.447397] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 625.455496] Bluetooth: hci1 command 0x0409 tx timeout [ 625.457179] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 625.469090] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 625.476996] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 625.483724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 625.492112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 625.506432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 625.522199] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 625.531329] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 625.538124] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 625.544898] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 625.561812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 625.611435] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 625.622382] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 625.629579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 625.638064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 625.663295] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 625.674676] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 625.683373] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 625.690864] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 625.701349] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 625.709776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 625.718356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 625.729069] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 625.736516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 625.745051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 625.754005] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 625.772545] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 625.781081] device veth0_vlan entered promiscuous mode [ 625.794259] device veth1_vlan entered promiscuous mode [ 625.801317] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 625.812384] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 625.820622] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 625.827968] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 625.837237] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 625.847918] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 625.855196] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 625.862948] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 625.870338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 625.879113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 625.888784] device veth0_vlan entered promiscuous mode [ 625.899720] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 625.907104] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 625.918958] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 625.928437] device veth1_vlan entered promiscuous mode [ 625.934369] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 625.944577] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 625.957870] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 625.967085] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 625.975172] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 625.983341] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 625.990996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 625.998956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 626.009142] device veth0_macvtap entered promiscuous mode [ 626.015305] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 626.024612] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 626.033594] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 626.042967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 626.050911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 626.061140] device veth1_macvtap entered promiscuous mode [ 626.068284] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 626.075335] device veth0_macvtap entered promiscuous mode [ 626.082143] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 626.089713] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 626.097880] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 626.108283] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 626.120044] device veth1_macvtap entered promiscuous mode [ 626.129144] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 626.139391] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 626.150652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 626.161000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.170626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 626.180997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.190629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 626.200931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.210530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 626.220853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.231592] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 626.241226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 626.251438] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 626.259154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 626.269601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 626.279936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 626.290276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.299565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 626.309413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.318633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 626.328447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.337905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 626.348169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.358517] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 626.365425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 626.374585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 626.385389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.395238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 626.405115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.414365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 626.424260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.433463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 626.443287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.452602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 626.462575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.473355] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 626.480655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 626.487571] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 626.495475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 626.506126] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 626.514940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 626.533169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 626.544087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.557392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 626.567175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.577076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 626.586995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.596358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 626.606183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.615330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 626.625201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.636142] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 626.643077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 626.652478] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 626.661042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 21:26:49 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:26:49 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0xc0241, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:26:49 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:26:49 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 21:26:49 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0xc0241, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:26:49 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x80000001, 0x4) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0xc0241, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:26:49 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 21:26:49 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 21:26:49 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 21:26:49 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0x12}) 21:26:49 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0x12}) 21:26:49 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 21:26:50 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0x12}) [ 627.505936] Bluetooth: hci1 command 0x041b tx timeout [ 627.511513] Bluetooth: hci4 command 0x041b tx timeout [ 628.208867] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 628.212952] syz-executor.1: [ 628.221084] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 628.221108] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 628.221133] CPU: 1 PID: 20849 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 628.221139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 628.221143] Call Trace: [ 628.221163] dump_stack+0x1b2/0x281 [ 628.221180] warn_alloc.cold+0x96/0x1cc [ 628.221194] ? zone_watermark_ok_safe+0x220/0x220 [ 628.221220] __alloc_pages_nodemask+0x2127/0x2720 [ 628.221230] ? __schedule+0x893/0x1de0 [ 628.221249] ? lock_acquire+0x170/0x3f0 [ 628.221266] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 628.221283] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 628.221295] ? __mutex_unlock_slowpath+0x75/0x770 [ 628.221311] alloc_pages_current+0x155/0x260 [ 628.221329] ion_page_pool_alloc+0x118/0x1b0 [ 628.221340] ion_system_heap_allocate+0x133/0x8c0 [ 628.221351] ? ion_alloc+0x187/0x810 [ 628.221363] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 628.221374] ? ion_system_contig_heap_create+0x130/0x130 [ 628.221385] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 628.221395] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 628.221405] ion_alloc+0x204/0x810 [ 628.221416] ? ion_dma_buf_release+0x40/0x40 [ 628.221425] ? __might_fault+0x177/0x1b0 [ 628.221436] ion_ioctl+0xea/0x1f0 [ 628.221444] ? ion_query_heaps+0x360/0x360 [ 628.221454] ? lock_acquire+0x170/0x3f0 [ 628.221462] ? lock_downgrade+0x740/0x740 [ 628.221470] ? ion_query_heaps+0x360/0x360 [ 628.221483] do_vfs_ioctl+0x75a/0xff0 [ 628.381880] ? ioctl_preallocate+0x1a0/0x1a0 [ 628.388015] ? lock_downgrade+0x740/0x740 [ 628.393491] ? __fget+0x225/0x360 [ 628.397900] ? do_vfs_ioctl+0xff0/0xff0 [ 628.402491] ? security_file_ioctl+0x83/0xb0 [ 628.409188] SyS_ioctl+0x7f/0xb0 [ 628.413939] ? do_vfs_ioctl+0xff0/0xff0 [ 628.420451] do_syscall_64+0x1d5/0x640 [ 628.426257] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 628.433008] RIP: 0033:0x45e219 [ 628.437657] RSP: 002b:00007fd20c681c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 628.451969] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 628.462143] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 628.470350] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 628.479441] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 628.486796] R13: 00007fff87e85fff R14: 00007fd20c6829c0 R15: 000000000119bf8c [ 628.500789] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 628.506529] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 628.512485] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 628.520677] CPU: 1 PID: 20851 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 628.537635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 628.540426] syz-executor.1 cpuset= [ 628.546989] Call Trace: [ 628.547013] dump_stack+0x1b2/0x281 [ 628.547029] warn_alloc.cold+0x96/0x1cc [ 628.547042] ? zone_watermark_ok_safe+0x220/0x220 [ 628.547062] __alloc_pages_nodemask+0x2127/0x2720 [ 628.547079] ? lock_acquire+0x170/0x3f0 [ 628.547096] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 628.547114] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 628.547124] ? __mutex_unlock_slowpath+0x75/0x770 [ 628.547140] alloc_pages_current+0x155/0x260 [ 628.547156] ion_page_pool_alloc+0x118/0x1b0 [ 628.547168] ion_system_heap_allocate+0x133/0x8c0 [ 628.547176] ? ion_alloc+0x187/0x810 [ 628.547186] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 628.547194] ? ion_system_contig_heap_create+0x130/0x130 [ 628.547203] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 628.547213] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 628.547224] ion_alloc+0x204/0x810 [ 628.547238] ? ion_dma_buf_release+0x40/0x40 [ 628.547250] ? __might_fault+0x177/0x1b0 [ 628.547261] ion_ioctl+0xea/0x1f0 [ 628.547269] ? ion_query_heaps+0x360/0x360 [ 628.547280] ? lock_acquire+0x170/0x3f0 [ 628.547288] ? lock_downgrade+0x740/0x740 [ 628.547294] ? ion_query_heaps+0x360/0x360 [ 628.547304] do_vfs_ioctl+0x75a/0xff0 [ 628.547314] ? ioctl_preallocate+0x1a0/0x1a0 [ 628.547323] ? lock_downgrade+0x740/0x740 [ 628.547344] ? __fget+0x225/0x360 [ 628.547354] ? do_vfs_ioctl+0xff0/0xff0 [ 628.547366] ? security_file_ioctl+0x83/0xb0 [ 628.547376] SyS_ioctl+0x7f/0xb0 [ 628.547384] ? do_vfs_ioctl+0xff0/0xff0 [ 628.547402] do_syscall_64+0x1d5/0x640 [ 628.547419] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 628.547426] RIP: 0033:0x45e219 [ 628.547430] RSP: 002b:00007f994610dc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 628.547439] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 628.547443] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 628.547447] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 628.547451] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 628.547456] R13: 00007ffd6a5a041f R14: 00007f994610e9c0 R15: 000000000119bf8c [ 628.586654] Mem-Info: [ 628.593289] syz-executor.3 cpuset= [ 628.599992] active_anon:11435 inactive_anon:25017 isolated_anon:0 [ 628.599992] active_file:1712 inactive_file:3049 isolated_file:0 [ 628.599992] unevictable:0 dirty:40 writeback:25 unstable:0 [ 628.599992] slab_reclaimable:12308 slab_unreclaimable:119014 [ 628.599992] mapped:55789 shmem:25371 pagetables:849 bounce:0 [ 628.599992] free:190470 free_pcp:198 free_cma:0 [ 628.607161] / [ 628.614882] Node 0 active_anon:45440kB inactive_anon:72788kB active_file:6820kB inactive_file:12188kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:135928kB dirty:128kB writeback:100kB shmem:74004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 628.633322] mems_allowed=0-1 [ 628.643468] Node 1 active_anon:300kB inactive_anon:27280kB active_file:28kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87228kB dirty:32kB writeback:0kB shmem:27480kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 628.647567] CPU: 0 PID: 20841 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 628.649533] Node 0 [ 628.653175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 628.653179] Call Trace: [ 628.653201] dump_stack+0x1b2/0x281 [ 628.653217] warn_alloc.cold+0x96/0x1cc [ 628.657422] DMA free:11092kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 628.661557] ? zone_watermark_ok_safe+0x220/0x220 [ 628.661580] __alloc_pages_nodemask+0x2127/0x2720 [ 628.665406] lowmem_reserve[]: [ 628.669748] ? lock_acquire+0x170/0x3f0 [ 628.669764] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 628.673921] 0 [ 628.677342] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 628.677354] ? __mutex_unlock_slowpath+0x75/0x770 [ 628.677371] alloc_pages_current+0x155/0x260 [ 628.681355] 2717 [ 628.685714] ion_page_pool_alloc+0x118/0x1b0 [ 628.685727] ion_system_heap_allocate+0x133/0x8c0 [ 628.685739] ? ion_alloc+0x187/0x810 [ 628.689116] 2718 [ 628.693036] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 628.693047] ? ion_system_contig_heap_create+0x130/0x130 [ 628.693059] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 628.696969] 2718 [ 628.702094] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 628.702107] ion_alloc+0x204/0x810 [ 628.702121] ? ion_dma_buf_release+0x40/0x40 [ 628.705325] 2718 [ 628.712977] ? __might_fault+0x177/0x1b0 [ 628.712990] ion_ioctl+0xea/0x1f0 [ 628.713001] ? ion_query_heaps+0x360/0x360 [ 628.713013] ? lock_acquire+0x170/0x3f0 [ 628.713023] ? lock_downgrade+0x740/0x740 [ 628.727791] ? ion_query_heaps+0x360/0x360 [ 628.727803] do_vfs_ioctl+0x75a/0xff0 [ 628.727817] ? ioctl_preallocate+0x1a0/0x1a0 [ 628.727828] ? lock_downgrade+0x740/0x740 [ 628.735113] Node 0 [ 628.742348] ? __fget+0x225/0x360 [ 628.742358] ? do_vfs_ioctl+0xff0/0xff0 [ 628.742371] ? security_file_ioctl+0x83/0xb0 [ 628.742381] SyS_ioctl+0x7f/0xb0 [ 628.749715] DMA32 free:671416kB min:36200kB low:45248kB high:54296kB active_anon:45440kB inactive_anon:72728kB active_file:6820kB inactive_file:12188kB unevictable:0kB writepending:32kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:8064kB pagetables:2836kB bounce:0kB free_pcp:780kB local_pcp:672kB free_cma:0kB [ 628.752042] ? do_vfs_ioctl+0xff0/0xff0 [ 628.752056] do_syscall_64+0x1d5/0x640 [ 628.752076] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 628.755640] lowmem_reserve[]: [ 628.790543] RIP: 0033:0x45e219 [ 628.790548] RSP: 002b:00007f1396e62c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 628.790558] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 628.790563] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 628.790567] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 628.790572] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 628.790577] R13: 00007ffeee3e983f R14: 00007f1396e639c0 R15: 000000000119bf8c [ 628.811867] / [ 628.826037] 0 [ 628.852101] mems_allowed=0-1 [ 628.874476] 0 0 0 0 [ 628.874496] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 628.874518] lowmem_reserve[]: 0 0 0 0 0 [ 628.874538] Node 1 Normal free:78120kB min:53696kB low:67120kB high:80544kB active_anon:300kB inactive_anon:27280kB active_file:28kB inactive_file:8kB unevictable:0kB writepending:32kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:560kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 628.874560] lowmem_reserve[]: 0 0 0 0 0 [ 628.874580] Node 0 DMA: 11*4kB (UM) 11*8kB (U) 13*16kB (U) 6*32kB (U) 1*64kB (M) 4*128kB (UM) 3*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 11092kB [ 628.874659] Node 0 DMA32: 9999*4kB (UME) 10606*8kB (UME) 14274*16kB (UME) 9710*32kB (UME) 61*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB [ 628.881186] CPU: 0 PID: 20854 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 628.895617] 0*4096kB [ 628.908097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 628.908102] Call Trace: [ 628.908128] dump_stack+0x1b2/0x281 [ 628.908143] warn_alloc.cold+0x96/0x1cc [ 628.908161] ? zone_watermark_ok_safe+0x220/0x220 [ 628.926128] = 667852kB [ 628.929749] __alloc_pages_nodemask+0x2127/0x2720 [ 628.929768] ? lock_acquire+0x170/0x3f0 [ 628.935958] Node 0 [ 628.937003] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 628.937022] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 628.942970] Normal: [ 628.946241] ? __mutex_unlock_slowpath+0x75/0x770 [ 628.946257] alloc_pages_current+0x155/0x260 [ 628.946278] ion_page_pool_alloc+0x118/0x1b0 [ 628.951644] 0*4kB [ 628.952740] ion_system_heap_allocate+0x133/0x8c0 [ 628.952750] ? ion_alloc+0x187/0x810 [ 628.964163] 0*8kB [ 628.968793] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 628.968807] ? ion_system_contig_heap_create+0x130/0x130 [ 628.968818] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 628.968833] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 628.979116] 0*16kB [ 628.979721] ion_alloc+0x204/0x810 [ 628.985078] 0*32kB [ 628.986598] ? ion_dma_buf_release+0x40/0x40 [ 628.986613] ? __might_fault+0x177/0x1b0 [ 628.986624] ion_ioctl+0xea/0x1f0 [ 628.991274] 0*64kB [ 628.994560] ? ion_query_heaps+0x360/0x360 [ 628.994574] ? lock_acquire+0x170/0x3f0 [ 628.994584] ? lock_downgrade+0x740/0x740 [ 629.002141] 0*128kB [ 629.004124] ? ion_query_heaps+0x360/0x360 [ 629.004141] do_vfs_ioctl+0x75a/0xff0 [ 629.014961] 0*256kB [ 629.016458] ? ioctl_preallocate+0x1a0/0x1a0 [ 629.016471] ? lock_downgrade+0x740/0x740 [ 629.016488] ? __fget+0x225/0x360 [ 629.022925] 0*512kB [ 629.024496] ? do_vfs_ioctl+0xff0/0xff0 [ 629.024508] ? security_file_ioctl+0x83/0xb0 [ 629.024518] SyS_ioctl+0x7f/0xb0 [ 629.034435] 0*1024kB [ 629.035280] ? do_vfs_ioctl+0xff0/0xff0 [ 629.043134] 0*2048kB [ 629.047079] do_syscall_64+0x1d5/0x640 [ 629.047099] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 629.047108] RIP: 0033:0x45e219 [ 629.054869] 0*4096kB [ 629.079328] RSP: 002b:00007f39dd445c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 629.079337] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 629.079342] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 629.079346] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 629.079351] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 629.079356] R13: 00007ffc799adfff R14: 00007f39dd4469c0 R15: 000000000119bf8c [ 629.503172] = 0kB [ 629.505241] Node 1 Normal: 747*4kB (U) 1640*8kB (U) 1500*16kB (U) 1194*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 78316kB [ 629.519261] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 629.528488] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 629.537800] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 629.547130] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 629.556104] 30142 total pagecache pages [ 629.560136] 0 pages in swap cache [ 629.563591] Swap cache stats: add 0, delete 0, find 0/0 [ 629.569313] Free swap = 0kB [ 629.572338] Total swap = 0kB [ 629.575862] 2097051 pages RAM [ 629.579004] 0 pages HighMem/MovableOnly [ 629.582973] 363840 pages reserved [ 629.586744] Bluetooth: hci4 command 0x040f tx timeout [ 629.592225] Bluetooth: hci1 command 0x040f tx timeout [ 629.597732] 0 pages cma reserved [ 630.087765] oom_reaper: reaped process 20849 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 630.223592] oom_reaper: reaped process 20851 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 630.267408] syz-executor.2 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 630.290819] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 630.306912] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 630.312086] CPU: 1 PID: 19263 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 630.319992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 630.325295] syz-executor.2: page allocation failure: order:0 [ 630.329355] Call Trace: [ 630.329378] dump_stack+0x1b2/0x281 [ 630.335186] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 630.337795] dump_header+0x178/0x82f [ 630.337810] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 630.337819] ? ___ratelimit+0x2cd/0x530 [ 630.337827] oom_kill_process.cold+0x10/0xb18 [ 630.337846] out_of_memory+0xe3e/0x1190 [ 630.337858] ? oom_killer_disable+0x1c0/0x1c0 [ 630.337864] ? mutex_trylock+0x152/0x1a0 [ 630.337874] __alloc_pages_nodemask+0x23e1/0x2720 [ 630.337894] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 630.337919] alloc_pages_current+0x155/0x260 [ 630.357237] (null) [ 630.357682] filemap_fault+0xea3/0x1980 [ 630.361638] syz-executor.2 cpuset= [ 630.366129] ext4_filemap_fault+0x84/0xb0 [ 630.366142] __do_fault+0xfa/0x380 [ 630.366151] __handle_mm_fault+0x2497/0x4620 [ 630.366160] ? vm_insert_page+0x7c0/0x7c0 [ 630.366171] ? free_object+0xe4/0x240 [ 630.366190] handle_mm_fault+0x391/0x860 [ 630.366202] __do_page_fault+0x549/0xad0 [ 630.366214] ? spurious_fault+0x640/0x640 [ 630.377335] / [ 630.378696] ? do_page_fault+0x60/0x500 [ 630.383513] mems_allowed=0-1 [ 630.388349] ? page_fault+0x2f/0x50 [ 630.388356] page_fault+0x45/0x50 [ 630.388365] RIP: 0004:0x32 [ 630.388369] RSP: 003c:00007ffd6a5a06a0 EFLAGS: 00000029 [ 630.398170] syz-executor.4 cpuset= [ 630.407273] CPU: 0 PID: 20851 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 630.407280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 630.407284] Call Trace: [ 630.407306] dump_stack+0x1b2/0x281 [ 630.407322] warn_alloc.cold+0x96/0x1cc [ 630.407335] ? zone_watermark_ok_safe+0x220/0x220 [ 630.407346] ? usleep_range+0x130/0x130 [ 630.407358] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 630.416384] / [ 630.419549] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 630.424123] mems_allowed=0-1 [ 630.428172] ? run_timer_softirq+0x5a0/0x5a0 [ 630.428190] __alloc_pages_nodemask+0x2127/0x2720 [ 630.428207] ? lock_acquire+0x170/0x3f0 [ 630.495236] Mem-Info: [ 630.496256] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 630.500217] active_anon:11375 inactive_anon:25016 isolated_anon:0 [ 630.500217] active_file:8 inactive_file:0 isolated_file:0 [ 630.500217] unevictable:0 dirty:0 writeback:0 unstable:0 [ 630.500217] slab_reclaimable:12219 slab_unreclaimable:119240 [ 630.500217] mapped:52849 shmem:25370 pagetables:827 bounce:0 [ 630.500217] free:13877 free_pcp:100 free_cma:0 [ 630.505300] ? ion_page_pool_alloc+0x9e/0x1b0 [ 630.505318] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 630.505339] alloc_pages_current+0x155/0x260 [ 630.515237] Node 0 active_anon:45200kB inactive_anon:72784kB active_file:32kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:124168kB dirty:0kB writeback:0kB shmem:74000kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 630.519510] ion_page_pool_alloc+0x118/0x1b0 [ 630.524329] Node 1 active_anon:300kB inactive_anon:27280kB active_file:0kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87228kB dirty:0kB writeback:0kB shmem:27480kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 630.528280] ion_system_heap_allocate+0x133/0x8c0 [ 630.528291] ? ion_alloc+0x187/0x810 [ 630.528304] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 630.545222] Node 0 [ 630.568551] ? ion_system_contig_heap_create+0x130/0x130 [ 630.568561] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 630.568575] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 630.605229] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 630.610516] ion_alloc+0x204/0x810 [ 630.614904] lowmem_reserve[]: [ 630.641875] ? ion_dma_buf_release+0x40/0x40 [ 630.641888] ? __might_fault+0x177/0x1b0 [ 630.641901] ion_ioctl+0xea/0x1f0 [ 630.685212] 0 [ 630.698849] ? ion_query_heaps+0x360/0x360 [ 630.698864] ? lock_acquire+0x170/0x3f0 [ 630.725208] 2717 [ 630.727257] ? lock_downgrade+0x740/0x740 [ 630.727258] 2718 2718 [ 630.729308] ? ion_query_heaps+0x360/0x360 [ 630.733429] 2718 [ 630.735925] do_vfs_ioctl+0x75a/0xff0 [ 630.735938] ? ioctl_preallocate+0x1a0/0x1a0 [ 630.735947] ? lock_downgrade+0x740/0x740 [ 630.754503] ? __fget+0x225/0x360 [ 630.757956] ? do_vfs_ioctl+0xff0/0xff0 [ 630.757958] Node 0 DMA32 free:17720kB min:36200kB low:45248kB high:54296kB active_anon:45200kB inactive_anon:72724kB active_file:28kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:8064kB pagetables:2748kB bounce:0kB free_pcp:224kB local_pcp:224kB free_cma:0kB [ 630.761923] ? security_file_ioctl+0x83/0xb0 [ 630.795472] SyS_ioctl+0x7f/0xb0 [ 630.798846] ? do_vfs_ioctl+0xff0/0xff0 [ 630.802803] do_syscall_64+0x1d5/0x640 [ 630.806683] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 630.811941] RIP: 0033:0x45e219 [ 630.815135] RSP: 002b:00007f994610dc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 630.822824] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 630.825200] lowmem_reserve[]: [ 630.830089] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 630.830095] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 630.833180] 0 [ 630.840445] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 630.840451] R13: 00007ffd6a5a041f R14: 00007f994610e9c0 R15: 000000000119bf8c [ 630.857844] warn_alloc_show_mem: 3 callbacks suppressed [ 630.857848] Mem-Info: [ 630.871040] CPU: 1 PID: 20849 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 630.880891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 630.883772] active_anon:11375 inactive_anon:25016 isolated_anon:0 [ 630.883772] active_file:8 inactive_file:0 isolated_file:0 [ 630.883772] unevictable:0 dirty:0 writeback:0 unstable:0 [ 630.883772] slab_reclaimable:12219 slab_unreclaimable:119240 [ 630.883772] mapped:52849 shmem:25370 pagetables:827 bounce:0 [ 630.883772] free:13877 free_pcp:100 free_cma:0 [ 630.890500] Call Trace: [ 630.890523] dump_stack+0x1b2/0x281 [ 630.890538] warn_alloc.cold+0x96/0x1cc [ 630.890551] ? zone_watermark_ok_safe+0x220/0x220 [ 630.890562] ? usleep_range+0x130/0x130 [ 630.890571] ? try_to_free_pages+0x23f/0x6e0 [ 630.890581] ? _find_next_bit+0xdb/0x100 [ 630.890592] ? run_timer_softirq+0x5a0/0x5a0 [ 630.890610] __alloc_pages_nodemask+0x2127/0x2720 [ 630.890629] ? lock_acquire+0x170/0x3f0 [ 630.890645] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 630.890659] ? ion_page_pool_alloc+0x9e/0x1b0 [ 630.890675] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 630.890688] ? __sanitizer_cov_trace_pc+0x29/0x50 [ 630.890704] alloc_pages_current+0x155/0x260 [ 630.890717] ion_page_pool_alloc+0x118/0x1b0 [ 630.890728] ion_system_heap_allocate+0x133/0x8c0 [ 630.890739] ? ion_alloc+0x187/0x810 [ 630.890751] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 630.890762] ? ion_system_contig_heap_create+0x130/0x130 [ 630.890773] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 630.890785] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 630.890798] ion_alloc+0x204/0x810 [ 630.890813] ? ion_dma_buf_release+0x40/0x40 [ 630.890826] ? __might_fault+0x177/0x1b0 [ 630.890839] ion_ioctl+0xea/0x1f0 [ 630.890849] ? ion_query_heaps+0x360/0x360 [ 630.890861] ? lock_acquire+0x170/0x3f0 [ 630.890871] ? lock_downgrade+0x740/0x740 [ 630.890879] ? ion_query_heaps+0x360/0x360 [ 630.890890] do_vfs_ioctl+0x75a/0xff0 [ 630.890910] ? ioctl_preallocate+0x1a0/0x1a0 [ 630.934925] Node 0 active_anon:45200kB inactive_anon:72784kB active_file:32kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:124168kB dirty:0kB writeback:0kB shmem:74000kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 630.939216] ? lock_downgrade+0x740/0x740 [ 630.939232] ? __fget+0x225/0x360 [ 630.939242] ? do_vfs_ioctl+0xff0/0xff0 [ 630.939254] ? security_file_ioctl+0x83/0xb0 [ 630.939266] SyS_ioctl+0x7f/0xb0 [ 630.943246] Node 1 active_anon:300kB inactive_anon:27280kB active_file:0kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87228kB dirty:0kB writeback:0kB shmem:27480kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 630.948051] ? do_vfs_ioctl+0xff0/0xff0 [ 630.948064] do_syscall_64+0x1d5/0x640 [ 630.948088] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 630.948097] RIP: 0033:0x45e219 [ 630.948101] RSP: 002b:00007fd20c681c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 630.948110] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 630.948114] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 630.948119] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 630.948123] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 630.948129] R13: 00007fff87e85fff R14: 00007fd20c6829c0 R15: 000000000119bf8c [ 630.966613] 0 [ 630.980691] Node 0 [ 630.991930] 0 [ 631.004878] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 631.019835] 0 [ 631.030082] lowmem_reserve[]: [ 631.042122] 0 [ 631.052141] 0 [ 631.063328] 2717 [ 631.075521] Node 0 [ 631.102910] 2718 [ 631.168499] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 631.268616] 2718 [ 631.301876] lowmem_reserve[]: 0 0 0 0 0 [ 631.318760] 2718 [ 631.320256] Node 1 [ 631.321827] Node 0 [ 631.321839] Normal free:290892kB min:53696kB low:67120kB high:80544kB active_anon:300kB inactive_anon:27280kB active_file:16kB inactive_file:3916kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:560kB bounce:0kB free_pcp:332kB local_pcp:136kB free_cma:0kB [ 631.321844] lowmem_reserve[]: [ 631.324073] DMA32 free:68232kB min:36200kB low:45248kB high:54296kB active_anon:45200kB inactive_anon:72724kB active_file:28kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:8064kB pagetables:2748kB bounce:0kB free_pcp:260kB local_pcp:12kB free_cma:0kB [ 631.343993] 0 [ 631.448262] lowmem_reserve[]: 0 0 0 0 0 [ 631.454149] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 631.495192] 0 0 0 0 [ 631.497908] Node 0 DMA: 2*4kB (UM) 0*8kB 13*16kB (U) 6*32kB (U) 1*64kB (M) 4*128kB (UM) 3*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 10968kB [ 631.555219] Node 0 DMA32: 676*4kB (ME) 892*8kB (ME) 257*16kB (UME) 56*32kB (UME) 1640*64kB (UM) 183*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 144128kB [ 631.595215] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 631.598596] lowmem_reserve[]: [ 631.625243] Node 1 Normal: 1*4kB (U) 1*8kB (M) 0*16kB 838*32kB (U) 706*64kB (UM) 22*128kB (UM) 1*256kB (M) 1*512kB (M) 2*1024kB (UM) 12*2048kB (U) 0*4096kB = 102220kB [ 631.638604] 0 0 0 0 0 [ 631.658641] Node 1 Normal free:114508kB min:53696kB low:67120kB high:80544kB active_anon:300kB inactive_anon:27280kB active_file:16kB inactive_file:4016kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:560kB bounce:0kB free_pcp:332kB local_pcp:196kB free_cma:0kB [ 631.685167] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 631.696690] Bluetooth: hci1 command 0x0419 tx timeout [ 631.701956] Bluetooth: hci4 command 0x0419 tx timeout [ 631.725397] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 631.733997] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 631.744089] lowmem_reserve[]: 0 0 0 0 0 [ 631.768401] Node 0 DMA: 2*4kB (UM) 0*8kB 13*16kB (U) 6*32kB (U) 1*64kB (M) 4*128kB (UM) 3*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 10968kB [ 631.800867] Node 0 DMA32: 828*4kB (ME) 894*8kB (UME) 258*16kB (UME) 55*32kB (ME) 10*64kB (M) 132*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 33888kB [ 631.812186] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 631.826837] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 631.841327] Node 1 Normal: 0*4kB 1*8kB (U) 8*16kB (UM) 59*32kB (UM) 661*64kB (UM) 52*128kB (UM) 7*256kB (UM) 3*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 54312kB [ 631.856215] 25463 total pagecache pages [ 631.860211] 0 pages in swap cache [ 631.863653] Swap cache stats: add 0, delete 0, find 0/0 [ 631.870970] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 631.877501] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 631.879899] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 631.897341] Free swap = 0kB [ 631.900878] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 631.904660] Total swap = 0kB [ 631.913995] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 631.925543] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 631.930692] CPU: 0 PID: 