HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={r2, 0x80000}) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x10001, 0x2, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, 0x0) 06:41:09 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000080)={0x34, 0x0, &(0x7f0000000040)}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7ffffffd, 0x22}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x1}) 06:41:09 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7ffffffd, 0x22}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0x1}) 06:41:09 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10001, 0x2, 0x0, 0xffffffffffffffff}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x80040, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, 0x0) 06:41:09 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x4003, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7ffffffd, 0x22}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x1, 0x20, 0x1}) 06:41:09 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x10, 0x68802) r1 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xc, 0x0) ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x44, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private2={0xfc, 0x2, [], 0x1}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7ffb}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x80}, @SEG6_ATTR_SECRET={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x944}, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00', 0xffffffffffffffff) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000200)={0x7e, 0x5}, 0x2) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c800000", @ANYRES16=r3, @ANYBLOB="c3e72c000000006c636f10380f7f9719f9518a502b7776cb671f0127ff1439d0f8fc1cea16aee9beba9d08051900a56f0000"], 0x1c}}, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_disconnect={0x6af0}) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, 0x0) 06:41:09 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x41040, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10001, 0x2, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x1000}) 06:41:09 executing program 4: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7ffffffd, 0x22}) 06:41:09 executing program 4: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7ffffffd, 0x22}) 06:41:09 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10001, 0x2, 0x0, 0xffffffffffffffff}) socket$inet6(0xa, 0x3, 0x73) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, 0x0) r2 = socket$inet6(0xa, 0x4, 0xae6) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000140)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000340)={{r1}, r3, 0x1a, @inherit={0x70, &(0x7f0000000080)={0x1, 0x5, 0x2, 0x400, {0x1, 0x0, 0x8, 0xffff}, [0x4, 0x93b, 0x9, 0xfffffffffffffffe, 0xff]}}, @subvolid=0x8}) 06:41:09 executing program 3: ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, &(0x7f0000000100)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x11, 0x444082) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x8, 0x10800) r1 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x80, 0x181040) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000280)=@usbdevfs_driver={0x7, 0x3df5, &(0x7f00000001c0)="e98fc5f5611565e2eae9de132ce751bf82f284e16cbd5b87ed3a4d045693554382058da7fa26a8424c68c4a50b863c598bf10bc7e188fbe9914571e47deae847e86913473a9a9e3b38b1ac0a043e41b437ed32c9cd64e1530f58d155686df20555ebcf64d46aaecac44919d5c5184899ac5f33ce001491f352c171f090ee3cd91a52d18134f2a1df2b27051144225304fbdde9fe3b7b448f96fac6ae4915a35f575bf3e4"}) 06:41:09 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba610066b8454c66ef66b8e3008ed00f4311c4e10b598e56f70000d93c1b0f009a25ebcdcbc4c27bf612260f20621e8fe9e802f0", 0x35}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7ffffffd, 0x22}) 06:41:09 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x7ffffffd, 0x22}) [ 2010.529656] Bluetooth: hci2 command 0x040f tx timeout [ 2010.537489] Bluetooth: hci1 command 0x040f tx timeout [ 2011.742967] IPVS: ftp: loaded support on port[0] = 21 [ 2011.833433] IPVS: ftp: loaded support on port[0] = 21 [ 2011.920305] chnl_net:caif_netlink_parms(): no params data found [ 2012.056148] bridge0: port 1(bridge_slave_0) entered blocking state [ 2012.062927] bridge0: port 1(bridge_slave_0) entered disabled state [ 2012.070784] device bridge_slave_0 entered promiscuous mode [ 2012.077113] chnl_net:caif_netlink_parms(): no params data found [ 2012.086705] bridge0: port 2(bridge_slave_1) entered blocking state [ 2012.093178] bridge0: port 2(bridge_slave_1) entered disabled state [ 2012.100689] device bridge_slave_1 entered promiscuous mode [ 2012.136747] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2012.145896] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2012.170393] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2012.177490] team0: Port device team_slave_0 added [ 2012.184191] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2012.191788] team0: Port device team_slave_1 added [ 2012.212682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2012.218970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2012.244226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2012.267616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2012.273884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2012.299995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2012.310593] bridge0: port 1(bridge_slave_0) entered blocking state [ 2012.316929] bridge0: port 1(bridge_slave_0) entered disabled state [ 2012.325025] device bridge_slave_0 entered promiscuous mode [ 2012.331948] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2012.340581] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2012.347645] bridge0: port 2(bridge_slave_1) entered blocking state [ 2012.354071] bridge0: port 2(bridge_slave_1) entered disabled state [ 2012.361358] device bridge_slave_1 entered promiscuous mode [ 2012.395925] device hsr_slave_0 entered promiscuous mode [ 2012.402158] device hsr_slave_1 entered promiscuous mode [ 2012.409659] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2012.417505] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2012.425215] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2012.433412] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2012.467946] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2012.475353] team0: Port device team_slave_0 added [ 2012.482229] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2012.490082] team0: Port device team_slave_1 added [ 2012.517536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2012.524285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2012.549967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2012.561450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2012.567677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2012.593252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2012.607147] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2012.608918] Bluetooth: hci1 command 0x0419 tx timeout [ 2012.615715] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2012.623859] Bluetooth: hci2 command 0x0419 tx timeout [ 2012.654353] device hsr_slave_0 entered promiscuous mode [ 2012.662511] device hsr_slave_1 entered promiscuous mode [ 2012.672262] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2012.684192] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2012.733599] bridge0: port 2(bridge_slave_1) entered blocking state [ 2012.740168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2012.746753] bridge0: port 1(bridge_slave_0) entered blocking state [ 2012.753145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2012.810183] bridge0: port 2(bridge_slave_1) entered blocking state [ 2012.816561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2012.823172] bridge0: port 1(bridge_slave_0) entered blocking state [ 2012.829511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2012.849386] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 2012.855536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2012.867491] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2012.878107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2012.885204] bridge0: port 1(bridge_slave_0) entered disabled state [ 2012.892923] bridge0: port 2(bridge_slave_1) entered disabled state [ 2012.900222] bridge0: port 1(bridge_slave_0) entered disabled state [ 2012.906744] bridge0: port 2(bridge_slave_1) entered disabled state [ 2012.915037] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2012.933534] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2012.939651] 8021q: adding VLAN 0 to HW filter on device team0 [ 2012.947983] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2012.957000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2012.965145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2012.973087] bridge0: port 1(bridge_slave_0) entered blocking state [ 2012.979491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2012.988322] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2012.998479] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2013.007630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2013.014816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2013.023244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2013.031240] bridge0: port 2(bridge_slave_1) entered blocking state [ 2013.037568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2013.044626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2013.054276] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2013.062747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2013.072533] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2013.082121] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2013.091390] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2013.098411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2013.105329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2013.112615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2013.120544] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2013.128467] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2013.138862] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2013.145702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2013.153969] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2013.164364] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2013.171648] 8021q: adding VLAN 0 to HW filter on device team0 [ 2013.181066] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2013.189129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2013.197017] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2013.205220] bridge0: port 1(bridge_slave_0) entered blocking state [ 2013.211626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2013.221408] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2013.228642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2013.236382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2013.244843] bridge0: port 2(bridge_slave_1) entered blocking state [ 2013.251491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2013.262422] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2013.270241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2013.277705] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2013.287628] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2013.294877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2013.303595] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2013.314752] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2013.322410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2013.330551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2013.337853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2013.347666] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2013.353866] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2013.365769] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2013.374352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2013.383756] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2013.391654] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2013.401102] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2013.412664] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2013.420828] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2013.428342] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2013.436121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2013.443730] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2013.451663] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2013.460589] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2013.468124] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2013.475019] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2013.482798] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2013.491006] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2013.497647] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2013.506972] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2013.513268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2013.525582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2013.537155] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2013.546077] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2013.557388] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2013.564299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2013.579174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2013.617883] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2013.629538] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2013.636523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2013.645139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2013.677246] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2013.684669] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2013.692216] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2013.701989] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2013.708939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2013.716261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2013.725971] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2013.733360] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2013.741018] device veth0_vlan entered promiscuous mode [ 2013.748304] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2013.757203] device veth1_vlan entered promiscuous mode [ 2013.763219] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2013.772510] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2013.781507] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2013.787890] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2013.798001] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2013.805461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2013.813987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2013.822390] Bluetooth: hci4 command 0x0409 tx timeout [ 2013.826524] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2013.838456] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2013.846269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2013.854366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2013.863420] device veth0_macvtap entered promiscuous mode [ 2013.870793] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2013.880775] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2013.887679] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2013.888937] Bluetooth: hci5 command 0x0409 tx timeout [ 2013.896174] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2013.906302] device veth1_macvtap entered promiscuous mode [ 2013.913058] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2013.923700] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2013.932191] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2013.939581] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2013.946562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2013.954120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2013.962373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2013.970185] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2013.979914] device veth0_vlan entered promiscuous mode [ 2013.986341] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2013.996990] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2014.006291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2014.016213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2014.025580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2014.035509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2014.044659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2014.054878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2014.064013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2014.073740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2014.083630] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2014.090800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2014.098979] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2014.106722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2014.115786] device veth1_vlan entered promiscuous mode [ 2014.125638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2014.135883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2014.145355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2014.155322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2014.164465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2014.174215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2014.183343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2014.193083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2014.203921] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2014.211699] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2014.220252] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2014.228031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2014.242636] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2014.254817] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2014.262545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2014.270476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2014.279707] device veth0_macvtap entered promiscuous mode [ 2014.286033] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2014.295997] device veth1_macvtap entered promiscuous mode [ 2014.302967] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2014.312114] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2014.321995] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2014.333814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2014.343883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2014.353239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2014.363127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2014.372677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2014.382629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2014.391821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2014.401570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2014.411167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2014.421027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2014.430978] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2014.437868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2014.446479] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2014.454265] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2014.461424] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2014.469334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2014.477595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2014.488278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2014.498379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2014.508793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2014.517889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2014.528311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2014.538206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2014.548238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2014.557657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2014.567676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2014.577949] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2014.585181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2014.593174] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2014.601590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 06:41:15 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000080)={0x34, 0x0, &(0x7f0000000040)}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7ffffffd, 0x22}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x1}) 06:41:15 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x10, 0x1) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x8001, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, 0x0) 06:41:15 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x7ffffffd, 0x22}) 06:41:15 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10001, 0x12, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000140)={0x2, 0x100000001, @start={0x0, 0x0, "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", "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"}, [0x5, 0x7, 0x3000000000000, 0x81, 0x9, 0x80000000, 0x5, 0x10000, 0x7, 0xd6c, 0x5, 0x1ff, 0x7, 0x1, 0x3ed, 0x2, 0x7ff, 0x7, 0x2, 0x5, 0x6, 0x2, 0x53b, 0x40, 0x7, 0x0, 0x20, 0x5, 0x1, 0xffff, 0x101, 0x9da, 0x9, 0x7, 0x8b0c, 0xef7e, 0x8000, 0x8, 0x7, 0x2, 0x2, 0x2, 0x1000, 0x0, 0xfff, 0x3ff, 0x9455, 0x9, 0x0, 0xfffffffffffffffe, 0xf98c, 0x7, 0x3, 0x9, 0x3, 0x1, 0x43, 0x5, 0xffffffffffffffff, 0x465, 0x42, 0x10001, 0x3, 0x1ff]}) r3 = socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x3, 0x7, 0x2, 0x20, 0xffffffff, 0x3, 0x2], 0x7, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000fc0)) setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000000)=0x8, 0x4) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000b80)={r2, 0x4, 0x1, [0x2, 0x9, 0x7fff, 0x3f, 0x8], [0x200, 0x1f, 0x22c, 0x6, 0x0, 0x9, 0x1, 0x8, 0x5, 0xa50, 0xdf5, 0xbcb9, 0x800, 0x7, 0x4, 0xfff, 0x1, 0xf82, 0x800, 0x8001, 0x5, 0x5, 0xc40, 0x2, 0x7, 0xffffffffffffffff, 0x8, 0x1000, 0xffffffff80000001, 0x6, 0xd30, 0x7f3c, 0x8001, 0xb81, 0x7, 0xd224, 0x4, 0x7ff, 0xecd4, 0x3f, 0xb260, 0xa5, 0x9, 0xfffffffffffffffa, 0x6, 0x7, 0x5, 0x9, 0x3, 0x7, 0x8001, 0x2, 0x1, 0x101, 0x0, 0x85e7, 0x100000000, 0x7ff, 0x4, 0x5db, 0xfffffffffffff94e, 0x6, 0xffff, 0x5, 0x8, 0x500000000, 0x0, 0x0, 0x7fffffff, 0x5, 0x2, 0xe5f8, 0x2, 0x2, 0x8, 0xffffffffffffffff, 0x1ea, 0x9, 0x1, 0x10000, 0x1, 0x0, 0x7fff, 0x5, 0x2, 0x6, 0xfffffffffffffffa, 0x5, 0x2f, 0x4f3, 0x6ba8, 0x3, 0x5, 0xf664, 0x7e, 0x7, 0x0, 0xeb, 0x4700, 0x2, 0x2, 0x8, 0xfffffffffffffbb8, 0xffffffff, 0x81, 0x2, 0xc63, 0xffffffffa0547fcc, 0x10001, 0x5, 0x7, 0x3, 0x81, 0x1ff, 0xffffffff, 0x2, 0x4, 0x7, 0xfffffffffffffff8, 0x401, 0x6]}) 06:41:15 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000140)={{r0}, 0x0, 0x2, @unused=[0x9, 0x3, 0xffffffffa876b30b, 0x800], @name="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"}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x204600, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x101802, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001140)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r3, 0x8931, &(0x7f0000001640)={'veth1_virt_wifi\x00', @ifru_names}) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000001340)={{r3}, r2, 0x10, @unused=[0x7ff, 0x96, 0x6, 0xffff], @devid}) 06:41:15 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7ffffffd, 0x22}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0x1}) 06:41:15 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x7ffffffd, 0x22}) 06:41:15 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10001, 0x2, 0x0, 0xffffffffffffffff}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000000)={0x1, 0x0, [{}]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, 0x0) 06:41:15 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x80, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000040)=0x6) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$KVM_GET_XSAVE(r0, 0x9000aea4, &(0x7f0000001040)) 06:41:15 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x8e4, 0x5e, 0x8, 0x77be, 0xc2, 0x5, 0x7fff, 0x5, 0x9], 0x9, 0x800}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7ffffffd, 0x22}) 06:41:15 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 06:41:15 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10001, 0x2, 0x0, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x4, 0x50, 0x1}) openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x309080, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, 0x0) [ 2015.740838] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2015.742292] syz-executor.1: [ 2015.759926] syz-executor.2 cpuset= [ 2015.767500] page allocation failure: order:4 [ 2015.768346] / mems_allowed=0-1 [ 2015.780160] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2015.786094] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2015.798038] syz-executor.1 cpuset= [ 2015.800010] CPU: 1 PID: 11105 Comm: syz-executor.2 Not tainted 4.14.228-syzkaller #0 [ 2015.800937] / [ 2015.803543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2015.822423] Call Trace: [ 2015.825026] dump_stack+0x1b2/0x281 [ 2015.826905] mems_allowed=0-1 [ 2015.828645] warn_alloc.cold+0x96/0x1cc [ 2015.828658] ? zone_watermark_ok_safe+0x220/0x220 [ 2015.828682] __alloc_pages_nodemask+0x2127/0x2720 [ 2015.828691] ? __schedule+0x893/0x1de0 [ 2015.828706] ? lock_acquire+0x170/0x3f0 [ 2015.853302] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2015.858142] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2015.863592] ? __mutex_unlock_slowpath+0x75/0x770 [ 2015.868433] alloc_pages_current+0x155/0x260 [ 2015.873267] ion_page_pool_alloc+0x118/0x1b0 [ 2015.877659] ion_system_heap_allocate+0x133/0x8c0 [ 2015.882494] ? ion_alloc+0x187/0x810 [ 2015.886222] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2015.891673] ? ion_system_contig_heap_create+0x130/0x130 [ 2015.897110] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2015.902130] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2015.906965] ion_alloc+0x204/0x810 [ 2015.910498] ? ion_dma_buf_release+0x40/0x40 [ 2015.914891] ? __might_fault+0x177/0x1b0 [ 2015.918972] ion_ioctl+0xea/0x1f0 [ 2015.922416] ? ion_query_heaps+0x360/0x360 [ 2015.926639] ? ion_query_heaps+0x360/0x360 [ 2015.930862] do_vfs_ioctl+0x75a/0xff0 [ 2015.934646] ? ioctl_preallocate+0x1a0/0x1a0 [ 2015.939044] ? lock_downgrade+0x740/0x740 [ 2015.943181] ? __fget+0x225/0x360 [ 2015.946621] ? do_vfs_ioctl+0xff0/0xff0 [ 2015.950586] ? security_file_ioctl+0x83/0xb0 [ 2015.954987] SyS_ioctl+0x7f/0xb0 [ 2015.958338] ? do_vfs_ioctl+0xff0/0xff0 [ 2015.962304] do_syscall_64+0x1d5/0x640 [ 2015.966206] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2015.971389] RIP: 0033:0x466459 [ 2015.974565] RSP: 002b:00007f789fce5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2015.982266] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2015.989523] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2015.996775] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2016.004037] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2016.011298] R13: 00007fffaee6f42f R14: 00007f789fce5300 R15: 0000000000022000 [ 2016.020435] Bluetooth: hci4 command 0x041b tx timeout [ 2016.026139] Bluetooth: hci5 command 0x041b tx timeout [ 2016.027848] CPU: 0 PID: 11123 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 2016.031379] syz-executor.0 cpuset= [ 2016.039182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2016.039185] Call Trace: [ 2016.039201] dump_stack+0x1b2/0x281 [ 2016.039213] warn_alloc.cold+0x96/0x1cc [ 2016.039226] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2016.043566] / [ 2016.052090] ? zone_watermark_ok_safe+0x220/0x220 [ 2016.055366] mems_allowed=0-1 [ 2016.058265] __alloc_pages_nodemask+0x2127/0x2720 [ 2016.058281] ? lock_acquire+0x170/0x3f0 [ 2016.058296] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2016.090416] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2016.096280] ? __mutex_unlock_slowpath+0x75/0x770 [ 2016.101103] alloc_pages_current+0x155/0x260 [ 2016.105493] ion_page_pool_alloc+0x118/0x1b0 [ 2016.109880] ion_system_heap_allocate+0x133/0x8c0 [ 2016.114713] ? ion_alloc+0x187/0x810 [ 2016.118406] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2016.123830] ? ion_system_contig_heap_create+0x130/0x130 [ 2016.129256] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2016.134253] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2016.139076] ion_alloc+0x204/0x810 [ 2016.142598] ? ion_dma_buf_release+0x40/0x40 [ 2016.146984] ? __might_fault+0x177/0x1b0 [ 2016.151032] ion_ioctl+0xea/0x1f0 [ 2016.154476] ? ion_query_heaps+0x360/0x360 [ 2016.158700] ? ion_query_heaps+0x360/0x360 [ 2016.162915] do_vfs_ioctl+0x75a/0xff0 [ 2016.166713] ? ioctl_preallocate+0x1a0/0x1a0 [ 2016.171105] ? lock_downgrade+0x740/0x740 [ 2016.175246] ? __fget+0x225/0x360 [ 2016.178681] ? do_vfs_ioctl+0xff0/0xff0 [ 2016.182634] ? security_file_ioctl+0x83/0xb0 [ 2016.187018] SyS_ioctl+0x7f/0xb0 [ 2016.190364] ? do_vfs_ioctl+0xff0/0xff0 [ 2016.194316] do_syscall_64+0x1d5/0x640 [ 2016.198185] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2016.203351] RIP: 0033:0x466459 [ 2016.206517] RSP: 002b:00007f27c4f46188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2016.214201] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2016.221448] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2016.228701] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2016.235961] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2016.243214] R13: 00007ffda0b0ca7f R14: 00007f27c4f46300 R15: 0000000000022000 [ 2016.255054] CPU: 1 PID: 11107 Comm: syz-executor.0 Not tainted 4.14.228-syzkaller #0 [ 2016.262958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2016.272474] Call Trace: [ 2016.275057] dump_stack+0x1b2/0x281 [ 2016.278682] warn_alloc.cold+0x96/0x1cc [ 2016.282657] ? zone_watermark_ok_safe+0x220/0x220 [ 2016.287519] __alloc_pages_nodemask+0x2127/0x2720 [ 2016.292355] ? __schedule+0x893/0x1de0 [ 2016.296241] ? lock_acquire+0x170/0x3f0 [ 2016.300226] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2016.305068] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2016.310523] ? __mutex_unlock_slowpath+0x75/0x770 [ 2016.315364] alloc_pages_current+0x155/0x260 [ 2016.319771] ion_page_pool_alloc+0x118/0x1b0 [ 2016.324183] ion_system_heap_allocate+0x133/0x8c0 [ 2016.329017] ? ion_alloc+0x187/0x810 [ 2016.332728] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2016.338169] ? ion_system_contig_heap_create+0x130/0x130 [ 2016.343617] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2016.348628] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2016.353470] ion_alloc+0x204/0x810 [ 2016.357185] ? ion_dma_buf_release+0x40/0x40 [ 2016.361591] ? __might_fault+0x177/0x1b0 [ 2016.365643] ion_ioctl+0xea/0x1f0 [ 2016.369175] ? ion_query_heaps+0x360/0x360 [ 2016.373405] ? ion_query_heaps+0x360/0x360 [ 2016.377637] do_vfs_ioctl+0x75a/0xff0 [ 2016.381439] ? ioctl_preallocate+0x1a0/0x1a0 [ 2016.385855] ? lock_downgrade+0x740/0x740 [ 2016.390085] ? __fget+0x225/0x360 [ 2016.393530] ? do_vfs_ioctl+0xff0/0xff0 [ 2016.397498] ? security_file_ioctl+0x83/0xb0 [ 2016.401903] SyS_ioctl+0x7f/0xb0 [ 2016.405259] ? do_vfs_ioctl+0xff0/0xff0 [ 2016.409239] do_syscall_64+0x1d5/0x640 [ 2016.413137] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2016.418326] RIP: 0033:0x466459 [ 2016.421506] RSP: 002b:00007f0e622a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2016.429215] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2016.436485] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2016.443749] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2016.451006] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2016.458272] R13: 00007ffe5976301f R14: 00007f0e622a2300 R15: 0000000000022000 [ 2016.483812] warn_alloc_show_mem: 1 callbacks suppressed [ 2016.483816] Mem-Info: [ 2016.492812] active_anon:22823 inactive_anon:30378 isolated_anon:0 [ 2016.492812] active_file:2094 inactive_file:5496 isolated_file:0 [ 2016.492812] unevictable:0 dirty:7 writeback:0 unstable:0 [ 2016.492812] slab_reclaimable:13193 slab_unreclaimable:116504 [ 2016.492812] mapped:57555 shmem:31509 pagetables:795 bounce:0 [ 2016.492812] free:624953 free_pcp:147 free_cma:0 [ 2016.527744] Node 0 active_anon:90488kB inactive_anon:80076kB active_file:8240kB inactive_file:21956kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:230096kB dirty:28kB writeback:0kB shmem:84332kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2016.556582] Node 1 active_anon:804kB inactive_anon:41436kB active_file:136kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:124kB dirty:0kB writeback:0kB shmem:41704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2016.591382] Node 0 DMA free:11096kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2016.623093] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2016.628146] Node 0 DMA32 free:1668080kB min:36200kB low:45248kB high:54296kB active_anon:90448kB inactive_anon:80076kB active_file:8236kB inactive_file:21956kB unevictable:0kB writepending:28kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7456kB pagetables:3180kB bounce:0kB free_pcp:592kB local_pcp:440kB free_cma:0kB [ 2016.661193] lowmem_reserve[]: 0 0 0 0 0 [ 2016.665315] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2016.695597] lowmem_reserve[]: 0 0 0 0 0 [ 2016.700962] Node 1 Normal free:765276kB min:53696kB low:67120kB high:80544kB active_anon:804kB inactive_anon:41436kB active_file:136kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2016.765176] lowmem_reserve[]: 0 0 0 0 0 [ 2016.782822] Node 0 DMA: 26*4kB (UME) 44*8kB (UME) 39*16kB (UME) 29*32kB (UM) 7*64kB (UM) 3*128kB (ME) 1*256kB (E) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11288kB [ 2016.801680] Node 0 DMA32: 286*4kB (ME) 8489*8kB (UME) 20829*16kB (UME) 11488*32kB (UME) 5581*64kB (UME) 2155*128kB (UME) 650*256kB (U) 115*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 1628240kB [ 2016.835847] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2016.858649] Node 1 Normal: 1435*4kB (UM) 2560*8kB (UM) 2089*16kB (U) 1653*32kB (U) 487*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 79*2048kB (U) 38*4096kB (U) = 461148kB [ 2016.890308] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2016.908023] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2016.926516] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2016.962673] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2016.985933] 38962 total pagecache pages [ 2016.994478] 0 pages in swap cache [ 2016.999282] Swap cache stats: add 0, delete 0, find 0/0 [ 2017.014522] Free swap = 0kB [ 2017.018868] Total swap = 0kB [ 2017.028835] 2097051 pages RAM [ 2017.035312] 0 pages HighMem/MovableOnly [ 2017.044929] 363846 pages reserved [ 2017.052927] 0 pages cma reserved [ 2017.731770] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2017.764057] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2017.774846] CPU: 1 PID: 11131 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 2017.782848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2017.792191] Call Trace: [ 2017.794782] dump_stack+0x1b2/0x281 [ 2017.798423] warn_alloc.cold+0x96/0x1cc [ 2017.802409] ? zone_watermark_ok_safe+0x220/0x220 [ 2017.807263] __alloc_pages_nodemask+0x2127/0x2720 [ 2017.812102] ? retint_kernel+0x2d/0x2d [ 2017.815993] ? lock_acquire+0x170/0x3f0 [ 2017.819966] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2017.824798] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2017.830230] ? __mutex_unlock_slowpath+0x75/0x770 [ 2017.835048] ? alloc_pages_current+0x37/0x260 [ 2017.839523] alloc_pages_current+0x155/0x260 [ 2017.843911] ion_page_pool_alloc+0x118/0x1b0 [ 2017.848314] ion_system_heap_allocate+0x133/0x8c0 [ 2017.853136] ? ion_alloc+0x187/0x810 [ 2017.856835] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2017.862262] ? ion_system_contig_heap_create+0x130/0x130 [ 2017.867687] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2017.872678] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2017.877493] ion_alloc+0x204/0x810 [ 2017.881012] ? ion_dma_buf_release+0x40/0x40 [ 2017.885397] ? __might_fault+0x177/0x1b0 [ 2017.889436] ion_ioctl+0xea/0x1f0 [ 2017.892865] ? ion_query_heaps+0x360/0x360 [ 2017.897079] ? _raw_spin_unlock+0x29/0x40 [ 2017.901216] ? ion_query_heaps+0x360/0x360 [ 2017.905426] do_vfs_ioctl+0x75a/0xff0 [ 2017.909224] ? ioctl_preallocate+0x1a0/0x1a0 [ 2017.913609] ? lock_downgrade+0x740/0x740 [ 2017.917742] ? __fget+0x225/0x360 [ 2017.921202] ? do_vfs_ioctl+0xff0/0xff0 [ 2017.925151] ? security_file_ioctl+0x83/0xb0 [ 2017.929536] SyS_ioctl+0x7f/0xb0 [ 2017.932878] ? do_vfs_ioctl+0xff0/0xff0 [ 2017.936826] do_syscall_64+0x1d5/0x640 [ 2017.940703] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2017.945867] RIP: 0033:0x466459 [ 2017.949039] RSP: 002b:00007f27c4ee3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2017.956725] RAX: ffffffffffffffda RBX: 000000000056c158 RCX: 0000000000466459 [ 2017.963971] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2017.971219] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2017.978471] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c158 [ 2017.985715] R13: 00007ffda0b0ca7f R14: 00007f27c4ee3300 R15: 0000000000022000 [ 2018.048501] Bluetooth: hci5 command 0x040f tx timeout [ 2018.053837] Bluetooth: hci4 command 0x040f tx timeout [ 2018.097834] warn_alloc_show_mem: 2 callbacks suppressed [ 2018.097844] Mem-Info: [ 2018.105690] active_anon:22813 inactive_anon:30377 isolated_anon:0 [ 2018.105690] active_file:40 inactive_file:6 isolated_file:9 [ 2018.105690] unevictable:0 dirty:22 writeback:0 unstable:0 [ 2018.105690] slab_reclaimable:13191 slab_unreclaimable:116362 [ 2018.105690] mapped:52662 shmem:31508 pagetables:773 bounce:0 [ 2018.105690] free:25134 free_pcp:253 free_cma:0 [ 2018.139328] Node 0 active_anon:90448kB inactive_anon:80072kB active_file:132kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):36kB mapped:210624kB dirty:88kB writeback:0kB shmem:84328kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2018.167086] Node 1 active_anon:804kB inactive_anon:41436kB active_file:28kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:0kB writeback:0kB shmem:41704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2018.194718] Node 0 DMA free:11064kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2018.245038] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2018.250159] Node 0 DMA32 free:35676kB min:36200kB low:45248kB high:54296kB active_anon:90408kB inactive_anon:80072kB active_file:524kB inactive_file:72kB unevictable:0kB writepending:88kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7296kB pagetables:3092kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2018.279068] lowmem_reserve[]: 0 0 0 0 0 [ 2018.283084] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2018.309499] lowmem_reserve[]: 0 0 0 0 0 [ 2018.313495] Node 1 Normal free:53676kB min:53696kB low:67120kB high:80544kB active_anon:804kB inactive_anon:41436kB active_file:132kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2018.342031] lowmem_reserve[]: 0 0 0 0 0 [ 2018.361907] Node 0 DMA: 14*4kB (ME) 38*8kB (UME) 39*16kB (UME) 29*32kB (UM) 5*64kB (UM) 3*128kB (ME) 1*256kB (E) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11064kB [ 2018.384977] Node 0 DMA32: 720*4kB (UME) 882*8kB (UME) 258*16kB (UME) 116*32kB (UME) 99*64kB (UME) 44*128kB (ME) 16*256kB (M) 4*512kB (M) 2*1024kB (UM) 0*2048kB 0*4096kB = 37936kB [ 2018.404657] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2018.415476] Node 1 Normal: 14*4kB (UM) 8*8kB (UM) 54*16kB (UM) 1653*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53880kB [ 2018.432781] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2018.442186] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2018.455345] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2018.464254] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2018.480037] 31566 total pagecache pages [ 2018.484024] 0 pages in swap cache [ 2018.487463] Swap cache stats: add 0, delete 0, find 0/0 [ 2018.496186] Free swap = 0kB [ 2018.499292] Total swap = 0kB [ 2018.502305] 2097051 pages RAM [ 2018.505400] 0 pages HighMem/MovableOnly [ 2018.509445] 363846 pages reserved [ 2018.512884] 0 pages cma reserved [ 2018.551465] syz-executor.2 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2018.567550] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2018.574447] CPU: 0 PID: 10617 Comm: syz-executor.2 Not tainted 4.14.228-syzkaller #0 [ 