20849 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 631.934427] 2097051 pages RAM [ 631.938559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 631.938563] Call Trace: [ 631.938587] dump_stack+0x1b2/0x281 [ 631.938601] warn_alloc.cold+0x96/0x1cc [ 631.938614] ? zone_watermark_ok_safe+0x220/0x220 [ 631.938635] __alloc_pages_nodemask+0x2127/0x2720 [ 631.938648] ? lock_acquire+0x170/0x3f0 [ 631.938661] ? lock_acquire+0x170/0x3f0 [ 631.941749] 0 pages HighMem/MovableOnly [ 631.951108] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 631.951126] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 631.951138] ? __mutex_unlock_slowpath+0x75/0x770 [ 631.953696] 363840 pages reserved [ 631.957314] alloc_pages_current+0x155/0x260 [ 631.957331] ion_page_pool_alloc+0x118/0x1b0 [ 631.961272] 0 pages cma reserved [ 631.966128] ion_system_heap_allocate+0x133/0x8c0 [ 631.966141] ? _raw_spin_unlock+0x29/0x40 [ 631.966152] ? _ion_heap_freelist_drain+0x6e/0x410 [ 631.971056] Out of memory (oom_kill_allocating_task): Kill process 19263 (syz-executor.2) score 0 or sacrifice child [ 631.975118] ? ion_system_contig_heap_create+0x130/0x130 [ 631.975129] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 631.975141] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 631.979126] Killed process 19263 (syz-executor.2) total-vm:93216kB, anon-rss:108kB, file-rss:33668kB, shmem-rss:0kB [ 631.983058] ion_alloc+0x27a/0x810 [ 631.997018] oom_reaper: reaped process 19263 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 631.998161] ? ion_dma_buf_release+0x40/0x40 [ 632.030039] syz-executor.2 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 632.038314] ? __might_fault+0x177/0x1b0 [ 632.038333] ion_ioctl+0xea/0x1f0 [ 632.043752] (null) [ 632.048753] ? ion_query_heaps+0x360/0x360 [ 632.048767] ? lock_acquire+0x170/0x3f0 [ 632.048777] ? lock_downgrade+0x740/0x740 [ 632.053594] , order=0, oom_score_adj=0 [ 632.064148] ? ion_query_heaps+0x360/0x360 [ 632.064160] do_vfs_ioctl+0x75a/0xff0 [ 632.064175] ? ioctl_preallocate+0x1a0/0x1a0 [ 632.067706] syz-executor.2 cpuset= [ 632.077652] ? lock_downgrade+0x740/0x740 [ 632.077667] ? __fget+0x225/0x360 [ 632.077676] ? do_vfs_ioctl+0xff0/0xff0 [ 632.082062] / [ 632.096714] ? security_file_ioctl+0x83/0xb0 [ 632.100765] mems_allowed=0-1 [ 632.104195] SyS_ioctl+0x7f/0xb0 [ 632.162462] ? do_vfs_ioctl+0xff0/0xff0 [ 632.166440] do_syscall_64+0x1d5/0x640 [ 632.170322] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 632.175495] RIP: 0033:0x45e219 [ 632.178665] RSP: 002b:00007fd20c681c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 632.186359] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 632.193624] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 632.200872] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 632.208239] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 632.215486] R13: 00007fff87e85fff R14: 00007fd20c6829c0 R15: 000000000119bf8c [ 632.222748] CPU: 1 PID: 19263 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 632.230635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 632.239997] Call Trace: [ 632.242592] dump_stack+0x1b2/0x281 [ 632.243118] 25428 total pagecache pages [ 632.246210] dump_header+0x178/0x82f [ 632.246223] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 632.246233] ? ___ratelimit+0x2cd/0x530 [ 632.246242] oom_kill_process.cold+0x10/0xb18 [ 632.246261] out_of_memory+0xe3e/0x1190 [ 632.246272] ? oom_killer_disable+0x1c0/0x1c0 [ 632.246278] ? mutex_trylock+0x152/0x1a0 [ 632.246287] __alloc_pages_nodemask+0x23e1/0x2720 [ 632.246306] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 632.246331] alloc_pages_current+0x155/0x260 [ 632.246341] filemap_fault+0xea3/0x1980 [ 632.250304] 0 pages in swap cache [ 632.254025] ext4_filemap_fault+0x84/0xb0 [ 632.262762] Swap cache stats: add 0, delete 0, find 0/0 [ 632.263048] __do_fault+0xfa/0x380 [ 632.267579] Free swap = 0kB [ 632.271507] __handle_mm_fault+0x2497/0x4620 [ 632.279643] Total swap = 0kB [ 632.280044] ? vm_insert_page+0x7c0/0x7c0 [ 632.284881] 2097051 pages RAM [ 632.289728] ? free_object+0xe4/0x240 [ 632.289752] handle_mm_fault+0x391/0x860 [ 632.289772] __do_page_fault+0x549/0xad0 [ 632.289785] ? spurious_fault+0x640/0x640 [ 632.294179] 0 pages HighMem/MovableOnly [ 632.298127] ? do_page_fault+0x60/0x500 [ 632.298138] ? page_fault+0x2f/0x50 [ 632.298145] page_fault+0x45/0x50 [ 632.298154] RIP: 0004:0x32 [ 632.298157] RSP: 003c:00007ffd6a5a06a0 EFLAGS: 00000029 [ 632.316100] Mem-Info: [ 632.323170] 363840 pages reserved [ 632.327157] active_anon:11360 inactive_anon:25016 isolated_anon:0 [ 632.327157] active_file:11 inactive_file:11 isolated_file:0 [ 632.327157] unevictable:0 dirty:0 writeback:0 unstable:0 [ 632.327157] slab_reclaimable:12217 slab_unreclaimable:118945 [ 632.327157] mapped:52884 shmem:25370 pagetables:827 bounce:0 [ 632.327157] free:13937 free_pcp:32 free_cma:0 [ 632.332892] 0 pages cma reserved [ 632.336440] Node 0 active_anon:45128kB inactive_anon:72784kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:124308kB dirty:0kB writeback:0kB shmem:74000kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 632.336454] Node 1 active_anon:312kB inactive_anon:27280kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87228kB dirty:0kB writeback:0kB shmem:27480kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 632.638800] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 632.709618] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 632.714841] Node 0 DMA32 free:119624kB min:36200kB low:45248kB high:54296kB active_anon:45128kB inactive_anon:72724kB active_file:628kB inactive_file:1844kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:8064kB pagetables:2748kB bounce:0kB free_pcp:288kB local_pcp:164kB free_cma:0kB [ 632.775122] lowmem_reserve[]: 0 0 0 0 0 [ 632.779166] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 632.818327] warn_alloc_show_mem: 1 callbacks suppressed [ 632.818332] Mem-Info: [ 632.838866] active_anon:11360 inactive_anon:25016 isolated_anon:0 [ 632.838866] active_file:311 inactive_file:563 isolated_file:0 [ 632.838866] unevictable:0 dirty:0 writeback:0 unstable:0 [ 632.838866] slab_reclaimable:12217 slab_unreclaimable:119232 [ 632.838866] mapped:53559 shmem:25370 pagetables:827 bounce:0 [ 632.838866] free:35505 free_pcp:150 free_cma:0 [ 632.921329] lowmem_reserve[]: 0 0 0 0 0 [ 632.929355] Node 1 Normal free:41084kB min:53696kB low:67120kB high:80544kB active_anon:312kB inactive_anon:27280kB active_file:80kB inactive_file:408kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:560kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 632.940862] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 632.966650] Node 0 active_anon:45128kB inactive_anon:72784kB active_file:96kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:124408kB dirty:0kB writeback:0kB shmem:74000kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 632.972556] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 633.005985] lowmem_reserve[]: 0 0 0 0 0 [ 633.007575] CPU: 0 PID: 20851 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 633.011451] Node 0 [ 633.019329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 633.019333] Call Trace: [ 633.019356] dump_stack+0x1b2/0x281 [ 633.019373] warn_alloc.cold+0x96/0x1cc [ 633.021580] DMA: [ 633.030934] ? zone_watermark_ok_safe+0x220/0x220 [ 633.030957] __alloc_pages_nodemask+0x2127/0x2720 [ 633.033514] 2*4kB [ 633.037122] ? __schedule+0x893/0x1de0 [ 633.037144] ? lock_acquire+0x170/0x3f0 [ 633.041083] (UM) [ 633.043146] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 633.047971] 0*8kB [ 633.052787] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 633.054901] 13*16kB [ 633.058771] ? __mutex_unlock_slowpath+0x75/0x770 [ 633.058785] alloc_pages_current+0x155/0x260 [ 633.058804] ion_page_pool_alloc+0x118/0x1b0 [ 633.062739] (U) [ 633.064784] ion_system_heap_allocate+0x133/0x8c0 [ 633.069613] 6*32kB [ 633.071732] ? _raw_spin_unlock+0x29/0x40 [ 633.077160] (U) [ 633.079455] ? _ion_heap_freelist_drain+0x6e/0x410 [ 633.084302] 1*64kB [ 633.088682] ? ion_system_contig_heap_create+0x130/0x130 [ 633.088693] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 633.088705] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 633.093865] (M) [ 633.095824] ion_alloc+0x27a/0x810 [ 633.095842] ? ion_dma_buf_release+0x40/0x40 [ 633.100655] 4*128kB [ 633.102876] ? __might_fault+0x177/0x1b0 [ 633.107010] (UM) [ 633.108972] ion_ioctl+0xea/0x1f0 [ 633.113863] 3*256kB (UM) [ 633.116085] ? ion_query_heaps+0x360/0x360 [ 633.116096] ? lock_acquire+0x170/0x3f0 [ 633.116106] ? lock_downgrade+0x740/0x740 [ 633.121526] 2*512kB [ 633.126521] ? ion_query_heaps+0x360/0x360 [ 633.126534] do_vfs_ioctl+0x75a/0xff0 [ 633.126546] ? ioctl_preallocate+0x1a0/0x1a0 [ 633.131356] (UM) [ 633.133314] ? lock_downgrade+0x740/0x740 [ 633.136841] 2*1024kB [ 633.141219] ? __fget+0x225/0x360 [ 633.143511] (UM) [ 633.147551] ? do_vfs_ioctl+0xff0/0xff0 [ 633.147562] ? security_file_ioctl+0x83/0xb0 [ 633.147572] SyS_ioctl+0x7f/0xb0 [ 633.149606] 1*2048kB [ 633.153036] ? do_vfs_ioctl+0xff0/0xff0 [ 633.155779] (U) [ 633.159988] do_syscall_64+0x1d5/0x640 [ 633.163930] 1*4096kB [ 633.168068] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 633.168076] RIP: 0033:0x45e219 [ 633.170373] (M) [ 633.174670] RSP: 002b:00007f994610dc68 EFLAGS: 00000246 [ 633.178459] = 10968kB [ 633.182929] ORIG_RAX: 0000000000000010 [ 633.184988] Node 0 [ 633.189110] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 633.189115] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 633.189120] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 633.189125] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 633.189130] R13: 00007ffd6a5a041f R14: 00007f994610e9c0 R15: 000000000119bf8c [ 633.295086] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 633.297920] Node 1 active_anon:312kB inactive_anon:27280kB active_file:44kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87328kB dirty:0kB writeback:0kB shmem:27480kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 633.338099] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 633.341262] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 633.375051] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 633.377091] CPU: 0 PID: 20851 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 633.382076] Node 0 [ 633.390107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 633.390111] Call Trace: [ 633.390135] dump_stack+0x1b2/0x281 [ 633.390150] warn_alloc.cold+0x96/0x1cc [ 633.390167] ? zone_watermark_ok_safe+0x220/0x220 [ 633.396235] DMA32: [ 633.403382] ? usleep_range+0x130/0x130 [ 633.406060] DMA32 free:17992kB min:36200kB low:45248kB high:54296kB active_anon:45128kB inactive_anon:72724kB active_file:284kB inactive_file:228kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:8064kB pagetables:2748kB bounce:0kB free_pcp:104kB local_pcp:104kB free_cma:0kB [ 633.409629] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 633.413572] lowmem_reserve[]: [ 633.418422] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 633.418433] ? run_timer_softirq+0x5a0/0x5a0 [ 633.418452] __alloc_pages_nodemask+0x2127/0x2720 [ 633.420668] 847*4kB [ 633.424751] ? lock_acquire+0x170/0x3f0 [ 633.453436] 0 [ 633.458462] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 633.458478] ? ion_page_pool_alloc+0x9e/0x1b0 [ 633.461549] 0 [ 633.466577] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 633.466597] alloc_pages_current+0x155/0x260 [ 633.466615] ion_page_pool_alloc+0x118/0x1b0 [ 633.466629] ion_system_heap_allocate+0x133/0x8c0 [ 633.471047] 0 [ 633.475868] ? _raw_spin_unlock+0x29/0x40 [ 633.475878] ? _ion_heap_freelist_drain+0x6e/0x410 [ 633.475892] ? ion_system_contig_heap_create+0x130/0x130 [ 633.478187] 0 [ 633.482147] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 633.483915] 0 [ 633.488739] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 633.488752] ion_alloc+0x27a/0x810 [ 633.488767] ? ion_dma_buf_release+0x40/0x40 [ 633.493249] (UME) [ 633.495020] ? __might_fault+0x177/0x1b0 [ 633.495032] ion_ioctl+0xea/0x1f0 [ 633.495043] ? ion_query_heaps+0x360/0x360 [ 633.500472] 907*8kB [ 633.504866] ? lock_acquire+0x170/0x3f0 [ 633.514068] ? lock_downgrade+0x740/0x740 [ 633.515860] (UME) [ 633.519967] ? ion_query_heaps+0x360/0x360 [ 633.519978] do_vfs_ioctl+0x75a/0xff0 [ 633.524893] 257*16kB [ 633.530328] ? ioctl_preallocate+0x1a0/0x1a0 [ 633.530338] ? lock_downgrade+0x740/0x740 [ 633.530352] ? __fget+0x225/0x360 [ 633.532135] Node 0 [ 633.537120] ? do_vfs_ioctl+0xff0/0xff0 [ 633.537131] ? security_file_ioctl+0x83/0xb0 [ 633.537141] SyS_ioctl+0x7f/0xb0 [ 633.538931] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 633.543746] ? do_vfs_ioctl+0xff0/0xff0 [ 633.547284] (UME) [ 633.551673] do_syscall_64+0x1d5/0x640 [ 633.553790] 57*32kB [ 633.557853] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 633.557863] RIP: 0033:0x45e219 [ 633.561312] lowmem_reserve[]: [ 633.566294] RSP: 002b:00007f994610dc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 633.566304] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 633.566309] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 633.566314] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 633.566321] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 633.568619] 0 [ 633.572573] R13: 00007ffd6a5a041f R14: 00007f994610e9c0 R15: 000000000119bf8c [ 633.576717] (UME) [ 633.648055] 0 [ 633.655467] 13*64kB [ 633.717020] 0 0 0 [ 633.722301] Node 1 Normal free:225412kB min:53696kB low:67120kB high:80544kB active_anon:312kB inactive_anon:27280kB active_file:80kB inactive_file:3064kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:560kB bounce:0kB free_pcp:168kB local_pcp:20kB free_cma:0kB [ 633.752513] lowmem_reserve[]: 0 0 0 0 0 [ 633.765052] Node 0 DMA: 2*4kB (UM) 0*8kB 13*16kB (U) 6*32kB (U) 1*64kB (M) 4*128kB (UM) 3*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 10968kB [ 633.795210] Node 0 DMA32: 847*4kB (UME) 939*8kB (UME) 257*16kB (UME) 57*32kB (UME) 13*64kB (ME) 7*128kB (UME) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18564kB [ 633.805081] (ME) 7*128kB (UME) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18308kB [ 633.825073] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 633.845095] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 633.855949] Node 1 Normal: 1*4kB (M) 0*8kB 0*16kB 1*32kB (U) 1*64kB (M) 2*128kB (UM) 1*256kB (U) 1*512kB (U) 244*1024kB (UM) 31*2048kB (U) 2*4096kB (U) = 322660kB [ 633.885041] Node 1 Normal: 1*4kB (M) 19*8kB (U) 10*16kB (U) 8*32kB (U) 262*64kB (UM) 5*128kB (UM) 1*256kB (U) 2*512kB (U) 244*1024kB (UM) 31*2048kB (U) 2*4096kB (U) = 340796kB [ 633.915040] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 633.924011] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 633.932727] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 633.955034] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 633.963656] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 633.972613] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 633.985170] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 633.993816] 26343 total pagecache pages [ 634.005239] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 634.013837] 26343 total pagecache pages [ 634.025065] 0 pages in swap cache [ 634.028556] Swap cache stats: add 0, delete 0, find 0/0 [ 634.033926] Free swap = 0kB [ 634.045057] 0 pages in swap cache [ 634.048554] Swap cache stats: add 0, delete 0, find 0/0 [ 634.053918] Free swap = 0kB [ 634.057010] Total swap = 0kB [ 634.060030] 2097051 pages RAM [ 634.063130] 0 pages HighMem/MovableOnly [ 634.067239] Total swap = 0kB [ 634.075029] 2097051 pages RAM [ 634.078144] 0 pages HighMem/MovableOnly [ 634.082110] 363840 pages reserved [ 634.095063] 363840 pages reserved [ 634.098547] 0 pages cma reserved [ 634.115018] 0 pages cma reserved [ 634.118419] Out of memory (oom_kill_allocating_task): Kill process 19263 (syz-executor.2) score 0 or sacrifice child [ 634.145063] Killed process 19263 (syz-executor.2) total-vm:93216kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 634.165194] syz-executor.2: page allocation failure: order:0, mode:0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null) [ 634.185039] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 634.190465] CPU: 1 PID: 19263 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 634.198391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 634.208144] Call Trace: [ 634.210761] dump_stack+0x1b2/0x281 [ 634.214392] warn_alloc.cold+0x96/0x1cc [ 634.218377] ? lock_downgrade+0x740/0x740 [ 634.222529] ? zone_watermark_ok_safe+0x220/0x220 [ 634.227379] ? wake_up_q+0x82/0xd0 [ 634.230927] ? wait_for_completion_io+0x10/0x10 [ 634.235602] __alloc_pages_nodemask+0x2127/0x2720 [ 634.240458] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 634.245319] alloc_pages_current+0x155/0x260 [ 634.249736] filemap_fault+0xea3/0x1980 [ 634.253723] ext4_filemap_fault+0x84/0xb0 [ 634.257882] __do_fault+0xfa/0x380 [ 634.261430] __handle_mm_fault+0x2497/0x4620 [ 634.265838] ? vm_insert_page+0x7c0/0x7c0 [ 634.270013] ? free_object+0xe4/0x240 [ 634.273835] handle_mm_fault+0x391/0x860 [ 634.277899] __do_page_fault+0x549/0xad0 [ 634.281964] ? spurious_fault+0x640/0x640 [ 634.286152] ? do_page_fault+0x60/0x500 [ 634.290147] ? page_fault+0x2f/0x50 [ 634.293784] page_fault+0x45/0x50 [ 634.297413] RIP: 0004:0x32 [ 634.301204] RSP: 003c:00007ffd6a5a06a0 EFLAGS: 00000029 [ 634.335055] warn_alloc_show_mem: 2 callbacks suppressed [ 634.335059] Mem-Info: [ 634.364993] active_anon:11363 inactive_anon:25016 isolated_anon:0 [ 634.364993] active_file:349 inactive_file:618 isolated_file:0 [ 634.364993] unevictable:0 dirty:18 writeback:0 unstable:0 [ 634.364993] slab_reclaimable:12121 slab_unreclaimable:120063 [ 634.364993] mapped:53650 shmem:25370 pagetables:790 bounce:0 [ 634.364993] free:45438 free_pcp:303 free_cma:0 [ 634.445040] Node 0 active_anon:45132kB inactive_anon:72784kB active_file:28kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:124420kB dirty:12kB writeback:0kB shmem:74000kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 634.513789] Node 1 active_anon:320kB inactive_anon:27280kB active_file:100kB inactive_file:100kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87280kB dirty:60kB writeback:0kB shmem:27480kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 634.549073] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 634.549717] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 634.577496] in:imklog cpuset=/ mems_allowed=0-1 [ 634.593701] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 634.596812] CPU: 0 PID: 20355 Comm: in:imklog Not tainted 4.14.217-syzkaller #0 [ 634.601859] Node 0 [ 634.609285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 634.609288] Call Trace: [ 634.609311] dump_stack+0x1b2/0x281 [ 634.609324] dump_header+0x178/0x82f [ 634.609338] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 634.611554] DMA32 free:18108kB min:36200kB low:45248kB high:54296kB active_anon:45132kB inactive_anon:72724kB active_file:28kB inactive_file:32kB unevictable:0kB writepending:12kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:8032kB pagetables:2600kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 634.620880] ? ___ratelimit+0x2cd/0x530 [ 634.620890] oom_kill_process.cold+0x10/0xb18 [ 634.620911] out_of_memory+0xe3e/0x1190 [ 634.623472] lowmem_reserve[]: [ 634.627084] ? oom_killer_disable+0x1c0/0x1c0 [ 634.627091] ? mutex_trylock+0x152/0x1a0 [ 634.627102] __alloc_pages_nodemask+0x23e1/0x2720 [ 634.630793] 0 [ 634.635904] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 634.635929] alloc_pages_current+0x155/0x260 [ 634.663936] 0 [ 634.667884] filemap_fault+0xea3/0x1980 [ 634.667906] ext4_filemap_fault+0x84/0xb0 [ 634.672896] 0 [ 634.676853] __do_fault+0xfa/0x380 [ 634.676862] __handle_mm_fault+0x2497/0x4620 [ 634.676872] ? vm_insert_page+0x7c0/0x7c0 [ 634.679948] 0 [ 634.684424] ? lock_downgrade+0x740/0x740 [ 634.688480] 0 [ 634.693305] handle_mm_fault+0x391/0x860 [ 634.699920] __do_page_fault+0x549/0xad0 [ 634.704293] Node 0 [ 634.706099] ? spurious_fault+0x640/0x640 [ 634.706107] ? do_page_fault+0x60/0x500 [ 634.706119] ? page_fault+0x2f/0x50 [ 634.718857] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 634.723334] page_fault+0x45/0x50 [ 634.725131] lowmem_reserve[]: [ 634.728647] RIP: 1fa0:0x1f9f [ 634.733036] 0 [ 634.737158] RSP: 0000:00005634d86799d0 EFLAGS: 7f28c2ad4da0 [ 634.759168] Mem-Info: [ 634.776265] 0 0 0 0 [ 634.818127] Node 1 Normal free:26608kB min:53696kB low:67120kB high:80544kB active_anon:320kB inactive_anon:27280kB active_file:268kB inactive_file:272kB unevictable:0kB writepending:60kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:560kB bounce:0kB free_pcp:20kB local_pcp:20kB free_cma:0kB [ 634.842281] active_anon:11363 inactive_anon:25016 isolated_anon:0 [ 634.842281] active_file:7 inactive_file:33 isolated_file:0 [ 634.842281] unevictable:0 dirty:18 writeback:0 unstable:0 [ 634.842281] slab_reclaimable:12096 slab_unreclaimable:119881 [ 634.842281] mapped:52925 shmem:25370 pagetables:790 bounce:0 [ 634.842281] free:13770 free_pcp:36 free_cma:0 [ 634.852258] lowmem_reserve[]: [ 634.882519] Node 0 active_anon:45132kB inactive_anon:72784kB active_file:28kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:124420kB dirty:12kB writeback:0kB shmem:74000kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 634.888052] 0 [ 634.916347] Node 1 active_anon:320kB inactive_anon:27280kB active_file:0kB inactive_file:100kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87280kB dirty:60kB writeback:0kB shmem:27480kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 634.927295] 0 [ 634.945545] syz-executor.4: [ 634.947283] Node 0 [ 634.947360] page allocation failure: order:0 [ 634.950369] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 634.952580] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 634.957008] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 634.957026] Node 0 DMA32 free:17504kB min:36200kB low:45248kB high:54296kB active_anon:45132kB inactive_anon:72724kB active_file:28kB inactive_file:32kB unevictable:0kB writepending:12kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:8032kB pagetables:2600kB bounce:0kB free_pcp:124kB local_pcp:124kB free_cma:0kB [ 634.991080] 0 [ 634.997519] lowmem_reserve[]: [ 635.026583] (null) [ 635.031838] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 635.033810] 0 0 0 0 0 [ 635.038937] 0 0 [ 635.040061] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 635.042032] Node 0 [ 635.069746] CPU: 1 PID: 20849 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 635.075080] lowmem_reserve[]: [ 635.079908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 635.079911] 0 0 [ 635.083016] Call Trace: [ 635.096926] dump_stack+0x1b2/0x281 [ 635.099590] DMA: 2*4kB [ 635.100581] warn_alloc.cold+0x96/0x1cc [ 635.100595] ? zone_watermark_ok_safe+0x220/0x220 [ 635.103162] (UM) [ 635.107148] ? usleep_range+0x130/0x130 [ 635.107160] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 635.107175] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 635.107186] ? run_timer_softirq+0x5a0/0x5a0 [ 635.107200] __alloc_pages_nodemask+0x2127/0x2720 [ 635.107215] ? lock_acquire+0x170/0x3f0 [ 635.107230] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 635.107247] ? ion_page_pool_alloc+0x9e/0x1b0 [ 635.114310] 0 [ 635.118094] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 635.118114] alloc_pages_current+0x155/0x260 [ 635.118128] ion_page_pool_alloc+0x118/0x1b0 [ 635.118139] ion_system_heap_allocate+0x133/0x8c0 [ 635.118150] ? _raw_spin_unlock+0x29/0x40 [ 635.118164] ? _ion_heap_freelist_drain+0x6e/0x410 [ 635.118175] ? ion_system_contig_heap_create+0x130/0x130 [ 635.126494] 0 [ 635.128293] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 635.132677] 0 [ 635.137511] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 635.137527] ion_alloc+0x27a/0x810 [ 635.137541] ? ion_dma_buf_release+0x40/0x40 [ 635.137553] ? __might_fault+0x177/0x1b0 [ 635.147682] 0*8kB [ 635.150848] ion_ioctl+0xea/0x1f0 [ 635.152644] 13*16kB [ 635.158077] ? ion_query_heaps+0x360/0x360 [ 635.158095] ? lock_acquire+0x170/0x3f0 [ 635.158104] ? lock_downgrade+0x740/0x740 [ 635.158112] ? ion_query_heaps+0x360/0x360 [ 635.158123] do_vfs_ioctl+0x75a/0xff0 [ 635.158134] ? ioctl_preallocate+0x1a0/0x1a0 [ 635.158142] ? lock_downgrade+0x740/0x740 [ 635.158160] ? __fget+0x225/0x360 [ 635.158168] ? do_vfs_ioctl+0xff0/0xff0 [ 635.158180] ? security_file_ioctl+0x83/0xb0 [ 635.169138] (U) [ 635.171808] SyS_ioctl+0x7f/0xb0 [ 635.181017] ? do_vfs_ioctl+0xff0/0xff0 [ 635.190235] 6*32kB [ 635.193231] do_syscall_64+0x1d5/0x640 [ 635.198686] Node 1 [ 635.199944] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 635.203460] Normal free:26956kB min:53696kB low:67120kB high:80544kB active_anon:320kB inactive_anon:27280kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:560kB bounce:0kB free_pcp:20kB local_pcp:0kB free_cma:0kB [ 635.207856] RIP: 0033:0x45e219 [ 635.207861] RSP: 002b:00007fd20c681c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 635.207869] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 635.207873] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 635.207878] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 635.207882] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 635.207887] R13: 00007fff87e85fff R14: 00007fd20c6829c0 R15: 000000000119bf8c [ 635.294911] (U) [ 635.313807] lowmem_reserve[]: 0 0 0 0 0 [ 635.365563] 1*64kB (M) 4*128kB (UM) 3*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 10968kB [ 635.367337] Node 0 DMA: 2*4kB (UM) 0*8kB 13*16kB (U) 6*32kB (U) 1*64kB (M) 4*128kB (UM) 3*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 10968kB [ 635.398881] Node 0 DMA32: 891*4kB (UME) 902*8kB (UME) 258*16kB (ME) 56*32kB (ME) 11*64kB (ME) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17532kB [ 635.413797] Node 0 DMA32: 891*4kB (UME) 902*8kB (UME) 258*16kB (ME) 56*32kB (ME) 11*64kB (ME) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17532kB [ 635.424898] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 635.445559] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 635.449263] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 1*16kB (U) 2*32kB (UM) 2*64kB (UM) 2*128kB (UM) 1*256kB (M) 1*512kB (M) 207*1024kB (U) 28*2048kB (UM) 2*4096kB (U) = 278760kB [ 635.474886] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 2*16kB (UM) 1*32kB (M) 232*64kB (UM) 16*128kB (UM) 6*256kB (UM) 0*512kB 207*1024kB (U) 28*2048kB (UM) 2*4096kB (U) = 296024kB [ 635.478002] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 635.505319] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 635.514251] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 635.549533] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 635.554912] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 635.578796] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 635.584883] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 635.603832] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 635.613170] 26169 total pagecache pages [ 635.614880] 26169 total pagecache pages [ 635.621159] 0 pages in swap cache [ 635.621278] 0 pages in swap cache [ 635.624614] Swap cache stats: add 0, delete 0, find 0/0 [ 635.624619] Free swap = 0kB [ 635.629692] Swap cache stats: add 0, delete 0, find 0/0 [ 635.644901] Total swap = 0kB [ 635.648371] 2097051 pages RAM [ 635.664897] 0 pages HighMem/MovableOnly [ 635.668906] 363840 pages reserved [ 635.672357] 0 pages cma reserved [ 635.675817] Free swap = 0kB [ 635.678830] Total swap = 0kB [ 635.681844] 2097051 pages RAM [ 635.685386] 0 pages HighMem/MovableOnly [ 635.689357] 363840 pages reserved [ 635.692801] 0 pages cma reserved [ 635.696829] Out of memory (oom_kill_allocating_task): Kill process 20355 (in:imklog) score 0 or sacrifice child [ 635.707421] Killed process 20353 (rsyslogd) total-vm:254332kB, anon-rss:732kB, file-rss:0kB, shmem-rss:0kB [ 635.718771] oom_reaper: reaped process 20353 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 636.443769] rsyslogd invoked oom-killer: gfp_mask=0x14200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 636.484451] rsyslogd cpuset=/ mems_allowed=0-1 [ 636.489943] CPU: 0 PID: 20884 Comm: rsyslogd Not tainted 4.14.217-syzkaller #0 [ 636.497303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 636.506652] Call Trace: [ 636.509250] dump_stack+0x1b2/0x281 [ 636.515047] dump_header+0x178/0x82f [ 636.518763] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 636.523862] ? ___ratelimit+0x2cd/0x530 [ 636.527834] oom_kill_process.cold+0x10/0xb18 [ 636.532337] out_of_memory+0xe3e/0x1190 [ 636.536313] ? oom_killer_disable+0x1c0/0x1c0 [ 636.540807] ? mutex_trylock+0x152/0x1a0 [ 636.544923] __alloc_pages_nodemask+0x23e1/0x2720 [ 636.549791] ? lock_acquire+0x170/0x3f0 [ 636.553764] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 636.558816] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 636.563644] ? debug_check_no_obj_freed+0x2c0/0x680 [ 636.568664] ? __lock_acquire+0x5fc/0x3f20 [ 636.572917] alloc_pages_vma+0xd2/0x6d0 [ 636.576909] __handle_mm_fault+0xe4f/0x4620 [ 636.581244] ? vm_insert_page+0x7c0/0x7c0 [ 636.585397] ? vm_mmap_pgoff+0x168/0x1a0 [ 636.589508] ? vm_mmap_pgoff+0xcb/0x1a0 [ 636.593484] handle_mm_fault+0x391/0x860 [ 636.597558] __do_page_fault+0x549/0xad0 [ 636.601605] ? spurious_fault+0x640/0x640 [ 636.605732] ? do_page_fault+0x60/0x500 [ 636.609687] ? page_fault+0x2f/0x50 [ 636.613296] page_fault+0x45/0x50 [ 636.616728] RIP: 0002:0x801 [ 636.619638] RSP: 5bff4000:00007ffc9bff2810 EFLAGS: 7ffc9bff28f8 [ 636.625735] Mem-Info: [ 636.634242] active_anon:11246 inactive_anon:25015 isolated_anon:0 [ 636.634242] active_file:38 inactive_file:4 isolated_file:0 [ 636.634242] unevictable:0 dirty:0 writeback:0 unstable:0 [ 636.634242] slab_reclaimable:12071 slab_unreclaimable:118700 [ 636.634242] mapped:44246 shmem:25367 pagetables:740 bounce:0 [ 636.634242] free:25129 free_pcp:48 free_cma:0 [ 636.679023] Node 0 active_anon:44140kB inactive_anon:72788kB active_file:112kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:89724kB dirty:0kB writeback:0kB shmem:74004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 636.742651] Node 1 active_anon:844kB inactive_anon:27272kB active_file:40kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87260kB dirty:0kB writeback:0kB shmem:27464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 636.773281] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 636.817272] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 636.822351] Node 0 DMA32 free:36148kB min:36200kB low:45248kB high:54296kB active_anon:44240kB inactive_anon:72728kB active_file:56kB inactive_file:84kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7840kB pagetables:2268kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 636.851250] lowmem_reserve[]: 0 0 0 0 0 [ 636.858332] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 636.895347] lowmem_reserve[]: 0 0 0 0 0 [ 636.899807] Node 1 Normal free:53400kB min:53696kB low:67120kB high:80544kB active_anon:1044kB inactive_anon:27272kB active_file:56kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:692kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 636.945147] lowmem_reserve[]: 0 0 0 0 0 [ 636.949182] Node 0 DMA: 2*4kB (UM) 0*8kB 13*16kB (U) 6*32kB (U) 1*64kB (M) 4*128kB (UM) 3*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 10968kB [ 636.964555] Node 0 DMA32: 942*4kB (ME) 878*8kB (ME) 258*16kB (UME) 56*32kB (UME) 20*64kB (UME) 145*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36552kB [ 636.979404] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 636.980769] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 636.990706] Node 1 Normal: 28*4kB (M) 24*8kB (M) 18*16kB (M) 20*32kB (M) 20*64kB (UM) 9*128kB (M) 4*256kB (UM) 2*512kB (M) 3*1024kB (UM) 20*2048kB (UM) 1*4096kB (M) = 53840kB [ 637.004855] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 637.013296] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 637.029165] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 637.030174] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 637.037798] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 637.037804] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 637.037809] 25401 total pagecache pages [ 637.037817] 0 pages in swap cache [ 637.037821] Swap cache stats: add 0, delete 0, find 0/0 [ 637.037824] Free swap = 0kB [ 637.037826] Total swap = 0kB [ 637.037899] 2097051 pages RAM [ 637.054881] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 637.062738] 0 pages HighMem/MovableOnly [ 637.095532] 363840 pages reserved [ 637.098981] 0 pages cma reserved [ 637.104046] Out of memory (oom_kill_allocating_task): Kill process 20884 (rsyslogd) score 0 or sacrifice child [ 637.114727] Killed process 20884 (rsyslogd) total-vm:3120kB, anon-rss:36kB, file-rss:4kB, shmem-rss:0kB [ 637.126012] oom_reaper: reaped process 20884 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 637.403079] systemd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 637.425514] systemd cpuset=/ mems_allowed=0-1 [ 637.431462] CPU: 0 PID: 1 Comm: systemd Not tainted 4.14.217-syzkaller #0 [ 637.440764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 637.451020] Call Trace: [ 637.453631] dump_stack+0x1b2/0x281 [ 637.457388] dump_header+0x178/0x82f [ 637.461364] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 637.466467] ? ___ratelimit+0x2cd/0x530 [ 637.470542] oom_kill_process.cold+0x10/0xb18 [ 637.476405] ? lock_downgrade+0x740/0x740 [ 637.480930] out_of_memory+0x2dc/0x1190 [ 637.485423] ? oom_killer_disable+0x1c0/0x1c0 [ 637.492342] ? mutex_trylock+0x152/0x1a0 [ 637.498405] __alloc_pages_nodemask+0x23e1/0x2720 [ 637.503648] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 637.510059] alloc_pages_current+0x155/0x260 [ 637.515953] filemap_fault+0xea3/0x1980 [ 637.523207] ext4_filemap_fault+0x84/0xb0 [ 637.527672] __do_fault+0xfa/0x380 [ 637.531738] __handle_mm_fault+0x2497/0x4620 [ 637.536711] ? ep_poll+0x1ab/0xa50 [ 637.540972] ? vm_insert_page+0x7c0/0x7c0 [ 637.546148] handle_mm_fault+0x391/0x860 [ 637.550250] __do_page_fault+0x549/0xad0 [ 637.555013] ? spurious_fault+0x640/0x640 [ 637.559330] ? do_page_fault+0x60/0x500 [ 637.563299] ? page_fault+0x2f/0x50 [ 637.567095] page_fault+0x45/0x50 [ 637.570548] RIP: 0001:0x1 [ 637.573295] RSP: 9168f080:00007ffe87b68dd0 EFLAGS: 7ffe87b68ae0 [ 637.782074] Mem-Info: [ 637.814754] active_anon:11228 inactive_anon:25015 isolated_anon:0 [ 637.814754] active_file:7 inactive_file:5 isolated_file:0 [ 637.814754] unevictable:0 dirty:0 writeback:0 unstable:0 [ 637.814754] slab_reclaimable:12071 slab_unreclaimable:118708 [ 637.814754] mapped:44239 shmem:25367 pagetables:716 bounce:0 [ 637.814754] free:25065 free_pcp:0 free_cma:0 [ 637.930545] Node 0 active_anon:44148kB inactive_anon:72788kB active_file:112kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:89708kB dirty:0kB writeback:0kB shmem:74004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 638.032230] Node 1 active_anon:764kB inactive_anon:27272kB active_file:32kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87228kB dirty:0kB writeback:0kB shmem:27464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 638.073263] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 638.180608] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 638.191518] Node 0 DMA32 free:36120kB min:36200kB low:45248kB high:54296kB active_anon:44148kB inactive_anon:72728kB active_file:20kB inactive_file:104kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7840kB pagetables:2236kB bounce:0kB free_pcp:136kB local_pcp:0kB free_cma:0kB [ 638.242771] lowmem_reserve[]: 0 0 0 0 0 [ 638.260324] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 638.379582] lowmem_reserve[]: 0 0 0 0 0 [ 638.383632] Node 1 Normal free:53600kB min:53696kB low:67120kB high:80544kB active_anon:764kB inactive_anon:27272kB active_file:20kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:628kB bounce:0kB free_pcp:124kB local_pcp:0kB free_cma:0kB [ 638.559470] lowmem_reserve[]: 0 0 0 0 0 [ 638.563521] Node 0 DMA: 2*4kB (UM) 0*8kB 13*16kB (U) 6*32kB (U) 1*64kB (M) 4*128kB (UM) 3*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 10968kB [ 638.608808] Node 0 DMA32: 948*4kB (UME) 892*8kB (UME) 259*16kB (UME) 57*32kB (UME) 18*64kB (UME) 143*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36352kB [ 638.681622] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 638.726617] Node 1 Normal: 2*4kB (U) 23*8kB (UM) 16*16kB (UM) 21*32kB (UM) 20*64kB (UM) 8*128kB (M) 2*256kB (M) 1*512kB (M) 2*1024kB (UM) 21*2048kB (UM) 1*4096kB (M) = 53600kB [ 638.750498] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 638.759437] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 638.794649] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 638.803549] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 638.873414] 25413 total pagecache pages [ 638.893477] 0 pages in swap cache [ 638.911375] Swap cache stats: add 0, delete 0, find 0/0 [ 638.931645] Free swap = 0kB [ 638.938783] Total swap = 0kB [ 638.941857] 2097051 pages RAM [ 638.979150] 0 pages HighMem/MovableOnly [ 638.983383] 363840 pages reserved [ 638.986954] 0 pages cma reserved [ 638.990377] Out of memory: Kill process 20840 (syz-executor.3) score 1004 or sacrifice child [ 639.002922] Killed process 20841 (syz-executor.3) total-vm:93348kB, anon-rss:160kB, file-rss:34816kB, shmem-rss:0kB [ 639.033639] oom_reaper: reaped process 20841 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 639.098811] syz-executor.3 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 639.241473] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 639.283027] CPU: 1 PID: 20841 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 639.290981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 639.300678] Call Trace: [ 639.303306] dump_stack+0x1b2/0x281 [ 639.306959] dump_header+0x178/0x82f [ 639.311062] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 639.316289] ? ___ratelimit+0x2cd/0x530 [ 639.320266] oom_kill_process.cold+0x10/0xb18 [ 639.324753] out_of_memory+0xe3e/0x1190 [ 639.328905] ? oom_killer_disable+0x1c0/0x1c0 [ 639.333384] ? mutex_trylock+0x152/0x1a0 [ 639.337719] __alloc_pages_nodemask+0x23e1/0x2720 [ 639.342563] ? lock_acquire+0x170/0x3f0 [ 639.346527] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 639.351441] ? ion_page_pool_alloc+0x9e/0x1b0 [ 639.356270] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 639.361839] ? alloc_pages_current+0x73/0x260 [ 639.366319] alloc_pages_current+0x155/0x260 [ 639.370714] ion_page_pool_alloc+0x118/0x1b0 [ 639.375366] ion_system_heap_allocate+0x133/0x8c0 [ 639.380191] ? ion_alloc+0x187/0x810 [ 639.383884] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 639.389507] ? ion_system_contig_heap_create+0x130/0x130 [ 639.394940] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 639.400028] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 639.404855] ion_alloc+0x204/0x810 [ 639.408383] ? ion_dma_buf_release+0x40/0x40 [ 639.412778] ? __might_fault+0x177/0x1b0 [ 639.416842] ion_ioctl+0xea/0x1f0 [ 639.420377] ? ion_query_heaps+0x360/0x360 [ 639.424597] ? lock_acquire+0x170/0x3f0 [ 639.428554] ? lock_downgrade+0x740/0x740 [ 639.432710] ? ion_query_heaps+0x360/0x360 [ 639.436944] do_vfs_ioctl+0x75a/0xff0 [ 639.440730] ? ioctl_preallocate+0x1a0/0x1a0 [ 639.445143] ? lock_downgrade+0x740/0x740 [ 639.449286] ? __fget+0x225/0x360 [ 639.452742] ? do_vfs_ioctl+0xff0/0xff0 [ 639.456722] ? security_file_ioctl+0x83/0xb0 [ 639.461221] SyS_ioctl+0x7f/0xb0 [ 639.464866] ? do_vfs_ioctl+0xff0/0xff0 [ 639.468844] do_syscall_64+0x1d5/0x640 [ 639.472754] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 639.479010] RIP: 0033:0x45e219 [ 639.482203] RSP: 002b:00007f1396e62c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 639.489922] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 639.497173] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 639.504716] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 639.511969] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 639.519327] R13: 00007ffeee3e983f R14: 00007f1396e639c0 R15: 000000000119bf8c [ 639.856730] Mem-Info: [ 639.859209] active_anon:11201 inactive_anon:25015 isolated_anon:0 [ 639.859209] active_file:10 inactive_file:3 isolated_file:0 [ 639.859209] unevictable:0 dirty:0 writeback:0 unstable:0 [ 639.859209] slab_reclaimable:12062 slab_unreclaimable:118663 [ 639.859209] mapped:44271 shmem:25367 pagetables:716 bounce:0 [ 639.859209] free:25163 free_pcp:30 free_cma:0 [ 639.924607] Node 0 active_anon:44040kB inactive_anon:72788kB active_file:104kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:89856kB dirty:0kB writeback:0kB shmem:74004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 640.015100] device bridge_slave_1 left promiscuous mode [ 640.020698] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.050832] Node 1 active_anon:764kB inactive_anon:27272kB active_file:32kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87228kB dirty:0kB writeback:0kB shmem:27464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 640.112640] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 640.174568] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 640.179762] Node 0 DMA32 free:35960kB min:36200kB low:45248kB high:54296kB active_anon:44040kB inactive_anon:72728kB active_file:32kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7840kB pagetables:2236kB bounce:0kB free_pcp:404kB local_pcp:0kB free_cma:0kB [ 640.208663] device bridge_slave_0 left promiscuous mode [ 640.208831] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.249794] lowmem_reserve[]: 0 0 0 0 0 [ 640.253819] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 640.296448] lowmem_reserve[]: 0 0 0 0 0 [ 640.300480] Node 1 Normal free:53628kB min:53696kB low:67120kB high:80544kB active_anon:764kB inactive_anon:27272kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:628kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 640.439927] lowmem_reserve[]: 0 0 0 0 0 [ 640.443991] Node 0 DMA: 2*4kB (UM) 0*8kB 13*16kB (U) 6*32kB (U) 1*64kB (M) 4*128kB (UM) 3*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 10968kB [ 640.538921] Node 0 DMA32: 945*4kB (ME) 880*8kB (ME) 259*16kB (UME) 59*32kB (UME) 20*64kB (UME) 142*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36308kB [ 640.600934] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 640.649417] Node 1 Normal: 29*4kB (UM) 25*8kB (UM) 16*16kB (UM) 22*32kB (UM) 20*64kB (UM) 8*128kB (M) 2*256kB (M) 1*512kB (M) 2*1024kB (UM) 21*2048kB (UM) 1*4096kB (M) = 53756kB [ 640.718405] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 640.755576] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 640.764189] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 640.849380] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 640.888741] 25439 total pagecache pages [ 640.892760] 0 pages in swap cache [ 640.915573] Swap cache stats: add 0, delete 0, find 0/0 [ 640.920964] Free swap = 0kB [ 640.923973] Total swap = 0kB [ 640.968702] 2097051 pages RAM [ 640.971841] 0 pages HighMem/MovableOnly [ 640.991607] 363840 pages reserved [ 641.011260] 0 pages cma reserved [ 641.023491] Out of memory (oom_kill_allocating_task): Kill process 20841 (syz-executor.3) score 0 or sacrifice child [ 641.067040] Killed process 20841 (syz-executor.3) total-vm:93348kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 641.077579] device veth1_macvtap left promiscuous mode [ 641.082914] device veth0_macvtap left promiscuous mode [ 641.118422] device veth1_vlan left promiscuous mode [ 641.124142] device veth0_vlan left promiscuous mode [ 641.134617] oom_reaper: reaped process 20854 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 641.156087] syz-executor.3 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 641.170351] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 641.174631] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 641.175551] CPU: 1 PID: 20841 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 641.194274] syz-executor.1 cpuset= [ 641.195146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 641.195151] Call Trace: [ 641.195181] dump_stack+0x1b2/0x281 [ 641.195196] dump_header+0x178/0x82f [ 641.198745] / [ 641.208097] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 641.210691] mems_allowed=0-1 [ 641.214262] ? ___ratelimit+0x2cd/0x530 [ 641.231797] oom_kill_process.cold+0x10/0xb18 [ 641.236292] out_of_memory+0xe3e/0x1190 [ 641.240252] ? oom_killer_disable+0x1c0/0x1c0 [ 641.244732] ? mutex_trylock+0x152/0x1a0 [ 641.248786] __alloc_pages_nodemask+0x23e1/0x2720 [ 641.253620] ? lock_acquire+0x170/0x3f0 [ 641.257586] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 641.262419] ? ion_page_pool_alloc+0x9e/0x1b0 [ 641.267536] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 641.272975] ? alloc_pages_current+0x73/0x260 [ 641.277473] alloc_pages_current+0x155/0x260 [ 641.281902] ion_page_pool_alloc+0x118/0x1b0 [ 641.286307] ion_system_heap_allocate+0x133/0x8c0 [ 641.291135] ? ion_alloc+0x187/0x810 [ 641.294834] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 641.300284] ? ion_system_contig_heap_create+0x130/0x130 [ 641.305717] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 641.310821] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 641.315648] ion_alloc+0x204/0x810 [ 641.319174] ? ion_dma_buf_release+0x40/0x40 [ 641.323571] ? __might_fault+0x177/0x1b0 [ 641.327617] ion_ioctl+0xea/0x1f0 [ 641.331225] ? ion_query_heaps+0x360/0x360 [ 641.335453] ? lock_acquire+0x170/0x3f0 [ 641.339423] ? lock_downgrade+0x740/0x740 [ 641.343552] ? ion_query_heaps+0x360/0x360 [ 641.347769] do_vfs_ioctl+0x75a/0xff0 [ 641.351573] ? ioctl_preallocate+0x1a0/0x1a0 [ 641.355963] ? lock_downgrade+0x740/0x740 [ 641.361073] ? __fget+0x225/0x360 [ 641.364524] ? do_vfs_ioctl+0xff0/0xff0 [ 641.368940] ? security_file_ioctl+0x83/0xb0 [ 641.373350] SyS_ioctl+0x7f/0xb0 [ 641.376722] ? do_vfs_ioctl+0xff0/0xff0 [ 641.380684] do_syscall_64+0x1d5/0x640 [ 641.384561] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 641.389750] RIP: 0033:0x45e219 [ 641.392921] RSP: 002b:00007f1396e62c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 641.400700] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 641.408908] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 641.416195] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 641.423446] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 641.430699] R13: 00007ffeee3e983f R14: 00007f1396e639c0 R15: 000000000119bf8c [ 641.437982] CPU: 0 PID: 20854 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 641.443720] Mem-Info: [ 641.445871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 641.445876] Call Trace: [ 641.445902] dump_stack+0x1b2/0x281 [ 641.445916] warn_alloc.cold+0x96/0x1cc [ 641.445928] ? zone_watermark_ok_safe+0x220/0x220 [ 641.445943] ? usleep_range+0x130/0x130 [ 641.448358] active_anon:11186 inactive_anon:25015 isolated_anon:0 [ 641.448358] active_file:17 inactive_file:23 isolated_file:0 [ 641.448358] unevictable:0 dirty:0 writeback:0 unstable:0 [ 641.448358] slab_reclaimable:12060 slab_unreclaimable:118280 [ 641.448358] mapped:44250 shmem:25367 pagetables:720 bounce:0 [ 641.448358] free:13650 free_pcp:96 free_cma:0 [ 641.457713] ? try_to_free_pages+0x23f/0x6e0 [ 641.457725] ? _find_next_bit+0xdb/0x100 [ 641.457736] ? run_timer_softirq+0x5a0/0x5a0 [ 641.457752] __alloc_pages_nodemask+0x2127/0x2720 [ 641.457771] ? lock_acquire+0x170/0x3f0 [ 641.457784] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 641.457798] ? ion_page_pool_alloc+0x9e/0x1b0 [ 641.457816] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 641.457835] alloc_pages_current+0x155/0x260 [ 641.464121] Node 0 active_anon:43980kB inactive_anon:72788kB active_file:60kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:89772kB dirty:0kB writeback:0kB shmem:74004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 641.468002] ion_page_pool_alloc+0x118/0x1b0 [ 641.468014] ion_system_heap_allocate+0x133/0x8c0 [ 641.468024] ? ion_alloc+0x187/0x810 [ 641.468034] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 641.468045] ? ion_system_contig_heap_create+0x130/0x130 [ 641.472886] Node 1 active_anon:764kB inactive_anon:27272kB active_file:8kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87228kB dirty:0kB writeback:0kB shmem:27464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 641.476828] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 641.476840] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 641.476851] ion_alloc+0x204/0x810 [ 641.476865] ? ion_dma_buf_release+0x40/0x40 [ 641.476877] ? __might_fault+0x177/0x1b0 [ 641.476888] ion_ioctl+0xea/0x1f0 [ 641.476897] ? ion_query_heaps+0x360/0x360 [ 641.476921] ? lock_acquire+0x170/0x3f0 [ 641.513710] Node 0 [ 641.514439] ? lock_downgrade+0x740/0x740 [ 641.514453] ? ion_query_heaps+0x360/0x360 [ 641.514465] do_vfs_ioctl+0x75a/0xff0 [ 641.518513] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 641.522897] ? ioctl_preallocate+0x1a0/0x1a0 [ 641.531278] lowmem_reserve[]: [ 641.531677] ? lock_downgrade+0x740/0x740 [ 641.536543] 0 [ 641.540969] ? __fget+0x225/0x360 [ 641.549931] 2717 [ 641.550813] ? do_vfs_ioctl+0xff0/0xff0 [ 641.581955] 2718 [ 641.582793] ? security_file_ioctl+0x83/0xb0 [ 641.587640] 2718 [ 641.591300] SyS_ioctl+0x7f/0xb0 [ 641.600286] 2718 [ 641.602171] ? do_vfs_ioctl+0xff0/0xff0 [ 641.634144] do_syscall_64+0x1d5/0x640 [ 641.639000] Node 0 [ 641.642493] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 641.650509] DMA32 free:17536kB min:36200kB low:45248kB high:54296kB active_anon:43980kB inactive_anon:72728kB active_file:76kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7840kB pagetables:2252kB bounce:0kB free_pcp:132kB local_pcp:0kB free_cma:0kB [ 641.651016] RIP: 0033:0x45e219 [ 641.654507] lowmem_reserve[]: [ 641.658677] RSP: 002b:00007f39dd445c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 641.662646] 0 [ 641.665049] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 641.665054] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 641.665058] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 641.665062] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 641.665066] R13: 00007ffc799adfff R14: 00007f39dd4469c0 R15: 000000000119bf8c [ 641.681011] warn_alloc_show_mem: 1 callbacks suppressed [ 641.681015] Mem-Info: [ 641.706903] 0 [ 641.719765] active_anon:11186 inactive_anon:25015 isolated_anon:0 [ 641.719765] active_file:17 inactive_file:23 isolated_file:0 [ 641.719765] unevictable:0 dirty:0 writeback:0 unstable:0 [ 641.719765] slab_reclaimable:12060 slab_unreclaimable:118280 [ 641.719765] mapped:44250 shmem:25367 pagetables:720 bounce:0 [ 641.719765] free:13725 free_pcp:0 free_cma:0 [ 641.720295] 0 [ 641.722359] Node 0 active_anon:43980kB inactive_anon:72788kB active_file:60kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:89772kB dirty:0kB writeback:0kB shmem:74004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 641.731520] 0 [ 641.739143] Node 1 active_anon:764kB inactive_anon:27272kB active_file:8kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87228kB dirty:0kB writeback:0kB shmem:27464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 641.740404] 0 [ 641.756444] Node 0 [ 641.802734] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 641.810725] Node 0 [ 641.829042] lowmem_reserve[]: [ 641.832979] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 641.853508] 0 [ 641.884252] lowmem_reserve[]: [ 641.915491] 2717 [ 641.950225] 0 [ 641.973614] 2718 [ 642.009011] 0 0 0 0 [ 642.013402] Node 1 Normal free:26296kB min:53696kB low:67120kB high:80544kB active_anon:764kB inactive_anon:27272kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:628kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 642.016458] 2718 2718 [ 642.052502] Node 0 DMA32 free:17660kB min:36200kB low:45248kB high:54296kB active_anon:43972kB inactive_anon:72728kB active_file:136kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7840kB pagetables:2252kB bounce:0kB free_pcp:352kB local_pcp:352kB free_cma:0kB [ 642.053308] lowmem_reserve[]: 0 0 0 0 0 [ 642.093256] lowmem_reserve[]: 0 [ 642.093825] Node 0 DMA: [ 642.097127] 0 0 0 0 [ 642.097141] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 642.097159] lowmem_reserve[]: 0 0 0 0 0 [ 642.097176] Node 1 Normal free:26348kB min:53696kB low:67120kB high:80544kB active_anon:764kB inactive_anon:27272kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:628kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 642.101665] 2*4kB [ 642.102138] lowmem_reserve[]: [ 642.134687] (UM) [ 642.172269] 0 [ 642.173244] 0*8kB 13*16kB (U) 6*32kB (U) 1*64kB (M) 4*128kB (UM) 3*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 10968kB [ 642.179632] 0 [ 642.197335] Node 0 DMA32: 947*4kB (ME) 882*8kB (UME) 259*16kB (UME) 55*32kB (UME) 11*64kB (UME) 2*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17708kB [ 642.201042] 0 [ 642.222012] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 642.225627] 0 0 [ 642.236575] Node 0 DMA: 2*4kB (UM) 0*8kB 13*16kB (U) 6*32kB (U) 1*64kB (M) 4*128kB (UM) 3*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 10968kB [ 642.241509] Node 1 Normal: 29*4kB (UM) 23*8kB (M) 16*16kB (UM) 18*32kB (M) 20*64kB (UM) 9*128kB (UM) 3*256kB (UM) 1*512kB (M) 1*1024kB (M) 8*2048kB (UM) 1*4096kB (M) = 26348kB [ 642.261869] Node 0 DMA32: 947*4kB (ME) 882*8kB (UME) 259*16kB (UME) 55*32kB (UME) 11*64kB (UME) 2*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17708kB [ 642.277877] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 642.297831] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 642.310719] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 642.322645] Node 1 Normal: 29*4kB (UM) 23*8kB (M) 16*16kB (UM) 18*32kB (M) 20*64kB (UM) 9*128kB (UM) 3*256kB (UM) [ 642.322723] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 642.322725] 1*512kB (M) [ 642.341982] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 642.350767] 1*1024kB (M) [ 642.353459] 25401 total pagecache pages [ 642.353469] 0 pages in swap cache [ 642.358521] 8*2048kB (UM) 1*4096kB (M) = 26348kB [ 642.369251] Swap cache stats: add 0, delete 0, find 0/0 [ 642.375039] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 642.376440] Free swap = 0kB [ 642.383878] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 642.393979] Total swap = 0kB [ 642.400804] 2097051 pages RAM [ 642.403907] 0 pages HighMem/MovableOnly [ 642.404664] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 642.416601] 363840 pages reserved [ 642.420146] 0 pages cma reserved [ 642.423508] Out of memory (oom_kill_allocating_task): Kill process 20841 (syz-executor.3) score 0 or sacrifice child [ 642.425354] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 642.443222] Killed process 20841 (syz-executor.3) total-vm:93348kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 642.451438] 25401 total pagecache pages [ 642.453508] syz-executor.3: [ 642.459416] systemd-cgroups invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 642.467012] 0 pages in swap cache [ 642.483305] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 642.488777] Swap cache stats: add 0, delete 0, find 0/0 [ 642.493792] syz-executor.3 cpuset= [ 642.507541] systemd-cgroups cpuset= [ 642.508978] Free swap = 0kB [ 642.524198] / [ 642.527905] Total swap = 0kB [ 642.530881] mems_allowed=0-1 [ 642.532615] 2097051 pages RAM [ 642.539371] CPU: 1 PID: 20841 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 642.545783] 0 pages HighMem/MovableOnly [ 642.547257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 642.551384] 363840 pages reserved [ 642.560715] Call Trace: [ 642.560740] dump_stack+0x1b2/0x281 [ 642.560756] warn_alloc.cold+0x96/0x1cc [ 642.560771] ? zone_watermark_ok_safe+0x220/0x220 [ 642.564192] 0 pages cma reserved [ 642.566765] ? wait_for_completion_io+0x10/0x10 [ 642.566780] __alloc_pages_nodemask+0x2127/0x2720 [ 642.591998] ? lock_acquire+0x170/0x3f0 [ 642.595977] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 642.600819] ? ion_page_pool_alloc+0x9e/0x1b0 [ 642.605317] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 642.610769] ? alloc_pages_current+0x73/0x260 [ 642.615257] alloc_pages_current+0x155/0x260 [ 642.619666] ion_page_pool_alloc+0x118/0x1b0 [ 642.624075] ion_system_heap_allocate+0x133/0x8c0 [ 642.628938] ? ion_alloc+0x187/0x810 [ 642.632736] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 642.638200] ? ion_system_contig_heap_create+0x130/0x130 [ 642.643646] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 642.648658] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 642.653506] ion_alloc+0x204/0x810 [ 642.657049] ? ion_dma_buf_release+0x40/0x40 [ 642.661456] ? __might_fault+0x177/0x1b0 [ 642.665523] ion_ioctl+0xea/0x1f0 [ 642.668983] ? ion_query_heaps+0x360/0x360 [ 642.673219] ? lock_acquire+0x170/0x3f0 [ 642.677214] ? lock_downgrade+0x740/0x740 [ 642.681365] ? ion_query_heaps+0x360/0x360 [ 642.685606] do_vfs_ioctl+0x75a/0xff0 [ 642.689404] ? ioctl_preallocate+0x1a0/0x1a0 [ 642.693810] ? lock_downgrade+0x740/0x740 [ 642.698009] ? __fget+0x225/0x360 [ 642.701474] ? do_vfs_ioctl+0xff0/0xff0 [ 642.705452] ? security_file_ioctl+0x83/0xb0 [ 642.709863] SyS_ioctl+0x7f/0xb0 [ 642.713225] ? do_vfs_ioctl+0xff0/0xff0 [ 642.717202] do_syscall_64+0x1d5/0x640 [ 642.721100] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 642.726286] RIP: 0033:0x45e219 [ 642.729483] RSP: 002b:00007f1396e62c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 642.737199] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 642.746818] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 642.754109] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 642.761389] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 642.768666] R13: 00007ffeee3e983f R14: 00007f1396e639c0 R15: 000000000119bf8c [ 642.811937] / mems_allowed=0-1 [ 642.832142] CPU: 0 PID: 20885 Comm: systemd-cgroups Not tainted 4.14.217-syzkaller #0 [ 642.840148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 642.849512] Call Trace: [ 642.852122] dump_stack+0x1b2/0x281 [ 642.855761] dump_header+0x178/0x82f [ 642.859486] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 642.864604] ? ___ratelimit+0x2cd/0x530 [ 642.868761] oom_kill_process.cold+0x10/0xb18 [ 642.873275] out_of_memory+0xe3e/0x1190 [ 642.877277] ? oom_killer_disable+0x1c0/0x1c0 [ 642.881777] ? mutex_trylock+0x152/0x1a0 [ 642.885848] __alloc_pages_nodemask+0x23e1/0x2720 [ 642.890710] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 642.895573] alloc_pages_current+0x155/0x260 [ 642.899997] filemap_fault+0xea3/0x1980 [ 642.904004] ext4_filemap_fault+0x84/0xb0 [ 642.908202] __do_fault+0xfa/0x380 [ 642.911742] __handle_mm_fault+0x2497/0x4620 [ 642.916156] ? vm_insert_page+0x7c0/0x7c0 [ 642.920321] ? vm_mmap_pgoff+0x168/0x1a0 [ 642.924382] ? vm_mmap_pgoff+0xcb/0x1a0 [ 642.928362] handle_mm_fault+0x391/0x860 [ 642.932434] __do_page_fault+0x549/0xad0 [ 642.936499] ? spurious_fault+0x640/0x640 [ 642.940653] ? do_page_fault+0x60/0x500 [ 642.944625] ? page_fault+0x2f/0x50 [ 642.948257] page_fault+0x45/0x50 [ 642.951704] RIP: 2bafb000:0x3c06 [ 642.955058] RSP: fc31951e:00007ffff5912650 EFLAGS: 7f0a2bb03170 [ 643.216171] device hsr_slave_1 left promiscuous mode [ 643.278700] device hsr_slave_0 left promiscuous mode [ 643.328594] Mem-Info: [ 643.335410] active_anon:11209 inactive_anon:25015 isolated_anon:0 [ 643.335410] active_file:146 inactive_file:2063 isolated_file:0 [ 643.335410] unevictable:0 dirty:0 writeback:0 unstable:0 [ 643.335410] slab_reclaimable:11999 slab_unreclaimable:119454 [ 643.335410] mapped:45789 shmem:25367 pagetables:720 bounce:0 [ 643.335410] free:139355 free_pcp:580 free_cma:0 [ 643.369715] team0 (unregistering): Port device team_slave_1 removed [ 643.430699] team0 (unregistering): Port device team_slave_0 removed [ 643.499323] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 643.506733] Node 0 active_anon:44184kB inactive_anon:72788kB active_file:1052kB inactive_file:7572kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:95952kB dirty:0kB writeback:0kB shmem:74004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 643.524400] Mem-Info: [ 643.558730] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 643.608588] active_anon:11259 inactive_anon:25015 isolated_anon:0 [ 643.608588] active_file:346 inactive_file:2188 isolated_file:0 [ 643.608588] unevictable:0 dirty:0 writeback:0 unstable:0 [ 643.608588] slab_reclaimable:11999 slab_unreclaimable:119414 [ 643.608588] mapped:46039 shmem:25367 pagetables:720 bounce:0 [ 643.608588] free:168148 free_pcp:667 free_cma:0 [ 643.614301] Node 1 active_anon:752kB inactive_anon:27272kB active_file:32kB inactive_file:1080kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:88104kB dirty:0kB writeback:0kB shmem:27464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 643.690116] Node 0 active_anon:44284kB inactive_anon:72788kB active_file:1352kB inactive_file:7672kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96052kB dirty:0kB writeback:0kB shmem:74004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 643.715000] bond0 (unregistering): Released all slaves [ 643.739900] Node 1 active_anon:752kB inactive_anon:27272kB active_file:32kB inactive_file:1080kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:88104kB dirty:0kB writeback:0kB shmem:27464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 643.854283] Node 0 DMA free:11500kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 643.864274] Node 0 [ 643.904276] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 643.926316] Node 0 DMA32 free:408180kB min:36200kB low:45248kB high:54296kB active_anon:44484kB inactive_anon:72728kB active_file:1352kB inactive_file:8072kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7904kB pagetables:2400kB bounce:0kB free_pcp:1368kB local_pcp:648kB free_cma:0kB [ 643.961857] DMA free:11500kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 644.022224] lowmem_reserve[]: 0 0 0 0 0 [ 644.054511] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 644.068756] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 644.124264] Node 0 DMA32 free:365872kB min:36200kB low:45248kB high:54296kB active_anon:45000kB inactive_anon:72728kB active_file:1448kB inactive_file:8308kB unevictable:0kB writepending:296kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7936kB pagetables:2372kB bounce:0kB free_pcp:1280kB local_pcp:640kB free_cma:0kB [ 644.154297] lowmem_reserve[]: 0 0 0 0 0 [ 644.158329] Node 1 Normal free:542248kB min:53696kB low:67120kB high:80544kB active_anon:668kB inactive_anon:27272kB active_file:36kB inactive_file:1076kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:628kB bounce:0kB free_pcp:1272kB local_pcp:652kB free_cma:0kB [ 644.217751] lowmem_reserve[]: 0 0 0 0 0 [ 644.244327] Node 0 DMA: 6*4kB (UM) 13*8kB (U) 13*16kB (U) 5*32kB (U) 1*64kB (M) 5*128kB (UM) 3*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 11184kB [ 644.248190] lowmem_reserve[]: [ 644.284307] Node 0 DMA32: 9966*4kB (UME) 4486*8kB (UE) 8595*16kB (UE) 5037*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 374456kB [ 644.323057] 0 0 0 0 0 [ 644.329139] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 644.354262] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 644.394314] Node 1 Normal: 1606*4kB (UM) 2025*8kB (UM) 2336*16kB (UM) 1872*32kB (UM) 1470*64kB (UM) 736*128kB (UM) 143*256kB (UM) 102*512kB (UM) 168*1024kB (U) 18*2048kB (U) 0*4096kB = 605920kB [ 644.428715] lowmem_reserve[]: 0 0 0 0 0 [ 644.432765] Node 1 Normal free:623296kB min:53696kB low:67120kB high:80544kB active_anon:668kB inactive_anon:27272kB active_file:36kB inactive_file:1076kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:628kB bounce:0kB free_pcp:1320kB local_pcp:692kB free_cma:0kB [ 644.454334] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 644.474417] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 644.483002] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 644.491990] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 644.500647] 28108 total pagecache pages [ 644.504742] 0 pages in swap cache [ 644.508193] Swap cache stats: add 0, delete 0, find 0/0 [ 644.527841] Free swap = 0kB [ 644.530891] Total swap = 0kB [ 644.533929] 2097051 pages RAM [ 644.564212] lowmem_reserve[]: 0 0 0 0 0 [ 644.574259] 0 pages HighMem/MovableOnly [ 644.575575] Node 0 [ 644.579937] 363840 pages reserved [ 644.579941] 0 pages cma reserved [ 644.634258] DMA: 6*4kB (UM) 13*8kB (U) 13*16kB (U) 5*32kB (U) 1*64kB (M) 5*128kB (UM) 3*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 11184kB [ 644.724225] Node 0 DMA32: 10225*4kB (UME) 5842*8kB (UME) 8885*16kB (UME) 5239*32kB (UME) 13*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 398276kB [ 644.784747] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 644.847199] Node 1 Normal: 1748*4kB (UM) 2180*8kB (UM) 2489*16kB (UM) 2018*32kB (UM) 13*64kB (M) 7*128kB (UM) 3*256kB (UM) 100*512kB (UM) 350*1024kB (U) 87*2048kB (U) 6*4096kB (U) = 743680kB [ 644.934214] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 644.963521] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 644.993918] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 645.024288] Bluetooth: hci5 command 0x0406 tx timeout [ 645.035017] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 645.043629] 28100 total pagecache pages [ 645.059256] 0 pages in swap cache [ 645.062745] Swap cache stats: add 0, delete 0, find 0/0 [ 645.105633] Free swap = 0kB [ 645.108668] Total swap = 0kB [ 645.111689] 2097051 pages RAM [ 645.126741] 0 pages HighMem/MovableOnly [ 645.136852] 363840 pages reserved [ 645.140337] 0 pages cma reserved [ 645.143697] Out of memory (oom_kill_allocating_task): Kill process 20885 (systemd-cgroups) score 0 or sacrifice child [ 645.194215] Killed process 20885 (systemd-cgroups) total-vm:2512kB, anon-rss:40kB, file-rss:0kB, shmem-rss:0kB 21:27:09 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001}) 21:27:09 executing program 3: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0xc0241, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:27:09 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:27:09 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x80000001, 0x4) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0xc0241, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:27:09 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:27:09 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0x12}) 21:27:09 executing program 3: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0xc0241, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:27:09 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:27:09 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001}) 21:27:09 executing program 3: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0xc0241, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:27:09 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:27:09 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0x12}) 21:27:09 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:27:10 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001}) 21:27:10 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0x12}) [ 650.732049] IPVS: ftp: loaded support on port[0] = 21 [ 650.925569] chnl_net:caif_netlink_parms(): no params data found [ 651.082850] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.089593] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.100116] device bridge_slave_0 entered promiscuous mode [ 651.109089] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.116387] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.124583] device bridge_slave_1 entered promiscuous mode [ 651.153107] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 651.164119] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 651.196324] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 651.203948] team0: Port device team_slave_0 added [ 651.209831] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 651.217482] team0: Port device team_slave_1 added [ 651.241247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 651.248269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 651.274334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 651.287417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 651.293759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 651.319269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 651.330435] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 651.338305] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 651.367237] device hsr_slave_0 entered promiscuous mode [ 651.373615] device hsr_slave_1 entered promiscuous mode [ 651.380087] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 651.387490] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 651.503314] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.509795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 651.516526] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.522926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 