2018.582325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2018.591664] Call Trace: [ 2018.594248] dump_stack+0x1b2/0x281 [ 2018.597870] dump_header+0x178/0x82f [ 2018.601578] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2018.606674] ? ___ratelimit+0x2cd/0x530 [ 2018.610658] oom_kill_process.cold+0x10/0xb18 [ 2018.615154] out_of_memory+0xe3e/0x1190 [ 2018.619124] ? oom_killer_disable+0x1c0/0x1c0 [ 2018.623616] ? mutex_trylock+0x152/0x1a0 [ 2018.627672] __alloc_pages_nodemask+0x23e1/0x2720 [ 2018.632528] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2018.637380] alloc_pages_current+0x155/0x260 [ 2018.641780] filemap_fault+0xea3/0x1980 [ 2018.645850] ext4_filemap_fault+0x84/0xb0 [ 2018.649990] __do_fault+0xfa/0x380 [ 2018.653519] __handle_mm_fault+0x2497/0x4620 [ 2018.657921] ? vm_insert_page+0x7c0/0x7c0 [ 2018.662061] ? nanosleep_copyout+0x100/0x100 [ 2018.666471] handle_mm_fault+0x391/0x860 [ 2018.670524] __do_page_fault+0x549/0xad0 [ 2018.674574] ? spurious_fault+0x640/0x640 [ 2018.678712] ? do_page_fault+0x60/0x500 [ 2018.682677] ? page_fault+0x2f/0x50 [ 2018.686293] page_fault+0x45/0x50 [ 2018.689738] RIP: 1ec4cb:0x4 [ 2018.692654] RSP: 0006:00007fffaee6f6ec EFLAGS: 00000032 [ 2018.862543] Mem-Info: [ 2018.876426] active_anon:22813 inactive_anon:30377 isolated_anon:0 [ 2018.876426] active_file:25 inactive_file:18 isolated_file:0 [ 2018.876426] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2018.876426] slab_reclaimable:13176 slab_unreclaimable:115581 [ 2018.876426] mapped:52642 shmem:31508 pagetables:773 bounce:0 [ 2018.876426] free:24988 free_pcp:149 free_cma:0 [ 2018.918158] Node 0 active_anon:90448kB inactive_anon:80072kB active_file:136kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210568kB dirty:0kB writeback:0kB shmem:84328kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2018.954039] Node 1 active_anon:804kB inactive_anon:41436kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:41704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2018.986262] Node 0 DMA free:11064kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2019.027374] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2019.034561] Node 0 DMA32 free:35792kB min:36200kB low:45248kB high:54296kB active_anon:90408kB inactive_anon:80072kB active_file:40kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7296kB pagetables:3092kB bounce:0kB free_pcp:532kB local_pcp:140kB free_cma:0kB [ 2019.072122] lowmem_reserve[]: 0 0 0 0 0 [ 2019.076121] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2019.109041] lowmem_reserve[]: 0 0 0 0 0 [ 2019.113035] Node 1 Normal free:53128kB min:53696kB low:67120kB high:80544kB active_anon:804kB inactive_anon:41436kB active_file:36kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:0kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2019.147339] lowmem_reserve[]: 0 0 0 0 0 [ 2019.155630] Node 0 DMA: 14*4kB (ME) 38*8kB (UME) 39*16kB (UME) 29*32kB (UM) 5*64kB (UM) 3*128kB (ME) 1*256kB (E) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11064kB [ 2019.177833] Node 0 DMA32: 708*4kB (UME) 600*8kB (UME) 244*16kB (ME) 116*32kB (UME) 101*64kB (UME) 46*128kB (UME) 16*256kB (M) 4*512kB (M) 2*1024kB (UM) 0*2048kB 0*4096kB = 35792kB [ 2019.196628] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2019.213621] Node 1 Normal: 14*4kB (M) 8*8kB (UM) 7*16kB (M) 1653*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53128kB [ 2019.226558] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2019.237575] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2019.246757] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2019.257765] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2019.266372] 31534 total pagecache pages [ 2019.272378] 0 pages in swap cache [ 2019.275822] Swap cache stats: add 0, delete 0, find 0/0 [ 2019.281214] Free swap = 0kB [ 2019.284219] Total swap = 0kB [ 2019.287225] 2097051 pages RAM [ 2019.292419] 0 pages HighMem/MovableOnly [ 2019.296389] 363846 pages reserved [ 2019.299871] 0 pages cma reserved [ 2019.303224] Out of memory (oom_kill_allocating_task): Kill process 10617 (syz-executor.2) score 0 or sacrifice child [ 2019.315998] Killed process 11105 (syz-executor.2) total-vm:93384kB, anon-rss:156kB, file-rss:34820kB, shmem-rss:0kB [ 2019.337073] oom_reaper: reaped process 11105 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2019.352326] ion_system_heap invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=0, oom_score_adj=0 [ 2019.364527] ion_system_heap cpuset=/ mems_allowed=0-1 [ 2019.374394] CPU: 0 PID: 4246 Comm: ion_system_heap Not tainted 4.14.228-syzkaller #0 [ 2019.382271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2019.391614] Call Trace: [ 2019.394200] dump_stack+0x1b2/0x281 [ 2019.397837] dump_header+0x178/0x82f [ 2019.401638] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2019.406731] ? ___ratelimit+0x2cd/0x530 [ 2019.410699] oom_kill_process.cold+0x10/0xb18 [ 2019.415215] ? lock_downgrade+0x740/0x740 [ 2019.419366] out_of_memory+0x2dc/0x1190 [ 2019.423360] ? oom_killer_disable+0x1c0/0x1c0 [ 2019.427935] ? mutex_trylock+0x152/0x1a0 [ 2019.432463] __alloc_pages_nodemask+0x23e1/0x2720 [ 2019.437308] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2019.442146] ? ion_heap_sglist_zero+0x165/0x220 [ 2019.446811] ? cache_grow_begin+0x41/0x630 [ 2019.451033] cache_grow_begin+0x91/0x630 [ 2019.455082] ? cache_grow_begin+0x91/0x630 [ 2019.459308] fallback_alloc+0x207/0x2c0 [ 2019.463273] kmem_cache_alloc_node_trace+0xed/0x400 [ 2019.468279] __get_vm_area_node+0xed/0x340 [ 2019.472503] vmap+0xd5/0x290 [ 2019.475502] ? ion_heap_clear_pages+0x23/0x70 [ 2019.479994] ? vunmap+0x50/0x50 [ 2019.483258] ? __vunmap+0x21c/0x300 [ 2019.486875] ion_heap_clear_pages+0x23/0x70 [ 2019.491190] ion_heap_sglist_zero+0x165/0x220 [ 2019.495673] ? ion_heap_clear_pages+0x70/0x70 [ 2019.500163] ? finish_task_switch+0x178/0x610 [ 2019.504755] ? pagerange_is_ram_callback+0x100/0x100 [ 2019.509851] ? ion_heap_deferred_free+0x222/0x470 [ 2019.514684] ion_system_heap_free+0x1d0/0x240 [ 2019.519180] ion_buffer_destroy+0x132/0x190 [ 2019.523499] ion_heap_deferred_free+0x22a/0x470 [ 2019.528168] ? __schedule+0x827/0x1de0 [ 2019.532143] ? ion_heap_shrink_scan+0x1a0/0x1a0 [ 2019.536804] ? wait_woken+0x230/0x230 [ 2019.540590] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2019.545679] ? ion_heap_shrink_scan+0x1a0/0x1a0 [ 2019.550341] kthread+0x30d/0x420 [ 2019.553698] ? kthread_create_on_node+0xd0/0xd0 [ 2019.558357] ret_from_fork+0x24/0x30 [ 2019.635944] Mem-Info: [ 2019.642793] active_anon:22789 inactive_anon:30377 isolated_anon:0 [ 2019.642793] active_file:7 inactive_file:19 isolated_file:0 [ 2019.642793] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2019.642793] slab_reclaimable:13176 slab_unreclaimable:115561 [ 2019.642793] mapped:52642 shmem:31508 pagetables:773 bounce:0 [ 2019.642793] free:13962 free_pcp:130 free_cma:0 [ 2019.684140] Node 0 active_anon:90352kB inactive_anon:80072kB active_file:8kB inactive_file:92kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210568kB dirty:0kB writeback:0kB shmem:84328kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2019.691497] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2019.718425] Node 1 active_anon:804kB inactive_anon:41436kB active_file:0kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:41704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2019.737523] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2019.755221] CPU: 0 PID: 11105 Comm: syz-executor.2 Not tainted 4.14.228-syzkaller #0 [ 2019.757691] Node 0 [ 2019.763083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2019.763087] Call Trace: [ 2019.763102] dump_stack+0x1b2/0x281 [ 2019.763115] warn_alloc.cold+0x96/0x1cc [ 2019.763126] ? zone_watermark_ok_safe+0x220/0x220 [ 2019.763134] ? usleep_range+0x130/0x130 [ 2019.763147] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2019.765362] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2019.774691] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2019.774701] ? run_timer_softirq+0x5a0/0x5a0 [ 2019.774716] __alloc_pages_nodemask+0x2127/0x2720 [ 2019.774731] ? lock_acquire+0x170/0x3f0 [ 2019.774746] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2019.774756] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2019.774770] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2019.784306] lowmem_reserve[]: [ 2019.784896] alloc_pages_current+0x155/0x260 [ 2019.789736] 0 [ 2019.793656] ion_page_pool_alloc+0x118/0x1b0 [ 2019.805496] 2717 [ 2019.824382] ion_system_heap_allocate+0x133/0x8c0 [ 2019.824391] ? ion_alloc+0x187/0x810 [ 2019.824400] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2019.824408] ? ion_system_contig_heap_create+0x130/0x130 [ 2019.824416] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2019.824426] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2019.824433] ion_alloc+0x204/0x810 [ 2019.824443] ? ion_dma_buf_release+0x40/0x40 [ 2019.824453] ? __might_fault+0x177/0x1b0 [ 2019.824463] ion_ioctl+0xea/0x1f0 [ 2019.824471] ? ion_query_heaps+0x360/0x360 [ 2019.824482] ? ion_query_heaps+0x360/0x360 [ 2019.824491] do_vfs_ioctl+0x75a/0xff0 [ 2019.824502] ? ioctl_preallocate+0x1a0/0x1a0 [ 2019.824508] ? lock_downgrade+0x740/0x740 [ 2019.824519] ? __fget+0x225/0x360 [ 2019.824538] ? do_vfs_ioctl+0xff0/0xff0 [ 2019.824547] ? security_file_ioctl+0x83/0xb0 [ 2019.824553] SyS_ioctl+0x7f/0xb0 [ 2019.824559] ? do_vfs_ioctl+0xff0/0xff0 [ 2019.824567] do_syscall_64+0x1d5/0x640 [ 2019.824579] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2019.824585] RIP: 0033:0x466459 [ 2019.824589] RSP: 002b:00007f789fce5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2019.824597] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2019.824601] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2019.824604] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2019.824608] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2019.824613] R13: 00007fffaee6f42f R14: 00007f789fce5300 R15: 0000000000022000 [ 2019.835161] Mem-Info: [ 2019.896785] 2718 [ 2019.898937] active_anon:22789 inactive_anon:30377 isolated_anon:0 [ 2019.898937] active_file:14 inactive_file:12 isolated_file:0 [ 2019.898937] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2019.898937] slab_reclaimable:13176 slab_unreclaimable:115567 [ 2019.898937] mapped:52642 shmem:31508 pagetables:773 bounce:0 [ 2019.898937] free:13958 free_pcp:130 free_cma:0 [ 2019.937483] 2718 [ 2019.939749] Node 0 active_anon:90352kB inactive_anon:80072kB active_file:52kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210568kB dirty:0kB writeback:0kB shmem:84328kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2019.939765] Node 1 active_anon:804kB inactive_anon:41436kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:41704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2019.939769] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2019.939789] lowmem_reserve[]: [ 2020.017216] 2718 [ 2020.019918] 0 [ 2020.056305] 2717 [ 2020.106760] Node 0 [ 2020.112095] 2718 2718 2718 [ 2020.154494] Node 0 DMA32 free:18028kB min:36200kB low:45248kB high:54296kB active_anon:90312kB inactive_anon:80072kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7296kB pagetables:3092kB bounce:0kB free_pcp:396kB local_pcp:236kB free_cma:0kB [ 2020.157415] Bluetooth: hci4 command 0x0419 tx timeout [ 2020.186029] lowmem_reserve[]: 0 0 0 0 0 [ 2020.192760] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2020.217165] Bluetooth: hci5 command 0x0419 tx timeout [ 2020.220266] lowmem_reserve[]: 0 0 0 0 0 [ 2020.227502] Node 1 Normal free:26840kB min:53696kB low:67120kB high:80544kB active_anon:804kB inactive_anon:41436kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:0kB bounce:0kB free_pcp:124kB local_pcp:120kB free_cma:0kB [ 2020.246061] DMA32 free:18028kB min:36200kB low:45248kB high:54296kB active_anon:90312kB inactive_anon:80072kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7296kB pagetables:3092kB bounce:0kB free_pcp:396kB local_pcp:160kB free_cma:0kB [ 2020.259743] lowmem_reserve[]: 0 0 0 0 0 [ 2020.292990] Node 0 DMA: 15*4kB (UME) 25*8kB (UME) 39*16kB (UME) 29*32kB (UM) 5*64kB (UM) 3*128kB (ME) 1*256kB (E) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10964kB [ 2020.304551] lowmem_reserve[]: [ 2020.313693] Node 0 DMA32: 621*4kB (UME) 522*8kB (MEH) 167*16kB (UME) 59*32kB (MEH) 50*64kB (UME) 18*128kB (MEH) 5*256kB (UMH) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18004kB [ 2020.326753] 0 [ 2020.337594] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2020.354504] Node 1 Normal: 14*4kB (M) 8*8kB (UM) 8*16kB (UM) 831*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26840kB [ 2020.355234] 0 [ 2020.367510] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2020.367518] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2020.367524] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2020.367531] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2020.367535] 31534 total pagecache pages [ 2020.367544] 0 pages in swap cache [ 2020.387190] 0 [ 2020.399587] Swap cache stats: add 0, delete 0, find 0/0 [ 2020.423548] Free swap = 0kB [ 2020.425273] 0 [ 2020.426559] Total swap = 0kB [ 2020.426565] 0 [ 2020.428418] 2097051 pages RAM [ 2020.436285] 0 pages HighMem/MovableOnly [ 2020.445091] 363846 pages reserved [ 2020.448810] 0 pages cma reserved [ 2020.509182] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2020.544410] lowmem_reserve[]: 0 0 0 0 0 [ 2020.551335] Node 1 Normal free:256432kB min:53696kB low:67120kB high:80544kB active_anon:804kB inactive_anon:41436kB active_file:4kB inactive_file:2800kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:0kB bounce:0kB free_pcp:160kB local_pcp:32kB free_cma:0kB [ 2020.592140] lowmem_reserve[]: 0 0 0 0 0 [ 2020.671952] Node 0 DMA: 13*4kB (ME) 14*8kB (UME) 13*16kB (UME) 8*32kB (M) 7*64kB (UM) 8*128kB (UME) 3*256kB (UE) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11060kB [ 2020.888618] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2020.906645] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2020.930146] CPU: 0 PID: 11105 Comm: syz-executor.2 Not tainted 4.14.228-syzkaller #0 [ 2020.938038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2020.947379] Call Trace: [ 2020.949965] dump_stack+0x1b2/0x281 [ 2020.951338] Node 0 DMA32: [ 2020.953581] warn_alloc.cold+0x96/0x1cc [ 2020.953593] ? zone_watermark_ok_safe+0x220/0x220 [ 2020.956418] 722*4kB [ 2020.960517] __alloc_pages_nodemask+0x2127/0x2720 [ 2020.960529] ? lock_acquire+0x170/0x3f0 [ 2020.960543] ? lock_acquire+0x170/0x3f0 [ 2020.965356] (UME) [ 2020.967667] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2020.972500] 548*8kB [ 2020.976436] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2020.980414] (UMEH) [ 2020.982506] ? __mutex_unlock_slowpath+0x75/0x770 [ 2020.987313] 173*16kB [ 2020.989619] alloc_pages_current+0x155/0x260 [ 2020.989632] ion_page_pool_alloc+0x118/0x1b0 [ 2020.989642] ion_system_heap_allocate+0x133/0x8c0 [ 2020.995059] (UME) [ 2020.997277] ? _raw_spin_unlock+0x29/0x40 [ 2021.002175] 621*32kB [ 2021.004511] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2021.008913] (UMEH) [ 2021.013279] ? ion_system_contig_heap_create+0x130/0x130 [ 2021.018125] 0*64kB [ 2021.020228] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2021.024341] 1*128kB [ 2021.026732] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2021.032131] (H) [ 2021.033845] ion_alloc+0x27a/0x810 [ 2021.039297] 1*256kB [ 2021.041489] ? ion_dma_buf_release+0x40/0x40 [ 2021.046470] (H) [ 2021.048776] ? __might_fault+0x177/0x1b0 [ 2021.048788] ion_ioctl+0xea/0x1f0 [ 2021.048797] ? ion_query_heaps+0x360/0x360 [ 2021.048809] ? ion_query_heaps+0x360/0x360 [ 2021.048819] do_vfs_ioctl+0x75a/0xff0 [ 2021.067091] 0*512kB [ 2021.067765] ? ioctl_preallocate+0x1a0/0x1a0 [ 2021.067775] ? lock_downgrade+0x740/0x740 [ 2021.067789] ? __fget+0x225/0x360 [ 2021.071824] 0*1024kB [ 2021.075253] ? do_vfs_ioctl+0xff0/0xff0 [ 2021.079681] 0*2048kB [ 2021.083694] ? security_file_ioctl+0x83/0xb0 [ 2021.087460] 0*4096kB [ 2021.089763] SyS_ioctl+0x7f/0xb0 [ 2021.089771] ? do_vfs_ioctl+0xff0/0xff0 [ 2021.089781] do_syscall_64+0x1d5/0x640 [ 2021.089796] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2021.089804] RIP: 0033:0x466459 [ 2021.094758] = 30296kB [ 2021.098304] RSP: 002b:00007f789fce5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2021.098314] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2021.098320] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2021.098325] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2021.098330] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2021.098335] R13: 00007fffaee6f42f R14: 00007f789fce5300 R15: 0000000000022000 [ 2021.101472] Mem-Info: [ 2021.105368] Node 0 [ 2021.108404] active_anon:22792 inactive_anon:30377 isolated_anon:0 [ 2021.108404] active_file:32 inactive_file:17 isolated_file:12 [ 2021.108404] unevictable:0 dirty:4 writeback:0 unstable:0 [ 2021.108404] slab_reclaimable:13131 slab_unreclaimable:116162 [ 2021.108404] mapped:52707 shmem:31508 pagetables:773 bounce:0 [ 2021.108404] free:17690 free_pcp:0 free_cma:0 [ 2021.110670] Normal: [ 2021.115065] Node 0 active_anon:90364kB inactive_anon:80072kB active_file:80kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):48kB mapped:210740kB dirty:16kB writeback:0kB shmem:84328kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2021.117437] 0*4kB [ 2021.122061] Node 1 active_anon:804kB inactive_anon:41436kB active_file:48kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:88kB dirty:0kB writeback:0kB shmem:41704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2021.142281] 0*8kB [ 2021.147285] Node 0 [ 2021.156246] 0*16kB [ 2021.161864] DMA free:11000kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2021.161867] lowmem_reserve[]: 0 2717 2718 2718 [ 2021.172938] 0*32kB [ 2021.176411] 2718 [ 2021.184092] 0*64kB [ 2021.191630] 0*128kB [ 2021.221745] Node 0 [ 2021.240601] 0*256kB [ 2021.252519] DMA32 free:30184kB min:36200kB low:45248kB high:54296kB active_anon:90324kB inactive_anon:80072kB active_file:172kB inactive_file:252kB unevictable:0kB writepending:4kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7296kB pagetables:3092kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2021.257954] 0*512kB [ 2021.281830] lowmem_reserve[]: [ 2021.302985] 0*1024kB [ 2021.312950] 0 [ 2021.317526] 0*2048kB [ 2021.319762] 0 0 0 0 [ 2021.319777] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2021.319796] lowmem_reserve[]: 0 0 0 0 0 [ 2021.319814] Node 1 Normal free:29796kB min:53696kB low:67120kB high:80544kB active_anon:804kB inactive_anon:41436kB active_file:48kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2021.337600] 0*4096kB [ 2021.359328] lowmem_reserve[]: [ 2021.365022] = 0kB [ 2021.366950] 0 [ 2021.368758] Node 1 Normal: [ 2021.371149] 0 [ 2021.373448] 13*4kB [ 2021.399635] 0 [ 2021.426825] (UM) [ 2021.434119] 0 [ 2021.441353] 19*8kB [ 2021.443503] 0 [ 2021.445283] (UM) [ 2021.449300] 17*16kB (UM) 7*32kB [ 2021.451367] Node 0 [ 2021.453212] (UM) [ 2021.455421] DMA: [ 2021.457199] 7*64kB [ 2021.459521] 14*4kB [ 2021.466351] (UM) [ 2021.467180] (ME) [ 2021.469228] 2*128kB [ 2021.471439] 14*8kB [ 2021.473649] (UM) [ 2021.475683] (UME) [ 2021.481305] 1*256kB [ 2021.482571] 13*16kB [ 2021.484445] (M) [ 2021.486568] (UME) [ 2021.488898] 51*512kB (U) 0*1024kB 1*2048kB (M) 0*4096kB [ 2021.491224] 8*32kB [ 2021.493175] = 29820kB [ 2021.495295] (M) [ 2021.504042] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2021.505354] 6*64kB [ 2021.507307] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2021.516235] (UM) 8*128kB (UME) [ 2021.521811] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2021.527127] 3*256kB [ 2021.530686] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2021.539767] (UE) [ 2021.545136] 31565 total pagecache pages [ 2021.550470] 2*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11000kB [ 2021.563152] Node 0 DMA32: 753*4kB (UME) 550*8kB (UMEH) 173*16kB (UME) 621*32kB (UMEH) 0*64kB 1*128kB (H) 1*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 30436kB [ 2021.574493] 0 pages in swap cache [ 2021.577867] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2021.586946] Swap cache stats: add 0, delete 0, find 0/0 [ 2021.592014] Node 1 Normal: 13*4kB (UM) 19*8kB (UM) 17*16kB (UM) 7*32kB (UM) 7*64kB (UM) 2*128kB (UM) 1*256kB (M) 51*512kB (U) 0*1024kB 1*2048kB (M) 0*4096kB = 