651.566922] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 651.574953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 651.585335] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 651.596239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 651.604035] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.611051] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.623323] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 651.630081] 8021q: adding VLAN 0 to HW filter on device team0 [ 651.641233] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 651.649788] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.656213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 651.674347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 651.682198] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.688654] bridge0: port 2(bridge_slave_1) entered forwarding state [ 651.712579] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 651.722971] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 651.733561] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 651.741045] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 651.749451] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 651.757640] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 651.766184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 651.781295] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 651.788845] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 651.797057] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 651.815297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 651.821821] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 651.830183] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 651.904847] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 651.928806] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 651.946190] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 651.953349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 651.963165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 652.017825] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 652.025777] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 652.032868] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 652.045918] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 652.052826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 652.061902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 652.072619] device veth0_vlan entered promiscuous mode [ 652.082644] device veth1_vlan entered promiscuous mode [ 652.088960] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 652.097201] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 652.107773] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 652.115956] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 652.129129] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 652.151483] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 652.166487] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 652.177745] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 652.189326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 652.197982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 652.208930] device veth0_macvtap entered promiscuous mode [ 652.215718] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 652.224683] device veth1_macvtap entered promiscuous mode [ 652.230902] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 652.240959] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 652.251310] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 652.260386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 652.270371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.279900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 652.289735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.302867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 652.312935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.322257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 652.332051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.341231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 652.351011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.361270] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 652.368492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 652.375512] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 652.382905] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 652.390593] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 652.398856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 652.409808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 652.419909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.429298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 652.439847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.449097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 652.459211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.468719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 652.478676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.488059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 652.498016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.508309] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 652.515472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 652.522622] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 652.531108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 652.783713] Bluetooth: hci0 command 0x0409 tx timeout 21:27:16 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:27:16 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 21:27:16 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001}) 21:27:16 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:27:16 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0xc0241, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:27:16 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:27:16 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 21:27:16 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:27:16 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001}) 21:27:16 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:27:16 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 21:27:16 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001}) [ 653.948588] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 653.980775] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 653.993217] CPU: 0 PID: 21187 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 654.001156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 654.010599] Call Trace: [ 654.013174] dump_stack+0x1b2/0x281 [ 654.016786] warn_alloc.cold+0x96/0x1cc [ 654.020751] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 654.025748] ? zone_watermark_ok_safe+0x220/0x220 [ 654.030579] __alloc_pages_nodemask+0x2127/0x2720 [ 654.035408] ? lock_acquire+0x170/0x3f0 [ 654.039376] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 654.044205] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 654.049635] ? __mutex_unlock_slowpath+0x75/0x770 [ 654.054459] ? retint_kernel+0x2d/0x2d [ 654.058419] alloc_pages_current+0x155/0x260 [ 654.062811] ion_page_pool_alloc+0x118/0x1b0 [ 654.067215] ion_system_heap_allocate+0x133/0x8c0 [ 654.072062] ? ion_alloc+0x187/0x810 [ 654.075756] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 654.081190] ? ion_system_contig_heap_create+0x130/0x130 [ 654.086642] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 654.091641] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 654.096467] ion_alloc+0x204/0x810 [ 654.099991] ? ion_dma_buf_release+0x40/0x40 [ 654.104381] ? __might_fault+0x177/0x1b0 [ 654.108466] ion_ioctl+0xea/0x1f0 [ 654.111911] ? ion_query_heaps+0x360/0x360 [ 654.116129] ? lock_acquire+0x170/0x3f0 [ 654.120085] ? lock_downgrade+0x740/0x740 [ 654.124211] ? ion_query_heaps+0x360/0x360 [ 654.128429] do_vfs_ioctl+0x75a/0xff0 [ 654.132209] ? ioctl_preallocate+0x1a0/0x1a0 [ 654.136595] ? lock_downgrade+0x740/0x740 [ 654.140725] ? __fget+0x225/0x360 [ 654.144172] ? do_vfs_ioctl+0xff0/0xff0 [ 654.148139] ? security_file_ioctl+0x83/0xb0 [ 654.152535] SyS_ioctl+0x7f/0xb0 [ 654.155880] ? do_vfs_ioctl+0xff0/0xff0 [ 654.159836] do_syscall_64+0x1d5/0x640 [ 654.163708] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 654.168877] RIP: 0033:0x45e219 [ 654.172057] RSP: 002b:00007fd20c681c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 654.179744] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 654.187015] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 654.194301] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 654.201827] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 654.214809] R13: 00007fff87e85fff R14: 00007fd20c6829c0 R15: 000000000119bf8c [ 654.249632] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 654.249969] syz-executor.2: [ 654.270604] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 654.279441] CPU: 1 PID: 21186 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 654.287328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 654.296100] page allocation failure: order:4 [ 654.296686] Call Trace: [ 654.296699] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 654.301101] dump_stack+0x1b2/0x281 [ 654.301118] warn_alloc.cold+0x96/0x1cc [ 654.301133] ? zone_watermark_ok_safe+0x220/0x220 [ 654.307770] (null) [ 654.310813] __alloc_pages_nodemask+0x2127/0x2720 [ 654.310832] ? lock_acquire+0x170/0x3f0 [ 654.315172] syz-executor.2 cpuset= [ 654.318410] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 654.318429] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 654.318440] ? __mutex_unlock_slowpath+0x75/0x770 [ 654.323351] / [ 654.325422] alloc_pages_current+0x155/0x260 [ 654.330597] mems_allowed=0-1 [ 654.334196] ion_page_pool_alloc+0x118/0x1b0 [ 654.334208] ion_system_heap_allocate+0x133/0x8c0 [ 654.334222] ? ion_alloc+0x187/0x810 [ 654.334234] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 654.380268] ? ion_system_contig_heap_create+0x130/0x130 [ 654.385712] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 654.390730] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 654.395560] ion_alloc+0x204/0x810 [ 654.399092] ? ion_dma_buf_release+0x40/0x40 [ 654.403508] ? __might_fault+0x177/0x1b0 [ 654.407591] ion_ioctl+0xea/0x1f0 [ 654.411043] ? ion_query_heaps+0x360/0x360 [ 654.415295] ? lock_acquire+0x170/0x3f0 [ 654.419251] ? lock_downgrade+0x740/0x740 [ 654.423385] ? ion_query_heaps+0x360/0x360 [ 654.427629] do_vfs_ioctl+0x75a/0xff0 [ 654.431430] ? ioctl_preallocate+0x1a0/0x1a0 [ 654.435837] ? lock_downgrade+0x740/0x740 [ 654.439984] ? __fget+0x225/0x360 [ 654.443423] ? do_vfs_ioctl+0xff0/0xff0 [ 654.447386] ? security_file_ioctl+0x83/0xb0 [ 654.451789] SyS_ioctl+0x7f/0xb0 [ 654.455154] ? do_vfs_ioctl+0xff0/0xff0 [ 654.459112] do_syscall_64+0x1d5/0x640 [ 654.462989] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 654.468190] RIP: 0033:0x45e219 [ 654.471388] RSP: 002b:00007faf520eec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 654.479082] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 654.486338] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 654.493589] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 654.500843] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 654.508099] R13: 00007ffc58d08e3f R14: 00007faf520ef9c0 R15: 000000000119bf8c [ 654.515367] CPU: 0 PID: 21190 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 654.523265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 654.532623] Call Trace: [ 654.535211] dump_stack+0x1b2/0x281 [ 654.538823] warn_alloc.cold+0x96/0x1cc [ 654.542781] ? zone_watermark_ok_safe+0x220/0x220 [ 654.547639] __alloc_pages_nodemask+0x2127/0x2720 [ 654.552465] ? _raw_spin_unlock_irq+0x24/0x80 [ 654.557032] ? lock_acquire+0x170/0x3f0 [ 654.560990] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 654.565819] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 654.571532] ? __mutex_unlock_slowpath+0x75/0x770 [ 654.576359] alloc_pages_current+0x155/0x260 [ 654.580768] ion_page_pool_alloc+0x118/0x1b0 [ 654.585160] ion_system_heap_allocate+0x133/0x8c0 [ 654.589984] ? ion_alloc+0x187/0x810 [ 654.593680] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 654.599113] ? ion_system_contig_heap_create+0x130/0x130 [ 654.604543] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 654.609555] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 654.614384] ion_alloc+0x204/0x810 [ 654.617909] ? ion_dma_buf_release+0x40/0x40 [ 654.622300] ? __might_fault+0x177/0x1b0 [ 654.626344] ion_ioctl+0xea/0x1f0 [ 654.629781] ? ion_query_heaps+0x360/0x360 [ 654.634013] ? lock_acquire+0x170/0x3f0 [ 654.637967] ? lock_downgrade+0x740/0x740 [ 654.642094] ? ion_query_heaps+0x360/0x360 [ 654.646311] do_vfs_ioctl+0x75a/0xff0 [ 654.650094] ? ioctl_preallocate+0x1a0/0x1a0 [ 654.654481] ? lock_downgrade+0x740/0x740 [ 654.658635] ? __fget+0x225/0x360 [ 654.662074] ? do_vfs_ioctl+0xff0/0xff0 [ 654.666725] ? security_file_ioctl+0x83/0xb0 [ 654.671118] SyS_ioctl+0x7f/0xb0 [ 654.674474] ? do_vfs_ioctl+0xff0/0xff0 [ 654.678444] do_syscall_64+0x1d5/0x640 [ 654.682333] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 654.687503] RIP: 0033:0x45e219 [ 654.690670] RSP: 002b:00007f1bf73e9c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 654.698358] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 654.705606] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 654.712857] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 654.720107] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 654.727357] R13: 00007ffe1c51cdaf R14: 00007f1bf73ea9c0 R15: 000000000119bf8c [ 654.749153] Mem-Info: [ 654.752139] active_anon:11508 inactive_anon:25017 isolated_anon:0 [ 654.752139] active_file:2504 inactive_file:4781 isolated_file:44 [ 654.752139] unevictable:0 dirty:19 writeback:1 unstable:0 [ 654.752139] slab_reclaimable:12116 slab_unreclaimable:114428 [ 654.752139] mapped:57991 shmem:25371 pagetables:823 bounce:0 [ 654.752139] free:162743 free_pcp:56 free_cma:0 [ 654.803530] Node 0 active_anon:45768kB inactive_anon:72796kB active_file:10012kB inactive_file:19120kB unevictable:0kB isolated(anon):0kB isolated(file):176kB mapped:144732kB dirty:72kB writeback:4kB shmem:74020kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 654.832286] Node 1 active_anon:264kB inactive_anon:27272kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87232kB dirty:4kB writeback:0kB shmem:27464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 654.863631] Bluetooth: hci0 command 0x041b tx timeout [ 654.869055] Node 0 DMA free:11060kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 654.896267] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 654.901333] Node 0 DMA32 free:477764kB min:36200kB low:45248kB high:54296kB active_anon:45768kB inactive_anon:72736kB active_file:9912kB inactive_file:18824kB unevictable:0kB writepending:76kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:8160kB pagetables:2728kB bounce:0kB free_pcp:260kB local_pcp:172kB free_cma:0kB [ 654.932317] lowmem_reserve[]: 0 0 0 0 0 [ 654.937107] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 654.965379] lowmem_reserve[]: 0 0 0 0 0 [ 654.969418] Node 1 Normal free:59936kB min:53696kB low:67120kB high:80544kB active_anon:264kB inactive_anon:27272kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:564kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 655.000475] lowmem_reserve[]: 0 0 0 0 0 [ 655.005404] Node 0 DMA: 11*4kB (UM) 11*8kB (UH) 11*16kB (UH) 8*32kB (UH) 2*64kB (UM) 1*128kB (M) 2*256kB (MH) 1*512kB (M) 1*1024kB (M) 0*2048kB 2*4096kB (UM) = 11060kB [ 655.021589] Node 0 DMA32: 65*4kB (UE) 589*8kB (ME) 5058*16kB (UE) 9500*32kB (UE) 80*64kB (U) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 395276kB [ 655.037340] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 655.049034] Node 1 Normal: 722*4kB (U) 1205*8kB (U) 1187*16kB (U) 888*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 59936kB [ 655.068144] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 655.089185] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 655.110793] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 655.133523] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 655.142141] 32685 total pagecache pages [ 655.163465] 0 pages in swap cache [ 655.166982] Swap cache stats: add 0, delete 0, find 0/0 [ 655.172422] Free swap = 0kB [ 655.175825] Total swap = 0kB [ 655.178962] 2097051 pages RAM [ 655.182062] 0 pages HighMem/MovableOnly [ 655.198148] 363840 pages reserved [ 655.201679] 0 pages cma reserved [ 655.768854] syz-executor.5 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 655.851659] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 655.888261] CPU: 1 PID: 19965 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 655.896181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 655.905549] Call Trace: [ 655.908154] dump_stack+0x1b2/0x281 [ 655.911783] dump_header+0x178/0x82f [ 655.915493] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 655.920592] ? ___ratelimit+0x2cd/0x530 [ 655.924569] oom_kill_process.cold+0x10/0xb18 [ 655.929076] out_of_memory+0xe3e/0x1190 [ 655.933051] ? oom_killer_disable+0x1c0/0x1c0 [ 655.937541] ? mutex_trylock+0x152/0x1a0 [ 655.941599] __alloc_pages_nodemask+0x23e1/0x2720 [ 655.946452] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 655.951416] alloc_pages_current+0x155/0x260 [ 655.955821] filemap_fault+0xea3/0x1980 [ 655.959799] ext4_filemap_fault+0x84/0xb0 [ 655.963943] __do_fault+0xfa/0x380 [ 655.967480] __handle_mm_fault+0x2497/0x4620 [ 655.971887] ? vm_insert_page+0x7c0/0x7c0 [ 655.976028] ? lock_downgrade+0x740/0x740 [ 655.980267] handle_mm_fault+0x391/0x860 [ 655.984325] __do_page_fault+0x549/0xad0 [ 655.988383] ? spurious_fault+0x640/0x640 [ 655.992524] ? do_page_fault+0x60/0x500 [ 655.997015] ? page_fault+0x2f/0x50 [ 656.000633] page_fault+0x45/0x50 [ 656.004082] RIP: 0002:0x32 [ 656.006916] RSP: 0bb8:000000000009fc25 EFLAGS: 00000027 [ 656.014506] Mem-Info: [ 656.024159] active_anon:11537 inactive_anon:25017 isolated_anon:0 [ 656.024159] active_file:33 inactive_file:21 isolated_file:11 [ 656.024159] unevictable:0 dirty:0 writeback:0 unstable:0 [ 656.024159] slab_reclaimable:12116 slab_unreclaimable:114083 [ 656.024159] mapped:53032 shmem:25371 pagetables:823 bounce:0 [ 656.024159] free:25083 free_pcp:60 free_cma:0 [ 656.060057] Node 0 active_anon:45884kB inactive_anon:72796kB active_file:48kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):44kB mapped:124884kB dirty:0kB writeback:0kB shmem:74020kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 656.088378] Node 1 active_anon:264kB inactive_anon:27272kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87228kB dirty:0kB writeback:0kB shmem:27464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 656.115341] Node 0 DMA free:11060kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 656.141818] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 656.147172] Node 0 DMA32 free:35772kB min:36200kB low:45248kB high:54296kB active_anon:45884kB inactive_anon:72736kB active_file:48kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:8064kB pagetables:2728kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 656.175721] lowmem_reserve[]: 0 0 0 0 0 [ 656.179719] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 656.205281] lowmem_reserve[]: 0 0 0 0 0 [ 656.209255] Node 1 Normal free:53624kB min:53696kB low:67120kB high:80544kB active_anon:264kB inactive_anon:27272kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:564kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 656.237837] lowmem_reserve[]: 0 0 0 0 0 [ 656.241807] Node 0 DMA: 11*4kB (UM) 11*8kB (UM) 11*16kB (UM) 8*32kB (UM) 2*64kB (M) 1*128kB (M) 2*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 2*4096kB (UM) = 11060kB [ 656.256832] Node 0 DMA32: 912*4kB (UME) 977*8kB (UME) 318*16kB (UME) 243*32kB (UME) 121*64kB (UM) 9*128kB (UM) 4*256kB (UM) 3*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 35784kB [ 656.272801] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 656.283648] Node 1 Normal: 0*4kB 773*8kB (UM) 1187*16kB (U) 887*32kB (U) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53624kB [ 656.296850] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 656.305937] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 656.314566] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 656.323485] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 656.332049] 25394 total pagecache pages [ 656.336035] 0 pages in swap cache [ 656.339464] Swap cache stats: add 0, delete 0, find 0/0 [ 656.344857] Free swap = 0kB [ 656.347891] Total swap = 0kB [ 656.350893] 2097051 pages RAM [ 656.354031] 0 pages HighMem/MovableOnly [ 656.357980] 363840 pages reserved [ 656.361422] 0 pages cma reserved [ 656.364822] Out of memory (oom_kill_allocating_task): Kill process 19965 (syz-executor.5) score 0 or sacrifice child [ 656.375536] Killed process 21186 (syz-executor.5) total-vm:93348kB, anon-rss:156kB, file-rss:34816kB, shmem-rss:0kB [ 656.399835] oom_reaper: reaped process 21186 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 656.471218] oom_reaper: reaped process 21190 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 656.503679] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 656.531447] in:imklog cpuset=/ mems_allowed=0-1 [ 656.550066] CPU: 0 PID: 20888 Comm: in:imklog Not tainted 4.14.217-syzkaller #0 [ 656.557551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 656.566918] Call Trace: [ 656.569519] dump_stack+0x1b2/0x281 [ 656.573153] dump_header+0x178/0x82f [ 656.576979] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 656.582087] ? ___ratelimit+0x2cd/0x530 [ 656.583394] syz-executor.2: page allocation failure: order:0 [ 656.586065] oom_kill_process.cold+0x10/0xb18 [ 656.586086] out_of_memory+0xe3e/0x1190 [ 656.592310] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 656.596808] ? oom_killer_disable+0x1c0/0x1c0 [ 656.596818] ? mutex_trylock+0x152/0x1a0 [ 656.596827] __alloc_pages_nodemask+0x23e1/0x2720 [ 656.596846] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 656.596869] alloc_pages_current+0x155/0x260 [ 656.596885] filemap_fault+0xea3/0x1980 [ 656.596906] ext4_filemap_fault+0x84/0xb0 [ 656.596919] __do_fault+0xfa/0x380 [ 656.596928] __handle_mm_fault+0x2497/0x4620 [ 656.596939] ? vm_insert_page+0x7c0/0x7c0 [ 656.620807] (null) [ 656.621400] ? lock_downgrade+0x740/0x740 [ 656.640764] syz-executor.2 cpuset= [ 656.643009] handle_mm_fault+0x391/0x860 [ 656.665409] __do_page_fault+0x549/0xad0 [ 656.668094] / mems_allowed=0-1 [ 656.669470] ? spurious_fault+0x640/0x640 [ 656.669479] ? do_page_fault+0x60/0x500 [ 656.681359] ? page_fault+0x2f/0x50 [ 656.684982] page_fault+0x45/0x50 [ 656.688449] RIP: 1fa0:0x1f9f [ 656.691447] RSP: 0000:0000564030a399d0 EFLAGS: 7f834eea0da0 [ 656.691467] CPU: 1 PID: 21190 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 656.701404] Mem-Info: [ 656.705158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 656.705163] Call Trace: [ 656.705187] dump_stack+0x1b2/0x281 [ 656.705203] warn_alloc.cold+0x96/0x1cc [ 656.707625] active_anon:11486 inactive_anon:25017 isolated_anon:0 [ 656.707625] active_file:13 inactive_file:12 isolated_file:0 [ 656.707625] unevictable:0 dirty:0 writeback:0 unstable:0 [ 656.707625] slab_reclaimable:12116 slab_unreclaimable:114077 [ 656.707625] mapped:53028 shmem:25371 pagetables:823 bounce:0 [ 656.707625] free:13822 free_pcp:0 free_cma:0 [ 656.716966] ? zone_watermark_ok_safe+0x220/0x220 [ 656.716978] ? usleep_range+0x130/0x130 [ 656.716986] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 656.717003] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 656.719570] Node 0 active_anon:45680kB inactive_anon:72796kB active_file:52kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:124884kB dirty:0kB writeback:0kB shmem:74020kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 656.723186] ? run_timer_softirq+0x5a0/0x5a0 [ 656.727171] Node 1 active_anon:264kB inactive_anon:27272kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87228kB dirty:0kB writeback:0kB shmem:27464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 656.760196] __alloc_pages_nodemask+0x2127/0x2720 [ 656.760220] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 656.765086] Node 0 [ 656.769033] ? migrate_swap_stop+0x880/0x880 [ 656.774161] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 656.779131] ? lock_acquire+0x170/0x3f0 [ 656.807061] lowmem_reserve[]: [ 656.811538] alloc_pages_current+0x155/0x260 [ 656.838523] 0 [ 656.843338] ion_page_pool_alloc+0x118/0x1b0 [ 656.843350] ion_system_heap_allocate+0x133/0x8c0 [ 656.848182] 2717 [ 656.850405] ? ion_alloc+0x187/0x810 [ 656.854807] 2718 [ 656.880467] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 656.880479] ? ion_system_contig_heap_create+0x130/0x130 [ 656.880491] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 656.884473] 2718 [ 656.887565] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 656.891962] 2718 [ 656.893754] ion_alloc+0x204/0x810 [ 656.893768] ? ion_dma_buf_release+0x40/0x40 [ 656.893781] ? __might_fault+0x177/0x1b0 [ 656.902988] ion_ioctl+0xea/0x1f0 [ 656.905049] Node 0 [ 656.908725] ? ion_query_heaps+0x360/0x360 [ 656.910769] DMA32 free:18024kB min:36200kB low:45248kB high:54296kB active_anon:45780kB inactive_anon:72736kB active_file:52kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:8064kB pagetables:2728kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 656.916192] ? lock_acquire+0x170/0x3f0 [ 656.916202] ? lock_downgrade+0x740/0x740 [ 656.916209] ? ion_query_heaps+0x360/0x360 [ 656.916220] do_vfs_ioctl+0x75a/0xff0 [ 656.921641] lowmem_reserve[]: [ 656.926654] ? ioctl_preallocate+0x1a0/0x1a0 [ 656.926663] ? lock_downgrade+0x740/0x740 [ 656.926676] ? __fget+0x225/0x360 [ 656.928713] 0 [ 656.933570] ? do_vfs_ioctl+0xff0/0xff0 [ 656.933583] ? security_file_ioctl+0x83/0xb0 [ 656.933592] SyS_ioctl+0x7f/0xb0 [ 656.933601] ? do_vfs_ioctl+0xff0/0xff0 [ 656.933612] do_syscall_64+0x1d5/0x640 [ 656.933630] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 656.935675] 0 [ 656.939203] RIP: 0033:0x45e219 [ 656.943658] 0 [ 656.947656] RSP: 002b:00007f1bf73e9c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 656.951107] 0 [ 656.953323] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 656.953328] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 656.953333] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 656.953338] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 656.953343] R13: 00007ffe1c51cdaf R14: 00007f1bf73ea9c0 R15: 000000000119bf8c [ 656.953769] syz-executor.5: [ 656.957586] 0 [ 656.994070] Bluetooth: hci0 command 0x040f tx timeout [ 657.033471] warn_alloc_show_mem: 2 callbacks suppressed [ 657.033474] Mem-Info: [ 657.051373] Node 0 [ 657.053250] active_anon:11485 inactive_anon:25017 isolated_anon:0 [ 657.053250] active_file:13 inactive_file:11 isolated_file:0 [ 657.053250] unevictable:0 dirty:0 writeback:0 unstable:0 [ 657.053250] slab_reclaimable:12116 slab_unreclaimable:114084 [ 657.053250] mapped:53027 shmem:25371 pagetables:823 bounce:0 [ 657.053250] free:13884 free_pcp:26 free_cma:0 [ 657.064903] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 657.066919] Node 0 active_anon:45676kB inactive_anon:72796kB active_file:48kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:124880kB dirty:0kB writeback:0kB shmem:74020kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 657.067881] lowmem_reserve[]: [ 657.075641] Node 1 active_anon:264kB inactive_anon:27272kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87228kB dirty:0kB writeback:0kB shmem:27464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 657.075645] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 657.075665] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 657.075682] Node 0 DMA32 free:18152kB min:36200kB low:45248kB high:54296kB active_anon:45676kB inactive_anon:72736kB active_file:48kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:8064kB pagetables:2728kB bounce:0kB free_pcp:104kB local_pcp:4kB free_cma:0kB [ 657.075703] lowmem_reserve[]: 0 0 0 0 0 [ 657.075722] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 657.075739] lowmem_reserve[]: 0 0 0 [ 657.088072] 0 [ 657.098681] 0 [ 657.105407] 0 [ 657.107525] page allocation failure: order:0 [ 657.124530] 0 [ 657.136369] 0 [ 657.171556] 0 [ 657.196615] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 657.234137] 0 [ 657.316782] (null) [ 657.354884] Node 1 [ 657.362033] syz-executor.5 cpuset= [ 657.378898] Normal free:26408kB min:53696kB low:67120kB high:80544kB active_anon:264kB inactive_anon:27272kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:564kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 657.381394] Node 1 [ 657.382448] lowmem_reserve[]: [ 657.417962] / mems_allowed=0-1 [ 657.424000] 0 0 0 0 0 [ 657.426781] Node 0 DMA: 8*4kB (UM) 4*8kB (M) 10*16kB (UM) 8*32kB (UM) 2*64kB (M) 1*128kB (M) 2*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 2*4096kB (UM) = 10976kB [ 657.427318] CPU: 1 PID: 21186 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 657.445729] Node 0 [ 657.449428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 657.449437] DMA32: [ 657.451680] Call Trace: [ 657.461088] 862*4kB [ 657.463290] dump_stack+0x1b2/0x281 [ 657.463306] warn_alloc.cold+0x96/0x1cc [ 657.465862] (UME) [ 657.468177] ? zone_watermark_ok_safe+0x220/0x220 [ 657.471773] 938*8kB [ 657.475730] ? usleep_range+0x130/0x130 [ 657.475740] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 657.475754] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 657.477897] (UME) [ 657.482725] ? run_timer_softirq+0x5a0/0x5a0 [ 657.485036] 281*16kB [ 657.488984] __alloc_pages_nodemask+0x2127/0x2720 [ 657.494066] (UME) [ 657.499059] ? lock_acquire+0x170/0x3f0 [ 657.501179] 66*32kB [ 657.505574] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 657.505586] ? ion_page_pool_alloc+0x9e/0x1b0 [ 657.505602] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 657.507981] (UME) [ 657.512817] alloc_pages_current+0x155/0x260 [ 657.514986] 9*64kB [ 657.518952] ion_page_pool_alloc+0x118/0x1b0 [ 657.521249] (UM) [ 657.526085] ion_system_heap_allocate+0x133/0x8c0 [ 657.526095] ? ion_alloc+0x187/0x810 [ 657.526106] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 657.526115] ? ion_system_contig_heap_create+0x130/0x130 [ 657.526126] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 657.526142] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 657.530627] 0*128kB [ 657.536074] ion_alloc+0x204/0x810 [ 657.536089] ? ion_dma_buf_release+0x40/0x40 [ 657.536101] ? __might_fault+0x177/0x1b0 [ 657.538233] 0*256kB [ 657.542626] ion_ioctl+0xea/0x1f0 [ 657.544850] 0*512kB [ 657.549240] ? ion_query_heaps+0x360/0x360 [ 657.551277] 0*1024kB [ 657.556100] ? lock_acquire+0x170/0x3f0 [ 657.556110] ? lock_downgrade+0x740/0x740 [ 657.556120] ? ion_query_heaps+0x360/0x360 [ 657.559805] 0*2048kB [ 657.565256] do_vfs_ioctl+0x75a/0xff0 [ 657.565269] ? ioctl_preallocate+0x1a0/0x1a0 [ 657.565279] ? lock_downgrade+0x740/0x740 [ 657.570699] 0*4096kB [ 657.575703] ? __fget+0x225/0x360 [ 657.575712] ? do_vfs_ioctl+0xff0/0xff0 [ 657.575723] ? security_file_ioctl+0x83/0xb0 [ 657.580554] = 18136kB [ 657.582881] SyS_ioctl+0x7f/0xb0 [ 657.586414] Node 0 [ 657.590784] ? do_vfs_ioctl+0xff0/0xff0 [ 657.594831] Normal: [ 657.597126] do_syscall_64+0x1d5/0x640 [ 657.600550] 0*4kB [ 657.602863] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 657.607079] 0*8kB [ 657.609456] RIP: 0033:0x45e219 [ 657.613417] 0*16kB [ 657.617530] RSP: 002b:00007faf520eec68 EFLAGS: 00000246 [ 657.621741] 0*32kB [ 657.624224] ORIG_RAX: 0000000000000010 [ 657.624230] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 657.624235] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 657.624240] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 657.624247] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 657.628023] 0*64kB [ 657.632408] R13: 00007ffc58d08e3f R14: 00007faf520ef9c0 R15: 000000000119bf8c [ 657.636435] Normal free:26408kB min:53696kB low:67120kB high:80544kB active_anon:264kB inactive_anon:27272kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:564kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 657.652885] 0*128kB [ 657.657372] lowmem_reserve[]: [ 657.665828] 0*256kB [ 657.666901] 0 [ 657.670888] 0*512kB [ 657.673017] 0 [ 657.691889] 0*1024kB [ 657.697002] 0 [ 657.702123] 0*2048kB [ 657.704841] 0 0 [ 657.704853] Node 0 DMA: 8*4kB (UM) 4*8kB (M) 10*16kB (UM) 8*32kB (UM) 2*64kB (M) 1*128kB [ 657.720950] 0*4096kB [ 657.730375] (M) [ 657.749692] = 0kB [ 657.767638] 2*256kB [ 657.784866] Node 1 [ 657.788570] (M) [ 657.808870] Normal: [ 657.810306] 1*512kB [ 657.810856] 0*4kB [ 657.813162] (M) 1*1024kB (M) 0*2048kB 2*4096kB (UM) = 10976kB [ 657.819097] 15*8kB [ 657.827825] Node 0 DMA32: 862*4kB (UME) 938*8kB (UME) 281*16kB (UME) 66*32kB (UME) 9*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18136kB [ 657.835305] (M) [ 657.848535] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 657.859367] 1*16kB (U) 819*32kB (U) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26408kB [ 657.861326] Node 1 Normal: 0*4kB 15*8kB (M) 1*16kB (U) 819*32kB (U) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26408kB [ 657.886173] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 657.888405] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 657.911538] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 657.914534] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 657.920214] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 657.953781] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 657.963750] 25469 total pagecache pages [ 657.969069] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 657.978392] 0 pages in swap cache [ 657.982209] Swap cache stats: add 0, delete 0, find 0/0 [ 657.986010] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 657.993627] Free swap = 0kB [ 658.007701] Total swap = 0kB [ 658.017457] 2097051 pages RAM [ 658.025073] 26220 total pagecache pages [ 658.028328] 0 pages HighMem/MovableOnly [ 658.033889] 0 pages in swap cache [ 658.041863] Swap cache stats: add 0, delete 0, find 0/0 [ 658.043047] 363840 pages reserved [ 658.058175] Free swap = 0kB [ 658.060615] 0 pages cma reserved [ 658.064507] Total swap = 0kB [ 658.089345] 2097051 pages RAM [ 658.102407] 0 pages HighMem/MovableOnly [ 658.119932] 363840 pages reserved [ 658.132422] 0 pages cma reserved [ 658.144754] Out of memory (oom_kill_allocating_task): Kill process 20888 (in:imklog) score 0 or sacrifice child [ 658.185742] Killed process 20886 (rsyslogd) total-vm:254332kB, anon-rss:552kB, file-rss:0kB, shmem-rss:0kB [ 658.232035] oom_reaper: reaped process 20886 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 658.383744] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 658.407294] systemd-journal cpuset=/ mems_allowed=0-1 [ 658.412558] CPU: 0 PID: 20299 Comm: systemd-journal Not tainted 4.14.217-syzkaller #0 [ 658.420541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 658.429881] Call Trace: [ 658.432476] dump_stack+0x1b2/0x281 [ 658.436090] dump_header+0x178/0x82f [ 658.439802] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 658.444985] ? ___ratelimit+0x2cd/0x530 [ 658.448940] oom_kill_process.cold+0x10/0xb18 [ 658.453422] out_of_memory+0xe3e/0x1190 [ 658.457380] ? oom_killer_disable+0x1c0/0x1c0 [ 658.462028] ? mutex_trylock+0x152/0x1a0 [ 658.466162] __alloc_pages_nodemask+0x23e1/0x2720 [ 658.471007] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 658.475842] ? cache_grow_begin+0x41/0x630 [ 658.480063] cache_grow_begin+0x91/0x630 [ 658.484116] ? cache_grow_begin+0x91/0x630 [ 658.488368] fallback_alloc+0x207/0x2c0 [ 658.492326] kmem_cache_alloc+0x1e5/0x3c0 [ 658.496458] getname_flags+0xc8/0x550 [ 658.500245] user_path_at_empty+0x2a/0x50 [ 658.504374] SyS_faccessat+0x21b/0x680 [ 658.508245] ? SyS_fallocate+0x80/0x80 [ 658.512113] ? do_syscall_64+0x4c/0x640 [ 658.516080] ? SyS_faccessat+0x680/0x680 [ 658.520172] do_syscall_64+0x1d5/0x640 [ 658.524061] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 658.529247] RIP: 0033:0x7fb879e389c7 [ 658.532942] RSP: 002b:00007ffe7bb73d38 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 658.540635] RAX: ffffffffffffffda RBX: 00007ffe7bb76c50 RCX: 00007fb879e389c7 [ 658.547905] RDX: 00007fb87a8a9a00 RSI: 0000000000000000 RDI: 000055c9effa89a3 [ 658.555155] RBP: 00007ffe7bb73d70 R08: 0000000000000000 R09: 0000000000000000 [ 658.562408] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 658.569671] R13: 0000000000000000 R14: 00007ffe7bb76c50 R15: 00007ffe7bb74260 [ 658.583386] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 658.591608] Mem-Info: [ 658.600373] active_anon:11160 inactive_anon:25017 isolated_anon:0 [ 658.600373] active_file:189 inactive_file:190 isolated_file:1 [ 658.600373] unevictable:0 dirty:0 writeback:0 unstable:0 [ 658.600373] slab_reclaimable:12116 slab_unreclaimable:113646 [ 658.600373] mapped:53446 shmem:25371 pagetables:786 bounce:0 [ 658.600373] free:18317 free_pcp:53 free_cma:0 [ 658.637765] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 658.643011] CPU: 1 PID: 21186 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 658.650894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 658.660682] Call Trace: [ 658.663281] dump_stack+0x1b2/0x281 [ 658.666909] warn_alloc.cold+0x96/0x1cc [ 658.668027] Node 0 active_anon:44376kB inactive_anon:72796kB active_file:16kB inactive_file:76kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:125080kB dirty:0kB writeback:0kB shmem:74020kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 658.670896] ? zone_watermark_ok_safe+0x220/0x220 [ 658.698604] Node 1 active_anon:264kB inactive_anon:27272kB active_file:60kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87304kB dirty:0kB writeback:0kB shmem:27464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 658.703431] __alloc_pages_nodemask+0x2127/0x2720 [ 658.703446] ? ___preempt_schedule+0x16/0x18 [ 658.730505] Node 0 [ 658.735325] ? lock_acquire+0x170/0x3f0 [ 658.735341] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 658.739728] DMA free:10996kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:28kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 658.741953] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 658.745906] lowmem_reserve[]: [ 658.750732] ? __mutex_unlock_slowpath+0x75/0x770 [ 658.776486] 0 [ 658.781918] ? ion_page_pool_remove+0xf2/0x280 [ 658.785006] 2717 [ 658.789819] alloc_pages_current+0x155/0x260 [ 658.791595] 2718 [ 658.796162] ion_page_pool_alloc+0x118/0x1b0 [ 658.796172] ion_system_heap_allocate+0x133/0x8c0 [ 658.796186] ? _raw_spin_unlock+0x29/0x40 [ 658.798222] 2718 [ 658.802610] ? _ion_heap_freelist_drain+0x6e/0x410 [ 658.807267] 2718 [ 658.811650] ? ion_system_contig_heap_create+0x130/0x130 [ 658.820595] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 658.822627] Node 0 [ 658.827540] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 658.827553] ion_alloc+0x27a/0x810 [ 658.827568] ? ion_dma_buf_release+0x40/0x40 [ 658.829612] DMA32 free:35624kB min:36200kB low:45248kB high:54296kB active_anon:44376kB inactive_anon:72736kB active_file:0kB inactive_file:104kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7904kB pagetables:2580kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 658.835035] ? __might_fault+0x177/0x1b0 [ 658.835048] ion_ioctl+0xea/0x1f0 [ 658.835058] ? ion_query_heaps+0x360/0x360 [ 658.840046] lowmem_reserve[]: [ 658.842272] ? lock_acquire+0x170/0x3f0 [ 658.847125] 0 [ 658.850633] ? lock_downgrade+0x740/0x740 [ 658.855042] 0 [ 658.882966] ? ion_query_heaps+0x360/0x360 [ 658.882979] do_vfs_ioctl+0x75a/0xff0 [ 658.882991] ? ioctl_preallocate+0x1a0/0x1a0 [ 658.887039] 0 [ 658.890469] ? lock_downgrade+0x740/0x740 [ 658.894697] 0 [ 658.897771] ? __fget+0x225/0x360 [ 658.901710] 0 [ 658.903507] ? do_vfs_ioctl+0xff0/0xff0 [ 658.903519] ? security_file_ioctl+0x83/0xb0 [ 658.903529] SyS_ioctl+0x7f/0xb0 [ 658.907649] Node 0 [ 658.909436] ? do_vfs_ioctl+0xff0/0xff0 [ 658.913671] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 658.917432] do_syscall_64+0x1d5/0x640 [ 658.921810] lowmem_reserve[]: [ 658.923602] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 658.923613] RIP: 0033:0x45e219 [ 658.927840] 0 [ 658.929622] RSP: 002b:00007faf520eec68 EFLAGS: 00000246 [ 658.933068] 0 0 [ 658.934863] ORIG_RAX: 0000000000000010 [ 658.934869] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 658.934874] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 658.934879] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 658.934884] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 658.934891] R13: 00007ffc58d08e3f R14: 00007faf520ef9c0 R15: 000000000119bf8c [ 658.938839] 0 [ 658.956442] syz-executor.2: [ 659.007458] 0 [ 659.014145] page allocation failure: order:4 [ 659.036008] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 659.054927] Node 1 Normal free:27680kB min:53696kB low:67120kB high:80544kB active_anon:292kB inactive_anon:27272kB active_file:8kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:580kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 659.061888] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 659.093630] lowmem_reserve[]: 0 0 0 0 0 [ 659.095418] CPU: 1 PID: 21190 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 659.099359] Node 0 [ 659.107234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 659.107239] Call Trace: [ 659.107264] dump_stack+0x1b2/0x281 [ 659.107280] warn_alloc.cold+0x96/0x1cc [ 659.109487] DMA: [ 659.121798] ? zone_watermark_ok_safe+0x220/0x220 [ 659.121822] __alloc_pages_nodemask+0x2127/0x2720 [ 659.124389] 8*4kB [ 659.127990] ? lock_acquire+0x170/0x3f0 [ 659.131944] (UM) [ 659.134015] ? lock_acquire+0x170/0x3f0 [ 659.134033] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 659.138954] 5*8kB [ 659.143799] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 659.143811] ? __mutex_unlock_slowpath+0x75/0x770 [ 659.145934] (UM) [ 659.149894] alloc_pages_current+0x155/0x260 [ 659.151946] 6*16kB [ 659.155908] ion_page_pool_alloc+0x118/0x1b0 [ 659.155922] ion_system_heap_allocate+0x133/0x8c0 [ 659.160738] (UM) [ 659.162890] ? _raw_spin_unlock+0x29/0x40 [ 659.168331] 5*32kB [ 659.173152] ? _ion_heap_freelist_drain+0x6e/0x410 [ 659.173161] ? ion_system_contig_heap_create+0x130/0x130 [ 659.173173] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 659.175233] (M) [ 659.179625] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 659.181832] 5*64kB [ 659.186231] ion_alloc+0x27a/0x810 [ 659.186248] ? ion_dma_buf_release+0x40/0x40 [ 659.191079] (UM) [ 659.193131] ? __might_fault+0x177/0x1b0 [ 659.193146] ion_ioctl+0xea/0x1f0 [ 659.197280] 1*128kB [ 659.199518] ? ion_query_heaps+0x360/0x360 [ 659.204436] (M) [ 659.210057] ? lock_acquire+0x170/0x3f0 [ 659.215418] 2*256kB [ 659.217186] ? lock_downgrade+0x740/0x740 [ 659.222020] (M) [ 659.224242] ? ion_query_heaps+0x360/0x360 [ 659.224254] do_vfs_ioctl+0x75a/0xff0 [ 659.224267] ? ioctl_preallocate+0x1a0/0x1a0 [ 659.227782] 1*512kB [ 659.232170] ? lock_downgrade+0x740/0x740 [ 659.232183] ? __fget+0x225/0x360 [ 659.234245] (M) [ 659.238283] ? do_vfs_ioctl+0xff0/0xff0 [ 659.241712] 1*1024kB [ 659.244019] ? security_file_ioctl+0x83/0xb0 [ 659.244029] SyS_ioctl+0x7f/0xb0 [ 659.244039] ? do_vfs_ioctl+0xff0/0xff0 [ 659.248274] (M) [ 659.250237] do_syscall_64+0x1d5/0x640 [ 659.254245] 0*2048kB [ 659.256545] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 659.260674] 2*4096kB [ 659.262737] RIP: 0033:0x45e219 [ 659.266975] (UM) [ 659.270755] RSP: 002b:00007f1bf73e9c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 659.275190] = 11016kB [ 659.277475] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 659.281614] Node 0 [ 659.285070] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 659.285077] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 659.285082] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 659.285086] R13: 00007ffe1c51cdaf R14: 00007f1bf73ea9c0 R15: 000000000119bf8c [ 659.285402] Bluetooth: hci0 command 0x0419 tx timeout [ 659.287093] DMA32: [ 659.291141] warn_alloc_show_mem: 1 callbacks suppressed [ 659.291145] Mem-Info: [ 659.305018] 899*4kB [ 659.305326] active_anon:11157 inactive_anon:25017 isolated_anon:0 [ 659.305326] active_file:16 inactive_file:17 isolated_file:1 [ 659.305326] unevictable:0 dirty:0 writeback:0 unstable:0 [ 659.305326] slab_reclaimable:12115 slab_unreclaimable:113639 [ 659.305326] mapped:53049 shmem:25371 pagetables:774 bounce:0 [ 659.305326] free:18660 free_pcp:0 free_cma:0 [ 659.307237] (UME) [ 659.311114] Node 0 active_anon:44336kB inactive_anon:72796kB active_file:56kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:124968kB dirty:0kB writeback:0kB shmem:74020kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 659.330139] 1533*8kB [ 659.335316] Node 1 active_anon:292kB inactive_anon:27272kB active_file:8kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:87228kB dirty:0kB writeback:0kB shmem:27464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 659.336579] (UME) [ 659.344156] Node 0 [ 659.346094] 431*16kB [ 659.353418] DMA free:11016kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 659.353421] lowmem_reserve[]: 0 2717 2718 2718 [ 659.363137] (UME) [ 659.368026] 2718 [ 659.381233] 412*32kB [ 659.403199] (UME) [ 659.430745] Node 0 [ 659.482135] 0*64kB [ 659.495598] DMA32 free:18060kB min:36200kB low:45248kB high:54296kB active_anon:44336kB inactive_anon:72736kB active_file:56kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7904kB pagetables:2516kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 659.522022] 0*128kB [ 659.527162] lowmem_reserve[]: [ 659.527449] 0*256kB [ 659.529840] 0 [ 659.532003] 0*512kB [ 659.534268] 0 [ 659.536469] 0*1024kB [ 659.567794] 0 [ 659.569867] 0*2048kB [ 659.572150] 0 [ 659.583106] 0*4096kB = 35940kB [ 659.588076] 0 [ 659.589636] Node 0 [ 659.589642] Node 0 [ 659.591422] Normal: [ 659.593708] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 659.593711] lowmem_reserve[]: 0 0 0 0 0 [ 659.593728] Node 1 Normal free:26540kB min:53696kB low:67120kB high:80544kB active_anon:292kB inactive_anon:27272kB active_file:8kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:580kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 659.593749] lowmem_reserve[]: 0 0 0 0 0 [ 659.593768] Node 0 DMA: 6*4kB (M) 5*8kB (UM) 6*16kB (UM) 6*32kB (UM) 4*64kB (M) 1*128kB (M) 2*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 2*4096kB (UM) = 10976kB [ 659.593837] Node 0 DMA32: 813*4kB (UME) 890*8kB (UME) 246*16kB (UME) 118*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18084kB [ 659.593886] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 659.593925] Node 1 Normal: 3*4kB (UM) 7*8kB (M) 2*16kB (M) 1*32kB (M) 147*64kB (UM) 53*128kB (UM) 26*256kB (UM) 1*512kB (M) 1*1024kB (M) 1*2048kB (M) 0*4096kB = 26564kB [ 659.594002] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 659.594008] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 659.594015] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 659.594022] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 659.594026] 25404 total pagecache pages [ 659.594036] 0 pages in swap cache [ 659.594042] Swap cache stats: add 0, delete 0, find 0/0 [ 659.594046] Free swap = 0kB [ 659.594049] Total swap = 0kB [ 659.594056] 2097051 pages RAM [ 659.594059] 0 pages HighMem/MovableOnly [ 659.594063] 363840 pages reserved [ 659.594066] 0 pages cma reserved [ 659.781844] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 659.831765] Node 1 Normal: 3*4kB (UM) 7*8kB (M) 2*16kB (M) 1*32kB (M) 147*64kB (UM) 53*128kB (UM) 26*256kB (UM) 1*512kB (M) 1*1024kB (M) 1*2048kB (M) 0*4096kB = 26564kB [ 659.855736] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 659.865084] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 659.868473] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 659.894212] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 659.901861] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 659.910039] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 659.920114] CPU: 0 PID: 21190 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 659.925278] 25404 total pagecache pages [ 659.931296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 659.935286] 0 pages in swap cache [ 659.944585] Call Trace: [ 659.944611] dump_stack+0x1b2/0x281 [ 659.944626] warn_alloc.cold+0x96/0x1cc [ 659.948052] Swap cache stats: add 0, delete 0, find 0/0 [ 659.950640] ? zone_watermark_ok_safe+0x220/0x220 [ 659.954256] Free swap = 0kB [ 659.958197] ? usleep_range+0x130/0x130 [ 659.963654] Total swap = 0kB [ 659.968474] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 659.968490] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 659.971480] 2097051 pages RAM [ 659.975433] ? run_timer_softirq+0x5a0/0x5a0 [ 659.975453] __alloc_pages_nodemask+0x2127/0x2720 [ 659.978444] 0 pages HighMem/MovableOnly [ 659.983534] ? lock_acquire+0x170/0x3f0 [ 659.983550] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 659.988537] 363840 pages reserved [ 659.991640] ? ion_page_pool_alloc+0x9e/0x1b0 [ 659.996039] 0 pages cma reserved [ 660.000852] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 660.004813] Out of memory (oom_kill_allocating_task): Kill process 20299 (systemd-journal) score 0 or sacrifice child [ 660.009481] alloc_pages_current+0x155/0x260 [ 660.014334] Killed process 20299 (systemd-journal) total-vm:46096kB, anon-rss:484kB, file-rss:4kB, shmem-rss:3272kB [ 660.017835] ion_page_pool_alloc+0x118/0x1b0 [ 660.053057] systemd-journal: [ 660.056876] ion_system_heap_allocate+0x133/0x8c0 [ 660.061275] page allocation failure: order:1 [ 660.064384] ? _raw_spin_unlock+0x29/0x40 [ 660.064394] ? _ion_heap_freelist_drain+0x6e/0x410 [ 660.064407] ? ion_system_contig_heap_create+0x130/0x130 [ 660.069238] , mode:0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask= [ 660.078691] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 660.078704] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 660.078716] ion_alloc+0x27a/0x810 [ 660.078730] ? ion_dma_buf_release+0x40/0x40 [ 660.082852] (null) [ 660.087788] ? __might_fault+0x177/0x1b0 [ 660.087801] ion_ioctl+0xea/0x1f0 [ 660.087812] ? ion_query_heaps+0x360/0x360 [ 660.093254] systemd-journal cpuset= [ 660.099202] ? lock_acquire+0x170/0x3f0 [ 660.099211] ? lock_downgrade+0x740/0x740 [ 660.104401] / [ 660.109256] ? ion_query_heaps+0x360/0x360 [ 660.109270] do_vfs_ioctl+0x75a/0xff0 [ 660.109283] ? ioctl_preallocate+0x1a0/0x1a0 [ 660.109292] ? lock_downgrade+0x740/0x740 [ 660.109304] ? __fget+0x225/0x360 [ 660.109312] ? do_vfs_ioctl+0xff0/0xff0 [ 660.109324] ? security_file_ioctl+0x83/0xb0 [ 660.109335] SyS_ioctl+0x7f/0xb0 [ 660.109345] ? do_vfs_ioctl+0xff0/0xff0 [ 660.109359] do_syscall_64+0x1d5/0x640 [ 660.113108] mems_allowed=0-1 [ 660.118087] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 660.193025] RIP: 0033:0x45e219 [ 660.196198] RSP: 002b:00007f1bf73e9c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 660.203889] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 660.211136] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 660.218388] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 660.225654] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 660.232924] R13: 00007ffe1c51cdaf R14: 00007f1bf73ea9c0 R15: 000000000119bf8c [ 660.240207] CPU: 1 PID: 20299 Comm: systemd-journal Not tainted 4.14.217-syzkaller #0 [ 660.248170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 660.257626] Call Trace: [ 660.260202] dump_stack+0x1b2/0x281 [ 660.263812] warn_alloc.cold+0x96/0x1cc [ 660.267784] ? zone_watermark_ok_safe+0x220/0x220 [ 660.272609] ? unreserve_highatomic_pageblock+0x336/0x460 [ 660.278167] ? wait_for_completion_io+0x10/0x10 [ 660.282819] __alloc_pages_nodemask+0x2127/0x2720 [ 660.287650] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 660.292495] ? cache_grow_begin+0x41/0x630 [ 660.296725] cache_grow_begin+0x91/0x630 [ 660.300767] ? cache_grow_begin+0x91/0x630 [ 660.304984] fallback_alloc+0x207/0x2c0 [ 660.308950] kmem_cache_alloc+0x1e5/0x3c0 [ 660.313079] getname_flags+0xc8/0x550 [ 660.316876] user_path_at_empty+0x2a/0x50 [ 660.321006] SyS_faccessat+0x21b/0x680 [ 660.324873] ? SyS_fallocate+0x80/0x80 [ 660.328753] ? do_syscall_64+0x4c/0x640 [ 660.332704] ? SyS_faccessat+0x680/0x680 [ 660.336744] do_syscall_64+0x1d5/0x640 [ 660.340630] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 660.345802] RIP: 0033:0x7fb879e389c7 [ 660.349493] RSP: 002b:00007ffe7bb73d38 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 660.357197] RAX: ffffffffffffffda RBX: 00007ffe7bb76c50 RCX: 00007fb879e389c7 [ 660.364450] RDX: 00007fb87a8a9a00 RSI: 0000000000000000 RDI: 000055c9effa89a3 [ 660.371713] RBP: 00007ffe7bb73d70 R08: 0000000000000000 R09: 0000000000000000 [ 660.378961] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 660.386298] R13: 0000000000000000 R14: 00007ffe7bb76c50 R15: 00007ffe7bb74260 [ 660.393593] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 660.406830] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 660.411972] CPU: 0 PID: 21186 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 660.415047] warn_alloc_show_mem: 1 callbacks suppressed [ 660.415051] Mem-Info: [ 660.419878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 660.425906] active_anon:11157 inactive_anon:25017 isolated_anon:0 [ 660.425906] active_file:16 inactive_file:17 isolated_file:0 [ 660.425906] unevictable:0 dirty:0 writeback:0 unstable:0 [ 660.425906] slab_reclaimable:12115 slab_unreclaimable:113639 [ 660.425906] mapped:53049 shmem:25371 pagetables:774 bounce:0 [ 660.425906] free:13873 free_pcp:67 free_cma:0 [ 660.427642] Call Trace: [ 660.437019] Node 0 active_anon:44336kB inactive_anon:72796kB active_file:56kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:124968kB dirty:0kB writeback:0kB shmem:74020kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 660.470238] dump_stack+0x1b2/0x281 [ 660.470254] warn_alloc.cold+0x96/0x1cc [ 660.470268] ? zone_watermark_ok_safe+0x220/0x220 [ 660.472840] Node 1 active_anon:292kB inactive_anon:27272kB active_file:8kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87228kB dirty:0kB writeback:0kB shmem:27464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 660.500485] ? usleep_range+0x130/0x130 [ 660.500494] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 660.500511] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 660.504122] Node 0 [ 660.508085] ? run_timer_softirq+0x5a0/0x5a0 [ 660.512911] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 660.540980] __alloc_pages_nodemask+0x2127/0x2720 [ 660.541000] ? lock_acquire+0x170/0x3f0 [ 660.541017] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 660.545000] lowmem_reserve[]: [ 660.550091] ? ion_page_pool_alloc+0x9e/0x1b0 [ 660.555116] 0 [ 660.557323] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 660.561697] 2717 [ 660.587279] ? ion_page_pool_remove+0xf2/0x280 [ 660.587295] alloc_pages_current+0x155/0x260 [ 660.592786] oom_reaper: reaped process 20299 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:3272kB [ 660.596088] ion_page_pool_alloc+0x118/0x1b0 [ 660.596099] ion_system_heap_allocate+0x133/0x8c0 [ 660.596114] ? _raw_spin_unlock+0x29/0x40 [ 660.602233] 2718 [ 660.604021] ? _ion_heap_freelist_drain+0x6e/0x410 [ 660.604031] ? ion_system_contig_heap_create+0x130/0x130 [ 660.604042] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 660.604057] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 660.608521] 2718 [ 660.610309] ion_alloc+0x27a/0x810 [ 660.615754] 2718 [ 660.617784] ? ion_dma_buf_release+0x40/0x40 [ 660.626753] ? __might_fault+0x177/0x1b0 [ 660.626766] ion_ioctl+0xea/0x1f0 [ 660.626776] ? ion_query_heaps+0x360/0x360 [ 660.637096] Node 0 [ 660.641472] ? lock_acquire+0x170/0x3f0 [ 660.653045] DMA32 free:17952kB min:36200kB low:45248kB high:54296kB active_anon:43936kB inactive_anon:72736kB active_file:56kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7904kB pagetables:2516kB bounce:0kB free_pcp:748kB local_pcp:596kB free_cma:0kB [ 660.657390] ? lock_downgrade+0x740/0x740 [ 660.662814] lowmem_reserve[]: [ 660.667822] ? ion_query_heaps+0x360/0x360 [ 660.667834] do_vfs_ioctl+0x75a/0xff0 [ 660.667847] ? ioctl_preallocate+0x1a0/0x1a0 [ 660.752087] ? lock_downgrade+0x740/0x740 [ 660.756222] ? __fget+0x225/0x360 [ 660.759679] ? do_vfs_ioctl+0xff0/0xff0 [ 660.763647] ? security_file_ioctl+0x83/0xb0 [ 660.768050] SyS_ioctl+0x7f/0xb0 [ 660.771404] ? do_vfs_ioctl+0xff0/0xff0 [ 660.775554] do_syscall_64+0x1d5/0x640 [ 660.779431] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 660.784604] RIP: 0033:0x45e219 [ 660.787773] RSP: 002b:00007faf520eec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 660.795480] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 660.802730] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 660.809982] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 660.817237] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 660.824510] R13: 00007ffc58d08e3f R14: 00007faf520ef9c0 R15: 000000000119bf8c [ 660.831802] 0 0 0 0 0 [ 660.860958] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 660.929425] lowmem_reserve[]: 0 0 0 0 0 [ 660.939984] Node 1 Normal free:476688kB min:53696kB low:67120kB high:80544kB active_anon:292kB inactive_anon:27272kB active_file:8kB inactive_file:6012kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:580kB bounce:0kB free_pcp:232kB local_pcp:16kB free_cma:0kB [ 661.009685] lowmem_reserve[]: 0 0 0 0 0 [ 661.019791] Node 0 DMA: 6*4kB (M) 5*8kB (UM) 6*16kB (UM) 6*32kB (UM) 4*64kB (M) 1*128kB (M) 2*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 2*4096kB (UM) = 10976kB [ 661.057006] Node 0 DMA32: 688*4kB (ME) 889*8kB (ME) 246*16kB (UME) 118*32kB (UME) 3152*64kB (UM) 55*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 226344kB [ 661.092277] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 661.123010] Node 1 Normal: 0*4kB 1*8kB (U) 1*16kB (M) 0*32kB 3816*64kB (U) 458*128kB (U) 65*256kB (U) 24*512kB (U) 117*1024kB (U) 60*2048kB (UM) 63*4096kB (U) = 832536kB [ 661.156626] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 661.181560] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 661.212768] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 661.230620] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 661.253202] 27883 total pagecache pages [ 661.257284] 0 pages in swap cache [ 661.262349] Swap cache stats: add 0, delete 0, find 0/0 [ 661.279248] Free swap = 0kB 21:27:24 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 21:27:24 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0xc0241, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:27:24 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) [ 661.293076] Total swap = 0kB [ 661.297399] 2097051 pages RAM [ 661.300521] 0 pages HighMem/MovableOnly [ 661.307102] 363840 pages reserved [ 661.313673] 0 pages cma reserved [ 661.328896] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 661.353404] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 661.414330] systemd[1]: Stopped Journal Service. [ 661.484223] systemd[1]: Starting Journal Service... [ 661.684110] systemd[1]: Started System Logging Service. [ 661.725267] systemd-journald[21221]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 662.465995] systemd[1]: Started Journal Service. [ 663.515686] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 663.517071] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 663.541274] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 663.541302] CPU: 0 PID: 21218 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 663.550130] syz-executor.0 cpuset= [ 663.554985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 663.554989] Call Trace: [ 663.555014] dump_stack+0x1b2/0x281 [ 663.555030] warn_alloc.cold+0x96/0x1cc [ 663.558574] / [ 663.568008] ? zone_watermark_ok_safe+0x220/0x220 [ 663.570594] mems_allowed=0-1 [ 663.574183] __alloc_pages_nodemask+0x2127/0x2720 [ 663.574199] ? _raw_spin_unlock_irq+0x24/0x80 [ 663.597100] ? lock_acquire+0x170/0x3f0 [ 663.601060] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 663.605889] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 663.611356] ? __mutex_unlock_slowpath+0x75/0x770 [ 663.616189] alloc_pages_current+0x155/0x260 [ 663.620599] ion_page_pool_alloc+0x118/0x1b0 [ 663.625009] ion_system_heap_allocate+0x133/0x8c0 [ 663.629834] ? ion_alloc+0x187/0x810 [ 663.633558] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 663.639009] ? ion_system_contig_heap_create+0x130/0x130 [ 663.644526] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 663.649523] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 663.654349] ion_alloc+0x204/0x810 [ 663.657874] ? ion_dma_buf_release+0x40/0x40 [ 663.662266] ? __might_fault+0x177/0x1b0 [ 663.666311] ion_ioctl+0xea/0x1f0 [ 663.669747] ? ion_query_heaps+0x360/0x360 [ 663.673967] ? lock_acquire+0x170/0x3f0 [ 663.677926] ? lock_downgrade+0x740/0x740 [ 663.682054] ? ion_query_heaps+0x360/0x360 [ 663.686356] do_vfs_ioctl+0x75a/0xff0 [ 663.690140] ? ioctl_preallocate+0x1a0/0x1a0 [ 663.694529] ? lock_downgrade+0x740/0x740 [ 663.698661] ? __fget+0x225/0x360 [ 663.702109] ? do_vfs_ioctl+0xff0/0xff0 [ 663.706070] ? security_file_ioctl+0x83/0xb0 [ 663.710459] SyS_ioctl+0x7f/0xb0 [ 663.713808] ? do_vfs_ioctl+0xff0/0xff0 [ 663.717769] do_syscall_64+0x1d5/0x640 [ 663.721642] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 663.726816] RIP: 0033:0x45e219 [ 663.729988] RSP: 002b:00007f1bf73e9c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 663.737680] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 663.744950] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 663.752461] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 663.759986] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 663.767236] R13: 00007ffe1c51cdaf R14: 00007f1bf73ea9c0 R15: 000000000119bf8c [ 663.774503] CPU: 1 PID: 21219 Comm: syz-executor.0 Not tainted 4.14.217-syzkaller #0 [ 663.782397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 663.794020] Call Trace: [ 663.796629] dump_stack+0x1b2/0x281 [ 663.800288] warn_alloc.cold+0x96/0x1cc [ 663.804286] ? zone_watermark_ok_safe+0x220/0x220 [ 663.809183] __alloc_pages_nodemask+0x2127/0x2720 [ 663.814163] ? _raw_spin_unlock_irq+0x5a/0x80 [ 663.818681] ? finish_task_switch+0x178/0x610 [ 663.823215] ? finish_task_switch+0x14d/0x610 [ 663.827741] ? lock_acquire+0x170/0x3f0 [ 663.831739] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 663.838458] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 663.844019] ? __mutex_unlock_slowpath+0x75/0x770 [ 663.848900] ? alloc_pages_current+0x37/0x260 [ 663.854743] alloc_pages_current+0x155/0x260 [ 663.859258] ion_page_pool_alloc+0x118/0x1b0 [ 663.863789] ion_system_heap_allocate+0x133/0x8c0 [ 663.868835] ? ion_alloc+0x187/0x810 [ 663.872555] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 663.878018] ? ion_system_contig_heap_create+0x130/0x130 [ 663.883483] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 663.888516] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 663.893376] ion_alloc+0x204/0x810 [ 663.896937] ? ion_dma_buf_release+0x40/0x40 [ 663.901358] ? __might_fault+0x177/0x1b0 [ 663.905520] ion_ioctl+0xea/0x1f0 [ 663.908989] ? ion_query_heaps+0x360/0x360 [ 663.914721] ? lock_acquire+0x170/0x3f0 [ 663.918838] ? lock_downgrade+0x740/0x740 [ 663.923009] ? ion_query_heaps+0x360/0x360 [ 663.927253] do_vfs_ioctl+0x75a/0xff0 [ 663.931089] ? ioctl_preallocate+0x1a0/0x1a0 [ 663.935505] ? lock_downgrade+0x740/0x740 [ 663.939665] ? __fget+0x225/0x360 [ 663.943125] ? do_vfs_ioctl+0xff0/0xff0 [ 663.947107] ? security_file_ioctl+0x83/0xb0 [ 663.951525] SyS_ioctl+0x7f/0xb0 [ 663.954900] ? do_vfs_ioctl+0xff0/0xff0 [ 663.958880] do_syscall_64+0x1d5/0x640 [ 663.962782] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 663.967977] RIP: 0033:0x45e219 [ 663.971164] RSP: 002b:00007ff50e12cc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 663.978880] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 663.986340] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 663.994401] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 664.001792] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 664.009073] R13: 00007ffceee1f7cf R14: 00007ff50e12d9c0 R15: 000000000119bf8c [ 664.022415] warn_alloc_show_mem: 2 callbacks suppressed [ 664.022419] Mem-Info: [ 664.037274] active_anon:11410 inactive_anon:27048 isolated_anon:0 [ 664.037274] active_file:68 inactive_file:180 isolated_file:0 [ 664.037274] unevictable:0 dirty:0 writeback:0 unstable:0 [ 664.037274] slab_reclaimable:12188 slab_unreclaimable:115926 [ 664.037274] mapped:52723 shmem:27418 pagetables:771 bounce:0 [ 664.037274] free:154931 free_pcp:369 free_cma:0 [ 664.111414] Node 0 active_anon:45352kB inactive_anon:80920kB active_file:212kB inactive_file:1680kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:124628kB dirty:0kB writeback:0kB shmem:82208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 664.180992] Node 1 active_anon:288kB inactive_anon:27272kB active_file:60kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87264kB dirty:0kB writeback:0kB shmem:27464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 21:27:27 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x80000001, 0x4) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0xc0241, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:27:27 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x80000001, 0x4) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0xc0241, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:27:27 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0x12}) 21:27:27 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) [ 664.240654] Node 0 DMA free:11280kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 21:27:27 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) [ 664.339531] lowmem_reserve[]: 0 2717 2718 2718 2718 21:27:27 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0x12}) [ 664.366865] Node 0 DMA32 free:496292kB min:36200kB low:45248kB high:54296kB active_anon:45652kB inactive_anon:80860kB active_file:2812kB inactive_file:9884kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:8160kB pagetables:2828kB bounce:0kB free_pcp:808kB local_pcp:656kB free_cma:0kB 21:27:27 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0x12}) 21:27:27 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0x12}) 21:27:27 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001}) [ 664.507682] lowmem_reserve[]: 0 0 0 0 0 21:27:27 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0x12}) [ 664.536965] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 664.662521] lowmem_reserve[]: 0 0 0 0 0 [ 664.675925] Node 1 Normal free:59436kB min:53696kB low:67120kB high:80544kB active_anon:288kB inactive_anon:27272kB active_file:60kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:552kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 664.775342] lowmem_reserve[]: 0 0 0 0 0 [ 664.789909] Node 0 DMA: 10*4kB (UM) 13*8kB (UM) 6*16kB (UM) 7*32kB (UM) 2*64kB (M) 4*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 11088kB [ 664.839438] Node 0 DMA32: 254*4kB (ME) 617*8kB (UME) 7439*16kB (UME) 9064*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 415024kB [ 664.849240] syz-executor.4: [ 664.853593] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 664.880608] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 664.882001] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 664.902737] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 664.902766] CPU: 1 PID: 21234 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 664.902771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 664.902774] Call Trace: [ 664.902795] dump_stack+0x1b2/0x281 [ 664.902810] warn_alloc.cold+0x96/0x1cc [ 664.902823] ? zone_watermark_ok_safe+0x220/0x220 [ 664.902843] __alloc_pages_nodemask+0x2127/0x2720 [ 664.902854] ? _raw_spin_unlock_irq+0x24/0x80 [ 664.902873] ? lock_acquire+0x170/0x3f0 [ 664.902888] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 664.902904] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 664.902935] ? __mutex_unlock_slowpath+0x75/0x770 [ 664.902952] alloc_pages_current+0x155/0x260 [ 664.910406] Node 1 [ 664.915938] ion_page_pool_alloc+0x118/0x1b0 [ 664.915950] ion_system_heap_allocate+0x133/0x8c0 [ 664.915959] ? ion_alloc+0x187/0x810 [ 664.915970] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 664.915979] ? ion_system_contig_heap_create+0x130/0x130 [ 664.915989] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 664.916002] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 664.916012] ion_alloc+0x204/0x810 [ 664.916024] ? ion_dma_buf_release+0x40/0x40 [ 664.916036] ? __might_fault+0x177/0x1b0 [ 664.916048] ion_ioctl+0xea/0x1f0 [ 664.925653] Normal: [ 664.928095] ? ion_query_heaps+0x360/0x360 [ 664.928115] ? lock_acquire+0x170/0x3f0 [ 664.928124] ? lock_downgrade+0x740/0x740 [ 664.928134] ? ion_query_heaps+0x360/0x360 [ 664.931811] 732*4kB [ 664.935694] do_vfs_ioctl+0x75a/0xff0 [ 664.935705] ? ioctl_preallocate+0x1a0/0x1a0 [ 664.935714] ? lock_downgrade+0x740/0x740 [ 664.935728] ? __fget+0x225/0x360 [ 664.935738] ? do_vfs_ioctl+0xff0/0xff0 [ 664.935749] ? security_file_ioctl+0x83/0xb0 [ 664.935759] SyS_ioctl+0x7f/0xb0 [ 664.935765] ? do_vfs_ioctl+0xff0/0xff0 [ 664.935778] do_syscall_64+0x1d5/0x640 [ 664.940682] (U) [ 664.945456] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 664.945465] RIP: 0033:0x45e219 [ 664.945470] RSP: 002b:00007fd20c681c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 664.945479] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 664.945484] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 664.945489] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 664.945494] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 664.945500] R13: 00007fff87e85fff R14: 00007fd20c6829c0 R15: 000000000119bf8c [ 664.951146] syz-executor.5 cpuset= [ 664.955060] 1256*8kB [ 664.964754] / [ 664.970664] (UM) [ 664.992789] mems_allowed=0-1 [ 665.023766] 1272*16kB [ 665.062725] warn_alloc_show_mem: 1 callbacks suppressed [ 665.062729] Mem-Info: [ 665.089900] (U) [ 665.094503] CPU: 1 PID: 21235 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 665.102929] 828*32kB [ 665.109160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 665.109165] Call Trace: [ 665.109189] dump_stack+0x1b2/0x281 [ 665.109204] warn_alloc.cold+0x96/0x1cc [ 665.109216] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 665.109227] ? zone_watermark_ok_safe+0x220/0x220 [ 665.109248] __alloc_pages_nodemask+0x2127/0x2720 [ 665.109262] ? _raw_spin_unlock_irq+0x24/0x80 [ 665.109277] ? lock_acquire+0x170/0x3f0 [ 665.109294] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 665.117033] (UM) [ 665.123850] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 665.123864] ? __mutex_unlock_slowpath+0x75/0x770 [ 665.123879] alloc_pages_current+0x155/0x260 [ 665.123895] ion_page_pool_alloc+0x118/0x1b0 [ 665.123905] ion_system_heap_allocate+0x133/0x8c0 [ 665.123915] ? ion_alloc+0x187/0x810 [ 665.123925] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 665.123934] ? ion_system_contig_heap_create+0x130/0x130 [ 665.123947] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 665.131301] 10*64kB [ 665.138453] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 665.138468] ion_alloc+0x204/0x810 [ 665.138482] ? ion_dma_buf_release+0x40/0x40 [ 665.138493] ? __might_fault+0x177/0x1b0 [ 665.138504] ion_ioctl+0xea/0x1f0 [ 665.138513] ? ion_query_heaps+0x360/0x360 [ 665.138529] ? lock_acquire+0x170/0x3f0 [ 665.155069] (U) [ 665.159117] ? lock_downgrade+0x740/0x740 [ 665.159133] ? ion_query_heaps+0x360/0x360 [ 665.167007] 15*128kB [ 665.171372] do_vfs_ioctl+0x75a/0xff0 [ 665.171384] ? ioctl_preallocate+0x1a0/0x1a0 [ 665.183741] (U) [ 665.185707] ? lock_downgrade+0x740/0x740 [ 665.185722] ? __fget+0x225/0x360 [ 665.190498] 0*256kB [ 665.193304] ? do_vfs_ioctl+0xff0/0xff0 [ 665.193315] ? security_file_ioctl+0x83/0xb0 [ 665.193324] SyS_ioctl+0x7f/0xb0 [ 665.193332] ? do_vfs_ioctl+0xff0/0xff0 [ 665.193344] do_syscall_64+0x1d5/0x640 [ 665.193362] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 665.198398] 0*512kB [ 665.203181] RIP: 0033:0x45e219 [ 665.203187] RSP: 002b:00007faf520eec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 665.203196] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 665.203201] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 665.203206] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 665.203211] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 665.203216] R13: 00007ffc58d08e3f R14: 00007faf520ef9c0 R15: 000000000119bf8c [ 665.236160] active_anon:11467 inactive_anon:27048 isolated_anon:0 [ 665.236160] active_file:1303 inactive_file:1153 isolated_file:0 [ 665.236160] unevictable:0 dirty:5 writeback:0 unstable:0 [ 665.236160] slab_reclaimable:12260 slab_unreclaimable:117320 [ 665.236160] mapped:54702 shmem:27418 pagetables:827 bounce:0 [ 665.236160] free:102134 free_pcp:285 free_cma:0 [ 665.242063] 0*1024kB [ 665.244602] Node 0 active_anon:45580kB inactive_anon:80920kB active_file:5300kB inactive_file:4604kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:131580kB dirty:20kB writeback:0kB shmem:82208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 665.248218] 0*2048kB [ 665.251505] Node 1 active_anon:288kB inactive_anon:27272kB active_file:12kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87228kB dirty:0kB writeback:0kB shmem:27464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 665.251510] Node 0 DMA free:11088kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 665.261971] 0*4096kB [ 665.293356] lowmem_reserve[]: [ 665.297781] = 62384kB [ 665.301153] 0 2717 2718 2718 2718 [ 665.301171] Node 0 DMA32 free:315224kB min:36200kB low:45248kB high:54296kB active_anon:45580kB inactive_anon:80860kB active_file:5400kB inactive_file:4600kB unevictable:0kB writepending:20kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:8064kB pagetables:2756kB bounce:0kB free_pcp:252kB local_pcp:72kB free_cma:0kB [ 665.301195] lowmem_reserve[]: [ 665.303246] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 665.303252] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 665.303258] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 665.303264] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 665.303268] 29963 total pagecache pages [ 665.303278] 0 pages in swap cache [ 665.303285] Swap cache stats: add 0, delete 0, find 0/0 [ 665.322743] 0 [ 665.323022] Free swap = 0kB [ 665.324873] 0 0 0 0 [ 665.324888] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 665.324909] lowmem_reserve[]: [ 665.329075] Total swap = 0kB [ 665.332466] 0 0 0 0 0 [ 665.332485] Node 1 Normal free:62384kB min:53696kB low:67120kB high:80544kB active_anon:288kB inactive_anon:27272kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:552kB bounce:0kB free_pcp:628kB local_pcp:0kB free_cma:0kB [ 665.332501] lowmem_reserve[]: 0 0 0 0 0 [ 665.332516] Node 0 DMA: 10*4kB (UM) 13*8kB (UM) 6*16kB (UM) 7*32kB (UM) 2*64kB (M) 4*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 11088kB [ 665.332581] Node 0 DMA32: 203*4kB (UME) 590*8kB (ME) 638*16kB (UME) 9070*32kB [ 665.335397] 2097051 pages RAM [ 665.352721] (UME) [ 665.380244] 0 pages HighMem/MovableOnly [ 665.412725] 0*64kB [ 665.455461] 363840 pages reserved [ 665.606117] 2*128kB [ 665.614024] 0 pages cma reserved [ 665.628123] (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 306236kB [ 665.750409] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 665.761354] Node 1 Normal: 732*4kB (U) 1254*8kB (UM) 1270*16kB (U) 828*32kB (UM) 11*64kB (U) 15*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 62400kB [ 665.776048] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 665.785249] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 665.793953] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 665.803147] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 665.811961] 29963 total pagecache pages [ 665.816075] 0 pages in swap cache [ 665.819794] Swap cache stats: add 0, delete 0, find 0/0 [ 665.826097] Free swap = 0kB [ 665.832499] Total swap = 0kB [ 665.839858] 2097051 pages RAM [ 665.854751] 0 pages HighMem/MovableOnly [ 665.873893] 363840 pages reserved [ 665.883673] 0 pages cma reserved [ 666.116335] oom_reaper: reaped process 21218 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 666.217429] oom_reaper: reaped process 21234 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 666.234855] syz-executor.4 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 666.262722] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 666.267923] CPU: 1 PID: 18010 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 666.275804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 666.285161] Call Trace: [ 666.287759] dump_stack+0x1b2/0x281 [ 666.291385] dump_header+0x178/0x82f [ 666.295209] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 666.300325] ? ___ratelimit+0x2cd/0x530 [ 666.304299] oom_kill_process.cold+0x10/0xb18 [ 666.308802] out_of_memory+0xe3e/0x1190 [ 666.312779] ? oom_killer_disable+0x1c0/0x1c0 [ 666.317269] ? mutex_trylock+0x152/0x1a0 [ 666.321327] __alloc_pages_nodemask+0x23e1/0x2720 [ 666.326179] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 666.331034] alloc_pages_current+0x155/0x260 [ 666.335439] filemap_fault+0xea3/0x1980 [ 666.339418] ext4_filemap_fault+0x84/0xb0 [ 666.343570] __do_fault+0xfa/0x380 [ 666.347108] __handle_mm_fault+0x2497/0x4620 [ 666.351516] ? vm_insert_page+0x7c0/0x7c0 [ 666.355657] ? free_object+0xe4/0x240 [ 666.359474] handle_mm_fault+0x391/0x860 [ 666.363533] __do_page_fault+0x549/0xad0 [ 666.369336] ? spurious_fault+0x640/0x640 [ 666.373479] ? do_page_fault+0x60/0x500 [ 666.377620] ? page_fault+0x2f/0x50 [ 666.382836] page_fault+0x45/0x50 [ 666.386304] RIP: 0004:0x32 [ 666.389224] RSP: 0bb8:00000000000a26bd EFLAGS: 00000033 [ 666.391574] Mem-Info: [ 666.399404] active_anon:11418 inactive_anon:27048 isolated_anon:0 [ 666.399404] active_file:48 inactive_file:7 isolated_file:0 [ 666.399404] unevictable:0 dirty:0 writeback:0 unstable:0 [ 666.399404] slab_reclaimable:12266 slab_unreclaimable:117412 [ 666.399404] mapped:52646 shmem:27418 pagetables:827 bounce:0 [ 666.399404] free:13856 free_pcp:120 free_cma:0 [ 666.412711] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 666.462638] Node 0 active_anon:45384kB inactive_anon:80920kB active_file:180kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:123356kB dirty:0kB writeback:0kB shmem:82208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 666.488691] syz-executor.4 cpuset= [ 666.501382] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 666.516479] / mems_allowed=0-1 [ 666.518607] Node 1 active_anon:288kB inactive_anon:27272kB active_file:12kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87228kB dirty:0kB writeback:0kB shmem:27464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 666.519986] CPU: 0 PID: 21234 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 666.547115] syz-executor.2 cpuset= [ 666.555032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 666.555036] Call Trace: [ 666.555068] dump_stack+0x1b2/0x281 [ 666.555091] warn_alloc.cold+0x96/0x1cc [ 666.558603] / [ 666.567949] ? zone_watermark_ok_safe+0x220/0x220 [ 666.570542] Node 0 [ 666.574121] ? usleep_range+0x130/0x130 [ 666.574131] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 666.574147] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 666.578099] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 666.579802] ? run_timer_softirq+0x5a0/0x5a0 [ 666.584648] mems_allowed=0-1 [ 666.586856] __alloc_pages_nodemask+0x2127/0x2720 [ 666.602590] lowmem_reserve[]: [ 666.626465] ? lock_acquire+0x170/0x3f0 [ 666.626481] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 666.651287] ? ion_page_pool_alloc+0x9e/0x1b0 [ 666.652589] 0 2717 [ 666.655776] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 666.655777] 2718 2718 [ 666.658097] alloc_pages_current+0x155/0x260 [ 666.670382] ion_page_pool_alloc+0x118/0x1b0 [ 666.674859] ion_system_heap_allocate+0x133/0x8c0 [ 666.679686] ? ion_alloc+0x187/0x810 [ 666.682580] 2718 [ 666.683471] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 666.685556] ? ion_system_contig_heap_create+0x130/0x130 [ 666.690978] Node 0 [ 666.696410] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 666.696424] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 666.696437] ion_alloc+0x204/0x810 [ 666.711972] ? ion_dma_buf_release+0x40/0x40 [ 666.712594] DMA32 free:18096kB min:36200kB low:45248kB high:54296kB active_anon:45484kB inactive_anon:80860kB active_file:192kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:8064kB pagetables:2756kB bounce:0kB free_pcp:220kB local_pcp:116kB free_cma:0kB [ 666.716367] ? __might_fault+0x177/0x1b0 [ 666.748774] ion_ioctl+0xea/0x1f0 [ 666.752209] ? ion_query_heaps+0x360/0x360 [ 666.756436] ? lock_acquire+0x170/0x3f0 [ 666.760395] ? lock_downgrade+0x740/0x740 [ 666.764541] ? ion_query_heaps+0x360/0x360 [ 666.769122] do_vfs_ioctl+0x75a/0xff0 [ 666.772577] lowmem_reserve[]: 0 [ 666.772908] ? ioctl_preallocate+0x1a0/0x1a0 [ 666.772913] 0 [ 666.776175] ? lock_downgrade+0x740/0x740 [ 666.776189] ? __fget+0x225/0x360 [ 666.780572] 0 [ 666.782382] ? do_vfs_ioctl+0xff0/0xff0 [ 666.795672] ? security_file_ioctl+0x83/0xb0 [ 666.800061] SyS_ioctl+0x7f/0xb0 [ 666.802574] 0 0 [ 666.803412] ? do_vfs_ioctl+0xff0/0xff0 [ 666.803425] do_syscall_64+0x1d5/0x640 [ 666.809338] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 666.818372] RIP: 0033:0x45e219 [ 666.821566] RSP: 002b:00007fd20c681c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 666.822577] Node 0 [ 666.830048] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 666.830055] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 666.832282] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 666.839521] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 666.839526] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 666.839530] R13: 00007fff87e85fff R14: 00007fd20c6829c0 R15: 000000000119bf8c [ 666.864410] warn_alloc_show_mem: 1 callbacks suppressed [ 666.864418] Mem-Info: [ 666.879208] CPU: 1 PID: 21218 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 666.892420] active_anon:11418 inactive_anon:27048 isolated_anon:0 [ 666.892420] active_file:48 inactive_file:7 isolated_file:0 [ 666.892420] unevictable:0 dirty:0 writeback:0 unstable:0 [ 666.892420] slab_reclaimable:12266 slab_unreclaimable:117412 [ 666.892420] mapped:52646 shmem:27418 pagetables:827 bounce:0 [ 666.892420] free:13856 free_pcp:119 free_cma:0 [ 666.895510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 666.895514] Call Trace: [ 666.895538] dump_stack+0x1b2/0x281 [ 666.895554] warn_alloc.cold+0x96/0x1cc [ 666.895568] ? zone_watermark_ok_safe+0x220/0x220 [ 666.895581] ? usleep_range+0x130/0x130 [ 666.900937] Node 0 active_anon:45384kB inactive_anon:80920kB active_file:180kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:123356kB dirty:0kB writeback:0kB shmem:82208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 666.903343] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 666.903358] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 666.903369] ? run_timer_softirq+0x5a0/0x5a0 [ 666.903384] __alloc_pages_nodemask+0x2127/0x2720 [ 666.903399] ? lock_acquire+0x170/0x3f0 [ 666.903414] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 666.903428] ? ion_page_pool_alloc+0x9e/0x1b0 [ 666.903443] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 666.903457] ? policy_node+0xb1/0x110 [ 666.903468] alloc_pages_current+0x155/0x260 [ 666.921967] Node 1 active_anon:288kB inactive_anon:27272kB active_file:12kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87228kB dirty:0kB writeback:0kB shmem:27464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 666.944491] ion_page_pool_alloc+0x118/0x1b0 [ 666.944503] ion_system_heap_allocate+0x133/0x8c0 [ 666.944513] ? ion_alloc+0x187/0x810 [ 666.944524] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 666.944534] ? ion_system_contig_heap_create+0x130/0x130 [ 666.944544] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 666.944558] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 666.944569] ion_alloc+0x204/0x810 [ 666.944583] ? ion_dma_buf_release+0x40/0x40 [ 666.944596] ? __might_fault+0x177/0x1b0 [ 666.965158] Node 0 [ 666.968965] ion_ioctl+0xea/0x1f0 [ 666.980911] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 667.000663] ? ion_query_heaps+0x360/0x360 [ 667.000678] ? lock_acquire+0x170/0x3f0 [ 667.000686] ? lock_downgrade+0x740/0x740 [ 667.000694] ? ion_query_heaps+0x360/0x360 [ 667.000704] do_vfs_ioctl+0x75a/0xff0 [ 667.000716] ? ioctl_preallocate+0x1a0/0x1a0 [ 667.000725] ? lock_downgrade+0x740/0x740 [ 667.000740] ? __fget+0x225/0x360 [ 667.000749] ? do_vfs_ioctl+0xff0/0xff0 [ 667.000760] ? security_file_ioctl+0x83/0xb0 [ 667.000769] SyS_ioctl+0x7f/0xb0 [ 667.000777] ? do_vfs_ioctl+0xff0/0xff0 [ 667.000792] do_syscall_64+0x1d5/0x640 [ 667.018301] lowmem_reserve[]: [ 667.020216] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 667.030773] 0 [ 667.033591] RIP: 0033:0x45e219 [ 667.033596] RSP: 002b:00007f1bf73e9c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 667.033605] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 667.033610] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 667.033614] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 667.033619] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 667.033623] R13: 00007ffe1c51cdaf R14: 00007f1bf73ea9c0 R15: 000000000119bf8c [ 667.036191] lowmem_reserve[]: [ 667.055119] 2717 [ 667.076560] 0 [ 667.094469] 2718 [ 667.100763] 0 [ 667.118113] 2718 [ 667.122853] 0 [ 667.131481] 2718 [ 667.155788] 0 [ 667.174541] 0 [ 667.174551] Node 1 Normal free:26104kB min:53696kB low:67120kB high:80544kB active_anon:288kB inactive_anon:27272kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:552kB bounce:0kB free_pcp:260kB local_pcp:244kB free_cma:0kB [ 667.174569] lowmem_reserve[]: 0 0 0 [ 667.182311] Node 0 [ 667.186857] 0 [ 667.196906] DMA32 free:18308kB min:36200kB low:45248kB high:54296kB active_anon:45372kB inactive_anon:80860kB active_file:60kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:8064kB pagetables:2756kB bounce:0kB free_pcp:228kB local_pcp:108kB free_cma:0kB [ 667.227783] 0 [ 667.297413] lowmem_reserve[]: [ 667.416174] Node 0 DMA: 7*4kB (UM) 5*8kB (UM) 5*16kB (M) 5*32kB (M) 2*64kB (M) 3*128kB (M) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 11060kB [ 667.471718] 0 0 0 0 0 [ 667.472555] Node 0 DMA32: 558*4kB (UME) 854*8kB (UME) 300*16kB (ME) 81*32kB (UME) 3104*64kB (UM) 109*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 229064kB [ 667.489568] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 667.489593] lowmem_reserve[]: 0 0 0 0 0 [ 667.577586] Node 1 Normal free:400956kB min:53696kB low:67120kB high:80544kB active_anon:288kB inactive_anon:27272kB active_file:304kB inactive_file:2912kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:552kB bounce:0kB free_pcp:336kB local_pcp:124kB free_cma:0kB [ 667.622576] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 667.662833] Node 1 Normal: 1*4kB (U) 1*8kB (M) 1*16kB (M) 679*32kB (UM) 3477*64kB (UM) 706*128kB (U) 95*256kB (UM) 33*512kB (UM) 2*1024kB (UM) 28*2048kB (UM) 5*4096kB (U) = 455740kB [ 667.672567] lowmem_reserve[]: 0 0 0 0 0 [ 667.702573] Node 0 DMA: 7*4kB (UM) 5*8kB (UM) 5*16kB (M) 5*32kB (M) 4*64kB (UM) 3*128kB (M) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 11188kB [ 667.726467] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 667.746118] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 667.752574] Node 0 DMA32: 558*4kB (UME) 854*8kB (UME) 300*16kB (ME) 80*32kB (ME) 3143*64kB (UM) 686*128kB (UM) 80*256kB (U) 11*512kB (U) 2*1024kB (U) 1*2048kB (U) 0*4096kB = 335592kB [ 667.782568] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 667.791455] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 667.800463] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 667.825435] Node 1 Normal: 1*4kB (U) 1*8kB (U) 1*16kB (U) 679*32kB (U) 3476*64kB (U) 707*128kB (U) 95*256kB (U) 32*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 375420kB [ 667.846182] 28472 total pagecache pages [ 667.850285] 0 pages in swap cache [ 667.861757] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 667.876534] Swap cache stats: add 0, delete 0, find 0/0 [ 667.881930] Free swap = 0kB [ 667.896155] Total swap = 0kB [ 667.899306] 2097051 pages RAM [ 667.902408] 0 pages HighMem/MovableOnly [ 667.903226] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 667.932712] 363840 pages reserved [ 667.936523] 0 pages cma reserved [ 667.939904] Out of memory (oom_kill_allocating_task): Kill process 18010 (syz-executor.4) score 0 or sacrifice child [ 667.943106] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 667.983085] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 667.991802] 28717 total pagecache pages [ 668.006273] Killed process 18010 (syz-executor.4) total-vm:93216kB, anon-rss:108kB, file-rss:33756kB, shmem-rss:0kB [ 668.032585] 0 pages in swap cache [ 668.036089] Swap cache stats: add 0, delete 0, find 0/0 [ 668.041452] Free swap = 0kB [ 668.072195] Total swap = 0kB [ 668.075832] 2097051 pages RAM [ 668.080039] 0 pages HighMem/MovableOnly [ 668.092611] 363840 pages reserved [ 668.096160] 0 pages cma reserved [ 668.338743] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 668.343439] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 668.350699] syz-executor.4 cpuset= [ 668.366791] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 668.366805] in:imklog cpuset= [ 668.381339] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 668.386584] / mems_allowed=0-1 [ 668.391209] CPU: 1 PID: 21218 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 668.391217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 668.404406] / [ 668.411711] Call Trace: [ 668.411716] mems_allowed=0-1 [ 668.419064] dump_stack+0x1b2/0x281 [ 668.422705] warn_alloc.cold+0x96/0x1cc [ 668.426678] ? zone_watermark_ok_safe+0x220/0x220 [ 668.431600] __alloc_pages_nodemask+0x2127/0x2720 [ 668.436441] ? lock_acquire+0x170/0x3f0 [ 668.440404] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 668.445239] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 668.450675] ? __mutex_unlock_slowpath+0x75/0x770 [ 668.455540] alloc_pages_current+0x155/0x260 [ 668.460215] ion_page_pool_alloc+0x118/0x1b0 [ 668.464628] ion_system_heap_allocate+0x133/0x8c0 [ 668.469466] ? _raw_spin_unlock+0x29/0x40 [ 668.473607] ? _ion_heap_freelist_drain+0x6e/0x410 [ 668.478529] ? ion_system_contig_heap_create+0x130/0x130 [ 668.483983] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 668.488993] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 668.493830] ion_alloc+0x27a/0x810 [ 668.497366] ? ion_dma_buf_release+0x40/0x40 [ 668.501760] ? __might_fault+0x177/0x1b0 [ 668.505833] ion_ioctl+0xea/0x1f0 [ 668.509280] ? ion_query_heaps+0x360/0x360 [ 668.514139] ? lock_acquire+0x170/0x3f0 [ 668.518094] ? lock_downgrade+0x740/0x740 [ 668.522503] ? ion_query_heaps+0x360/0x360 [ 668.526722] do_vfs_ioctl+0x75a/0xff0 [ 668.530519] ? ioctl_preallocate+0x1a0/0x1a0 [ 668.534907] ? lock_downgrade+0x740/0x740 [ 668.539038] ? __fget+0x225/0x360 [ 668.543174] ? do_vfs_ioctl+0xff0/0xff0 [ 668.547155] ? security_file_ioctl+0x83/0xb0 [ 668.551549] SyS_ioctl+0x7f/0xb0 [ 668.554899] ? do_vfs_ioctl+0xff0/0xff0 [ 668.558871] do_syscall_64+0x1d5/0x640 [ 668.562748] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 668.567918] RIP: 0033:0x45e219 [ 668.571104] RSP: 002b:00007f1bf73e9c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 668.579696] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 668.586948] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 668.594199] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 668.601469] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 668.608735] R13: 00007ffe1c51cdaf R14: 00007f1bf73ea9c0 R15: 000000000119bf8c [ 668.619115] CPU: 0 PID: 21234 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 668.627026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 668.636382] Call Trace: [ 668.638981] dump_stack+0x1b2/0x281 [ 668.642620] warn_alloc.cold+0x96/0x1cc [ 668.646583] ? zone_watermark_ok_safe+0x220/0x220 [ 668.651429] __alloc_pages_nodemask+0x2127/0x2720 [ 668.656256] ? __schedule+0x893/0x1de0 [ 668.660131] ? lock_acquire+0x170/0x3f0 [ 668.664091] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 668.668939] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 668.674375] ? __mutex_unlock_slowpath+0x75/0x770 [ 668.679217] alloc_pages_current+0x155/0x260 [ 668.683613] ion_page_pool_alloc+0x118/0x1b0 [ 668.688019] ion_system_heap_allocate+0x133/0x8c0 [ 668.692846] ? _raw_spin_unlock+0x29/0x40 [ 668.697000] ? _ion_heap_freelist_drain+0x6e/0x410 [ 668.701925] ? ion_system_contig_heap_create+0x130/0x130 [ 668.707358] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 668.712356] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 668.717184] ion_alloc+0x27a/0x810 [ 668.720710] ? ion_dma_buf_release+0x40/0x40 [ 668.725112] ? __might_fault+0x177/0x1b0 [ 668.729172] ion_ioctl+0xea/0x1f0 [ 668.732623] ? ion_query_heaps+0x360/0x360 [ 668.736840] ? lock_acquire+0x170/0x3f0 [ 668.740794] ? lock_downgrade+0x740/0x740 [ 668.744925] ? ion_query_heaps+0x360/0x360 [ 668.749144] do_vfs_ioctl+0x75a/0xff0 [ 668.752932] ? ioctl_preallocate+0x1a0/0x1a0 [ 668.757323] ? lock_downgrade+0x740/0x740 [ 668.761459] ? __fget+0x225/0x360 [ 668.764895] ? do_vfs_ioctl+0xff0/0xff0 [ 668.768855] ? security_file_ioctl+0x83/0xb0 [ 668.773246] SyS_ioctl+0x7f/0xb0 [ 668.776594] ? do_vfs_ioctl+0xff0/0xff0 [ 668.780554] do_syscall_64+0x1d5/0x640 [ 668.784433] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 668.789794] RIP: 0033:0x45e219 [ 668.792986] RSP: 002b:00007fd20c681c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 668.800674] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 668.807925] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 668.815174] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 668.822606] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 668.829872] R13: 00007fff87e85fff R14: 00007fd20c6829c0 R15: 000000000119bf8c [ 668.837139] CPU: 1 PID: 21226 Comm: in:imklog Not tainted 4.14.217-syzkaller #0 [ 668.839720] warn_alloc_show_mem: 1 callbacks suppressed [ 668.839724] Mem-Info: [ 668.844595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 668.844600] Call Trace: [ 668.844619] dump_stack+0x1b2/0x281 [ 668.844632] dump_header+0x178/0x82f [ 668.844644] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 668.844654] ? ___ratelimit+0x2cd/0x530 [ 668.844664] oom_kill_process.cold+0x10/0xb18 [ 668.850045] active_anon:11418 inactive_anon:27048 isolated_anon:0 [ 668.850045] active_file:39 inactive_file:48 isolated_file:0 [ 668.850045] unevictable:0 dirty:22 writeback:0 unstable:0 [ 668.850045] slab_reclaimable:12266 slab_unreclaimable:118524 [ 668.850045] mapped:52686 shmem:27418 pagetables:827 bounce:0 [ 668.850045] free:13925 free_pcp:0 free_cma:0 [ 668.852438] out_of_memory+0xe3e/0x1190 [ 668.852451] ? oom_killer_disable+0x1c0/0x1c0 [ 668.852458] ? mutex_trylock+0x152/0x1a0 [ 668.852475] __alloc_pages_nodemask+0x23e1/0x2720 [ 668.876462] Node 0 active_anon:45376kB inactive_anon:80920kB active_file:48kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:123412kB dirty:20kB writeback:0kB shmem:82208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 668.876782] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 668.881012] Node 1 active_anon:296kB inactive_anon:27272kB active_file:108kB inactive_file:124kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87332kB dirty:68kB writeback:0kB shmem:27464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 668.885493] alloc_pages_current+0x155/0x260 [ 668.885506] filemap_fault+0xea3/0x1980 [ 668.885526] ext4_filemap_fault+0x84/0xb0 [ 668.885551] __do_fault+0xfa/0x380 [ 668.941867] Node 0 [ 668.964091] __handle_mm_fault+0x2497/0x4620 [ 668.964103] ? vm_insert_page+0x7c0/0x7c0 [ 668.964114] ? lock_downgrade+0x740/0x740 [ 668.964132] handle_mm_fault+0x391/0x860 [ 668.964144] __do_page_fault+0x549/0xad0 [ 668.964155] ? spurious_fault+0x640/0x640 [ 668.964167] ? do_page_fault+0x60/0x500 [ 668.969027] syz-executor.2: [ 668.996868] ? page_fault+0x2f/0x50 [ 668.996876] page_fault+0x45/0x50 [ 668.996884] RIP: 1fa0:0x1f9f [ 668.996887] RSP: 0000:0000562204cb69d0 EFLAGS: 7f735ad82da0 [ 669.016189] Mem-Info: [ 669.021544] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 669.034327] active_anon:11397 inactive_anon:27048 isolated_anon:0 [ 669.034327] active_file:32 inactive_file:30 isolated_file:0 [ 669.034327] unevictable:0 dirty:1 writeback:3 unstable:0 [ 669.034327] slab_reclaimable:12266 slab_unreclaimable:118393 [ 669.034327] mapped:52667 shmem:27418 pagetables:802 bounce:0 [ 669.034327] free:14048 free_pcp:11 free_cma:0 [ 669.035332] lowmem_reserve[]: [ 669.038804] Node 0 active_anon:45296kB inactive_anon:80920kB active_file:56kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:123400kB dirty:0kB writeback:0kB shmem:82208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 669.042937] 0 2717 2718 2718 2718 [ 669.042954] Node 0 DMA32 free:18836kB min:36200kB low:45248kB high:54296kB active_anon:45296kB inactive_anon:80860kB active_file:56kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:8064kB pagetables:2752kB bounce:0kB free_pcp:52kB local_pcp:8kB free_cma:0kB [ 669.042976] lowmem_reserve[]: 0 0 0 0 0 [ 669.042993] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 669.043010] lowmem_reserve[]: 0 0 0 0 0 [ 669.043028] Node 1 Normal free:26620kB min:53696kB low:67120kB high:80544kB active_anon:292kB inactive_anon:27272kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:460kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 669.043046] lowmem_reserve[]: 0 0 0 0 0 [ 669.043063] Node 0 DMA: 7*4kB [ 669.059544] Node 1 active_anon:292kB inactive_anon:27272kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87228kB dirty:0kB writeback:0kB shmem:27464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 669.060181] (M) [ 669.071308] Node 0 [ 669.094107] 5*8kB (UM) 5*16kB (M) 6*32kB (UM) 2*64kB (M) 4*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 10964kB [ 669.094171] Node 0 DMA32: 721*4kB (UME) 861*8kB (UME) 308*16kB (UME) 83*32kB (UME) 14*64kB (UM) 5*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18892kB [ 669.094232] Node 0 Normal: 0*4kB [ 669.140197] page allocation failure: order:0 [ 669.158918] 0*8kB [ 669.174359] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 669.194968] 0*16kB [ 669.203945] (null) [ 669.224481] 0*32kB [ 669.234003] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 669.256667] syz-executor.2 cpuset= [ 669.256919] lowmem_reserve[]: [ 669.260096] / [ 669.297605] 0 [ 669.310523] mems_allowed=0-1 [ 669.324798] 0*64kB [ 669.337781] CPU: 0 PID: 21218 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 669.340418] 0*128kB [ 669.341476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 669.343623] 0*256kB [ 669.345823] Call Trace: [ 669.371448] 2717 [ 669.374968] dump_stack+0x1b2/0x281 [ 669.374984] warn_alloc.cold+0x96/0x1cc [ 669.378077] 2718 [ 669.379781] ? zone_watermark_ok_safe+0x220/0x220 [ 669.381575] 2718 [ 669.384665] ? usleep_range+0x130/0x130 [ 669.384675] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 669.384688] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 669.384699] ? run_timer_softirq+0x5a0/0x5a0 [ 669.386912] 2718 [ 669.394792] __alloc_pages_nodemask+0x2127/0x2720 [ 669.394809] ? lock_acquire+0x170/0x3f0 [ 669.406545] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 669.406558] ? ion_page_pool_alloc+0x9e/0x1b0 [ 669.406574] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 669.408880] 0*512kB [ 669.411449] alloc_pages_current+0x155/0x260 [ 669.413498] 0*1024kB [ 669.417095] ion_page_pool_alloc+0x118/0x1b0 [ 669.421063] 0*2048kB [ 669.423112] ion_system_heap_allocate+0x133/0x8c0 [ 669.423125] ? _raw_spin_unlock+0x29/0x40 [ 669.423136] ? _ion_heap_freelist_drain+0x6e/0x410 [ 669.427966] Node 0 [ 669.430003] ? ion_system_contig_heap_create+0x130/0x130 [ 669.433982] DMA32 free:18836kB min:36200kB low:45248kB high:54296kB active_anon:45296kB inactive_anon:80860kB active_file:56kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:8064kB pagetables:2752kB bounce:0kB free_pcp:52kB local_pcp:44kB free_cma:0kB [ 669.439205] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 669.439221] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 669.444318] 0*4096kB [ 669.448654] ion_alloc+0x27a/0x810 [ 669.450693] = 0kB [ 669.455524] ? ion_dma_buf_release+0x40/0x40 [ 669.455536] ? __might_fault+0x177/0x1b0 [ 669.455547] ion_ioctl+0xea/0x1f0 [ 669.455556] ? ion_query_heaps+0x360/0x360 [ 669.455571] ? lock_acquire+0x170/0x3f0 [ 669.459615] lowmem_reserve[]: [ 669.464445] ? lock_downgrade+0x740/0x740 [ 669.464454] ? ion_query_heaps+0x360/0x360 [ 669.464469] do_vfs_ioctl+0x75a/0xff0 [ 669.468938] 0 [ 669.474377] ? ioctl_preallocate+0x1a0/0x1a0 [ 669.474385] ? lock_downgrade+0x740/0x740 [ 669.474400] ? __fget+0x225/0x360 [ 669.476705] Node 1 [ 669.481088] ? do_vfs_ioctl+0xff0/0xff0 [ 669.483496] 0 [ 669.487866] ? security_file_ioctl+0x83/0xb0 [ 669.490251] 0 [ 669.502211] SyS_ioctl+0x7f/0xb0 [ 669.502219] ? do_vfs_ioctl+0xff0/0xff0 [ 669.502231] do_syscall_64+0x1d5/0x640 [ 669.502251] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 669.506410] Normal: [ 669.511299] RIP: 0033:0x45e219 [ 669.513537] 3*4kB [ 669.518958] RSP: 002b:00007f1bf73e9c68 EFLAGS: 00000246 [ 669.547075] 0 [ 669.552063] ORIG_RAX: 0000000000000010 [ 669.552070] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 669.557025] 0 [ 669.560369] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 669.565933] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 669.570345] Node 0 [ 669.574409] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 669.574414] R13: 00007ffe1c51cdaf R14: 00007f1bf73ea9c0 R15: 000000000119bf8c [ 669.716951] (UM) 4*8kB (UM) 3*16kB (UM) 3*32kB (UM) 3*64kB (UM) 1*128kB (M) 28*256kB (UM) 33*512kB (UM) 2*1024kB (M) 0*2048kB 0*4096kB = 26620kB [ 669.756300] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 669.792408] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 669.801723] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 669.842419] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 669.851091] 28668 total pagecache pages [ 669.867035] 0 pages in swap cache [ 669.870619] Swap cache stats: add 0, delete 0, find 0/0 [ 669.877000] Free swap = 0kB [ 669.880133] Total swap = 0kB [ 669.884118] 2097051 pages RAM [ 669.887789] 0 pages HighMem/MovableOnly [ 669.891872] 363840 pages reserved [ 669.897072] 0 pages cma reserved [ 669.925994] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 669.992686] lowmem_reserve[]: 0 0 0 0 0 [ 669.996734] Node 1 Normal free:354056kB min:53696kB low:67120kB high:80544kB active_anon:364kB inactive_anon:27276kB active_file:672kB inactive_file:6152kB unevictable:0kB writepending:28kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:460kB bounce:0kB free_pcp:428kB local_pcp:360kB free_cma:0kB [ 670.062644] lowmem_reserve[]: 0 0 0 0 0 [ 670.066705] Node 0 DMA: 7*4kB (M) 5*8kB (UM) 6*16kB (UM) 6*32kB (UM) 2*64kB (M) 3*128kB (M) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 11108kB [ 670.102455] Node 0 DMA32: 717*4kB (UME) 844*8kB (ME) 287*16kB (ME) 73*32kB (UME) 975*64kB (UM) 7*128kB (UM) 1*256kB (M) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 