29820kB [ 2021.597514] Free swap = 0kB [ 2021.612648] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2021.619020] Total swap = 0kB [ 2021.624421] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2021.627393] 2097051 pages RAM [ 2021.635967] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2021.635973] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2021.635977] 31565 total pagecache pages [ 2021.635986] 0 pages in swap cache [ 2021.635991] Swap cache stats: add 0, delete 0, find 0/0 [ 2021.635994] Free swap = 0kB [ 2021.635996] Total swap = 0kB [ 2021.636001] 2097051 pages RAM [ 2021.636005] 0 pages HighMem/MovableOnly [ 2021.636008] 363846 pages reserved [ 2021.636012] 0 pages cma reserved [ 2021.643435] 0 pages HighMem/MovableOnly [ 2021.693325] 363846 pages reserved [ 2021.696749] 0 pages cma reserved [ 2021.700555] Out of memory: Kill process 11119 (syz-executor.1) score 1004 or sacrifice child [ 2021.709177] Killed process 11123 (syz-executor.1) total-vm:93648kB, anon-rss:160kB, file-rss:34820kB, shmem-rss:0kB [ 2021.753241] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2021.767376] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2021.775416] CPU: 0 PID: 11131 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 2021.783288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2021.792720] Call Trace: [ 2021.795293] dump_stack+0x1b2/0x281 [ 2021.798898] warn_alloc.cold+0x96/0x1cc [ 2021.802850] ? zone_watermark_ok_safe+0x220/0x220 [ 2021.807669] ? usleep_range+0x130/0x130 [ 2021.811623] ? try_to_free_pages+0x23f/0x6e0 [ 2021.816008] ? _find_next_bit+0xdb/0x100 [ 2021.820049] ? run_timer_softirq+0x5a0/0x5a0 [ 2021.824441] __alloc_pages_nodemask+0x2127/0x2720 [ 2021.829279] ? lock_acquire+0x170/0x3f0 [ 2021.833241] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2021.838148] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2021.842627] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2021.848068] alloc_pages_current+0x155/0x260 [ 2021.852453] ion_page_pool_alloc+0x118/0x1b0 [ 2021.856841] ion_system_heap_allocate+0x133/0x8c0 [ 2021.861674] ? ion_alloc+0x187/0x810 [ 2021.865364] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2021.870791] ? ion_system_contig_heap_create+0x130/0x130 [ 2021.876218] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2021.881212] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2021.886031] ion_alloc+0x204/0x810 [ 2021.889552] ? ion_dma_buf_release+0x40/0x40 [ 2021.893939] ? __might_fault+0x177/0x1b0 [ 2021.897978] ion_ioctl+0xea/0x1f0 [ 2021.901408] ? ion_query_heaps+0x360/0x360 [ 2021.905623] ? _raw_spin_unlock+0x29/0x40 [ 2021.909746] ? ion_query_heaps+0x360/0x360 [ 2021.913958] do_vfs_ioctl+0x75a/0xff0 [ 2021.917740] ? ioctl_preallocate+0x1a0/0x1a0 [ 2021.922124] ? lock_downgrade+0x740/0x740 [ 2021.926250] ? __fget+0x225/0x360 [ 2021.929681] ? do_vfs_ioctl+0xff0/0xff0 [ 2021.933631] ? security_file_ioctl+0x83/0xb0 [ 2021.938021] SyS_ioctl+0x7f/0xb0 [ 2021.941363] ? do_vfs_ioctl+0xff0/0xff0 [ 2021.945326] do_syscall_64+0x1d5/0x640 [ 2021.949196] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2021.954361] RIP: 0033:0x466459 [ 2021.957529] RSP: 002b:00007f27c4ee3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2021.965213] RAX: ffffffffffffffda RBX: 000000000056c158 RCX: 0000000000466459 [ 2021.972462] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2021.979712] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2021.987066] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c158 [ 2021.994313] R13: 00007ffda0b0ca7f R14: 00007f27c4ee3300 R15: 0000000000022000 [ 2022.011346] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2022.041882] oom_reaper: reaped process 11123 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2022.065472] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2022.070070] ion_system_heap invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=0, oom_score_adj=0 [ 2022.075935] CPU: 0 PID: 11123 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 2022.082773] ion_system_heap cpuset= [ 2022.090596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2022.090599] Call Trace: [ 2022.090617] dump_stack+0x1b2/0x281 [ 2022.090631] warn_alloc.cold+0x96/0x1cc [ 2022.094229] / [ 2022.103584] ? check_firmware.cold+0xc38/0xc4e [ 2022.106156] mems_allowed=0-1 [ 2022.109746] ? zone_watermark_ok_safe+0x220/0x220 [ 2022.109755] ? usleep_range+0x130/0x130 [ 2022.109765] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2022.137747] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2022.142760] ? run_timer_softirq+0x5a0/0x5a0 [ 2022.147150] __alloc_pages_nodemask+0x2127/0x2720 [ 2022.151976] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2022.156809] ? migrate_swap_stop+0x880/0x880 [ 2022.161191] ? lock_acquire+0x170/0x3f0 [ 2022.165150] alloc_pages_current+0x155/0x260 [ 2022.169536] ion_page_pool_alloc+0x118/0x1b0 [ 2022.174034] ion_system_heap_allocate+0x133/0x8c0 [ 2022.178852] ? ion_alloc+0x187/0x810 [ 2022.182544] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2022.187972] ? ion_system_contig_heap_create+0x130/0x130 [ 2022.193397] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2022.198391] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2022.203211] ion_alloc+0x204/0x810 [ 2022.206732] ? ion_dma_buf_release+0x40/0x40 [ 2022.211130] ? __might_fault+0x177/0x1b0 [ 2022.215168] ion_ioctl+0xea/0x1f0 [ 2022.218595] ? ion_query_heaps+0x360/0x360 [ 2022.222809] ? ion_query_heaps+0x360/0x360 [ 2022.227018] do_vfs_ioctl+0x75a/0xff0 [ 2022.230796] ? ioctl_preallocate+0x1a0/0x1a0 [ 2022.235179] ? lock_downgrade+0x740/0x740 [ 2022.239306] ? __fget+0x225/0x360 [ 2022.242734] ? do_vfs_ioctl+0xff0/0xff0 [ 2022.246685] ? security_file_ioctl+0x83/0xb0 [ 2022.251071] SyS_ioctl+0x7f/0xb0 [ 2022.254412] ? do_vfs_ioctl+0xff0/0xff0 [ 2022.258450] do_syscall_64+0x1d5/0x640 [ 2022.262316] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2022.267484] RIP: 0033:0x466459 [ 2022.270679] RSP: 002b:00007f27c4f46188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2022.278380] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2022.285626] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2022.292900] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2022.300151] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2022.307402] R13: 00007ffda0b0ca7f R14: 00007f27c4f46300 R15: 0000000000022000 [ 2022.314664] CPU: 1 PID: 4246 Comm: ion_system_heap Not tainted 4.14.228-syzkaller #0 [ 2022.322545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2022.331890] Call Trace: [ 2022.334486] dump_stack+0x1b2/0x281 [ 2022.338108] dump_header+0x178/0x82f [ 2022.341814] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2022.345219] Mem-Info: [ 2022.346905] ? ___ratelimit+0x2cd/0x530 [ 2022.351072] active_anon:22769 inactive_anon:30377 isolated_anon:0 [ 2022.351072] active_file:12 inactive_file:14 isolated_file:0 [ 2022.351072] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2022.351072] slab_reclaimable:13130 slab_unreclaimable:116120 [ 2022.351072] mapped:52678 shmem:31508 pagetables:773 bounce:0 [ 2022.351072] free:13955 free_pcp:31 free_cma:0 [ 2022.353263] oom_kill_process.cold+0x10/0xb18 [ 2022.386506] syz-executor.2: [ 2022.390890] ? lock_downgrade+0x740/0x740 [ 2022.390906] out_of_memory+0x2dc/0x1190 [ 2022.401986] ? oom_killer_disable+0x1c0/0x1c0 [ 2022.406473] ? mutex_trylock+0x152/0x1a0 [ 2022.410532] __alloc_pages_nodemask+0x23e1/0x2720 [ 2022.415377] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2022.418040] page allocation failure: order:0 [ 2022.420213] ? ion_heap_sglist_zero+0x165/0x220 [ 2022.420226] ? cache_grow_begin+0x41/0x630 [ 2022.420235] cache_grow_begin+0x91/0x630 [ 2022.420243] ? cache_grow_begin+0x91/0x630 [ 2022.420251] fallback_alloc+0x207/0x2c0 [ 2022.420263] kmem_cache_alloc_node_trace+0xed/0x400 [ 2022.420274] __get_vm_area_node+0xed/0x340 [ 2022.420285] vmap+0xd5/0x290 [ 2022.420292] ? ion_heap_clear_pages+0x23/0x70 [ 2022.420302] ? vunmap+0x50/0x50 [ 2022.425214] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2022.429366] ? __vunmap+0x21c/0x300 [ 2022.429377] ion_heap_clear_pages+0x23/0x70 [ 2022.429385] ion_heap_sglist_zero+0x165/0x220 [ 2022.429392] ? ion_heap_clear_pages+0x70/0x70 [ 2022.429403] ? finish_task_switch+0x178/0x610 [ 2022.429431] ? pagerange_is_ram_callback+0x100/0x100 [ 2022.429438] ? ion_heap_deferred_free+0x222/0x470 [ 2022.429449] ion_system_heap_free+0x1d0/0x240 [ 2022.429459] ion_buffer_destroy+0x132/0x190 [ 2022.429468] ion_heap_deferred_free+0x22a/0x470 [ 2022.429477] ? __schedule+0x827/0x1de0 [ 2022.429487] ? ion_heap_shrink_scan+0x1a0/0x1a0 [ 2022.429498] ? wait_woken+0x230/0x230 [ 2022.429505] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2022.429514] ? ion_heap_shrink_scan+0x1a0/0x1a0 [ 2022.440098] (null) [ 2022.441997] kthread+0x30d/0x420 [ 2022.442005] ? kthread_create_on_node+0xd0/0xd0 [ 2022.442014] ret_from_fork+0x24/0x30 [ 2022.538185] Node 0 active_anon:90268kB inactive_anon:80072kB active_file:48kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210712kB dirty:0kB writeback:0kB shmem:84328kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2022.542172] syz-executor.2 cpuset= [ 2022.543787] Node 1 active_anon:808kB inactive_anon:41436kB active_file:0kB inactive_file:3504kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2200kB dirty:0kB writeback:0kB shmem:41704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2022.543791] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2022.543807] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2022.543826] Node 0 DMA32 free:19160kB min:36200kB low:45248kB high:54296kB active_anon:90228kB inactive_anon:80072kB active_file:52kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7296kB pagetables:3092kB bounce:0kB free_pcp:60kB local_pcp:60kB free_cma:0kB [ 2022.543843] lowmem_reserve[]: 0 0 0 0 0 [ 2022.543862] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2022.543879] lowmem_reserve[]: 0 [ 2022.547544] / [ 2022.577590] 0 [ 2022.647640] mems_allowed=0-1 [ 2022.797708] CPU: 0 PID: 11105 Comm: syz-executor.2 Not tainted 4.14.228-syzkaller #0 [ 2022.800896] 0 [ 2022.805663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2022.805670] 0 [ 2022.807447] Call Trace: [ 2022.821163] dump_stack+0x1b2/0x281 [ 2022.824801] warn_alloc.cold+0x96/0x1cc [ 2022.828792] ? zone_watermark_ok_safe+0x220/0x220 [ 2022.833633] ? usleep_range+0x130/0x130 [ 2022.837568] 0 [ 2022.837596] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2022.839386] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2022.844462] Node 1 [ 2022.849455] ? run_timer_softirq+0x5a0/0x5a0 [ 2022.849471] __alloc_pages_nodemask+0x2127/0x2720 [ 2022.849487] ? lock_acquire+0x170/0x3f0 [ 2022.858854] Normal free:26804kB min:53696kB low:67120kB high:80544kB active_anon:808kB inactive_anon:41436kB active_file:0kB inactive_file:4604kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:0kB bounce:0kB free_pcp:272kB local_pcp:56kB free_cma:0kB [ 2022.860909] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2022.860920] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2022.867704] lowmem_reserve[]: [ 2022.892710] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2022.892729] alloc_pages_current+0x155/0x260 [ 2022.892743] ion_page_pool_alloc+0x118/0x1b0 [ 2022.892751] ion_system_heap_allocate+0x133/0x8c0 [ 2022.892763] ? _raw_spin_unlock+0x29/0x40 [ 2022.928316] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2022.933246] ? ion_system_contig_heap_create+0x130/0x130 [ 2022.935901] 0 [ 2022.938689] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2022.938701] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2022.938712] ion_alloc+0x27a/0x810 [ 2022.940493] 0 [ 2022.945492] ? ion_dma_buf_release+0x40/0x40 [ 2022.957550] 0 0 [ 2022.960027] ? __might_fault+0x177/0x1b0 [ 2022.960028] 0 [ 2022.961991] ion_ioctl+0xea/0x1f0 [ 2022.962000] ? ion_query_heaps+0x360/0x360 [ 2022.962011] ? ion_query_heaps+0x360/0x360 [ 2022.976216] Node 0 [ 2022.979765] do_vfs_ioctl+0x75a/0xff0 [ 2022.979779] ? ioctl_preallocate+0x1a0/0x1a0 [ 2022.981992] DMA: [ 2022.985774] ? lock_downgrade+0x740/0x740 [ 2022.996328] ? __fget+0x225/0x360 [ 2022.999771] ? do_vfs_ioctl+0xff0/0xff0 [ 2023.000295] 15*4kB [ 2023.003730] ? security_file_ioctl+0x83/0xb0 [ 2023.003732] (UME) 14*8kB [ 2023.005951] SyS_ioctl+0x7f/0xb0 [ 2023.016413] ? do_vfs_ioctl+0xff0/0xff0 [ 2023.020381] do_syscall_64+0x1d5/0x640 [ 2023.020496] (UME) 13*16kB [ 2023.024274] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2023.024279] (UME) [ 2023.027109] RIP: 0033:0x466459 [ 2023.037861] RSP: 002b:00007f789fce5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2023.045565] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2023.052594] 9*32kB [ 2023.052818] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2023.052824] (UM) [ 2023.055036] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2023.062304] 5*64kB [ 2023.064324] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2023.064330] R13: 00007fffaee6f42f R14: 00007f789fce5300 R15: 0000000000022000 [ 2023.141242] (UM) 8*128kB (UME) 3*256kB (UE) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10972kB [ 2023.161507] Node 0 DMA32: 7238*4kB (UME) 10976*8kB (UME) 8915*16kB (UME) 3610*32kB (UME) 23*64kB (U) 6*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 377160kB [ 2023.176673] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2023.207583] Node 1 Normal: 531*4kB (U) 762*8kB (UM) 512*16kB (UM) 2*32kB (M) 1*64kB (M) 2*128kB (U) 0*256kB 52*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 43420kB [ 2023.237543] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2023.246543] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2023.277689] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2023.286545] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2023.333169] 32163 total pagecache pages [ 2023.337176] 0 pages in swap cache [ 2023.350904] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2023.362885] Swap cache stats: add 0, delete 0, find 0/0 [ 2023.374033] Free swap = 0kB [ 2023.377070] Total swap = 0kB [ 2023.387539] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2023.392676] CPU: 1 PID: 11123 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 2023.397528] 2097051 pages RAM [ 2023.400545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2023.403632] 0 pages HighMem/MovableOnly [ 2023.413142] Call Trace: [ 2023.413157] dump_stack+0x1b2/0x281 [ 2023.413169] warn_alloc.cold+0x96/0x1cc [ 2023.413180] ? zone_watermark_ok_safe+0x220/0x220 [ 2023.413201] __alloc_pages_nodemask+0x2127/0x2720 [ 2023.413211] ? lock_acquire+0x170/0x3f0 [ 2023.413221] ? lock_acquire+0x170/0x3f0 [ 2023.413233] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2023.413249] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2023.447992] 363846 pages reserved [ 2023.449791] ? __mutex_unlock_slowpath+0x75/0x770 [ 2023.455213] 0 pages cma reserved [ 2023.458670] alloc_pages_current+0x155/0x260 [ 2023.458684] ion_page_pool_alloc+0x118/0x1b0 [ 2023.458694] ion_system_heap_allocate+0x133/0x8c0 [ 2023.458705] ? _raw_spin_unlock+0x29/0x40 [ 2023.458714] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2023.458723] ? ion_system_contig_heap_create+0x130/0x130 [ 2023.458734] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2023.458744] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2023.458754] ion_alloc+0x27a/0x810 [ 2023.458769] ? ion_dma_buf_release+0x40/0x40 [ 2023.512939] ? __might_fault+0x177/0x1b0 [ 2023.516996] ion_ioctl+0xea/0x1f0 [ 2023.520468] ? ion_query_heaps+0x360/0x360 [ 2023.520623] warn_alloc_show_mem: 1 callbacks suppressed [ 2023.520626] Mem-Info: [ 2023.524690] ? ion_query_heaps+0x360/0x360 [ 2023.536648] do_vfs_ioctl+0x75a/0xff0 [ 2023.540448] ? ioctl_preallocate+0x1a0/0x1a0 [ 2023.544848] ? lock_downgrade+0x740/0x740 [ 2023.548994] ? __fget+0x225/0x360 [ 2023.552436] ? do_vfs_ioctl+0xff0/0xff0 [ 2023.556404] ? security_file_ioctl+0x83/0xb0 [ 2023.560259] active_anon:22769 inactive_anon:30377 isolated_anon:12 [ 2023.560259] active_file:163 inactive_file:132 isolated_file:0 [ 2023.560259] unevictable:0 dirty:28 writeback:0 unstable:0 [ 2023.560259] slab_reclaimable:12946 slab_unreclaimable:117164 [ 2023.560259] mapped:53019 shmem:31508 pagetables:773 bounce:0 [ 2023.560259] free:83346 free_pcp:254 free_cma:0 [ 2023.560807] SyS_ioctl+0x7f/0xb0 [ 2023.597723] ? do_vfs_ioctl+0xff0/0xff0 [ 2023.601695] do_syscall_64+0x1d5/0x640 [ 2023.605681] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2023.610861] RIP: 0033:0x466459 [ 2023.614036] RSP: 002b:00007f27c4f46188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2023.621733] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2023.628994] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2023.636252] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2023.643517] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2023.650781] R13: 00007ffda0b0ca7f R14: 00007f27c4f46300 R15: 0000000000022000 [ 2023.677540] Node 0 active_anon:90264kB inactive_anon:80072kB active_file:132kB inactive_file:224kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:211064kB dirty:16kB writeback:0kB shmem:84328kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2023.715981] Mem-Info: [ 2023.747507] Node 1 active_anon:812kB inactive_anon:41436kB active_file:212kB inactive_file:272kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:612kB dirty:96kB writeback:0kB shmem:41704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2023.786189] Node 0 DMA free:11024kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2023.830075] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2023.835312] Node 0 DMA32 free:298920kB min:36200kB low:45248kB high:54296kB active_anon:90224kB inactive_anon:80072kB active_file:148kB inactive_file:2756kB unevictable:0kB writepending:16kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7296kB pagetables:3092kB bounce:0kB free_pcp:340kB local_pcp:276kB free_cma:0kB [ 2023.907452] lowmem_reserve[]: 0 0 0 0 0 [ 2023.911484] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2023.949930] lowmem_reserve[]: [ 2023.949934] syz-executor.1: page allocation failure: order:4 [ 2023.953047] 0 [ 2023.953058] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2023.959225] 0 0 0 0 [ 2023.970664] Node 1 Normal free:34256kB min:53696kB low:67120kB high:80544kB active_anon:812kB inactive_anon:41436kB active_file:452kB inactive_file:468kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2023.979675] (null) [ 2024.004270] lowmem_reserve[]: 0 0 0 0 0 [ 2024.009008] Node 0 DMA: 257*4kB (UME) 22*8kB (UME) 13*16kB (UME) 9*32kB (UM) 3*64kB (M) 3*128kB (ME) 2*256kB (UE) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10980kB [ 2024.029128] Node 0 DMA32: 292*4kB (E) 348*8kB (UE) 105*16kB (ME) 1865*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 65312kB [ 2024.037453] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2024.044432] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2024.067466] CPU: 1 PID: 11131 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 2024.075358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2024.084701] Call Trace: [ 2024.087287] dump_stack+0x1b2/0x281 [ 2024.090993] warn_alloc.cold+0x96/0x1cc [ 2024.094957] ? zone_watermark_ok_safe+0x220/0x220 [ 2024.097103] Node 1 [ 2024.099887] __alloc_pages_nodemask+0x2127/0x2720 [ 2024.099903] ? lock_acquire+0x170/0x3f0 [ 2024.099917] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2024.102130] Normal: [ 2024.106956] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2024.123462] ? __mutex_unlock_slowpath+0x75/0x770 [ 2024.128419] alloc_pages_current+0x155/0x260 [ 2024.132824] ion_page_pool_alloc+0x118/0x1b0 [ 2024.137221] ion_system_heap_allocate+0x133/0x8c0 [ 2024.142060] ? _raw_spin_unlock+0x29/0x40 [ 2024.146199] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2024.147589] 834*4kB [ 2024.151117] ? ion_system_contig_heap_create+0x130/0x130 [ 2024.151127] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2024.151137] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2024.151158] ion_alloc+0x27a/0x810 [ 2024.151169] ? ion_dma_buf_release+0x40/0x40 [ 2024.151181] ? __might_fault+0x177/0x1b0 [ 2024.151193] ion_ioctl+0xea/0x1f0 [ 2024.151201] ? ion_query_heaps+0x360/0x360 [ 2024.151214] ? _raw_spin_unlock+0x29/0x40 [ 2024.151221] ? ion_query_heaps+0x360/0x360 [ 