81124kB [ 670.132404] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 670.153045] Node 1 Normal: 1*4kB (U) 2*8kB (UE) 1*16kB (U) 1*32kB (U) 1*64kB (M) 1*128kB (U) 2*256kB (ME) 3*512kB (UME) 10*1024kB (UE) 56*2048kB (UE) 54*4096kB (U) = 348420kB [ 670.192466] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 670.201345] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 670.222452] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 670.231354] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 670.262425] 29152 total pagecache pages [ 670.266491] 0 pages in swap cache [ 670.270066] Swap cache stats: add 0, delete 0, find 0/0 [ 670.292425] Free swap = 0kB [ 670.295489] Total swap = 0kB [ 670.298615] 2097051 pages RAM [ 670.301712] 0 pages HighMem/MovableOnly [ 670.322444] 363840 pages reserved [ 670.325960] 0 pages cma reserved [ 670.329328] Out of memory (oom_kill_allocating_task): Kill process 21226 (in:imklog) score 0 or sacrifice child [ 670.352539] Killed process 21213 (rsyslogd) total-vm:254332kB, anon-rss:784kB, file-rss:0kB, shmem-rss:0kB [ 670.374275] oom_reaper: reaped process 21213 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 21:27:34 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001}) 21:27:34 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x80000001, 0x4) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0xc0241, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:27:34 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0x12}) 21:27:34 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x80000001, 0x4) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0xc0241, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) [ 672.509609] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 672.526768] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 672.547019] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 672.567578] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 672.571922] CPU: 0 PID: 21267 Comm: syz-executor.0 Not tainted 4.14.217-syzkaller #0 [ 672.580626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 672.589983] Call Trace: [ 672.592582] dump_stack+0x1b2/0x281 [ 672.596232] warn_alloc.cold+0x96/0x1cc [ 672.600221] ? zone_watermark_ok_safe+0x220/0x220 [ 672.605085] __alloc_pages_nodemask+0x2127/0x2720 [ 672.610525] ? lock_acquire+0x170/0x3f0 [ 672.614505] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 672.619437] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 672.625759] ? __mutex_unlock_slowpath+0x75/0x770 [ 672.630587] alloc_pages_current+0x155/0x260 [ 672.635440] ion_page_pool_alloc+0x118/0x1b0 [ 672.639832] ion_system_heap_allocate+0x133/0x8c0 [ 672.644658] ? ion_alloc+0x187/0x810 [ 672.648372] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 672.653806] ? ion_system_contig_heap_create+0x130/0x130 [ 672.659239] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 672.664282] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 672.669223] ion_alloc+0x204/0x810 [ 672.672749] ? ion_dma_buf_release+0x40/0x40 [ 672.677229] ? __might_fault+0x177/0x1b0 [ 672.681360] ion_ioctl+0xea/0x1f0 [ 672.684802] ? ion_query_heaps+0x360/0x360 [ 672.689031] ? lock_acquire+0x170/0x3f0 [ 672.693001] ? lock_downgrade+0x740/0x740 [ 672.697131] ? ion_query_heaps+0x360/0x360 [ 672.701352] do_vfs_ioctl+0x75a/0xff0 [ 672.705147] ? ioctl_preallocate+0x1a0/0x1a0 [ 672.709722] ? lock_downgrade+0x740/0x740 [ 672.714034] ? __fget+0x225/0x360 [ 672.717472] ? do_vfs_ioctl+0xff0/0xff0 [ 672.721435] ? security_file_ioctl+0x83/0xb0 [ 672.725845] SyS_ioctl+0x7f/0xb0 [ 672.729215] ? do_vfs_ioctl+0xff0/0xff0 [ 672.733261] do_syscall_64+0x1d5/0x640 [ 672.737136] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 672.742428] RIP: 0033:0x45e219 [ 672.745621] RSP: 002b:00007ff50e12cc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 672.753314] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 672.760584] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 672.767835] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 672.775086] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 672.782337] R13: 00007ffceee1f7cf R14: 00007ff50e12d9c0 R15: 000000000119bf8c [ 672.790528] CPU: 1 PID: 21271 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 672.798429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 672.809262] Call Trace: [ 672.811847] dump_stack+0x1b2/0x281 [ 672.815465] warn_alloc.cold+0x96/0x1cc [ 672.819451] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 672.824469] ? zone_watermark_ok_safe+0x220/0x220 [ 672.829304] __alloc_pages_nodemask+0x2127/0x2720 [ 672.834149] ? lock_acquire+0x170/0x3f0 [ 672.838112] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 672.842941] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 672.848380] ? __mutex_unlock_slowpath+0x75/0x770 [ 672.853207] alloc_pages_current+0x155/0x260 [ 672.857602] ion_page_pool_alloc+0x118/0x1b0 [ 672.862604] ion_system_heap_allocate+0x133/0x8c0 [ 672.867537] ? ion_alloc+0x187/0x810 [ 672.871235] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 672.876668] ? ion_system_contig_heap_create+0x130/0x130 [ 672.882103] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 672.887110] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 672.891956] ion_alloc+0x204/0x810 [ 672.895483] ? ion_dma_buf_release+0x40/0x40 [ 672.900835] ? __might_fault+0x177/0x1b0 [ 672.904890] ion_ioctl+0xea/0x1f0 [ 672.908327] ? ion_query_heaps+0x360/0x360 [ 672.912557] ? lock_acquire+0x170/0x3f0 [ 672.918165] ? lock_downgrade+0x740/0x740 [ 672.922302] ? ion_query_heaps+0x360/0x360 [ 672.926534] do_vfs_ioctl+0x75a/0xff0 [ 672.930321] ? ioctl_preallocate+0x1a0/0x1a0 [ 672.934710] ? lock_downgrade+0x740/0x740 [ 672.938845] ? __fget+0x225/0x360 [ 672.942296] ? do_vfs_ioctl+0xff0/0xff0 [ 672.946252] ? security_file_ioctl+0x83/0xb0 [ 672.950649] SyS_ioctl+0x7f/0xb0 [ 672.954013] ? do_vfs_ioctl+0xff0/0xff0 [ 672.957970] do_syscall_64+0x1d5/0x640 [ 672.961843] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 672.967016] RIP: 0033:0x45e219 [ 672.971161] RSP: 002b:00007f1bf73e9c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 672.978861] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 672.986111] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 672.993362] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 673.000612] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 673.007888] R13: 00007ffe1c51cdaf R14: 00007f1bf73ea9c0 R15: 000000000119bf8c [ 673.074403] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 673.106617] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 673.111667] CPU: 1 PID: 7963 Comm: syz-fuzzer Not tainted 4.14.217-syzkaller #0 [ 673.120078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 673.129444] Call Trace: [ 673.132024] dump_stack+0x1b2/0x281 [ 673.135638] dump_header+0x178/0x82f [ 673.139342] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 673.144861] ? ___ratelimit+0x2cd/0x530 [ 673.148818] oom_kill_process.cold+0x10/0xb18 [ 673.153304] out_of_memory+0xe3e/0x1190 [ 673.157268] ? oom_killer_disable+0x1c0/0x1c0 [ 673.161744] ? mutex_trylock+0x152/0x1a0 [ 673.165807] __alloc_pages_nodemask+0x23e1/0x2720 [ 673.170638] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 673.175472] alloc_pages_current+0x155/0x260 [ 673.179883] filemap_fault+0xea3/0x1980 [ 673.183846] ext4_filemap_fault+0x84/0xb0 [ 673.187995] __do_fault+0xfa/0x380 [ 673.191535] __handle_mm_fault+0x2497/0x4620 [ 673.195926] ? vm_insert_page+0x7c0/0x7c0 [ 673.200060] ? free_object+0xe4/0x240 [ 673.203864] handle_mm_fault+0x391/0x860 [ 673.207910] __do_page_fault+0x549/0xad0 [ 673.211967] ? spurious_fault+0x640/0x640 [ 673.216102] ? do_page_fault+0x60/0x500 [ 673.220059] ? page_fault+0x2f/0x50 [ 673.223667] page_fault+0x45/0x50 [ 673.228232] RIP: 0000:0xb358f8 [ 673.231401] RSP: 4e20:000000c00003df28 EFLAGS: 00438920 [ 673.232021] warn_alloc_show_mem: 2 callbacks suppressed [ 673.232025] Mem-Info: [ 673.247217] active_anon:11936 inactive_anon:27048 isolated_anon:0 [ 673.247217] active_file:50 inactive_file:0 isolated_file:2 [ 673.247217] unevictable:0 dirty:10 writeback:0 unstable:0 [ 673.247217] slab_reclaimable:12384 slab_unreclaimable:119888 [ 673.247217] mapped:52754 shmem:27418 pagetables:803 bounce:0 [ 673.247217] free:13748 free_pcp:0 free_cma:0 [ 673.266203] Mem-Info: [ 673.280470] Node 0 active_anon:46588kB inactive_anon:80908kB active_file:120kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):8kB mapped:123688kB dirty:24kB writeback:0kB shmem:82196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 673.287687] active_anon:11936 inactive_anon:27048 isolated_anon:0 [ 673.287687] active_file:50 inactive_file:0 isolated_file:2 [ 673.287687] unevictable:0 dirty:10 writeback:0 unstable:0 [ 673.287687] slab_reclaimable:12384 slab_unreclaimable:119888 [ 673.287687] mapped:52754 shmem:27418 pagetables:803 bounce:0 [ 673.287687] free:13748 free_pcp:0 free_cma:0 [ 673.312179] Node 1 active_anon:1156kB inactive_anon:27284kB active_file:80kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87328kB dirty:16kB writeback:0kB shmem:27476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 673.348797] Node 0 active_anon:46588kB inactive_anon:80908kB active_file:120kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):8kB mapped:123688kB dirty:24kB writeback:0kB shmem:82196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 673.387094] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:24kB inactive_file:8kB unevictable:0kB writepending:4kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 673.407380] Node 1 active_anon:1156kB inactive_anon:27284kB active_file:80kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87328kB dirty:16kB writeback:0kB shmem:27476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 673.429212] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 673.429237] Node 0 DMA32 free:17716kB min:36200kB low:45248kB high:54296kB active_anon:46588kB inactive_anon:80848kB active_file:528kB inactive_file:632kB unevictable:0kB writepending:20kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:8032kB pagetables:2540kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 673.429261] lowmem_reserve[]: [ 673.465125] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:24kB inactive_file:8kB unevictable:0kB writepending:4kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 673.503459] 0 0 0 0 0 [ 673.527849] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 673.529638] lowmem_reserve[]: [ 673.553451] lowmem_reserve[]: 0 0 0 0 0 [ 673.553473] Node 1 Normal free:26320kB min:53696kB low:67120kB high:80544kB active_anon:1156kB inactive_anon:27284kB active_file:136kB inactive_file:96kB unevictable:0kB writepending:16kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:672kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 673.553500] lowmem_reserve[]: [ 673.560216] 0 [ 673.560556] 0 [ 673.595035] 2717 2718 2718 2718 [ 673.600216] Node 0 DMA32 free:17716kB min:36200kB low:45248kB high:54296kB active_anon:46588kB inactive_anon:80848kB active_file:528kB inactive_file:632kB unevictable:0kB writepending:20kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:8032kB pagetables:2540kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 673.602138] 0 0 0 0 [ 673.636359] Node 0 DMA: 6*4kB (M) 5*8kB (UM) 5*16kB (M) 6*32kB (UM) 2*64kB (M) 4*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 10960kB [ 673.637202] lowmem_reserve[]: [ 673.651515] Node 0 DMA32: 510*4kB (UME) 879*8kB (UME) 279*16kB (UME) 67*32kB (ME) 35*64kB (ME) 3*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18304kB [ 673.651576] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB [ 673.660331] 0 0 0 0 0 [ 673.677668] 0*1024kB 0*2048kB 0*4096kB = 0kB [ 673.679934] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 673.686085] Node 1 [ 673.709956] lowmem_reserve[]: 0 0 0 0 0 [ 673.709981] Node 1 [ 673.713885] Normal: [ 673.725268] Normal free:26320kB min:53696kB low:67120kB high:80544kB active_anon:1156kB inactive_anon:27284kB active_file:136kB inactive_file:0kB unevictable:0kB writepending:16kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:672kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 673.731369] 42*4kB [ 673.759409] lowmem_reserve[]: 0 0 0 0 0 [ 673.762646] (UME) 29*8kB (UME) 26*16kB (ME) 24*32kB (ME) 22*64kB (M) 10*128kB (UM) 8*256kB (UM) 34*512kB (UME) [ 673.770396] Node 0 DMA: 6*4kB (M) 5*8kB (UM) 5*16kB [ 673.780676] 1*1024kB (M) 1*2048kB (M) 0*4096kB = 26800kB [ 673.791688] (M) 6*32kB (UM) 2*64kB (M) 4*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 10960kB [ 673.792510] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 673.806730] Node 0 DMA32: 510*4kB (UME) 879*8kB (UME) 279*16kB (UME) 67*32kB (ME) 35*64kB (ME) 3*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18304kB [ 673.822959] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 673.830365] Node 0 [ 673.835753] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 673.835946] Normal: [ 673.837993] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 673.850345] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 673.871378] Node 1 Normal: 42*4kB (UME) 29*8kB (UME) 26*16kB (ME) 24*32kB (ME) 22*64kB (M) 10*128kB (UM) 8*256kB (UM) 34*512kB (UME) 1*1024kB (M) 1*2048kB (M) 0*4096kB = 26800kB [ 673.871631] 27474 total pagecache pages [ 673.892009] 0 pages in swap cache [ 673.892034] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 673.896002] Swap cache stats: add 0, delete 0, find 0/0 [ 673.909742] Free swap = 0kB [ 673.910677] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 673.913229] Total swap = 0kB [ 673.921374] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 673.935157] 2097051 pages RAM [ 673.938265] 0 pages HighMem/MovableOnly [ 673.942686] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 673.947486] 363840 pages reserved [ 673.951262] 27474 total pagecache pages [ 673.955011] 0 pages cma reserved [ 673.962141] 0 pages in swap cache [ 673.965644] Swap cache stats: add 0, delete 0, find 0/0 [ 673.971015] Free swap = 0kB [ 673.981550] Total swap = 0kB [ 673.984687] 2097051 pages RAM [ 673.987783] 0 pages HighMem/MovableOnly [ 673.991786] 363840 pages reserved [ 673.998612] 0 pages cma reserved [ 674.002033] Out of memory (oom_kill_allocating_task): Kill process 7963 (syz-fuzzer) score 0 or sacrifice child [ 674.015853] Killed process 20341 (syz-executor.0) total-vm:85024kB, anon-rss:72kB, file-rss:0kB, shmem-rss:0kB [ 674.036238] oom_reaper: reaped process 20341 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 674.051936] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 674.104630] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 674.109449] CPU: 0 PID: 7976 Comm: syz-fuzzer Not tainted 4.14.217-syzkaller #0 [ 674.117423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 674.127250] Call Trace: [ 674.129877] dump_stack+0x1b2/0x281 [ 674.133517] dump_header+0x178/0x82f [ 674.137267] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 674.142746] ? ___ratelimit+0x2cd/0x530 [ 674.146728] oom_kill_process.cold+0x10/0xb18 [ 674.151244] out_of_memory+0xe3e/0x1190 [ 674.155204] ? oom_killer_disable+0x1c0/0x1c0 [ 674.159702] ? mutex_trylock+0x152/0x1a0 [ 674.164109] __alloc_pages_nodemask+0x23e1/0x2720 [ 674.169430] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 674.174285] alloc_pages_current+0x155/0x260 [ 674.180862] filemap_fault+0xea3/0x1980 [ 674.184848] ext4_filemap_fault+0x84/0xb0 [ 674.188991] __do_fault+0xfa/0x380 [ 674.192525] __handle_mm_fault+0x2497/0x4620 [ 674.196914] ? vm_insert_page+0x7c0/0x7c0 [ 674.201041] ? __fsnotify_inode_delete+0x20/0x20 [ 674.205778] ? __fsnotify_update_child_dentry_flags.part.0+0x2e0/0x2e0 [ 674.212431] handle_mm_fault+0x391/0x860 [ 674.216477] __do_page_fault+0x549/0xad0 [ 674.220522] ? spurious_fault+0x640/0x640 [ 674.224665] ? do_page_fault+0x60/0x500 [ 674.228637] ? page_fault+0x2f/0x50 [ 674.232248] page_fault+0x45/0x50 [ 674.235680] RIP: 214180: (null) [ 674.239717] RSP: bca80:000000c000379de0 EFLAGS: 00000003 [ 674.312089] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 674.328518] Mem-Info: [ 674.331943] active_anon:11936 inactive_anon:27048 isolated_anon:0 [ 674.331943] active_file:13 inactive_file:14 isolated_file:0 [ 674.331943] unevictable:0 dirty:0 writeback:0 unstable:0 [ 674.331943] slab_reclaimable:12383 slab_unreclaimable:119602 [ 674.331943] mapped:52690 shmem:27418 pagetables:803 bounce:0 [ 674.331943] free:13816 free_pcp:60 free_cma:0 [ 674.348974] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 674.381620] Node 0 active_anon:46588kB inactive_anon:80908kB active_file:8kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:123532kB dirty:0kB writeback:0kB shmem:82196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 674.390690] CPU: 0 PID: 21234 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 674.418622] Node 1 active_anon:1156kB inactive_anon:27284kB active_file:144kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87228kB dirty:0kB writeback:0kB shmem:27476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 674.421147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 674.448556] Node 0 [ 674.458124] Call Trace: [ 674.458156] dump_stack+0x1b2/0x281 [ 674.458171] warn_alloc.cold+0x96/0x1cc [ 674.458184] ? zone_watermark_ok_safe+0x220/0x220 [ 674.458198] ? usleep_range+0x130/0x130 [ 674.460432] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 674.462988] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 674.463001] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 674.463011] ? run_timer_softirq+0x5a0/0x5a0 [ 674.463027] __alloc_pages_nodemask+0x2127/0x2720 [ 674.466635] lowmem_reserve[]: [ 674.470600] ? lock_acquire+0x170/0x3f0 [ 674.475434] 0 [ 674.479371] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 674.504968] 2717 [ 674.510049] ? ion_page_pool_alloc+0x9e/0x1b0 [ 674.515229] 2718 [ 674.519612] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 674.524438] 2718 [ 674.527516] ? policy_node+0xa5/0x110 [ 674.531474] 2718 [ 674.533263] alloc_pages_current+0x155/0x260 [ 674.533279] ion_page_pool_alloc+0x118/0x1b0 [ 674.533290] ion_system_heap_allocate+0x133/0x8c0 [ 674.540173] ? _raw_spin_unlock+0x29/0x40 [ 674.544668] Node 0 [ 674.546692] ? _ion_heap_freelist_drain+0x6e/0x410 [ 674.552138] DMA32 free:17504kB min:36200kB low:45248kB high:54296kB active_anon:46588kB inactive_anon:80848kB active_file:4kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:8032kB pagetables:2540kB bounce:0kB free_pcp:192kB local_pcp:72kB free_cma:0kB [ 674.554175] ? ion_system_contig_heap_create+0x130/0x130 [ 674.557944] lowmem_reserve[]: [ 674.559992] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 674.564389] 0 [ 674.568763] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 674.573590] 0 [ 674.577721] ion_alloc+0x27a/0x810 [ 674.579930] 0 [ 674.584860] ? ion_dma_buf_release+0x40/0x40 [ 674.584872] ? __might_fault+0x177/0x1b0 [ 674.584884] ion_ioctl+0xea/0x1f0 [ 674.613003] 0 [ 674.618433] ? ion_query_heaps+0x360/0x360 [ 674.621520] 0 [ 674.633034] ? lock_acquire+0x170/0x3f0 [ 674.633043] ? lock_downgrade+0x740/0x740 [ 674.633050] ? ion_query_heaps+0x360/0x360 [ 674.633062] do_vfs_ioctl+0x75a/0xff0 [ 674.639677] ? ioctl_preallocate+0x1a0/0x1a0 [ 674.641461] Node 0 [ 674.644978] ? lock_downgrade+0x740/0x740 [ 674.644991] ? __fget+0x225/0x360 [ 674.645000] ? do_vfs_ioctl+0xff0/0xff0 [ 674.645013] ? security_file_ioctl+0x83/0xb0 [ 674.646817] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 674.651198] SyS_ioctl+0x7f/0xb0 [ 674.658955] lowmem_reserve[]: [ 674.660719] ? do_vfs_ioctl+0xff0/0xff0 [ 674.665120] 0 [ 674.666884] do_syscall_64+0x1d5/0x640 [ 674.670818] 0 0 [ 674.674962] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 674.674971] RIP: 0033:0x45e219 [ 674.674979] RSP: 002b:00007fd20c681c68 EFLAGS: 00000246 [ 674.679200] 0 [ 674.682976] ORIG_RAX: 0000000000000010 [ 674.682981] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 674.682986] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 674.682991] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 674.682996] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 674.683000] R13: 00007fff87e85fff R14: 00007fd20c6829c0 R15: 000000000119bf8c [ 674.696208] warn_alloc_show_mem: 1 callbacks suppressed [ 674.696212] Mem-Info: [ 674.722049] 0 [ 674.739816] active_anon:11936 inactive_anon:27048 isolated_anon:0 [ 674.739816] active_file:38 inactive_file:0 isolated_file:0 [ 674.739816] unevictable:0 dirty:0 writeback:0 unstable:0 [ 674.739816] slab_reclaimable:12383 slab_unreclaimable:119602 [ 674.739816] mapped:52690 shmem:27418 pagetables:803 bounce:0 [ 674.739816] free:13816 free_pcp:60 free_cma:0 [ 674.771583] Node 0 active_anon:46588kB inactive_anon:80908kB active_file:8kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:123532kB dirty:0kB writeback:0kB shmem:82196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 674.798985] Node 1 [ 674.810729] Node 1 active_anon:1156kB inactive_anon:27284kB active_file:144kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87228kB dirty:0kB writeback:0kB shmem:27476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 674.825139] Normal free:26800kB min:53696kB low:67120kB high:80544kB active_anon:1156kB inactive_anon:27284kB active_file:144kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:672kB bounce:0kB free_pcp:48kB local_pcp:48kB free_cma:0kB [ 674.879673] Node 0 [ 674.888909] lowmem_reserve[]: [ 674.922427] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 674.961939] 0 [ 674.983689] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 674.990546] Node 0 DMA32 free:17664kB min:36200kB low:45248kB high:54296kB active_anon:46588kB inactive_anon:80848kB active_file:0kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:8000kB pagetables:2492kB bounce:0kB free_pcp:204kB local_pcp:120kB free_cma:0kB [ 674.991262] 0 [ 675.035326] lowmem_reserve[]: 0 0 0 0 0 [ 675.041145] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 675.041206] 0 [ 675.080225] lowmem_reserve[]: 0 0 0 0 0 [ 675.088057] 0 [ 675.090170] Node 1 [ 675.090172] 0 [ 675.091975] Normal free:26800kB min:53696kB low:67120kB high:80544kB active_anon:1156kB inactive_anon:27284kB active_file:160kB inactive_file:80kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:624kB bounce:0kB free_pcp:48kB local_pcp:0kB free_cma:0kB [ 675.136559] lowmem_reserve[]: 0 0 0 0 0 [ 675.140601] Node 0 DMA: 6*4kB (M) 5*8kB (UM) 5*16kB (M) 6*32kB (UM) 2*64kB (M) 4*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 10960kB [ 675.149059] Node 0 [ 675.168782] Node 0 DMA32: 482*4kB (ME) 850*8kB (UME) 270*16kB (UME) 69*32kB (UME) 35*64kB (UME) 2*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17752kB [ 675.175806] DMA: [ 675.198627] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 675.205642] 6*4kB (M) 5*8kB (UM) 5*16kB (M) 6*32kB (UM) 2*64kB (M) 4*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 10960kB [ 675.222160] Node 1 Normal: 42*4kB (UME) 29*8kB (UME) 26*16kB (ME) 24*32kB (ME) 22*64kB (M) 10*128kB (UM) 8*256kB (UM) 34*512kB (UME) 1*1024kB (M) 1*2048kB (M) 0*4096kB = 26800kB [ 675.254107] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 675.261270] Node 0 DMA32: 482*4kB (ME) 850*8kB (UME) 270*16kB (UME) 69*32kB (UME) 35*64kB (UME) 2*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17752kB [ 675.271533] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 675.307989] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 675.313241] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 675.327398] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 675.340228] 27446 total pagecache pages [ 675.349456] Node 1 Normal: 42*4kB (UME) 29*8kB (UME) 26*16kB (ME) 24*32kB (ME) 22*64kB (M) 10*128kB (UM) 8*256kB (UM) 34*512kB (UME) 1*1024kB (M) 1*2048kB (M) 0*4096kB = 26800kB [ 675.355443] 0 pages in swap cache [ 675.381371] Swap cache stats: add 0, delete 0, find 0/0 [ 675.385400] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 675.388569] Free swap = 0kB [ 675.411107] Total swap = 0kB [ 675.415293] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 675.416164] 2097051 pages RAM [ 675.440710] 0 pages HighMem/MovableOnly [ 675.446643] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 675.448596] 363840 pages reserved [ 675.471766] 0 pages cma reserved [ 675.475225] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 675.475232] 27446 total pagecache pages [ 675.544278] 0 pages in swap cache [ 675.547980] Swap cache stats: add 0, delete 0, find 0/0 [ 675.584759] Free swap = 0kB [ 675.588574] Total swap = 0kB [ 675.591694] 2097051 pages RAM [ 675.594915] 0 pages HighMem/MovableOnly [ 675.600924] 363840 pages reserved [ 675.604489] 0 pages cma reserved [ 675.607853] Out of memory (oom_kill_allocating_task): Kill process 7976 (syz-fuzzer) score 0 or sacrifice child [ 675.622708] Killed process 20342 (syz-executor.3) total-vm:85024kB, anon-rss:72kB, file-rss:0kB, shmem-rss:0kB [ 675.638898] oom_reaper: reaped process 20342 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 676.554641] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 676.561433] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 676.594177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 676.622045] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 676.637791] device bridge_slave_1 left promiscuous mode [ 676.646694] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.783493] kworker/u4:0 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 676.842623] device bridge_slave_0 left promiscuous mode [ 676.848326] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.860412] kworker/u4:0 cpuset=/ mems_allowed=0-1 [ 676.885502] CPU: 1 PID: 5 Comm: kworker/u4:0 Not tainted 4.14.217-syzkaller #0 [ 676.892894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 676.902259] Workqueue: events_unbound call_usermodehelper_exec_work [ 676.908663] Call Trace: [ 676.911257] dump_stack+0x1b2/0x281 [ 676.914885] dump_header+0x178/0x82f [ 676.918594] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 676.923778] ? ___ratelimit+0x2cd/0x530 [ 676.927747] oom_kill_process.cold+0x10/0xb18 [ 676.932240] ? lock_downgrade+0x740/0x740 [ 676.936386] out_of_memory+0x2dc/0x1190 [ 676.940365] ? oom_killer_disable+0x1c0/0x1c0 [ 676.944856] ? mutex_trylock+0x152/0x1a0 [ 676.948914] __alloc_pages_nodemask+0x23e1/0x2720 [ 676.953765] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 676.958775] ? fs_reclaim_release+0xd0/0x110 [ 676.963201] ? kmem_cache_alloc_node+0x38b/0x410 [ 676.967959] copy_process.part.0+0x265/0x71c0 [ 676.972453] ? __lock_acquire+0x5fc/0x3f20 [ 676.976690] ? trace_hardirqs_on+0x10/0x10 [ 676.980920] ? static_obj+0x50/0x50 [ 676.984550] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 676.990001] ? __cleanup_sighand+0x40/0x40 [ 676.994234] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 676.999688] _do_fork+0x184/0xc80 [ 677.003144] ? fork_idle+0x270/0x270 [ 677.006858] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 677.011960] ? process_one_work+0x6c4/0x14a0 [ 677.016365] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 677.021814] kernel_thread+0x2f/0x40 [ 677.025537] call_usermodehelper_exec_work+0x1ac/0x2a0 [ 677.030814] ? call_usermodehelper+0x80/0x80 [ 677.035264] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 677.040746] process_one_work+0x793/0x14a0 [ 677.044995] ? work_busy+0x320/0x320 [ 677.048703] ? worker_thread+0x158/0xff0 [ 677.052757] ? _raw_spin_unlock_irq+0x24/0x80 [ 677.057253] worker_thread+0x5cc/0xff0 [ 677.061144] ? rescuer_thread+0xc80/0xc80 [ 677.065287] kthread+0x30d/0x420 [ 677.068647] ? kthread_create_on_node+0xd0/0xd0 [ 677.073316] ret_from_fork+0x24/0x30 [ 677.082779] Mem-Info: [ 677.085228] active_anon:11996 inactive_anon:27047 isolated_anon:0 [ 677.085228] active_file:17 inactive_file:17 isolated_file:0 [ 677.085228] unevictable:0 dirty:0 writeback:0 unstable:0 [ 677.085228] slab_reclaimable:12437 slab_unreclaimable:119268 [ 677.085228] mapped:44024 shmem:27415 pagetables:701 bounce:0 [ 677.085228] free:25161 free_pcp:94 free_cma:0 [ 677.124710] Node 0 active_anon:46488kB inactive_anon:80904kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116216kB dirty:0kB writeback:0kB shmem:82184kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 677.156615] device veth1_macvtap left promiscuous mode [ 677.158104] Node 1 active_anon:1496kB inactive_anon:27284kB active_file:96kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:59880kB dirty:0kB writeback:0kB shmem:27476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 677.170928] device veth0_macvtap left promiscuous mode [ 677.194713] Node 0 DMA free:11052kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 677.217395] device veth1_vlan left promiscuous mode [ 677.226583] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 677.231632] Node 0 DMA32 free:36140kB min:36200kB low:45248kB high:54296kB active_anon:46488kB inactive_anon:80844kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7936kB pagetables:2376kB bounce:0kB free_pcp:140kB local_pcp:0kB free_cma:0kB [ 677.266689] lowmem_reserve[]: 0 0 0 0 0 [ 677.268859] device veth0_vlan left promiscuous mode [ 677.270717] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 677.307349] lowmem_reserve[]: 0 0 0 0 0 [ 677.311363] Node 1 Normal free:53452kB min:53696kB low:67120kB high:80544kB active_anon:1496kB inactive_anon:27284kB active_file:196kB inactive_file:44kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:428kB bounce:0kB free_pcp:240kB local_pcp:120kB free_cma:0kB [ 677.346180] lowmem_reserve[]: 0 0 0 0 0 [ 677.350211] Node 0 DMA: 7*4kB (UM) 4*8kB (UM) 7*16kB (UM) 6*32kB (UM) 3*64kB (UM) 4*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 11052kB [ 677.371435] Node 0 DMA32: 423*4kB (ME) 843*8kB (UME) 266*16kB (ME) 65*32kB (UME) 36*64kB (UME) 73*128kB (UM) 26*256kB (U) 4*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 36148kB [ 677.393276] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 677.408498] Node 1 Normal: 73*4kB (UME) 59*8kB (UME) 47*16kB (UME) 37*32kB (UME) 33*64kB (UM) 14*128kB (UM) 5*256kB (UM) 37*512kB (UME) 18*1024kB (U) 2*2048kB (UM) 1*4096kB (U) = 53452kB [ 677.431743] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 677.440657] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 677.455605] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 677.466840] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 677.479988] 27449 total pagecache pages [ 677.486243] 0 pages in swap cache [ 677.489696] Swap cache stats: add 0, delete 0, find 0/0 [ 677.499072] Free swap = 0kB [ 677.504565] Total swap = 0kB [ 677.508542] 2097051 pages RAM [ 677.511723] 0 pages HighMem/MovableOnly [ 677.519812] 363840 pages reserved [ 677.525534] 0 pages cma reserved [ 677.528909] Out of memory: Kill process 21269 (syz-executor.2) score 1005 or sacrifice child [ 677.541579] Killed process 21271 (syz-executor.2) total-vm:93348kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB [ 677.700053] oom_reaper: reaped process 21271 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 677.721847] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 677.724102] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 677.741473] syz-executor.2 cpuset= [ 677.750623] (null) [ 677.751183] / [ 677.760176] , order=0, oom_score_adj=0 [ 677.766784] mems_allowed=0-1 [ 677.769919] CPU: 1 PID: 21271 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 677.777801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 677.781575] in:imklog cpuset= [ 677.787162] Call Trace: [ 677.787189] dump_stack+0x1b2/0x281 [ 677.787204] warn_alloc.cold+0x96/0x1cc [ 677.787217] ? zone_watermark_ok_safe+0x220/0x220 [ 677.787228] ? usleep_range+0x130/0x130 [ 677.787236] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 677.787249] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 677.787261] ? run_timer_softirq+0x5a0/0x5a0 [ 677.806311] / [ 677.809304] __alloc_pages_nodemask+0x2127/0x2720 [ 677.830220] mems_allowed=0-1 [ 677.830339] ? lock_acquire+0x170/0x3f0 [ 677.837389] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 677.842234] ? ion_page_pool_alloc+0x9e/0x1b0 [ 677.846732] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 677.852191] alloc_pages_current+0x155/0x260 [ 677.856633] ion_page_pool_alloc+0x118/0x1b0 [ 677.861037] ion_system_heap_allocate+0x133/0x8c0 [ 677.865872] ? ion_alloc+0x187/0x810 [ 677.869581] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 677.875030] ? ion_system_contig_heap_create+0x130/0x130 [ 677.880493] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 677.885502] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 677.890344] ion_alloc+0x204/0x810 [ 677.893887] ? ion_dma_buf_release+0x40/0x40 [ 677.898292] ? __might_fault+0x177/0x1b0 [ 677.902350] ion_ioctl+0xea/0x1f0 [ 677.905800] ? ion_query_heaps+0x360/0x360 [ 677.910029] ? lock_acquire+0x170/0x3f0 [ 677.913995] ? lock_downgrade+0x740/0x740 [ 677.918140] ? ion_query_heaps+0x360/0x360 [ 677.922371] do_vfs_ioctl+0x75a/0xff0 [ 677.926168] ? ioctl_preallocate+0x1a0/0x1a0 [ 677.930569] ? lock_downgrade+0x740/0x740 [ 677.934715] ? __fget+0x225/0x360 [ 677.938164] ? do_vfs_ioctl+0xff0/0xff0 [ 677.942135] ? security_file_ioctl+0x83/0xb0 [ 677.946536] SyS_ioctl+0x7f/0xb0 [ 677.949895] ? do_vfs_ioctl+0xff0/0xff0 [ 677.953871] do_syscall_64+0x1d5/0x640 [ 677.957761] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 677.962959] RIP: 0033:0x45e219 [ 677.966140] RSP: 002b:00007f1bf73e9c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 677.973949] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 677.981216] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 677.988485] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 677.995754] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 678.003119] R13: 00007ffe1c51cdaf R14: 00007f1bf73ea9c0 R15: 000000000119bf8c [ 678.010480] CPU: 0 PID: 21262 Comm: in:imklog Not tainted 4.14.217-syzkaller #0 [ 678.017941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 678.018233] Mem-Info: [ 678.027285] Call Trace: [ 678.027308] dump_stack+0x1b2/0x281 [ 678.027321] dump_header+0x178/0x82f [ 678.027335] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 678.029741] active_anon:11458 inactive_anon:27047 isolated_anon:0 [ 678.029741] active_file:17 inactive_file:17 isolated_file:0 [ 678.029741] unevictable:0 dirty:0 writeback:0 unstable:0 [ 678.029741] slab_reclaimable:12434 slab_unreclaimable:119264 [ 678.029741] mapped:44024 shmem:27415 pagetables:700 bounce:0 [ 678.029741] free:13937 free_pcp:153 free_cma:0 [ 678.032320] ? ___ratelimit+0x2cd/0x530 [ 678.032330] oom_kill_process.cold+0x10/0xb18 [ 678.032352] out_of_memory+0xe3e/0x1190 [ 678.035956] Node 0 active_anon:44416kB inactive_anon:80904kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116216kB dirty:0kB writeback:0kB shmem:82184kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 678.039646] ? oom_killer_disable+0x1c0/0x1c0 [ 678.044750] Node 1 active_anon:1416kB inactive_anon:27284kB active_file:64kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:59880kB dirty:0kB writeback:0kB shmem:27476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 678.078388] ? mutex_trylock+0x152/0x1a0 [ 678.078400] __alloc_pages_nodemask+0x23e1/0x2720 [ 678.078420] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 678.082394] Node 0 [ 678.087047] alloc_pages_current+0x155/0x260 [ 678.090993] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 678.118469] filemap_fault+0xea3/0x1980 [ 678.118488] ext4_filemap_fault+0x84/0xb0 [ 678.118501] __do_fault+0xfa/0x380 [ 678.122984] lowmem_reserve[]: [ 678.150219] __handle_mm_fault+0x2497/0x4620 [ 678.150231] ? vm_insert_page+0x7c0/0x7c0 [ 678.150242] ? lock_downgrade+0x740/0x740 [ 678.150259] handle_mm_fault+0x391/0x860 [ 678.150274] __do_page_fault+0x549/0xad0 [ 678.154353] 0 [ 678.159167] ? spurious_fault+0x640/0x640 [ 678.164033] 2717 [ 678.166254] ? do_page_fault+0x60/0x500 [ 678.170630] 2718 2718 [ 678.196211] ? page_fault+0x2f/0x50 [ 678.196219] page_fault+0x45/0x50 [ 678.196231] RIP: 1fa0:0x1f9f [ 678.200278] 2718 [ 678.204402] RSP: 0000:00005629c59359d0 EFLAGS: 7fd550e48da0 [ 678.216146] Mem-Info: [ 678.250494] active_anon:11458 inactive_anon:27047 isolated_anon:0 [ 678.250494] active_file:17 inactive_file:17 isolated_file:0 [ 678.250494] unevictable:0 dirty:0 writeback:0 unstable:0 [ 678.250494] slab_reclaimable:12434 slab_unreclaimable:119264 [ 678.250494] mapped:44024 shmem:27415 pagetables:700 bounce:0 [ 678.250494] free:13937 free_pcp:153 free_cma:0 [ 678.258748] Node 0 [ 678.261073] Node 0 active_anon:44416kB inactive_anon:80904kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116216kB dirty:0kB writeback:0kB shmem:82184kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 678.268074] DMA32 free:17984kB min:36200kB low:45248kB high:54296kB active_anon:44416kB inactive_anon:80844kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7936kB pagetables:2376kB bounce:0kB free_pcp:288kB local_pcp:120kB free_cma:0kB [ 678.305654] Node 1 active_anon:1416kB inactive_anon:27284kB active_file:64kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:59880kB dirty:0kB writeback:0kB shmem:27476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 678.349734] lowmem_reserve[]: [ 678.365321] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 678.404782] 0 [ 678.430827] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 678.437733] Node 0 DMA32 free:17984kB min:36200kB low:45248kB high:54296kB active_anon:44416kB inactive_anon:80844kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7936kB pagetables:2376kB bounce:0kB free_pcp:288kB local_pcp:168kB free_cma:0kB [ 678.439315] 0 [ 678.477744] lowmem_reserve[]: 0 0 0 0 0 [ 678.483591] 0 0 0 [ 678.483604] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 678.483622] lowmem_reserve[]: 0 0 0 0 0 [ 678.483641] Node 1 Normal free:26792kB min:53696kB low:67120kB high:80544kB active_anon:1416kB inactive_anon:27284kB active_file:164kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:424kB bounce:0kB free_pcp:324kB local_pcp:120kB free_cma:0kB [ 678.489825] Node 0 [ 678.526691] lowmem_reserve[]: [ 678.555303] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 678.562815] 0 [ 678.595346] lowmem_reserve[]: 0 0 0 [ 678.597183] 0 0 [ 678.600786] 0 0 [ 678.611066] 0 [ 678.616867] Node 1 [ 678.618441] 0 [ 678.618682] Normal free:26792kB min:53696kB low:67120kB high:80544kB active_anon:1416kB inactive_anon:27284kB active_file:152kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:424kB bounce:0kB free_pcp:324kB local_pcp:204kB free_cma:0kB [ 678.629581] lowmem_reserve[]: [ 678.657463] Node 0 DMA: 7*4kB (UM) 4*8kB (UM) 6*16kB (M) 6*32kB (UM) 2*64kB (M) 4*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 10972kB [ 678.668910] 0 [ 678.682168] Node 0 DMA32: 424*4kB (UME) 842*8kB (UME) 267*16kB (UME) 63*32kB (ME) 33*64kB (ME) 1*128kB (M) 0*256kB 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 17984kB [ 678.698849] 0 0 0 0 [ 678.698867] Node 0 DMA: 7*4kB (UM) 4*8kB (UM) 6*16kB (M) 6*32kB (UM) 2*64kB (M) 4*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 10972kB [ 678.704849] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 678.737789] Node 1 Normal: 72*4kB (ME) 59*8kB (UME) 47*16kB (UME) 36*32kB (ME) 33*64kB (UM) 14*128kB (UM) 3*256kB (M) 4*512kB (UME) 9*1024kB (U) 2*2048kB (UM) 1*4096kB (U) = 26792kB [ 678.738249] Node 0 [ 678.760569] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 678.777990] DMA32: 424*4kB [ 678.778011] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 678.778013] (UME) 842*8kB [ 678.780951] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 678.807661] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 678.808572] (UME) [ 678.816314] 27449 total pagecache pages [ 678.816325] 0 pages in swap cache [ 678.816330] Swap cache stats: add 0, delete 0, find 0/0 [ 678.816334] Free swap = 0kB [ 678.816337] Total swap = 0kB [ 678.816344] 2097051 pages RAM [ 678.816348] 0 pages HighMem/MovableOnly [ 678.816351] 363840 pages reserved [ 678.816355] 0 pages cma reserved [ 678.858620] 267*16kB (UME) 63*32kB (ME) 33*64kB (ME) 1*128kB (M) 0*256kB 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 17984kB [ 678.871348] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 678.885159] Node 1 Normal: 1*4kB (E) 2*8kB (ME) 2*16kB (ME) 17*32kB (UME) 32*64kB (M) 14*128kB (UM) 3*256kB (M) 4*512kB (UME) 45*1024kB (U) 23*2048kB (UM) 1*4096kB (U) = 104532kB [ 678.903204] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 678.913456] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 678.970620] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 679.011930] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 679.062325] 28935 total pagecache pages [ 679.066341] 0 pages in swap cache [ 679.069833] Swap cache stats: add 0, delete 0, find 0/0 [ 679.101782] Free swap = 0kB [ 679.104833] Total swap = 0kB [ 679.107872] 2097051 pages RAM [ 679.107890] device hsr_slave_1 left promiscuous mode [ 679.110959] 0 pages HighMem/MovableOnly [ 679.110964] 363840 pages reserved [ 679.159164] device hsr_slave_0 left promiscuous mode [ 679.161794] 0 pages cma reserved [ 679.167686] Out of memory (oom_kill_allocating_task): Kill process 21262 (in:imklog) score 0 or sacrifice child [ 679.212761] team0 (unregistering): Port device team_slave_1 removed [ 679.214297] Killed process 21260 (rsyslogd) total-vm:254332kB, anon-rss:616kB, file-rss:0kB, shmem-rss:0kB [ 679.243249] oom_reaper: reaped process 21260 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 679.253508] team0 (unregistering): Port device team_slave_0 removed [ 679.311796] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 679.335306] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 679.401152] bond0 (unregistering): Released all slaves [ 679.678540] rsyslogd invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 [ 679.720358] rsyslogd cpuset=/ mems_allowed=0-1 [ 679.725499] CPU: 0 PID: 21295 Comm: rsyslogd Not tainted 4.14.217-syzkaller #0 [ 679.732856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 679.742207] Call Trace: [ 679.744800] dump_stack+0x1b2/0x281 [ 679.748424] dump_header+0x178/0x82f [ 679.752138] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 679.757240] ? ___ratelimit+0x2cd/0x530 [ 679.761219] oom_kill_process.cold+0x10/0xb18 [ 679.765723] out_of_memory+0xe3e/0x1190 [ 679.769699] ? oom_killer_disable+0x1c0/0x1c0 [ 679.774187] ? mutex_trylock+0x152/0x1a0 [ 679.778239] __alloc_pages_nodemask+0x23e1/0x2720 [ 679.783088] ? _find_next_bit+0xdb/0x100 [ 679.787137] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 679.791978] ? lock_acquire+0x170/0x3f0 [ 679.795946] ? do_raw_spin_unlock+0x164/0x220 [ 679.800433] alloc_pages_current+0x155/0x260 [ 679.804835] __pmd_alloc+0x37/0x3f0 [ 679.808461] move_page_tables+0xf00/0x17d0 [ 679.812700] ? vmacache_update+0xbb/0x130 [ 679.816845] shift_arg_pages+0x17c/0x3e0 [ 679.820898] ? put_arg_page+0x1c0/0x1c0 [ 679.824874] ? change_protection+0xa0/0xa0 [ 679.829111] ? lock_downgrade+0x740/0x740 [ 679.833253] ? lock_acquire+0x170/0x3f0 [ 679.837223] ? setup_arg_pages+0x242/0x6f0 [ 679.841451] setup_arg_pages+0x584/0x6f0 [ 679.845509] ? shift_arg_pages+0x3e0/0x3e0 [ 679.849762] ? get_random_u64+0xd4/0x1c0 [ 679.853816] load_elf_binary+0xa01/0x4750 [ 679.857986] ? elf_core_dump+0x4460/0x4460 [ 679.862217] search_binary_handler.part.0+0xd5/0x640 [ 679.867319] do_execveat_common+0x1099/0x1f30 [ 679.872247] ? copy_strings_kernel+0x110/0x110 [ 679.876825] ? strncpy_from_user+0x210/0x2c0 [ 679.881237] ? getname_flags+0x22e/0x550 [ 679.885302] SyS_execve+0x3b/0x50 [ 679.888743] ? setup_new_exec+0x770/0x770 [ 679.892888] do_syscall_64+0x1d5/0x640 [ 679.896797] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 679.901979] RIP: 0033:0x7ffa0aea5647 [ 679.905680] RSP: 002b:00007ffe87b68798 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 679.913378] RAX: ffffffffffffffda RBX: 000055c091745370 RCX: 00007ffa0aea5647 [ 679.920636] RDX: 000055c091741560 RSI: 000055c091751670 RDI: 000055c0916d8020 [ 679.927893] RBP: 00007ffe87b68900 R08: 000000000000fcfe R09: 0000000000000010 [ 679.935441] R10: 000055c0916d7680 R11: 0000000000000246 R12: 000055c0916d7228 [ 679.942698] R13: 0000000000000000 R14: 000055c091751670 R15: 00007ffe87b689e0 [ 679.959493] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 679.971431] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 679.978776] CPU: 0 PID: 21271 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 679.986700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 679.996061] Call Trace: [ 679.998660] dump_stack+0x1b2/0x281 [ 680.002287] warn_alloc.cold+0x96/0x1cc [ 680.006259] ? zone_watermark_ok_safe+0x220/0x220 [ 680.011547] __alloc_pages_nodemask+0x2127/0x2720 [ 680.016385] ? lock_acquire+0x170/0x3f0 [ 680.020368] ? lock_acquire+0x170/0x3f0 [ 680.024345] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 680.029189] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 680.034637] ? __mutex_unlock_slowpath+0x75/0x770 [ 680.041861] alloc_pages_current+0x155/0x260 [ 680.046278] ion_page_pool_alloc+0x118/0x1b0 [ 680.050679] ion_system_heap_allocate+0x133/0x8c0 [ 680.055525] ? _raw_spin_unlock+0x29/0x40 [ 680.059666] ? _ion_heap_freelist_drain+0x6e/0x410 [ 680.064599] ? ion_system_contig_heap_create+0x130/0x130 [ 680.070060] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 680.075093] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 680.080031] ion_alloc+0x27a/0x810 [ 680.083577] ? ion_dma_buf_release+0x40/0x40 [ 680.087979] ? __might_fault+0x177/0x1b0 [ 680.092045] ion_ioctl+0xea/0x1f0 [ 680.095491] ? ion_query_heaps+0x360/0x360 [ 680.099734] ? lock_acquire+0x170/0x3f0 [ 680.103705] ? lock_downgrade+0x740/0x740 [ 680.107844] ? ion_query_heaps+0x360/0x360 [ 680.112072] do_vfs_ioctl+0x75a/0xff0 [ 680.115869] ? ioctl_preallocate+0x1a0/0x1a0 [ 680.120278] ? lock_downgrade+0x740/0x740 [ 680.124421] ? __fget+0x225/0x360 [ 680.127864] ? do_vfs_ioctl+0xff0/0xff0 [ 680.131849] ? security_file_ioctl+0x83/0xb0 [ 680.136255] SyS_ioctl+0x7f/0xb0 [ 680.139619] ? do_vfs_ioctl+0xff0/0xff0 [ 680.143593] do_syscall_64+0x1d5/0x640 [ 680.147488] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 680.152675] RIP: 0033:0x45e219 [ 680.155859] RSP: 002b:00007f1bf73e9c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 680.163569] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 680.170830] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 680.178102] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 680.185369] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 680.192721] R13: 00007ffe1c51cdaf R14: 00007f1bf73ea9c0 R15: 000000000119bf8c [ 680.204193] Mem-Info: [ 680.206651] active_anon:11198 inactive_anon:27046 isolated_anon:0 [ 680.206651] active_file:2 inactive_file:3 isolated_file:0 [ 680.206651] unevictable:0 dirty:0 writeback:0 unstable:0 [ 680.206651] slab_reclaimable:12439 slab_unreclaimable:117922 [ 680.206651] mapped:35371 shmem:27413 pagetables:633 bounce:0 [ 680.206651] free:17523 free_pcp:0 free_cma:0 [ 680.242463] Mem-Info: [ 680.244910] active_anon:11192 inactive_anon:27045 isolated_anon:0 [ 680.244910] active_file:17 inactive_file:17 isolated_file:0 [ 680.244910] unevictable:0 dirty:0 writeback:0 unstable:0 [ 680.244910] slab_reclaimable:12439 slab_unreclaimable:117937 [ 680.244910] mapped:35351 shmem:27411 pagetables:647 bounce:0 [ 680.244910] free:17651 free_pcp:0 free_cma:0 [ 680.280498] Node 0 active_anon:43732kB inactive_anon:80896kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:104540kB dirty:0kB writeback:0kB shmem:82168kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 680.310589] Node 1 active_anon:1036kB inactive_anon:27284kB active_file:60kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36864kB dirty:0kB writeback:0kB shmem:27476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 680.337926] Node 0 active_anon:43732kB inactive_anon:80896kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:104540kB dirty:0kB writeback:0kB shmem:82168kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 680.340145] Node 0 DMA free:11000kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 680.387572] Node 1 active_anon:1036kB inactive_anon:27284kB active_file:60kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36864kB dirty:0kB writeback:0kB shmem:27476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 680.395882] lowmem_reserve[]: [ 680.430845] Node 0 [ 680.435102] 0 [ 680.443287] DMA free:11000kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 680.448517] 2717 2718 2718 2718 [ 680.507485] Node 0 DMA32 free:32080kB min:36200kB low:45248kB high:54296kB active_anon:43732kB inactive_anon:80836kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7712kB pagetables:2292kB bounce:0kB free_pcp:24kB local_pcp:0kB free_cma:0kB [ 680.550073] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 680.557933] lowmem_reserve[]: 0 0 0 0 0 [ 680.568964] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 680.599970] Node 0 DMA32 free:32080kB min:36200kB low:45248kB high:54296kB active_anon:43732kB inactive_anon:80836kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7712kB pagetables:2292kB bounce:0kB free_pcp:24kB local_pcp:24kB free_cma:0kB [ 680.603222] lowmem_reserve[]: 0 0 0 0 0 [ 680.639207] Node 1 Normal free:27524kB min:53696kB low:67120kB high:80544kB active_anon:1036kB inactive_anon:27284kB active_file:60kB inactive_file:60kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:296kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 680.640053] lowmem_reserve[]: [ 680.667815] lowmem_reserve[]: 0 0 0 0 0 [ 680.674955] Node 0 DMA: 10*4kB (UM) 4*8kB (UM) 7*16kB (UM) 6*32kB (UM) 2*64kB (M) 4*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 11000kB [ 680.680990] 0 [ 680.690430] Node 0 DMA32: 644*4kB (UME) 1902*8kB (UME) 509*16kB (UME) 193*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 32112kB [ 680.700779] 0 [ 680.719537] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 680.728907] 0 [ 680.739784] Node 1 Normal: 213*4kB (UM) 164*8kB (UME) 121*16kB (UME) 136*32kB (UME) 26*64kB (M) 20*128kB (UM) 34*256kB (UM) 8*512kB (UME) 0*1024kB 1*2048kB (M) 0*4096kB = 27524kB [ 680.751690] 0 0 [ 680.759874] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 680.764964] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 680.799505] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 680.808387] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 680.821293] lowmem_reserve[]: 0 0 0 0 0 [ 680.823551] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 680.830504] Node 1 Normal free:27524kB min:53696kB low:67120kB high:80544kB active_anon:1036kB inactive_anon:27284kB active_file:60kB inactive_file:60kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:296kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 680.838100] 27445 total pagecache pages [ 680.872232] lowmem_reserve[]: 0 0 0 0 0 [ 680.874135] 0 pages in swap cache [ 680.876272] Node 0 [ 680.879710] Swap cache stats: add 0, delete 0, find 0/0 [ 680.879712] DMA: 10*4kB [ 680.884970] Free swap = 0kB [ 680.893851] (UM) 4*8kB (UM) 7*16kB (UM) 6*32kB (UM) 2*64kB (M) 4*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 11000kB [ 680.897308] Total swap = 0kB [ 680.915347] Node 0 DMA32: 644*4kB (UME) 1902*8kB (UME) 509*16kB (UME) 193*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 32112kB [ 680.918627] 2097051 pages RAM [ 680.932841] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 680.942929] 0 pages HighMem/MovableOnly [ 680.949578] 363840 pages reserved [ 680.952936] Node 1 Normal: 213*4kB (UM) 164*8kB (UME) 121*16kB (UME) 136*32kB (UME) 26*64kB (M) 20*128kB (UM) 34*256kB (UM) 8*512kB (UME) 0*1024kB 1*2048kB (M) 0*4096kB = 27524kB [ 680.959200] 0 pages cma reserved [ 680.976669] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 680.987656] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 681.002179] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 681.011037] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 681.025380] 27445 total pagecache pages [ 681.029383] 0 pages in swap cache [ 681.034907] Swap cache stats: add 0, delete 0, find 0/0 [ 681.040270] Free swap = 0kB [ 681.049356] Total swap = 0kB [ 681.054489] 2097051 pages RAM [ 681.057592] 0 pages HighMem/MovableOnly [ 681.061553] 363840 pages reserved [ 681.077335] 0 pages cma reserved [ 681.080707] Out of memory (oom_kill_allocating_task): Kill process 21295 (rsyslogd) score 0 or sacrifice child [ 681.104864] Killed process 21295 (rsyslogd) total-vm:4kB, anon-rss:4kB, file-rss:0kB, shmem-rss:0kB [ 681.123676] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 681.148796] systemd-journal cpuset=/ mems_allowed=0-1 [ 681.158863] CPU: 0 PID: 21221 Comm: systemd-journal Not tainted 4.14.217-syzkaller #0 [ 681.166844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 681.176210] Call Trace: [ 681.178818] dump_stack+0x1b2/0x281 [ 681.182463] dump_header+0x178/0x82f [ 681.186172] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 681.191391] ? ___ratelimit+0x2cd/0x530 [ 681.195733] oom_kill_process.cold+0x10/0xb18 [ 681.200276] out_of_memory+0xe3e/0x1190 [ 681.204251] ? oom_killer_disable+0x1c0/0x1c0 [ 681.208739] ? mutex_trylock+0x152/0x1a0 [ 681.212791] __alloc_pages_nodemask+0x23e1/0x2720 [ 681.217622] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 681.223773] alloc_pages_current+0x155/0x260 [ 681.228165] filemap_fault+0xea3/0x1980 [ 681.232125] ext4_filemap_fault+0x84/0xb0 [ 681.236252] __do_fault+0xfa/0x380 [ 681.239781] __handle_mm_fault+0x2497/0x4620 [ 681.244169] ? ep_poll+0x1ab/0xa50 [ 681.247698] ? vm_insert_page+0x7c0/0x7c0 [ 681.251832] handle_mm_fault+0x391/0x860 [ 681.255875] __do_page_fault+0x549/0xad0 [ 681.259919] ? spurious_fault+0x640/0x640 [ 681.264055] ? do_page_fault+0x60/0x500 [ 681.268022] ? page_fault+0x2f/0x50 [ 681.271640] page_fault+0x45/0x50 [ 681.275071] RIP: 0001:0x1 [ 681.277806] RSP: 791fe1e0:00007ffdab00e270 EFLAGS: 7ffdab00e080 [ 681.278038] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 681.288704] rsyslogd: [ 681.296645] Mem-Info: [ 681.296664] active_anon:11192 inactive_anon:27045 isolated_anon:0 [ 681.296664] active_file:17 inactive_file:16 isolated_file:0 [ 681.296664] unevictable:0 dirty:0 writeback:0 unstable:0 [ 681.296664] slab_reclaimable:12439 slab_unreclaimable:117886 [ 681.296664] mapped:35351 shmem:27411 pagetables:647 bounce:0 [ 681.296664] free:13956 free_pcp:30 free_cma:0 [ 681.296678] Node 0 active_anon:43732kB inactive_anon:80896kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:104540kB dirty:0kB writeback:0kB shmem:82168kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 681.320565] page allocation failure: order:0 [ 681.334843] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 681.334871] CPU: 0 PID: 21271 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 681.334877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 681.334880] Call Trace: [ 681.334903] dump_stack+0x1b2/0x281 [ 681.334919] warn_alloc.cold+0x96/0x1cc [ 681.381600] , mode:0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask= [ 681.382214] ? zone_watermark_ok_safe+0x220/0x220 [ 681.391566] (null) [ 681.394140] ? usleep_range+0x130/0x130 [ 681.397781] rsyslogd cpuset= [ 681.401687] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 681.401701] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 681.401712] ? run_timer_softirq+0x5a0/0x5a0 [ 681.401729] __alloc_pages_nodemask+0x2127/0x2720 [ 681.401746] ? lock_acquire+0x170/0x3f0 [ 681.401762] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 681.408604] / [ 681.413391] ? ion_page_pool_alloc+0x9e/0x1b0 [ 681.413409] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 681.415658] mems_allowed=0-1 [ 681.419589] alloc_pages_current+0x155/0x260 [ 681.469861] ion_page_pool_alloc+0x118/0x1b0 [ 681.474259] ion_system_heap_allocate+0x133/0x8c0 [ 681.479086] ? _raw_spin_unlock+0x29/0x40 [ 681.483216] ? _ion_heap_freelist_drain+0x6e/0x410 [ 681.488143] ? ion_system_contig_heap_create+0x130/0x130 [ 681.493591] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 681.498591] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 681.503418] ion_alloc+0x27a/0x810 [ 681.506946] ? ion_dma_buf_release+0x40/0x40 [ 681.511337] ? __might_fault+0x177/0x1b0 [ 681.515381] ion_ioctl+0xea/0x1f0 [ 681.518815] ? ion_query_heaps+0x360/0x360 [ 681.523042] ? lock_acquire+0x170/0x3f0 [ 681.526995] ? lock_downgrade+0x740/0x740 [ 681.531133] ? ion_query_heaps+0x360/0x360 [ 681.535363] do_vfs_ioctl+0x75a/0xff0 [ 681.539147] ? ioctl_preallocate+0x1a0/0x1a0 [ 681.543534] ? lock_downgrade+0x740/0x740 [ 681.547663] ? __fget+0x225/0x360 [ 681.551094] ? do_vfs_ioctl+0xff0/0xff0 [ 681.555049] ? security_file_ioctl+0x83/0xb0 [ 681.559450] SyS_ioctl+0x7f/0xb0 [ 681.562795] ? do_vfs_ioctl+0xff0/0xff0 [ 681.566750] do_syscall_64+0x1d5/0x640 [ 681.570637] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 681.575808] RIP: 0033:0x45e219 [ 681.578978] RSP: 002b:00007f1bf73e9c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 681.586664] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 681.593912] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 681.601248] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 681.608506] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 681.615756] R13: 00007ffe1c51cdaf R14: 00007f1bf73ea9c0 R15: 000000000119bf8c [ 681.623018] CPU: 1 PID: 21295 Comm: rsyslogd Not tainted 4.14.217-syzkaller #0 [ 681.624738] Node 1 active_anon:1036kB inactive_anon:27284kB active_file:60kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36864kB dirty:0kB writeback:0kB shmem:27476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 681.630403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 681.657655] Node 0 [ 681.667743] Call Trace: [ 681.667766] dump_stack+0x1b2/0x281 [ 681.667780] warn_alloc.cold+0x96/0x1cc [ 681.667791] ? zone_watermark_ok_safe+0x220/0x220 [ 681.667802] ? usleep_range+0x130/0x130 [ 681.667809] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 681.667822] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 681.667832] ? run_timer_softirq+0x5a0/0x5a0 [ 681.670099] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 681.672613] __alloc_pages_nodemask+0x2127/0x2720 [ 681.672633] ? _find_next_bit+0xdb/0x100 [ 681.672641] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 681.672654] ? lock_acquire+0x170/0x3f0 [ 681.676268] lowmem_reserve[]: [ 681.680220] ? do_raw_spin_unlock+0x164/0x220 [ 681.685063] 0 [ 681.688991] alloc_pages_current+0x155/0x260 [ 681.694132] 2717 [ 681.699076] __pmd_alloc+0x37/0x3f0 [ 681.703488] 2718 [ 681.729039] move_page_tables+0xf00/0x17d0 [ 681.729054] ? vmacache_update+0xbb/0x130 [ 681.729066] shift_arg_pages+0x17c/0x3e0 [ 681.729074] ? put_arg_page+0x1c0/0x1c0 [ 681.729085] ? change_protection+0xa0/0xa0 [ 681.733956] 2718 [ 681.737954] ? lock_downgrade+0x740/0x740 [ 681.742819] 2718 [ 681.746747] ? lock_acquire+0x170/0x3f0 [ 681.754303] ? setup_arg_pages+0x242/0x6f0 [ 681.754315] setup_arg_pages+0x584/0x6f0 [ 681.754326] ? shift_arg_pages+0x3e0/0x3e0 [ 681.754336] ? get_random_u64+0xd4/0x1c0 [ 681.754347] load_elf_binary+0xa01/0x4750 [ 681.754365] ? elf_core_dump+0x4460/0x4460 [ 681.754377] search_binary_handler.part.0+0xd5/0x640 [ 681.754388] do_execveat_common+0x1099/0x1f30 [ 681.756715] Node 0 [ 681.760611] ? copy_strings_kernel+0x110/0x110 [ 681.762695] DMA32 free:18088kB min:36200kB low:45248kB high:54296kB active_anon:43732kB inactive_anon:80836kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7712kB pagetables:2292kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 681.766301] ? strncpy_from_user+0x210/0x2c0 [ 681.768353] lowmem_reserve[]: [ 681.772595] ? getname_flags+0x22e/0x550 [ 681.772605] SyS_execve+0x3b/0x50 [ 681.772614] ? setup_new_exec+0x770/0x770 [ 681.772624] do_syscall_64+0x1d5/0x640 [ 681.772640] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 681.772648] RIP: 0033:0x7ffa0aea5647 [ 681.772652] RSP: 002b:00007ffe87b68798 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 681.772660] RAX: ffffffffffffffda RBX: 000055c091745370 RCX: 00007ffa0aea5647 [ 681.772664] RDX: 000055c091741560 RSI: 000055c091751670 RDI: 000055c0916d8020 [ 681.772668] RBP: 00007ffe87b68900 R08: 000000000000fcfe R09: 0000000000000010 [ 681.772672] R10: 000055c0916d7680 R11: 0000000000000246 R12: 000055c0916d7228 [ 681.772679] R13: 0000000000000000 R14: 000055c091751670 R15: 00007ffe87b689e0 [ 681.776849] 0 [ 681.815773] Mem-Info: [ 681.818037] 0 [ 681.830856] active_anon:11192 inactive_anon:27045 isolated_anon:0 [ 681.830856] active_file:17 inactive_file:16 isolated_file:0 [ 681.830856] unevictable:0 dirty:0 writeback:0 unstable:0 [ 681.830856] slab_reclaimable:12439 slab_unreclaimable:117886 [ 681.830856] mapped:35351 shmem:27411 pagetables:647 bounce:0 [ 681.830856] free:13956 free_pcp:30 free_cma:0 [ 681.835646] 0 [ 681.838909] Node 0 active_anon:43732kB inactive_anon:80896kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:104540kB dirty:0kB writeback:0kB shmem:82168kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 681.839322] 0 [ 681.852557] Node 1 active_anon:1036kB inactive_anon:27284kB active_file:60kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36864kB dirty:0kB writeback:0kB shmem:27476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 681.875797] 0 [ 681.887729] Node 0 [ 681.897467] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 681.901571] Node 0 [ 681.913050] lowmem_reserve[]: [ 681.920121] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 681.939863] 0 [ 681.945719] lowmem_reserve[]: [ 681.981826] 2717 [ 681.990815] 0 [ 682.022690] 2718 2718 2718 [ 682.123387] Node 0 DMA32 free:40036kB min:36200kB low:45248kB high:54296kB active_anon:43732kB inactive_anon:80836kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7712kB pagetables:2292kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 682.141580] 0 [ 682.157442] lowmem_reserve[]: 0 0 0 0 0 [ 682.164225] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 682.181603] 0 0 0 [ 682.193790] lowmem_reserve[]: 0 0 0 0 0 [ 682.197888] Node 1 Normal free:243832kB min:53696kB low:67120kB high:80544kB active_anon:1036kB inactive_anon:27284kB active_file:248kB inactive_file:672kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:296kB bounce:0kB free_pcp:868kB local_pcp:236kB free_cma:0kB [ 682.221573] Node 1 Normal free:222876kB min:53696kB low:67120kB high:80544kB active_anon:1036kB inactive_anon:27284kB active_file:248kB inactive_file:672kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:296kB bounce:0kB free_pcp:876kB local_pcp:640kB free_cma:0kB [ 682.231545] lowmem_reserve[]: 0 0 0 0 0 [ 682.302810] lowmem_reserve[]: 0 0 0 0 [ 682.305682] Node 0 [ 682.307722] 0 [ 682.315898] Node 0 DMA: 6*4kB (M) 3*8kB (M) 6*16kB (M) 6*32kB (UM) 3*64kB (UM) 4*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 11024kB [ 682.324404] DMA: 6*4kB (M) 3*8kB (M) 6*16kB (M) 6*32kB (UM) 3*64kB (UM) 4*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 11024kB [ 682.361606] Node 0 DMA32: 511*4kB (UME) 809*8kB (UME) 220*16kB (UME) 181*32kB (UME) 110*64kB (UME) 18*128kB (U) 25*256kB (U) 4*512kB (U) 4*1024kB (U) 0*2048kB 0*4096kB = 39716kB [ 682.364410] Node 0 [ 682.391992] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 682.401560] DMA32: 511*4kB (UME) 818*8kB (UME) 229*16kB (UME) 185*32kB (UME) 133*64kB (UME) 18*128kB (U) 25*256kB (U) 4*512kB (U) 4*1024kB (U) 0*2048kB 0*4096kB = 41532kB [ 682.405962] Node 1 Normal: 1*4kB (M) 3*8kB (UME) 2*16kB (UE) 2*32kB (E) 1*64kB (M) 16*128kB (UM) 3*256kB (M) 4*512kB (UME) 30*1024kB (U) 40*2048kB (UM) 8*4096kB (U) = 150460kB [ 682.440673] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 682.444211] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 682.463619] Node 1 [ 682.463633] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 682.463641] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 682.465884] Normal: [ 682.478436] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 682.499477] 28723 total pagecache pages [ 682.506928] 2*4kB (UM) 2*8kB (UE) 2*16kB (UE) 3*32kB (ME) 1*64kB (M) 9*128kB (M) 4*256kB (UM) 4*512kB (UME) 1*1024kB (U) 35*2048kB (UM) 8*4096kB (U) = 109912kB [ 682.508284] 0 pages in swap cache [ 682.533074] Swap cache stats: add 0, delete 0, find 0/0 [ 682.539186] Free swap = 0kB [ 682.541550] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 682.546407] Total swap = 0kB [ 682.551332] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 682.555432] 2097051 pages RAM [ 682.570900] 0 pages HighMem/MovableOnly [ 682.571511] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 682.576627] 363840 pages reserved [ 682.601553] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 682.605054] 0 pages cma reserved 21:27:45 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0xc0241, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) 21:27:45 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001}) 21:27:45 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001}) 21:27:45 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0xc0241, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) [ 682.610371] 29315 total pagecache pages [ 682.615893] Out of memory (oom_kill_allocating_task): Kill process 21221 (systemd-journal) score 0 or sacrifice child [ 682.618888] 0 pages in swap cache [ 682.638475] Killed process 21221 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:0kB, shmem-rss:2036kB [ 682.675050] Swap cache stats: add 0, delete 0, find 0/0 [ 682.680576] Free swap = 0kB 21:27:45 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x80000001, 0x4) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0xc0241, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) [ 682.723324] Total swap = 0kB [ 682.726588] 2097051 pages RAM [ 682.729956] 0 pages HighMem/MovableOnly [ 682.747560] batman_adv: batadv0: Interface deactivated: batadv_slave_0 21:27:45 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x80000001, 0x4) socket$inet_smc(0x2b, 0x1, 0x0) socketpair(0x2b, 0x80000, 0x360, &(0x7f0000000100)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0xc0241, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x12}) [ 682.769322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 682.787256] 363840 pages reserved [ 682.810650] 0 pages cma reserved [ 682.819697] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 682.829114] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 682.837305] memory commitment underflow [ 682.837378] ------------[ cut here ]------------ [ 682.846142] WARNING: CPU: 0 PID: 21301 at mm/util.c:622 __vm_enough_memory.cold+0x18/0x59 [ 682.854484] Kernel panic - not syncing: panic_on_warn set ... [ 682.854484] [ 682.861867] CPU: 0 PID: 21301 Comm: systemd-cgroups Not tainted 4.14.217-syzkaller #0 [ 682.869832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 682.879185] Call Trace: [ 682.881798] dump_stack+0x1b2/0x281 [ 682.885438] panic+0x1f9/0x42d [ 682.888635] ? add_taint.cold+0x16/0x16 [ 682.892618] ? __vm_enough_memory.cold+0x18/0x59 [ 682.897369] ? __vm_enough_memory.cold+0x18/0x59 [ 682.902108] __warn.cold+0x20/0x44 [ 682.905627] ? ist_end_non_atomic+0x10/0x10 [ 682.909947] ? __vm_enough_memory.cold+0x18/0x59 [ 682.914692] report_bug+0x208/0x250 [ 682.918319] do_error_trap+0x195/0x2d0 [ 682.922197] ? math_error+0x2d0/0x2d0 [ 682.926501] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 682.931324] invalid_op+0x1b/0x40 [ 682.934770] RIP: 0010:__vm_enough_memory.cold+0x18/0x59 [ 682.940109] RSP: 0018:ffff888021c0fc70 EFLAGS: 00010286 [ 682.945450] RAX: 000000000000001b RBX: 0000000000000018 RCX: 0000000000000000 [ 682.952722] RDX: 0000000000000000 RSI: ffff8880aaf34988 RDI: ffffed1004381f84 [ 682.959981] RBP: 0000000000000001 R08: 000000000000001b R09: 0000000000000000 [ 682.967248] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88809b556640 [ 682.974495] R13: ffffffff88feacc0 R14: fffffffffff94da8 R15: 0000000000000d36 [ 682.981763] mmap_region+0x72c/0x1220 [ 682.985546] do_mmap+0x5b3/0xcb0 [ 682.988896] vm_mmap_pgoff+0x14e/0x1a0 [ 682.992775] ? vma_is_stack_for_current+0xb0/0xb0 [ 682.997605] ? __fget+0x225/0x360 [ 683.001046] SyS_mmap_pgoff+0x249/0x510 [ 683.004998] ? find_mergeable_anon_vma+0x230/0x230 [ 683.009915] ? __do_page_fault+0x159/0xad0 [ 683.014126] ? do_mprotect_pkey+0x7e0/0x7e0 [ 683.018444] ? do_syscall_64+0x4c/0x640 [ 683.022404] ? align_vdso_addr+0x250/0x250 [ 683.026632] do_syscall_64+0x1d5/0x640 [ 683.030507] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 683.035692] RIP: 0033:0x7f7d2574630a [ 683.039393] RSP: 002b:00007ffe1d9375e8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 683.047088] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f7d2574630a [ 683.054348] RDX: 0000000000000003 RSI: 0000000000018000 RDI: 00007f7d23d7f000 [ 683.061597] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000002e000 [ 683.068845] R10: 0000000000000812 R11: 0000000000000206 R12: 00007f7d23d7f000 [ 683.076094] R13: 0000000000018000 R14: 0000000000000812 R15: 000000000002e000 [ 683.084404] Kernel Offset: disabled [ 683.088025] Rebooting in 86400 seconds..