2024.151231] do_vfs_ioctl+0x75a/0xff0 [ 2024.151241] ? ioctl_preallocate+0x1a0/0x1a0 [ 2024.151250] ? lock_downgrade+0x740/0x740 [ 2024.151263] ? __fget+0x225/0x360 [ 2024.151273] ? do_vfs_ioctl+0xff0/0xff0 [ 2024.151283] ? security_file_ioctl+0x83/0xb0 [ 2024.151292] SyS_ioctl+0x7f/0xb0 [ 2024.151299] ? do_vfs_ioctl+0xff0/0xff0 [ 2024.151310] do_syscall_64+0x1d5/0x640 [ 2024.151323] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2024.151330] RIP: 0033:0x466459 [ 2024.151335] RSP: 002b:00007f27c4ee3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2024.151344] RAX: ffffffffffffffda RBX: 000000000056c158 RCX: 0000000000466459 [ 2024.151350] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2024.151354] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2024.151359] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c158 [ 2024.151364] R13: 00007ffda0b0ca7f R14: 00007f27c4ee3300 R15: 0000000000022000 [ 2024.176464] active_anon:22769 inactive_anon:30377 isolated_anon:12 [ 2024.176464] active_file:34 inactive_file:19 isolated_file:0 [ 2024.176464] unevictable:0 dirty:5 writeback:0 unstable:0 [ 2024.176464] slab_reclaimable:12945 slab_unreclaimable:117173 [ 2024.176464] mapped:52740 shmem:31508 pagetables:773 bounce:0 [ 2024.176464] free:13874 free_pcp:179 free_cma:0 [ 2024.192737] (UM) [ 2024.206805] syz-executor.1: [ 2024.211513] 939*8kB [ 2024.213331] page allocation failure: order:0 [ 2024.217277] (UM) [ 2024.236293] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2024.240071] 809*16kB [ 2024.247660] syz-executor.1: [ 2024.249332] (U) [ 2024.256425] page allocation failure: order:0 [ 2024.265818] 325*32kB [ 2024.271181] (null) [ 2024.287615] (U) [ 2024.319386] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2024.319395] syz-executor.1 cpuset=/ [ 2024.329999] 0*64kB [ 2024.331296] mems_allowed=0-1 [ 2024.333301] 0*128kB [ 2024.340466] CPU: 1 PID: 11123 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 2024.340472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2024.340478] Call Trace: [ 2024.351571] 0*256kB [ 2024.352226] dump_stack+0x1b2/0x281 [ 2024.354606] 0*512kB [ 2024.356738] warn_alloc.cold+0x96/0x1cc [ 2024.361491] 0*1024kB [ 2024.366285] ? zone_watermark_ok_safe+0x220/0x220 [ 2024.375490] syz-executor.1 cpuset= [ 2024.377491] ? usleep_range+0x130/0x130 [ 2024.377500] ? try_to_free_pages+0x23f/0x6e0 [ 2024.377510] ? _find_next_bit+0xdb/0x100 [ 2024.377519] ? run_timer_softirq+0x5a0/0x5a0 [ 2024.377534] __alloc_pages_nodemask+0x2127/0x2720 [ 2024.377549] ? lock_acquire+0x170/0x3f0 [ 2024.393024] / [ 2024.394859] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2024.397454] 0*2048kB [ 2024.399733] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2024.403327] 0*4096kB [ 2024.405634] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2024.418010] mems_allowed=0-1 [ 2024.420308] alloc_pages_current+0x155/0x260 [ 2024.438514] = 34192kB [ 2024.441866] ion_page_pool_alloc+0x118/0x1b0 [ 2024.445810] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2024.447503] ion_system_heap_allocate+0x133/0x8c0 [ 2024.447515] ? _raw_spin_unlock+0x29/0x40 [ 2024.447524] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2024.447533] ? ion_system_contig_heap_create+0x130/0x130 [ 2024.447544] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2024.447556] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2024.447566] ion_alloc+0x27a/0x810 [ 2024.447579] ? ion_dma_buf_release+0x40/0x40 [ 2024.480147] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2024.481310] ? __might_fault+0x177/0x1b0 [ 2024.512919] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2024.514399] ion_ioctl+0xea/0x1f0 [ 2024.533099] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2024.535776] ? ion_query_heaps+0x360/0x360 [ 2024.553131] 31550 total pagecache pages [ 2024.560620] ? ion_query_heaps+0x360/0x360 [ 2024.560632] do_vfs_ioctl+0x75a/0xff0 [ 2024.560645] ? ioctl_preallocate+0x1a0/0x1a0 [ 2024.560655] ? lock_downgrade+0x740/0x740 [ 2024.560671] ? __fget+0x225/0x360 [ 2024.588753] ? do_vfs_ioctl+0xff0/0xff0 [ 2024.592363] 0 pages in swap cache [ 2024.592718] ? security_file_ioctl+0x83/0xb0 [ 2024.596146] Swap cache stats: add 0, delete 0, find 0/0 [ 2024.600634] SyS_ioctl+0x7f/0xb0 [ 2024.600642] ? do_vfs_ioctl+0xff0/0xff0 [ 2024.600653] do_syscall_64+0x1d5/0x640 [ 2024.600667] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2024.600676] RIP: 0033:0x466459 [ 2024.600681] RSP: 002b:00007f27c4f46188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2024.600690] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2024.600695] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2024.600702] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2024.620664] Free swap = 0kB [ 2024.622338] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2024.625502] Total swap = 0kB [ 2024.633197] R13: 00007ffda0b0ca7f R14: 00007f27c4f46300 R15: 0000000000022000 [ 2024.637004] warn_alloc_show_mem: 2 callbacks suppressed [ 2024.637007] Mem-Info: [ 2024.642412] CPU: 0 PID: 11131 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 2024.651099] active_anon:22769 inactive_anon:30377 isolated_anon:12 [ 2024.651099] active_file:34 inactive_file:19 isolated_file:0 [ 2024.651099] unevictable:0 dirty:5 writeback:0 unstable:0 [ 2024.651099] slab_reclaimable:12945 slab_unreclaimable:117173 [ 2024.651099] mapped:52740 shmem:31508 pagetables:773 bounce:0 [ 2024.651099] free:13695 free_pcp:60 free_cma:0 [ 2024.655059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2024.658341] Node 0 active_anon:90264kB inactive_anon:80072kB active_file:96kB inactive_file:0kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:210948kB dirty:20kB writeback:0kB shmem:84328kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2024.665559] Call Trace: [ 2024.668576] Node 1 active_anon:812kB inactive_anon:41436kB active_file:40kB inactive_file:88kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:12kB dirty:0kB writeback:0kB shmem:41704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2024.675820] dump_stack+0x1b2/0x281 [ 2024.681161] Node 0 [ 2024.683542] warn_alloc.cold+0x96/0x1cc [ 2024.691438] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2024.724625] ? zone_watermark_ok_safe+0x220/0x220 [ 2024.724636] ? usleep_range+0x130/0x130 [ 2024.724645] ? try_to_free_pages+0x23f/0x6e0 [ 2024.734007] lowmem_reserve[]: [ 2024.761645] ? _find_next_bit+0xdb/0x100 [ 2024.761655] ? run_timer_softirq+0x5a0/0x5a0 [ 2024.761671] __alloc_pages_nodemask+0x2127/0x2720 [ 2024.764225] 0 [ 2024.791011] ? lock_acquire+0x170/0x3f0 [ 2024.791026] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2024.794621] 2717 [ 2024.796836] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2024.800796] 2718 [ 2024.826373] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2024.826392] alloc_pages_current+0x155/0x260 [ 2024.831215] 2718 [ 2024.835331] ion_page_pool_alloc+0x118/0x1b0 [ 2024.839722] 2718 [ 2024.842794] ion_system_heap_allocate+0x133/0x8c0 [ 2024.851206] ? _raw_spin_unlock+0x29/0x40 [ 2024.851213] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2024.851228] ? ion_system_contig_heap_create+0x130/0x130 [ 2024.851238] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2024.859568] Node 0 [ 2024.861820] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2024.866642] DMA32 free:17572kB min:36200kB low:45248kB high:54296kB active_anon:90224kB inactive_anon:80072kB active_file:164kB inactive_file:0kB unevictable:0kB writepending:20kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7296kB pagetables:3092kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2024.868677] ion_alloc+0x27a/0x810 [ 2024.868689] ? ion_dma_buf_release+0x40/0x40 [ 2024.868701] ? __might_fault+0x177/0x1b0 [ 2024.873168] lowmem_reserve[]: [ 2024.875212] ion_ioctl+0xea/0x1f0 [ 2024.880658] 0 [ 2024.885031] ? ion_query_heaps+0x360/0x360 [ 2024.887064] 0 [ 2024.891460] ? _raw_spin_unlock+0x29/0x40 [ 2024.891467] ? ion_query_heaps+0x360/0x360 [ 2024.891476] do_vfs_ioctl+0x75a/0xff0 [ 2024.893511] 0 [ 2024.898333] ? ioctl_preallocate+0x1a0/0x1a0 [ 2024.898348] ? lock_downgrade+0x740/0x740 [ 2024.902465] 0 [ 2024.907372] ? __fget+0x225/0x360 [ 2024.907380] ? do_vfs_ioctl+0xff0/0xff0 [ 2024.907391] ? security_file_ioctl+0x83/0xb0 [ 2024.912806] 0 [ 2024.917830] SyS_ioctl+0x7f/0xb0 [ 2024.917844] ? do_vfs_ioctl+0xff0/0xff0 [ 2024.917854] do_syscall_64+0x1d5/0x640 [ 2024.917867] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2024.924889] RIP: 0033:0x466459 [ 2024.953235] Node 0 [ 2024.956831] RSP: 002b:00007f27c4ee3188 EFLAGS: 00000246 [ 2024.961250] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2024.965447] ORIG_RAX: 0000000000000010 [ 2024.968540] lowmem_reserve[]: [ 2024.971967] RAX: ffffffffffffffda RBX: 000000000056c158 RCX: 0000000000466459 [ 2024.973738] 0 [ 2024.977947] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2024.977952] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2024.977957] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c158 [ 2024.977962] R13: 00007ffda0b0ca7f R14: 00007f27c4ee3300 R15: 0000000000022000 [ 2024.984438] 2097051 pages RAM [ 2025.001319] 0 [ 2025.006021] 0 pages HighMem/MovableOnly [ 2025.015743] 0 [ 2025.016073] 363846 pages reserved [ 2025.017887] 0 0 [ 2025.017899] Node 1 [ 2025.024737] 0 pages cma reserved [ 2025.025212] Normal free:26256kB min:53696kB low:67120kB high:80544kB active_anon:812kB inactive_anon:41436kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:0kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2025.033001] Node 0 active_anon:90264kB inactive_anon:80072kB active_file:48kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210908kB dirty:0kB writeback:0kB shmem:84328kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2025.047608] lowmem_reserve[]: 0 0 0 0 0 [ 2025.196664] Node 0 DMA: 250*4kB (UME) 23*8kB (UME) 13*16kB (UME) 9*32kB (UM) 4*64kB (UM) 3*128kB (ME) 2*256kB (UE) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11024kB [ 2025.212731] Node 0 DMA32: 464*4kB (ME) 398*8kB (UME) 131*16kB (ME) 308*32kB (UME) 149*64kB (UME) 43*128kB (UME) 16*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36128kB [ 2025.237327] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2025.272871] Node 1 Normal: 1*4kB (M) 1*8kB (U) 1*16kB (U) 2*32kB (UM) 1*64kB (U) 31*128kB (U) 131*256kB (UM) 0*512kB 1*1024kB (U) 13*2048kB (U) 0*4096kB = 65308kB [ 2025.327332] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2025.336191] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2025.367331] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2025.376269] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2025.407653] 32219 total pagecache pages [ 2025.411675] 0 pages in swap cache [ 2025.415113] Swap cache stats: add 0, delete 0, find 0/0 [ 2025.427325] Free swap = 0kB [ 2025.430350] Total swap = 0kB [ 2025.433400] 2097051 pages RAM [ 2025.436486] 0 pages HighMem/MovableOnly [ 2025.457357] 363846 pages reserved [ 2025.460830] 0 pages cma reserved [ 2025.463746] Node 1 active_anon:812kB inactive_anon:41436kB active_file:1368kB inactive_file:1172kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2300kB dirty:0kB writeback:0kB shmem:41704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2025.511264] Node 0 DMA free:11064kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2025.541305] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2025.546348] Node 0 DMA32 free:255324kB min:36200kB low:45248kB high:54296kB active_anon:90224kB inactive_anon:80072kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7264kB pagetables:3092kB bounce:0kB free_pcp:1044kB local_pcp:644kB free_cma:0kB [ 2025.580423] lowmem_reserve[]: 0 0 0 0 0 [ 2025.584432] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2025.614292] lowmem_reserve[]: 0 0 0 0 0 [ 2025.618759] Node 1 Normal free:1162932kB min:53696kB low:67120kB high:80544kB active_anon:812kB inactive_anon:41436kB active_file:1508kB inactive_file:1380kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:0kB bounce:0kB free_pcp:284kB local_pcp:128kB free_cma:0kB [ 2025.652559] lowmem_reserve[]: 0 0 0 0 0 [ 2025.656642] Node 0 DMA: 251*4kB (UME) 25*8kB (UME) 15*16kB (UME) 9*32kB (UM) 7*64kB (UM) 3*128kB (ME) 2*256kB (UE) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11268kB [ 2025.677138] Node 0 DMA32: 445*4kB (UME) 490*8kB (UME) 135*16kB (UME) 292*32kB (UME) 6042*64kB (UME) 1812*128kB (UME) 231*256kB (UM) 24*512kB (U) 2*1024kB (U) 0*2048kB 0*4096kB = 709300kB [ 2025.698413] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2025.712110] Node 1 Normal: 1*4kB (M) 8*8kB (M) 21*16kB (M) 7*32kB (M) 2380*64kB (UM) 155*128kB (UM) 246*256kB (UM) 112*512kB (U) 533*1024kB (U) 181*2048kB (U) 48*4096kB (U) = 1406196kB [ 2025.733600] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2025.743110] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2025.755657] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2025.765013] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2025.778035] 32219 total pagecache pages [ 2025.782010] 0 pages in swap cache [ 2025.785456] Swap cache stats: add 0, delete 0, find 0/0 [ 2025.795173] Free swap = 0kB [ 2025.799300] Total swap = 0kB [ 2025.802313] 2097051 pages RAM [ 2025.805414] 0 pages HighMem/MovableOnly [ 2025.813465] 363846 pages reserved [ 2025.817010] 0 pages cma reserved [ 2025.821683] Out of memory: Kill process 11101 (syz-executor.0) score 1004 or sacrifice child [ 2025.833775] Killed process 11107 (syz-executor.0) total-vm:93384kB, anon-rss:152kB, file-rss:34820kB, shmem-rss:0kB [ 2025.866440] oom_reaper: reaped process 11107 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 06:41:25 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x101000, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x400200, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7ffffffd, 0x22}) 06:41:25 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 06:41:25 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000080)={0x34, 0x0, &(0x7f0000000040)}) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x7ffffffd, 0x22}) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f00000000c0)={0x1}) 06:41:25 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000240)='/dev/bus/usb/00#/00#\x00', 0x6, 0x4a8e02) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r1, 0x8931, &(0x7f0000001640)={'veth1_virt_wifi\x00', @ifru_names}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000040)) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, 0x0) 06:41:25 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = userfaultfd(0x80000) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000000140)={{r0}, 0x0, 0x12, @inherit={0x70, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x6, {0x0, 0x0, 0x8, 0x80, 0x8000}, [0x7, 0x8, 0x8001, 0x5, 0x7]}}, @name="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"}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10001, 0x2, 0x0, 0xffffffffffffffff}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x9, 0x20}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000001140)={0x10003, 0x0, [0x3, 0x8a0, 0x9, 0x5, 0x100000001, 0x7f, 0x0, 0x8]}) [ 2026.719867] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2026.739525] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2026.750178] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2026.757301] CPU: 1 PID: 11141 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 2026.765168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2026.774585] Call Trace: [ 2026.777155] dump_stack+0x1b2/0x281 [ 2026.780760] warn_alloc.cold+0x96/0x1cc [ 2026.784716] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2026.789710] ? zone_watermark_ok_safe+0x220/0x220 [ 2026.794539] __alloc_pages_nodemask+0x2127/0x2720 [ 2026.799374] ? io_schedule_timeout+0x140/0x140 [ 2026.803936] ? lock_acquire+0x170/0x3f0 [ 2026.807891] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2026.812717] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2026.818147] ? __mutex_unlock_slowpath+0x75/0x770 [ 2026.822966] ? alloc_pages_current+0x21c/0x260 [ 2026.827542] alloc_pages_current+0x155/0x260 [ 2026.831948] ion_page_pool_alloc+0x118/0x1b0 [ 2026.836350] ion_system_heap_allocate+0x133/0x8c0 [ 2026.841169] ? ion_alloc+0x187/0x810 [ 2026.844858] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2026.850285] ? ion_system_contig_heap_create+0x130/0x130 [ 2026.855713] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2026.860707] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2026.865536] ion_alloc+0x204/0x810 [ 2026.869059] ? ion_dma_buf_release+0x40/0x40 [ 2026.873448] ? __might_fault+0x177/0x1b0 [ 2026.877574] ion_ioctl+0xea/0x1f0 [ 2026.881004] ? ion_query_heaps+0x360/0x360 [ 2026.885218] ? ion_query_heaps+0x360/0x360 [ 2026.889432] do_vfs_ioctl+0x75a/0xff0 [ 2026.893223] ? ioctl_preallocate+0x1a0/0x1a0 [ 2026.897608] ? lock_downgrade+0x740/0x740 [ 2026.901748] ? __fget+0x225/0x360 [ 2026.905185] ? do_vfs_ioctl+0xff0/0xff0 [ 2026.909137] ? security_file_ioctl+0x83/0xb0 [ 2026.913521] SyS_ioctl+0x7f/0xb0 [ 2026.916860] ? do_vfs_ioctl+0xff0/0xff0 [ 2026.920822] do_syscall_64+0x1d5/0x640 [ 2026.924688] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2026.929858] RIP: 0033:0x466459 [ 2026.933026] RSP: 002b:00007f27c4f46188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2026.940713] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2026.947958] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2026.955204] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2026.962450] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2026.969697] R13: 00007ffda0b0ca7f R14: 00007f27c4f46300 R15: 0000000000022000 [ 2026.987166] warn_alloc_show_mem: 1 callbacks suppressed [ 2026.987170] Mem-Info: [ 2026.988275] in:imklog cpuset= [ 2026.992559] active_anon:22783 inactive_anon:30377 isolated_anon:0 [ 2026.992559] active_file:137 inactive_file:134 isolated_file:3 [ 2026.992559] unevictable:0 dirty:2 writeback:0 unstable:0 [ 2026.992559] slab_reclaimable:12884 slab_unreclaimable:117403 [ 2026.992559] mapped:52999 shmem:31508 pagetables:747 bounce:0 [ 2026.992559] free:20748 free_pcp:21 free_cma:0 [ 2026.992573] Node 0 active_anon:90316kB inactive_anon:80072kB active_file:544kB inactive_file:532kB unevictable:0kB isolated(anon):0kB isolated(file):12kB mapped:211992kB dirty:8kB writeback:0kB shmem:84328kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2026.994983] / [ 2027.017139] Node 1 active_anon:816kB inactive_anon:41436kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:0kB writeback:0kB shmem:41704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2027.034917] mems_allowed=0-1 [ 2027.090802] CPU: 0 PID: 9506 Comm: in:imklog Not tainted 4.14.228-syzkaller #0 [ 2027.098153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2027.107284] Node 0 [ 2027.107494] Call Trace: [ 2027.107512] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2027.109720] dump_stack+0x1b2/0x281 [ 2027.112279] lowmem_reserve[]: [ 2027.137965] dump_header+0x178/0x82f [ 2027.137975] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2027.137983] ? ___ratelimit+0x2cd/0x530 [ 2027.137993] oom_kill_process.cold+0x10/0xb18 [ 2027.142053] 0 [ 2027.144681] out_of_memory+0xe3e/0x1190 [ 2027.148376] 2717 [ 2027.153446] ? oom_killer_disable+0x1c0/0x1c0 [ 2027.157395] 2718 [ 2027.161853] ? mutex_trylock+0x152/0x1a0 [ 2027.163637] 2718 [ 2027.167589] __alloc_pages_nodemask+0x23e1/0x2720 [ 2027.167610] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2027.169640] 2718 [ 2027.174124] alloc_pages_current+0x155/0x260 [ 2027.180281] filemap_fault+0xea3/0x1980 [ 2027.180299] ext4_filemap_fault+0x84/0xb0 [ 2027.182333] Node 0 [ 2027.187241] __do_fault+0xfa/0x380 [ 2027.187251] __handle_mm_fault+0x2497/0x4620 [ 2027.187261] ? vm_insert_page+0x7c0/0x7c0 [ 2027.192174] DMA32 free:17936kB min:36200kB low:45248kB high:54296kB active_anon:90276kB inactive_anon:80072kB active_file:656kB inactive_file:712kB unevictable:0kB writepending:8kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7264kB pagetables:2988kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2027.194203] ? lock_downgrade+0x740/0x740 [ 2027.198593] lowmem_reserve[]: [ 2027.202558] handle_mm_fault+0x391/0x860 [ 2027.206755] 0 [ 2027.208972] __do_page_fault+0x549/0xad0 [ 2027.208986] ? spurious_fault+0x640/0x640 [ 2027.212496] 0 [ 2027.216881] ? do_page_fault+0x60/0x500 [ 2027.221014] 0 [ 2027.249688] ? page_fault+0x2f/0x50 [ 2027.249696] page_fault+0x45/0x50 [ 2027.249705] RIP: 1fa0:0x1f9f [ 2027.253825] 0 [ 2027.256901] RSP: 0000:000055fbea1799d0 EFLAGS: 7fd52df9dda0 [ 2027.261041] 0 [ 2027.331974] Mem-Info: [ 2027.333203] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2027.335624] active_anon:22783 inactive_anon:30377 isolated_anon:0 [ 2027.335624] active_file:25 inactive_file:0 isolated_file:3 [ 2027.335624] unevictable:0 dirty:2 writeback:0 unstable:0 [ 2027.335624] slab_reclaimable:12884 slab_unreclaimable:117403 [ 2027.335624] mapped:52774 shmem:31508 pagetables:747 bounce:0 [ 2027.335624] free:20163 free_pcp:56 free_cma:0 [ 2027.335640] Node 0 active_anon:90316kB inactive_anon:80072kB active_file:96kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):12kB mapped:211092kB dirty:8kB writeback:0kB shmem:84328kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2027.361357] lowmem_reserve[]: [ 2027.398553] Node 1 active_anon:816kB inactive_anon:41436kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:0kB writeback:0kB shmem:41704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2027.425630] 0 0 0 0 0 [ 2027.456613] Node 0 [ 2027.456757] Node 1 [ 2027.456767] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2027.456771] lowmem_reserve[]: [ 2027.459025] Normal free:51256kB min:53696kB low:67120kB high:80544kB active_anon:816kB inactive_anon:41436kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 2027.459029] lowmem_reserve[]: [ 2027.461251] 0 [ 2027.487070] 0 [ 2027.493433] 2717 [ 2027.517996] 0 [ 2027.525805] 2718 [ 2027.526774] 0 [ 2027.529095] 2718 [ 2027.530638] 0 [ 2027.532415] 2718 [ 2027.534456] 0 [ 2027.538317] Node 0 DMA: 199*4kB (UME) 24*8kB (UME) 15*16kB (UME) 8*32kB (UM) 6*64kB (UM) 9*128kB (UME) 3*256kB (UE) 2*512kB (UE) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 10956kB [ 2027.543385] Node 0 DMA32 free:20460kB min:36200kB low:45248kB high:54296kB active_anon:90276kB inactive_anon:80072kB active_file:656kB inactive_file:176kB unevictable:0kB writepending:8kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7264kB pagetables:2988kB bounce:0kB free_pcp:220kB local_pcp:220kB free_cma:0kB [ 2027.556017] Node 0 DMA32: 542*4kB (ME) 630*8kB (UME) 151*16kB (UME) 42*32kB (UME) 32*64kB (ME) 17*128kB (UME) 6*256kB (UM) 8*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 20824kB [ 2027.588937] lowmem_reserve[]: 0 0 0 0 0 [ 2027.603475] Node 0 [ 2027.605874] Node 0 [ 2027.605877] Normal: 0*4kB [ 2027.608148] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2027.611957] 0*8kB [ 2027.613157] lowmem_reserve[]: [ 2027.638126] 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2027.643551] 0 [ 2027.651718] Node 1 Normal: [ 2027.653500] 0 0 [ 2027.656411] 8*4kB [ 2027.656413] 0 0 [ 2027.658408] (M) 6*8kB (UM) 2*16kB (M) 2*32kB (M) 13*64kB (UM) 3*128kB (UM) 3*256kB (UM) 92*512kB (UM) 2*1024kB (M) 0*2048kB 0*4096kB = 51312kB [ 2027.675485] Node 1 Normal free:51256kB min:53696kB low:67120kB high:80544kB active_anon:816kB inactive_anon:41436kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 2027.675510] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2027.706843] lowmem_reserve[]: [ 2027.712506] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2027.712514] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2027.716399] 0 [ 2027.724187] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2027.724192] 31552 total pagecache pages [ 2027.724201] 0 pages in swap cache [ 2027.724209] Swap cache stats: add 0, delete 0, find 0/0 [ 2027.736526] 0 [ 2027.743404] Free swap = 0kB [ 2027.750655] 0 [ 2027.750826] Total swap = 0kB [ 2027.756185] 0 [ 2027.757998] 2097051 pages RAM [ 2027.760993] 0 [ 2027.762768] 0 pages HighMem/MovableOnly [ 2027.765849] Node 0 [ 2027.767645] 363846 pages reserved [ 2027.767649] 0 pages cma reserved [ 2027.785643] DMA: 199*4kB (UME) 24*8kB (UME) 15*16kB (UME) 8*32kB (UM) 6*64kB (UM) 9*128kB (UME) 3*256kB (UE) 2*512kB (UE) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 10956kB [ 2027.801287] Node 0 DMA32: 542*4kB (ME) 630*8kB (UME) 151*16kB (UME) 42*32kB (UME) 32*64kB (ME) 17*128kB (UME) 6*256kB (UM) 8*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 20824kB [ 2027.819223] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2027.831956] Node 1 Normal: 8*4kB (M) 5*8kB (UM) 1*16kB (M) 1*32kB (M) 12*64kB (UM) 2*128kB (UM) 2*256kB (UM) 91*512kB (UM) 1*1024kB (M) 1*2048kB (M) 0*4096kB = 51320kB [ 2027.847202] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2027.856016] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2027.864589] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2027.873435] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2027.882201] 31539 total pagecache pages [ 2027.886149] 0 pages in swap cache [ 2027.889674] Swap cache stats: add 0, delete 0, find 0/0 [ 2027.895049] Free swap = 0kB [ 2027.898070] Total swap = 0kB [ 2027.901073] 2097051 pages RAM [ 2027.904158] 0 pages HighMem/MovableOnly [ 2027.908183] 363846 pages reserved [ 2027.911607] 0 pages cma reserved [ 2027.914945] Out of memory (oom_kill_allocating_task): Kill process 9506 (in:imklog) score 0 or sacrifice child [ 2027.925116] Killed process 9504 (rsyslogd) total-vm:254332kB, anon-rss:1180kB, file-rss:0kB, shmem-rss:0kB 06:41:27 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 06:41:27 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000080)={0x34, 0x0, &(0x7f0000000040)}) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x7ffffffd, 0x22}) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f00000000c0)={0x1}) 06:41:27 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x10200, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x6, 0x5, 0x7f, 0x8, 0x9, 0x4, 0xb256992, 0x200], 0x8, 0xc0800, 0x0, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10001, 0x15, 0x1, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r3, 0x8931, &(0x7f0000001640)={'veth1_virt_wifi\x00', @ifru_names}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x1, 0x0, 0x1}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, 0x0) 06:41:27 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x10, 0x68802) r1 = socket(0x22, 0x2, 0xffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x34, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x4000040) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, 0x0) 06:41:27 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7ffffffd, 0x22}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0x1}) 06:41:27 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000080)={0x34, 0x0, &(0x7f0000000040)}) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x7ffffffd, 0x22}) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f00000000c0)={0x1}) 06:41:27 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x0, 0x22}) 06:41:27 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x10, 0x68802) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, 0x0) r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@sco={0x1f, @fixed}, &(0x7f00000000c0)=0x80, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r2, 0x8931, &(0x7f0000001640)={'veth1_virt_wifi\x00', @ifru_names}) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000100)={{r2}, {@void, @max='max'}}) [ 2028.270109] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2028.319577] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2028.335835] CPU: 1 PID: 11154 Comm: syz-executor.0 Not tainted 4.14.228-syzkaller #0 [ 2028.343741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2028.353070] Call Trace: [ 2028.355634] dump_stack+0x1b2/0x281 [ 2028.359388] warn_alloc.cold+0x96/0x1cc [ 2028.363340] ? zone_watermark_ok_safe+0x220/0x220 [ 2028.368168] __alloc_pages_nodemask+0x2127/0x2720 [ 2028.372985] ? io_schedule_timeout+0x140/0x140 [ 2028.377544] ? lock_acquire+0x170/0x3f0 [ 2028.381507] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2028.386329] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2028.391758] ? __mutex_unlock_slowpath+0x75/0x770 [ 2028.396576] alloc_pages_current+0x155/0x260 [ 2028.401074] ion_page_pool_alloc+0x118/0x1b0 [ 2028.405458] ion_system_heap_allocate+0x133/0x8c0 [ 2028.410289] ? ion_alloc+0x187/0x810 [ 2028.413977] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2028.419400] ? ion_system_contig_heap_create+0x130/0x130 [ 2028.424823] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2028.429814] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2028.434630] ion_alloc+0x204/0x810 [ 2028.438150] ? ion_dma_buf_release+0x40/0x40 [ 2028.442533] ? __might_fault+0x177/0x1b0 [ 2028.446568] ion_ioctl+0xea/0x1f0 [ 2028.450020] ? ion_query_heaps+0x360/0x360 [ 2028.454232] ? ion_query_heaps+0x360/0x360 [ 2028.458465] do_vfs_ioctl+0x75a/0xff0 [ 2028.462246] ? ioctl_preallocate+0x1a0/0x1a0 [ 2028.466631] ? lock_downgrade+0x740/0x740 [ 2028.470754] ? __fget+0x225/0x360 [ 2028.474180] ? do_vfs_ioctl+0xff0/0xff0 [ 2028.478133] ? security_file_ioctl+0x83/0xb0 [ 2028.482517] SyS_ioctl+0x7f/0xb0 [ 2028.485859] ? do_vfs_ioctl+0xff0/0xff0 [ 2028.489810] do_syscall_64+0x1d5/0x640 [ 2028.493676] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2028.498841] RIP: 0033:0x466459 [ 2028.502003] RSP: 002b:00007f0e622a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2028.509685] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2028.516940] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2028.524193] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2028.531442] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2028.538691] R13: 00007ffe5976301f R14: 00007f0e622a2300 R15: 0000000000022000 [ 2028.678102] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2028.715319] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2028.724005] CPU: 0 PID: 11146 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 2028.731899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2028.741352] Call Trace: [ 2028.743935] dump_stack+0x1b2/0x281 [ 2028.747578] warn_alloc.cold+0x96/0x1cc [ 2028.751549] ? zone_watermark_ok_safe+0x220/0x220 [ 2028.756389] __alloc_pages_nodemask+0x2127/0x2720 [ 2028.761308] ? switch_mm_irqs_off+0x601/0xeb0 [ 2028.765802] ? lock_acquire+0x170/0x3f0 [ 2028.769777] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2028.774719] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2028.780169] ? __mutex_unlock_slowpath+0x75/0x770 [ 2028.785013] ? policy_node+0xc6/0x110 [ 2028.788808] alloc_pages_current+0x155/0x260 [ 2028.793214] ion_page_pool_alloc+0x118/0x1b0 [ 2028.797616] ion_system_heap_allocate+0x133/0x8c0 [ 2028.802450] ? ion_alloc+0x187/0x810 [ 2028.806158] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2028.811600] ? ion_system_contig_heap_create+0x130/0x130 [ 2028.817039] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2028.822045] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2028.826883] ion_alloc+0x204/0x810 [ 2028.830431] ? ion_dma_buf_release+0x40/0x40 [ 2028.834831] ? __might_fault+0x177/0x1b0 [ 2028.838889] ion_ioctl+0xea/0x1f0 [ 2028.842330] ? ion_query_heaps+0x360/0x360 [ 2028.846558] ? ion_query_heaps+0x360/0x360 [ 2028.850784] do_vfs_ioctl+0x75a/0xff0 [ 2028.854580] ? ioctl_preallocate+0x1a0/0x1a0 [ 2028.858977] ? lock_downgrade+0x740/0x740 [ 2028.863209] ? __fget+0x225/0x360 [ 2028.866726] ? do_vfs_ioctl+0xff0/0xff0 [ 2028.870695] ? security_file_ioctl+0x83/0xb0 [ 2028.875096] SyS_ioctl+0x7f/0xb0 [ 2028.878455] ? do_vfs_ioctl+0xff0/0xff0 [ 2028.882425] do_syscall_64+0x1d5/0x640 [ 2028.886308] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2028.891610] RIP: 0033:0x466459 [ 2028.894786] RSP: 002b:00007f27c4f25188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2028.902624] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2028.909887] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2028.917146] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2028.924416] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2028.931784] R13: 00007ffda0b0ca7f R14: 00007f27c4f25300 R15: 0000000000022000 [ 2028.949880] Mem-Info: [ 2028.952423] active_anon:22564 inactive_anon:30377 isolated_anon:0 [ 2028.952423] active_file:223 inactive_file:1787 isolated_file:0 [ 2028.952423] unevictable:0 dirty:5 writeback:0 unstable:0 [ 2028.952423] slab_reclaimable:12874 slab_unreclaimable:116283 [ 2028.952423] mapped:54051 shmem:31508 pagetables:714 bounce:0 [ 2028.952423] free:53442 free_pcp:399 free_cma:0 [ 2028.989872] Node 0 active_anon:89256kB inactive_anon:80072kB active_file:876kB inactive_file:7328kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216504kB dirty:20kB writeback:0kB shmem:84328kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2029.021790] Node 1 active_anon:1000kB inactive_anon:41436kB active_file:16kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:41704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2029.053359] Node 0 DMA free:11988kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2029.089816] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2029.095578] Node 0 DMA32 free:145700kB min:36200kB low:45248kB high:54296kB active_anon:89216kB inactive_anon:80072kB active_file:1076kB inactive_file:7528kB unevictable:0kB writepending:20kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7072kB pagetables:2704kB bounce:0kB free_pcp:52kB local_pcp:52kB free_cma:0kB [ 2029.130832] lowmem_reserve[]: 0 0 0 0 0 [ 2029.137492] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2029.181860] lowmem_reserve[]: 0 0 0 0 0 [ 2029.200393] Node 1 Normal free:96408kB min:53696kB low:67120kB high:80544kB active_anon:900kB inactive_anon:41436kB active_file:16kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:152kB bounce:0kB free_pcp:1304kB local_pcp:624kB free_cma:0kB [ 2029.237412] lowmem_reserve[]: 0 0 0 0 0 [ 2029.251005] Node 0 DMA: 73*4kB (UME) 28*8kB (UME) 38*16kB (UME) 30*32kB (UM) 9*64kB (UM) 11*128kB (UME) 3*256kB (UE) 2*512kB (UE) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 12004kB [ 2029.273203] Node 0 DMA32: 2*4kB (ME) 515*8kB (UE) 1836*16kB (UE) 3295*32kB (UME) 292*64kB (UM) 16*128kB (UM) 10*256kB (U) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 163264kB [ 2029.320443] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2029.360937] Node 1 Normal: 723*4kB (UM) 1174*8kB (UM) 907*16kB (UM) 510*32kB (UM) 206*64kB (UM) 14*128kB (UM) 4*256kB (UM) 14*512kB (U) 39*1024kB (U) 0*2048kB 0*4096kB = 106220kB [ 2029.387436] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2029.396279] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2029.429277] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2029.441893] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2029.467961] 33822 total pagecache pages [ 2029.471956] 0 pages in swap cache [ 2029.475409] Swap cache stats: add 0, delete 0, find 0/0 [ 2029.501571] Free swap = 0kB [ 2029.507365] Total swap = 0kB [ 2029.510394] 2097051 pages RAM [ 2029.513615] 0 pages HighMem/MovableOnly [ 2029.530994] 363846 pages reserved [ 2029.534475] 0 pages cma reserved [ 2030.983487] syz-executor.0 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2031.042521] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2031.063311] CPU: 1 PID: 10615 Comm: syz-executor.0 Not tainted 4.14.228-syzkaller #0 [ 2031.071194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2031.080530] Call Trace: [ 2031.083106] dump_stack+0x1b2/0x281 [ 2031.086724] dump_header+0x178/0x82f [ 2031.090428] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2031.095528] ? ___ratelimit+0x2cd/0x530 [ 2031.099493] oom_kill_process.cold+0x10/0xb18 [ 2031.103988] out_of_memory+0xe3e/0x1190 [ 2031.107962] ? oom_killer_disable+0x1c0/0x1c0 [ 2031.112445] ? mutex_trylock+0x152/0x1a0 [ 2031.116500] __alloc_pages_nodemask+0x23e1/0x2720 [ 2031.121346] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2031.126197] alloc_pages_current+0x155/0x260 [ 2031.130597] filemap_fault+0xea3/0x1980 [ 2031.134570] ext4_filemap_fault+0x84/0xb0 [ 2031.138711] __do_fault+0xfa/0x380 [ 2031.142241] __handle_mm_fault+0x2497/0x4620 [ 2031.146644] ? vm_insert_page+0x7c0/0x7c0 [ 2031.150779] ? nanosleep_copyout+0x100/0x100 [ 2031.155195] handle_mm_fault+0x391/0x860 [ 2031.159355] __do_page_fault+0x549/0xad0 [ 2031.163408] ? spurious_fault+0x640/0x640 [ 2031.167544] ? do_page_fault+0x60/0x500 [ 2031.171504] ? page_fault+0x2f/0x50 [ 2031.175114] page_fault+0x45/0x50 [ 2031.178672] RIP: 1ef64a:0x4 [ 2031.181588] RSP: 0008:00007ffe597632dc EFLAGS: 00000032 [ 2031.251662] Mem-Info: [ 2031.262821] active_anon:22620 inactive_anon:30375 isolated_anon:0 [ 2031.262821] active_file:18 inactive_file:34 isolated_file:0 [ 2031.262821] unevictable:0 dirty:5 writeback:0 unstable:0 [ 2031.262821] slab_reclaimable:12903 slab_unreclaimable:115157 [ 2031.262821] mapped:44115 shmem:31505 pagetables:726 bounce:0 [ 2031.262821] free:25123 free_pcp:30 free_cma:0 [ 2031.296030] Node 0 active_anon:89020kB inactive_anon:80064kB active_file:48kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176376kB dirty:0kB writeback:0kB shmem:84316kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2031.323717] Node 1 active_anon:1460kB inactive_anon:41436kB active_file:68kB inactive_file:84kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:84kB dirty:20kB writeback:0kB shmem:41704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2031.350750] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2031.377015] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2031.382036] Node 0 DMA32 free:36084kB min:36200kB low:45248kB high:54296kB active_anon:88980kB inactive_anon:80064kB active_file:12kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7008kB pagetables:2588kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2031.411418] lowmem_reserve[]: 0 0 0 0 0 [ 2031.415398] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2031.441135] lowmem_reserve[]: 0 0 0 0 0 [ 2031.445120] Node 1 Normal free:53340kB min:53696kB low:67120kB high:80544kB active_anon:1460kB inactive_anon:41436kB active_file:100kB inactive_file:56kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:316kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2031.473617] lowmem_reserve[]: 0 0 0 0 0 [ 2031.477664] Node 0 DMA: 13*4kB (UME) 13*8kB (ME) 12*16kB (UME) 17*32kB (UM) 7*64kB (UM) 12*128kB (UME) 4*256kB (UE) 2*512kB (UE) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 11068kB [ 2031.493585] Node 0 DMA32: 681*4kB (ME) 465*8kB (UME) 188*16kB (ME) 40*32kB (ME) 10*64kB (ME) 127*128kB (UM) 29*256kB (U) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 36076kB [ 2031.512247] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2031.532859] Node 1 Normal: 35*4kB (M) 30*8kB (UM) 35*16kB (UM) 24*32kB (M) 17*64kB (M) 12*128kB (UM) 6*256kB (M) 19*512kB (UM) 37*1024kB (UM) 0*2048kB 0*4096kB = 53484kB [ 2031.552303] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2031.561180] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2031.571818] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2031.590731] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2031.601392] 31538 total pagecache pages [ 2031.605353] 0 pages in swap cache [ 2031.612756] Swap cache stats: add 0, delete 0, find 0/0 [ 2031.620387] Free swap = 0kB [ 2031.623386] Total swap = 0kB [ 2031.626375] 2097051 pages RAM [ 2031.633394] 0 pages HighMem/MovableOnly [ 2031.639562] 363846 pages reserved [ 2031.642998] 0 pages cma reserved [ 2031.646478] Out of memory (oom_kill_allocating_task): Kill process 10615 (syz-executor.0) score 0 or sacrifice child [ 2031.662649] Killed process 11154 (syz-executor.0) total-vm:93384kB, anon-rss:152kB, file-rss:34820kB, shmem-rss:0kB [ 2031.692544] oom_reaper: reaped process 11154 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2031.709179] kworker/u4:3 invoked oom-killer: gfp_mask=0x14142c0(GFP_KERNEL|__GFP_NOWARN|__GFP_COMP|__GFP_NOMEMALLOC), nodemask=(null), order=1, oom_score_adj=0 [ 2031.732956] kworker/u4:3 cpuset=/ mems_allowed=0-1 [ 2031.740964] CPU: 1 PID: 10677 Comm: kworker/u4:3 Not tainted 4.14.228-syzkaller #0 [ 2031.748663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2031.758016] Workqueue: netns cleanup_net [ 2031.762063] Call Trace: [ 2031.764640] dump_stack+0x1b2/0x281 [ 2031.768258] dump_header+0x178/0x82f [ 2031.771964] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2031.777075] ? ___ratelimit+0x2cd/0x530 [ 2031.781039] oom_kill_process.cold+0x10/0xb18 [ 2031.785617] ? lock_downgrade+0x740/0x740 [ 2031.789766] out_of_memory+0x2dc/0x1190 [ 2031.793730] ? oom_killer_disable+0x1c0/0x1c0 [ 2031.798215] ? mutex_trylock+0x152/0x1a0 [ 2031.802267] __alloc_pages_nodemask+0x23e1/0x2720 [ 2031.807118] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2031.812056] ? cleanup_net+0x3b3/0x840 [ 2031.815930] ? process_one_work+0x793/0x14a0 [ 2031.820333] ? trace_hardirqs_on+0x10/0x10 [ 2031.824558] ? mark_held_locks+0xa6/0xf0 [ 2031.828614] ? cache_grow_begin+0x41/0x630 [ 2031.832839] cache_grow_begin+0x91/0x630 [ 2031.836891] ? cache_grow_begin+0x91/0x630 [ 2031.841112] fallback_alloc+0x207/0x2c0 [ 2031.845083] kmem_cache_alloc_node_trace+0xed/0x400 [ 2031.850096] __kmalloc_node_track_caller+0x38/0x70 [ 2031.855018] __alloc_skb+0x96/0x510 [ 2031.858637] rtmsg_ifinfo_build_skb+0x65/0x130 [ 2031.863202] rtmsg_ifinfo+0x68/0x100 [ 2031.866673] syz-executor.0: page allocation failure: order:0 [ 2031.866897] dev_close_many+0x2bf/0x5f0 [ 2031.872689] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2031.876640] ? ip_tunnel_delete_net+0x74/0x320 [ 2031.876647] ? __dev_close_many+0x270/0x270 [ 2031.876654] ? dev_attr_show+0xc0/0xc0 [ 2031.876662] ? kfree_const+0x33/0x40 [ 2031.876672] rollback_registered_many+0x399/0xba0 [ 2031.876682] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2031.876690] ? netdev_state_change+0xf0/0xf0 [ 2031.876703] ? dev_set_mtu+0x3c0/0x3c0 [ 2031.898273] (null) [ 2031.900192] unregister_netdevice_many.part.0+0x18/0x2e0 [ 2031.905003] syz-executor.0 cpuset= [ 2031.910432] unregister_netdevice_many+0x36/0x50 [ 2031.910440] ip_tunnel_delete_net+0x274/0x320 [ 2031.910449] ? lock_downgrade+0x740/0x740 [ 2031.910456] ? ip_tunnel_dellink+0x400/0x400 [ 2031.910465] ? erspan_exit_net+0x1e0/0x1e0 [ 2031.910474] ops_exit_list+0xa5/0x150 [ 2031.910484] cleanup_net+0x3b3/0x840 [ 2031.910494] ? net_drop_ns+0x70/0x70 [ 2031.910499] ? lock_acquire+0x170/0x3f0 [ 2031.910510] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2031.926396] / [ 2031.926429] process_one_work+0x793/0x14a0 [ 2031.931554] mems_allowed=0-1 [ 2031.934675] ? work_busy+0x320/0x320 [ 2031.985082] ? worker_thread+0x158/0xff0 [ 2031.989129] ? _raw_spin_unlock_irq+0x24/0x80 [ 2031.993609] worker_thread+0x5cc/0xff0 [ 2031.997487] ? rescuer_thread+0xc80/0xc80 [ 2032.001621] kthread+0x30d/0x420 [ 2032.004969] ? kthread_create_on_node+0xd0/0xd0 [ 2032.009623] ret_from_fork+0x24/0x30 [ 2032.013330] CPU: 0 PID: 11154 Comm: syz-executor.0 Not tainted 4.14.228-syzkaller #0 [ 2032.017659] Mem-Info: [ 2032.021204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2032.023599] active_anon:22596 inactive_anon:30375 isolated_anon:0 [ 2032.023599] active_file:16 inactive_file:17 isolated_file:0 [ 2032.023599] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2032.023599] slab_reclaimable:12903 slab_unreclaimable:115133 [ 2032.023599] mapped:44085 shmem:31505 pagetables:726 bounce:0 [ 2032.023599] free:13972 free_pcp:114 free_cma:0 [ 2032.032917] Call Trace: [ 2032.032931] dump_stack+0x1b2/0x281 [ 2032.032943] warn_alloc.cold+0x96/0x1cc [ 2032.032954] ? zone_watermark_ok_safe+0x220/0x220 [ 2032.032972] ? usleep_range+0x130/0x130 [ 2032.066223] Node 0 active_anon:89004kB inactive_anon:80064kB active_file:12kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176340kB dirty:0kB writeback:0kB shmem:84316kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2032.068733] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2032.068746] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2032.068756] ? run_timer_softirq+0x5a0/0x5a0 [ 2032.068772] __alloc_pages_nodemask+0x2127/0x2720 [ 2032.072503] Node 1 active_anon:1380kB inactive_anon:41436kB active_file:52kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:41704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2032.076452] ? lock_acquire+0x170/0x3f0 [ 2032.081270] Node 0 [ 2032.085215] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2032.112795] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2032.117855] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2032.117872] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2032.123663] lowmem_reserve[]: [ 2032.128060] alloc_pages_current+0x155/0x260 [ 2032.128072] ion_page_pool_alloc+0x118/0x1b0 [ 2032.132885] 0 [ 2032.159768] ion_system_heap_allocate+0x133/0x8c0 [ 2032.159778] ? ion_alloc+0x187/0x810 [ 2032.159789] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2032.163736] 2717 [ 2032.165951] ? ion_system_contig_heap_create+0x130/0x130 [ 2032.170773] 2718 [ 2032.196537] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2032.196549] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2032.196560] ion_alloc+0x204/0x810 [ 2032.196574] ? ion_dma_buf_release+0x40/0x40 [ 2032.201047] 2718 [ 2032.206477] ? __might_fault+0x177/0x1b0 [ 2032.209570] 2718 [ 2032.213942] ion_ioctl+0xea/0x1f0 [ 2032.220108] ? ion_query_heaps+0x360/0x360 [ 2032.224920] Node 0 [ 2032.228614] ? ion_query_heaps+0x360/0x360 [ 2032.228623] do_vfs_ioctl+0x75a/0xff0 [ 2032.228635] ? ioctl_preallocate+0x1a0/0x1a0 [ 2032.234064] DMA32 free:18096kB min:36200kB low:45248kB high:54296kB active_anon:88964kB inactive_anon:80064kB active_file:12kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7008kB pagetables:2588kB bounce:0kB free_pcp:256kB local_pcp:136kB free_cma:0kB [ 2032.236098] ? lock_downgrade+0x740/0x740 [ 2032.241526] lowmem_reserve[]: [ 2032.243559] ? __fget+0x225/0x360 [ 2032.248556] 0 [ 2032.253366] ? do_vfs_ioctl+0xff0/0xff0 [ 2032.257039] 0 [ 2032.261418] ? security_file_ioctl+0x83/0xb0 [ 2032.263449] 0 [ 2032.267506] SyS_ioctl+0x7f/0xb0 [ 2032.267513] ? do_vfs_ioctl+0xff0/0xff0 [ 2032.267524] do_syscall_64+0x1d5/0x640 [ 2032.267538] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2032.267546] RIP: 0033:0x466459 [ 2032.267550] RSP: 002b:00007f0e622a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2032.269616] 0 [ 2032.273030] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2032.277263] 0 [ 2032.279453] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2032.287449] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2032.287454] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2032.287458] R13: 00007ffe5976301f R14: 00007f0e622a2300 R15: 0000000000022000 [ 2032.301182] warn_alloc_show_mem: 1 callbacks suppressed [ 2032.301184] Mem-Info: [ 2032.336917] Node 0 [ 2032.345631] active_anon:22596 inactive_anon:30375 isolated_anon:0 [ 2032.345631] active_file:16 inactive_file:17 isolated_file:0 [ 2032.345631] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2032.345631] slab_reclaimable:12903 slab_unreclaimable:115133 [ 2032.345631] mapped:44085 shmem:31505 pagetables:726 bounce:0 [ 2032.345631] free:13998 free_pcp:114 free_cma:0 [ 2032.356871] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2032.368100] Node 0 active_anon:89004kB inactive_anon:80064kB active_file:12kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176340kB dirty:0kB writeback:0kB shmem:84316kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2032.380344] lowmem_reserve[]: [ 2032.386269] Node 1 active_anon:1380kB inactive_anon:41436kB active_file:52kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:41704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2032.398582] 0 [ 2032.411643] Node 0 [ 2032.418911] 0 [ 2032.420419] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2032.422158] 0 [ 2032.462396] lowmem_reserve[]: [ 2032.489114] 0 [ 2032.514935] 0 [ 2032.547988] 0 [ 2032.577245] 2717 2718 2718 2718 [ 2032.583592] Node 0 DMA32 free:18200kB min:36200kB low:45248kB high:54296kB active_anon:88964kB inactive_anon:80064kB active_file:12kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7008kB pagetables:2588kB bounce:0kB free_pcp:256kB local_pcp:120kB free_cma:0kB [ 2032.622394] lowmem_reserve[]: 0 0 0 0 0 [ 2032.622509] Node 1 [ 2032.626483] Node 0 [ 2032.626494] Normal free:26824kB min:53696kB low:67120kB high:80544kB active_anon:1380kB inactive_anon:41436kB active_file:52kB inactive_file:52kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:316kB bounce:0kB free_pcp:200kB local_pcp:80kB free_cma:0kB [ 2032.626503] lowmem_reserve[]: [ 2032.630429] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2032.630937] 0 [ 2032.665572] lowmem_reserve[]: 0 0 0 0 [ 2032.696664] 0 [ 2032.696665] 0 [ 2032.700463] 0 [ 2032.702240] Node 1 [ 2032.704030] 0 [ 2032.705818] Normal free:26824kB min:53696kB low:67120kB high:80544kB active_anon:1380kB inactive_anon:41436kB active_file:0kB inactive_file:152kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:316kB bounce:0kB free_pcp:200kB local_pcp:120kB free_cma:0kB [ 2032.714521] 0 [ 2032.740533] lowmem_reserve[]: 0 0 0 0 0 [ 2032.746296] Node 0 DMA: 12*4kB (ME) 13*8kB (ME) 12*16kB (UME) 14*32kB (UM) 7*64kB (UM) 12*128kB (UME) 4*256kB (UE) 2*512kB (UE) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 10968kB [ 2032.764177] Node 0 DMA32: 682*4kB (UME) 464*8kB (ME) 190*16kB (UME) 42*32kB (UME) 11*64kB (UME) 2*128kB (UM) 21*256kB (U) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18184kB [ 2032.776302] Node 0 [ 2032.781497] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2032.795022] DMA: 12*4kB (ME) 13*8kB (ME) 12*16kB (UME) 14*32kB (UM) 7*64kB (UM) 12*128kB (UME) 4*256kB (UE) 2*512kB (UE) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 10968kB [ 2032.796114] Node 1 Normal: 36*4kB (UM) 29*8kB (M) 35*16kB (UM) 25*32kB (UM) 18*64kB (UM) 11*128kB (M) 6*256kB (M) 3*512kB (M) 19*1024kB (UM) 0*2048kB 0*4096kB = 26824kB [ 2032.819699] Node 0 [ 2032.835972] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2032.840997] DMA32: [ 2032.851188] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2032.857017] 682*4kB (UME) 465*8kB (UME) 188*16kB (ME) 42*32kB (UME) 11*64kB (UME) [ 2032.862089] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2032.862097] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2032.881477] 2*128kB [ 2032.892053] 31538 total pagecache pages [ 2032.896701] (UM) 21*256kB (U) 2*512kB (U) 0*1024kB 0*2048kB [ 2032.898355] 0 pages in swap cache [ 2032.898356] 0*4096kB = 18160kB [ 2032.904129] Swap cache stats: add 0, delete 0, find 0/0 [ 2032.917991] Free swap = 0kB [ 2032.919093] Node 0 [ 2032.921084] Total swap = 0kB [ 2032.921090] Normal: [ 2032.923312] 2097051 pages RAM [ 2032.926422] 0*4kB [ 2032.931006] 0 pages HighMem/MovableOnly [ 2032.939990] 363846 pages reserved [ 2032.940912] 0*8kB [ 2032.943426] 0 pages cma reserved [ 2032.943432] 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2032.991231] Node 1 Normal: 1*4kB (U) 1*8kB (M) 1*16kB (U) 1*32kB (U) 38*64kB (UM) 21*128kB (UM) 39*256kB (UM) 42*512kB (UM) 23*1024kB (UM) 0*2048kB 0*4096kB = 60220kB [ 2033.010010] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2033.019378] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2033.036581] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2033.056543] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2033.065118] 33388 total pagecache pages [ 2033.100116] 0 pages in swap cache [ 2033.103598] Swap cache stats: add 0, delete 0, find 0/0 [ 2033.109064] Free swap = 0kB [ 2033.120267] Total swap = 0kB [ 2033.123456] 2097051 pages RAM [ 2033.128498] 0 pages HighMem/MovableOnly [ 2033.132483] 363846 pages reserved [ 2033.135932] 0 pages cma reserved [ 2033.158978] Out of memory: Kill process 11137 (syz-executor.1) score 1004 or sacrifice child [ 2033.188106] Killed process 11146 (syz-executor.1) total-vm:93384kB, anon-rss:152kB, file-rss:34628kB, shmem-rss:0kB [ 2033.255230] oom_reaper: reaped process 11146 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2033.338842] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2033.345566] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2033.368102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2033.374891] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2033.398251] device bridge_slave_1 left promiscuous mode [ 2033.403843] bridge0: port 2(bridge_slave_1) entered disabled state [ 2033.412936] device bridge_slave_0 left promiscuous mode [ 2033.427080] bridge0: port 1(bridge_slave_0) entered disabled state [ 2033.449474] device veth1_macvtap left promiscuous mode [ 2033.454892] device veth0_macvtap left promiscuous mode [ 2033.476592] device veth1_vlan left promiscuous mode [ 2033.481788] device veth0_vlan left promiscuous mode [ 2033.700888] device hsr_slave_1 left promiscuous mode [ 2033.719391] device hsr_slave_0 left promiscuous mode [ 2033.738340] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2033.752548] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2033.758300] CPU: 0 PID: 11154 Comm: syz-executor.0 Not tainted 4.14.228-syzkaller #0 [ 2033.766176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2033.775521] Call Trace: [ 2033.778106] dump_stack+0x1b2/0x281 [ 2033.781734] warn_alloc.cold+0x96/0x1cc [ 2033.785704] ? zone_watermark_ok_safe+0x220/0x220 [ 2033.790557] __alloc_pages_nodemask+0x2127/0x2720 [ 2033.795393] ? io_schedule_timeout+0x140/0x140 [ 2033.799973] ? lock_acquire+0x170/0x3f0 [ 2033.803945] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2033.808905] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2033.814348] ? __mutex_unlock_slowpath+0x75/0x770 [ 2033.819179] ? retint_kernel+0x2d/0x2d [ 2033.823056] alloc_pages_current+0x155/0x260 [ 2033.827462] ion_page_pool_alloc+0x118/0x1b0 [ 2033.831864] ion_system_heap_allocate+0x133/0x8c0 [ 2033.836703] ? _raw_spin_unlock+0x29/0x40 [ 2033.840839] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2033.845758] ? ion_system_contig_heap_create+0x130/0x130 [ 2033.851201] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2033.856210] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2033.861045] ion_alloc+0x27a/0x810 [ 2033.864579] ? ion_dma_buf_release+0x40/0x40 [ 2033.868980] ? __might_fault+0x177/0x1b0 [ 2033.873034] ion_ioctl+0xea/0x1f0 [ 2033.876484] ? ion_query_heaps+0x360/0x360 [ 2033.880713] ? ion_query_heaps+0x360/0x360 [ 2033.884940] do_vfs_ioctl+0x75a/0xff0 [ 2033.888735] ? ioctl_preallocate+0x1a0/0x1a0 [ 2033.893139] ? lock_downgrade+0x740/0x740 [ 2033.897281] ? __fget+0x225/0x360 [ 2033.900724] ? do_vfs_ioctl+0xff0/0xff0 [ 2033.904684] ? security_file_ioctl+0x83/0xb0 [ 2033.909096] SyS_ioctl+0x7f/0xb0 [ 2033.912450] ? do_vfs_ioctl+0xff0/0xff0 [ 2033.916420] do_syscall_64+0x1d5/0x640 [ 2033.920304] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2033.925484] RIP: 0033:0x466459 [ 2033.928662] RSP: 002b:00007f0e622a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2033.936362] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2033.943617] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2033.950876] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2033.958138] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2033.965398] R13: 00007ffe5976301f R14: 00007f0e622a2300 R15: 0000000000022000 [ 2033.973717] team0 (unregistering): Port device team_slave_1 removed [ 2034.014620] team0 (unregistering): Port device team_slave_0 removed [ 2034.048722] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2034.082099] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2034.149385] syz-executor.0 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2034.162371] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2034.167537] CPU: 0 PID: 10615 Comm: syz-executor.0 Not tainted 4.14.228-syzkaller #0 [ 2034.175407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2034.185036] Call Trace: [ 2034.187621] dump_stack+0x1b2/0x281 [ 2034.191239] dump_header+0x178/0x82f [ 2034.194962] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2034.197305] bond0 (unregistering): Released all slaves [ 2034.200074] ? ___ratelimit+0x2cd/0x530 [ 2034.209293] oom_kill_process.cold+0x10/0xb18 [ 2034.213785] out_of_memory+0xe3e/0x1190 [ 2034.217776] ? oom_killer_disable+0x1c0/0x1c0 [ 2034.222263] ? mutex_trylock+0x152/0x1a0 [ 2034.226437] __alloc_pages_nodemask+0x23e1/0x2720 [ 2034.231279] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2034.236296] alloc_pages_current+0x155/0x260 [ 2034.240694] filemap_fault+0xea3/0x1980 [ 2034.244673] ext4_filemap_fault+0x84/0xb0 [ 2034.248813] __do_fault+0xfa/0x380 [ 2034.251075] Mem-Info: [ 2034.252340] __handle_mm_fault+0x2497/0x4620 [ 2034.254760] active_anon:22579 inactive_anon:30375 isolated_anon:0 [ 2034.254760] active_file:36 inactive_file:1 isolated_file:0 [ 2034.254760] unevictable:0 dirty:30 writeback:0 unstable:0 [ 2034.254760] slab_reclaimable:12950 slab_unreclaimable:114862 [ 2034.254760] mapped:44125 shmem:31505 pagetables:723 bounce:0 [ 2034.254760] free:13722 free_pcp:67 free_cma:0 [ 2034.259137] ? vm_insert_page+0x7c0/0x7c0 [ 2034.259146] ? nanosleep_copyout+0x100/0x100 [ 2034.259162] handle_mm_fault+0x391/0x860 [ 2034.259173] __do_page_fault+0x549/0xad0 [ 2034.259183] ? spurious_fault+0x640/0x640 [ 2034.259191] ? do_page_fault+0x60/0x500 [ 2034.259199] ? page_fault+0x2f/0x50 [ 2034.259205] page_fault+0x45/0x50 [ 2034.259211] RIP: 1ef64a:0x4 [ 2034.259215] RSP: 0008:00007ffe597632dc EFLAGS: 0000003c [ 2034.266758] Mem-Info: [ 2034.299400] syz-executor.1: [ 2034.306108] active_anon:22579 inactive_anon:30375 isolated_anon:0 [ 2034.306108] active_file:36 inactive_file:1 isolated_file:0 [ 2034.306108] unevictable:0 dirty:30 writeback:0 unstable:0 [ 2034.306108] slab_reclaimable:12950 slab_unreclaimable:114837 [ 2034.306108] mapped:44125 shmem:31505 pagetables:723 bounce:0 [ 2034.306108] free:13722 free_pcp:90 free_cma:0 [ 2034.313191] page allocation failure: order:0 [ 2034.313415] Node 0 active_anon:89020kB inactive_anon:80064kB active_file:172kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176424kB dirty:108kB writeback:0kB shmem:84316kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2034.320364] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2034.326150] Node 1 active_anon:1296kB inactive_anon:41436kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:76kB dirty:12kB writeback:0kB shmem:41704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2034.330134] (null) [ 2034.333151] Node 0 [ 2034.335538] syz-executor.1 cpuset= [ 2034.343629] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2034.378404] Node 0 active_anon:89020kB inactive_anon:80064kB active_file:172kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176424kB dirty:108kB writeback:0kB shmem:84316kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2034.410119] lowmem_reserve[]: [ 2034.416433] / [ 2034.449587] 0 [ 2034.474503] Node 1 active_anon:1296kB inactive_anon:41436kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:76kB dirty:12kB writeback:0kB shmem:41704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2034.509354] 2717 [ 2034.536388] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2034.543496] 2718 [ 2034.566881] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2034.573515] mems_allowed=0-1 [ 2034.573961] Node 0 DMA32 free:18300kB min:36200kB low:45248kB high:54296kB active_anon:88980kB inactive_anon:80064kB active_file:44kB inactive_file:72kB unevictable:0kB writepending:208kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7104kB pagetables:2704kB bounce:0kB free_pcp:436kB local_pcp:436kB free_cma:0kB [ 2034.578195] 2718 [ 2034.606277] CPU: 0 PID: 11146 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 2034.616207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2034.620103] lowmem_reserve[]: [ 2034.625545] Call Trace: [ 2034.625552] 0 [ 2034.628659] dump_stack+0x1b2/0x281 [ 2034.628672] warn_alloc.cold+0x96/0x1cc [ 2034.631231] 0 [ 2034.633015] ? zone_watermark_ok_safe+0x220/0x220 [ 2034.636621] 0 [ 2034.640561] ? usleep_range+0x130/0x130 [ 2034.642331] 0 [ 2034.647149] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2034.647160] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2034.647170] ? run_timer_softirq+0x5a0/0x5a0 [ 2034.648944] 0 [ 2034.652937] __alloc_pages_nodemask+0x2127/0x2720 [ 2034.659798] ? lock_acquire+0x170/0x3f0 [ 2034.659813] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2034.664795] Node 0 [ 2034.669181] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2034.669194] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2034.669212] alloc_pages_current+0x155/0x260 [ 2034.670988] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2034.675803] ion_page_pool_alloc+0x118/0x1b0 [ 2034.679760] lowmem_reserve[]: [ 2034.684593] ion_system_heap_allocate+0x133/0x8c0 [ 2034.686816] 0 [ 2034.691295] ? ion_alloc+0x187/0x810 [ 2034.696728] 0 [ 2034.701100] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2034.725974] 0 [ 2034.730350] ? ion_system_contig_heap_create+0x130/0x130 [ 2034.730358] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2034.730369] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2034.733441] 0 [ 2034.738261] ion_alloc+0x204/0x810 [ 2034.738274] ? ion_dma_buf_release+0x40/0x40 [ 2034.738286] ? __might_fault+0x177/0x1b0 [ 2034.740057] 0 [ 2034.743750] ion_ioctl+0xea/0x1f0 [ 2034.750961] ? ion_query_heaps+0x360/0x360 [ 2034.750973] ? ion_query_heaps+0x360/0x360 [ 2034.750982] do_vfs_ioctl+0x75a/0xff0 [ 2034.752754] Node 1 [ 2034.758180] ? ioctl_preallocate+0x1a0/0x1a0 [ 2034.758188] ? lock_downgrade+0x740/0x740 [ 2034.758201] ? __fget+0x225/0x360 [ 2034.763208] Normal free:26280kB min:53696kB low:67120kB high:80544kB active_anon:1296kB inactive_anon:41436kB active_file:12kB inactive_file:28kB unevictable:0kB writepending:12kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:188kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2034.768017] ? do_vfs_ioctl+0xff0/0xff0 [ 2034.768028] ? security_file_ioctl+0x83/0xb0 [ 2034.768038] SyS_ioctl+0x7f/0xb0 [ 2034.769810] lowmem_reserve[]: [ 2034.773327] ? do_vfs_ioctl+0xff0/0xff0 [ 2034.777716] 0 [ 2034.781747] do_syscall_64+0x1d5/0x640 [ 2034.783517] 0 [ 2034.786954] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2034.786963] RIP: 0033:0x466459 [ 2034.791187] 0 [ 2034.795399] RSP: 002b:00007f27c4f25188 EFLAGS: 00000246 [ 2034.799181] 0 [ 2034.801381] ORIG_RAX: 0000000000000010 [ 2034.805793] 0 [ 2034.809912] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2034.809918] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2034.809923] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2034.809930] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2034.841520] R13: 00007ffda0b0ca7f R14: 00007f27c4f25300 R15: 0000000000022000 [ 2034.842131] 2718 [ 2034.845496] Node 0 [ 2034.863328] DMA: [ 2034.866223] Node 0 [ 2034.871785] 130*4kB [ 2034.873202] DMA32 free:18300kB min:36200kB low:45248kB high:54296kB active_anon:88980kB inactive_anon:80064kB active_file:64kB inactive_file:76kB unevictable:0kB writepending:220kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7072kB pagetables:2704kB bounce:0kB free_pcp:436kB local_pcp:0kB free_cma:0kB [ 2034.898478] (UME) [ 2034.909273] lowmem_reserve[]: [ 2034.942060] 40*8kB [ 2034.976612] 0 0 0 0 0 [ 2034.981338] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2035.006281] (UME) 12*16kB (UME) 14*32kB (UM) 2*64kB (M) 9*128kB (UME) 4*256kB (UE) 2*512kB (UE) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 10952kB [ 2035.014799] lowmem_reserve[]: 0 0 0 0 0 [ 2035.036370] Node 0 DMA32: 453*4kB (ME) 437*8kB (UME) 145*16kB (UME) 317*32kB (UME) 7*64kB (UM) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18348kB [ 2035.041316] Node 1 Normal free:26532kB min:53696kB low:67120kB high:80544kB active_anon:1296kB inactive_anon:41436kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:188kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 2035.066276] Node 0 [ 2035.109861] lowmem_reserve[]: 0 0 0 0 0 [ 2035.116076] Node 0 DMA: 130*4kB (UME) 40*8kB (UME) 12*16kB (UME) 14*32kB (UM) 2*64kB (M) 9*128kB (UME) 4*256kB (UE) 2*512kB (UE) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 10952kB [ 2035.116273] Normal: [ 2035.145568] Node 0 [ 2035.146272] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2035.151405] DMA32: 453*4kB (ME) 437*8kB (UME) 145*16kB (UME) 317*32kB (UME) 7*64kB (UM) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18348kB [ 2035.176279] Node 1 Normal: 23*4kB (UM) 11*8kB (UM) 13*16kB (UM) 775*32kB (UM) 9*64kB (UM) 6*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26532kB [ 2035.198011] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2035.226268] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2035.242092] Node 1 Normal: 23*4kB (UM) 11*8kB (UM) 13*16kB (UM) 775*32kB (UM) 9*64kB (UM) 6*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26532kB [ 2035.263780] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2035.272646] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2035.276289] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2035.287716] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2035.295078] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2035.303327] Mem-Info: [ 2035.312021] active_anon:22579 inactive_anon:30375 isolated_anon:0 [ 2035.312021] active_file:41 inactive_file:0 isolated_file:0 [ 2035.312021] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2035.312021] slab_reclaimable:12934 slab_unreclaimable:114726 [ 2035.312021] mapped:44120 shmem:31505 pagetables:723 bounce:0 [ 2035.312021] free:13948 free_pcp:150 free_cma:0 [ 2035.326250] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2035.351839] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2035.363245] 31538 total pagecache pages [ 2035.374533] 0 pages in swap cache [ 2035.378697] Swap cache stats: add 0, delete 0, find 0/0 [ 2035.384102] Free swap = 0kB [ 2035.393731] Total swap = 0kB [ 2035.396262] 31538 total pagecache pages [ 2035.397330] Node 0 active_anon:89020kB inactive_anon:80064kB active_file:160kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176480kB dirty:0kB writeback:0kB shmem:84316kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2035.400702] 0 pages in swap cache [ 2035.435142] 2097051 pages RAM [ 2035.438275] 0 pages HighMem/MovableOnly [ 2035.442232] 363846 pages reserved [ 2035.445668] 0 pages cma reserved [ 2035.456583] Out of memory (oom_kill_allocating_task): Kill process 10615 (syz-executor.0) score 0 or sacrifice child [ 2035.472598] Killed process 10615 (syz-executor.0) total-vm:93120kB, anon-rss:104kB, file-rss:34636kB, shmem-rss:0kB [ 2035.476250] Swap cache stats: add 0, delete 0, find 0/0 [ 2035.485097] Node 1 active_anon:1296kB inactive_anon:41436kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:41704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2035.516235] Free swap = 0kB [ 2035.520634] Total swap = 0kB [ 2035.523644] 2097051 pages RAM [ 2035.533137] 0 pages HighMem/MovableOnly [ 2035.552281] 363846 pages reserved [ 2035.555761] 0 pages cma reserved [ 2035.561035] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2035.577069] syz-executor.0 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 2035.595777] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2035.619629] Node 0 DMA32 free:17872kB min:36200kB low:45248kB high:54296kB active_anon:88980kB inactive_anon:80064kB active_file:160kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7072kB pagetables:2704kB bounce:0kB free_pcp:256kB local_pcp:136kB free_cma:0kB [ 2035.626235] syz-executor.0 cpuset= [ 2035.661039] lowmem_reserve[]: 0 0 0 0 0 [ 2035.674121] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2035.678003] / [ 2035.711126] lowmem_reserve[]: 0 0 0 0 0 [ 2035.723056] Node 1 Normal free:26632kB min:53696kB low:67120kB high:80544kB active_anon:1296kB inactive_anon:41436kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2035.759097] lowmem_reserve[]: 0 0 0 0 0 [ 2035.763101] Node 0 DMA: 130*4kB (UME) 40*8kB (UME) 12*16kB (UME) 14*32kB (UM) 2*64kB (M) 9*128kB (UME) 4*256kB (UE) 2*512kB (UE) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 10952kB [ 2035.763638] mems_allowed=0-1 [ 2035.785984] Node 0 DMA32: 453*4kB (UME) 410*8kB (UME) 144*16kB (ME) 310*32kB (UME) 7*64kB (UM) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17892kB [ 2035.808515] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2035.824751] CPU: 0 PID: 11154 Comm: syz-executor.0 Not tainted 4.14.228-syzkaller #0 [ 2035.832626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2035.841965] Call Trace: [ 2035.844574] dump_stack+0x1b2/0x281 [ 2035.848217] dump_header+0x178/0x82f [ 2035.851921] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2035.857012] ? ___ratelimit+0x2cd/0x530 [ 2035.860975] oom_kill_process.cold+0x10/0xb18 [ 2035.865479] out_of_memory+0xe3e/0x1190 [ 2035.869454] ? oom_killer_disable+0x1c0/0x1c0 [ 2035.873937] ? mutex_trylock+0x152/0x1a0 [ 2035.877990] __alloc_pages_nodemask+0x23e1/0x2720 [ 2035.882829] ? lock_acquire+0x170/0x3f0 [ 2035.886798] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2035.891642] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2035.896214] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2035.901651] ? retint_kernel+0x2d/0x2d [ 2035.905528] alloc_pages_current+0x155/0x260 [ 2035.909927] ion_page_pool_alloc+0x118/0x1b0 [ 2035.914335] ion_system_heap_allocate+0x133/0x8c0 [ 2035.919162] ? _raw_spin_unlock+0x29/0x40 [ 2035.923292] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2035.928205] ? ion_system_contig_heap_create+0x130/0x130 [ 2035.933660] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2035.938691] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2035.943534] ion_alloc+0x27a/0x810 [ 2035.947084] ? ion_dma_buf_release+0x40/0x40 [ 2035.951478] ? __might_fault+0x177/0x1b0 [ 2035.955520] ion_ioctl+0xea/0x1f0 [ 2035.958951] ? ion_query_heaps+0x360/0x360 [ 2035.963165] ? ion_query_heaps+0x360/0x360 [ 2035.967380] do_vfs_ioctl+0x75a/0xff0 [ 2035.971159] ? ioctl_preallocate+0x1a0/0x1a0 [ 2035.975548] ? lock_downgrade+0x740/0x740 [ 2035.979690] ? __fget+0x225/0x360 [ 2035.983138] ? do_vfs_ioctl+0xff0/0xff0 [ 2035.987106] ? security_file_ioctl+0x83/0xb0 [ 2035.991509] SyS_ioctl+0x7f/0xb0 [ 2035.994869] ? do_vfs_ioctl+0xff0/0xff0 [ 2035.998833] do_syscall_64+0x1d5/0x640 [ 2036.002711] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2036.007883] RIP: 0033:0x466459 [ 2036.011051] RSP: 002b:00007f0e622a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2036.018739] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2036.025988] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2036.033237] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2036.040573] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2036.047833] R13: 00007ffe5976301f R14: 00007f0e622a2300 R15: 0000000000022000 [ 2036.063676] Mem-Info: [ 2036.066131] active_anon:22558 inactive_anon:30375 isolated_anon:0 [ 2036.066131] active_file:19 inactive_file:0 isolated_file:0 [ 2036.066131] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2036.066131] slab_reclaimable:12934 slab_unreclaimable:114558 [ 2036.066131] mapped:44120 shmem:31505 pagetables:700 bounce:0 [ 2036.066131] free:14002 free_pcp:75 free_cma:0 [ 2036.069373] Node 1 [ 2036.102634] Node 0 active_anon:88948kB inactive_anon:80064kB active_file:60kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176480kB dirty:0kB writeback:0kB shmem:84316kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2036.136862] Node 1 active_anon:1284kB inactive_anon:41436kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:41704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2036.161477] Normal: 24*4kB (UM) 11*8kB [ 2036.167117] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2036.213265] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2036.216162] (UM) 13*16kB (UM) 779*32kB (UM) 9*64kB (UM) 6*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26664kB [ 2036.224475] Node 0 DMA32 free:18716kB min:36200kB low:45248kB high:54296kB active_anon:88908kB inactive_anon:80064kB active_file:60kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7072kB pagetables:2612kB bounce:0kB free_pcp:400kB local_pcp:136kB free_cma:0kB [ 2036.246163] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2036.288943] lowmem_reserve[]: 0 0 0 0 0 [ 2036.292959] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2036.303011] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2036.327256] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2036.332967] lowmem_reserve[]: [ 2036.342003] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2036.355348] 0 0 0 0 0 [ 2036.362667] Node 1 Normal free:26664kB min:53696kB low:67120kB high:80544kB active_anon:1284kB inactive_anon:41436kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2036.376172] 31538 total pagecache pages [ 2036.398531] lowmem_reserve[]: 0 0 0 0 0 [ 2036.402570] Node 0 DMA: 130*4kB (UME) 40*8kB (UME) 12*16kB (UME) 14*32kB (UM) 2*64kB (M) 9*128kB (UME) 4*256kB (UE) 2*512kB (UE) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 10952kB [ 2036.414840] 0 pages in swap cache [ 2036.422035] Swap cache stats: add 0, delete 0, find 0/0 [ 2036.425514] Node 0 DMA32: 453*4kB (UME) 483*8kB (UME) 149*16kB (UME) 313*32kB (UME) 8*64kB (UM) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18716kB [ 2036.434577] Free swap = 0kB [ 2036.445028] Total swap = 0kB [ 2036.449090] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2036.454459] 2097051 pages RAM [ 2036.462989] 0 pages HighMem/MovableOnly [ 2036.463866] Node 1 Normal: 24*4kB (UM) 11*8kB (UM) 13*16kB (UM) 779*32kB (UM) 9*64kB (UM) 6*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26664kB [ 2036.474379] 363846 pages reserved [ 2036.493396] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2036.496289] 0 pages cma reserved [ 2036.502277] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2036.526751] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2036.544725] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2036.567057] 32315 total pagecache pages [ 2036.576215] 0 pages in swap cache [ 2036.583785] Swap cache stats: add 0, delete 0, find 0/0 [ 2036.593862] Free swap = 0kB [ 2036.603962] Total swap = 0kB [ 2036.607738] 2097051 pages RAM [ 2036.611784] 0 pages HighMem/MovableOnly [ 2036.616423] 363846 pages reserved [ 2036.620350] 0 pages cma reserved [ 2036.636048] Out of memory (oom_kill_allocating_task): Kill process 11154 (syz-executor.0) score 0 or sacrifice child [ 2036.666308] Killed process 11154 (syz-executor.0) total-vm:93384kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2036.699546] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2036.720050] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2036.726361] CPU: 0 PID: 11154 Comm: syz-executor.0 Not tainted 4.14.228-syzkaller #0 [ 2036.734246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2036.743591] Call Trace: [ 2036.746198] dump_stack+0x1b2/0x281 [ 2036.749945] warn_alloc.cold+0x96/0x1cc [ 2036.753917] ? zone_watermark_ok_safe+0x220/0x220 [ 2036.758762] ? wait_for_completion_io+0x10/0x10 [ 2036.763427] __alloc_pages_nodemask+0x2127/0x2720 [ 2036.768271] ? lock_acquire+0x170/0x3f0 [ 2036.772250] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2036.777175] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2036.781711] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2036.787198] ? retint_kernel+0x2d/0x2d [ 2036.791089] alloc_pages_current+0x155/0x260 [ 2036.795495] ion_page_pool_alloc+0x118/0x1b0 [ 2036.799901] ion_system_heap_allocate+0x133/0x8c0 [ 2036.804743] ? _raw_spin_unlock+0x29/0x40 [ 2036.808884] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2036.813817] ? ion_system_contig_heap_create+0x130/0x130 [ 2036.820044] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2036.825052] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2036.829892] ion_alloc+0x27a/0x810 [ 2036.833453] ? ion_dma_buf_release+0x40/0x40 [ 2036.837860] ? __might_fault+0x177/0x1b0 [ 2036.841913] ion_ioctl+0xea/0x1f0 [ 2036.845356] ? ion_query_heaps+0x360/0x360 [ 2036.849591] ? ion_query_heaps+0x360/0x360 [ 2036.853821] do_vfs_ioctl+0x75a/0xff0 [ 2036.857615] ? ioctl_preallocate+0x1a0/0x1a0 [ 2036.862012] ? lock_downgrade+0x740/0x740 [ 2036.866156] ? __fget+0x225/0x360 [ 2036.869607] ? do_vfs_ioctl+0xff0/0xff0 [ 2036.873576] ? security_file_ioctl+0x83/0xb0 [ 2036.877977] SyS_ioctl+0x7f/0xb0 [ 2036.881330] ? do_vfs_ioctl+0xff0/0xff0 [ 2036.885297] do_syscall_64+0x1d5/0x640 [ 2036.889182] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2036.894359] RIP: 0033:0x466459 [ 2036.897535] RSP: 002b:00007f0e622a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2036.905236] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2036.912497] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2036.919757] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2036.927015] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2036.934274] R13: 00007ffe5976301f R14: 00007f0e622a2300 R15: 0000000000022000 [ 2036.950883] Mem-Info: [ 2036.953447] active_anon:22582 inactive_anon:30375 isolated_anon:0 [ 2036.953447] active_file:35 inactive_file:1069 isolated_file:0 [ 2036.953447] unevictable:0 dirty:27 writeback:0 unstable:0 [ 2036.953447] slab_reclaimable:12926 slab_unreclaimable:115684 [ 2036.953447] mapped:44911 shmem:31505 pagetables:700 bounce:0 [ 2036.953447] free:94001 free_pcp:406 free_cma:0 [ 2036.990713] Node 0 active_anon:88976kB inactive_anon:80064kB active_file:60kB inactive_file:884kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:177040kB dirty:104kB writeback:0kB shmem:84316kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2037.021965] Node 1 active_anon:1352kB inactive_anon:41436kB active_file:8kB inactive_file:3452kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2640kB dirty:12kB writeback:0kB shmem:41704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2037.052479] Node 0 DMA free:11512kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2037.090495] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2037.095553] Node 0 DMA32 free:279236kB min:36200kB low:45248kB high:54296kB active_anon:88936kB inactive_anon:80064kB active_file:60kB inactive_file:884kB unevictable:0kB writepending:104kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7072kB pagetables:2612kB bounce:0kB free_pcp:1244kB local_pcp:620kB free_cma:0kB [ 2037.148521] lowmem_reserve[]: 0 0 0 0 0 [ 2037.152558] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2037.181594] lowmem_reserve[]: 0 0 0 0 0 [ 2037.185620] Node 1 Normal free:72240kB min:53696kB low:67120kB high:80544kB active_anon:1352kB inactive_anon:41436kB active_file:8kB inactive_file:3452kB unevictable:0kB writepending:12kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:188kB bounce:0kB free_pcp:1432kB local_pcp:696kB free_cma:0kB [ 2037.218525] lowmem_reserve[]: 0 0 0 0 0 [ 2037.222571] Node 0 DMA: 50*4kB (UME) 48*8kB (UME) 39*16kB (UME) 20*32kB (UM) 3*64kB (UM) 6*128kB (UME) 4*256kB (UE) 2*512kB (UE) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 11000kB [ 2037.242669] Node 0 DMA32: 4047*4kB (UME) 5565*8kB (UME) 6754*16kB (UE) 4829*32kB (UE) 344*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 345316kB [ 2037.261376] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2037.272980] Node 1 Normal: 5389*4kB (U) 1205*8kB (U) 9*16kB (U) 768*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 330*1024kB (U) 34*2048kB (U) 15*4096kB (U) = 524908kB [ 2037.298501] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2037.330541] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2037.350389] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2037.369232] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2037.389439] 32624 total pagecache pages [ 2037.393441] 0 pages in swap cache [ 2037.410029] Swap cache stats: add 0, delete 0, find 0/0 [ 2037.415415] Free swap = 0kB [ 2037.429125] Total swap = 0kB [ 2037.436862] 2097051 pages RAM [ 2037.439982] 0 pages HighMem/MovableOnly [ 2037.454104] 363846 pages reserved [ 2037.457738] 0 pages cma reserved 06:41:37 executing program 2: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000080)={0x34, 0x0, &(0x7f0000000040)}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7ffffffd, 0x22}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0x1}) 06:41:37 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000140)=""/4096, &(0x7f0000000040)=0x1000) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7ffffffd, 0x22}) 06:41:37 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x0, 0x22}) 06:41:37 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7ffffffd, 0x22}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x1}) 06:41:37 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r2, 0x8931, &(0x7f0000001640)={'veth1_virt_wifi\x00', @ifru_names}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000900)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000001900)={r3, 0x0, "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", "35a09f1a5d7680f3c034d32f13f39f571cbe74bccabd233bd485bb6a4a803b3ddd47fd8d833c028f171ff79f16d306a0d75924bcf2feb8c9490045b3ac1b290e3e68667c2e9a1246fc0fd4905d4875a539927cee9ecd7fea546a4967aee087b66722c70b401ed8b2b2418994507bb64d29f18d3a42f10a100077a0a473630cb1c3ca914f0bea8c86f28f6b833b980caa297a335d70877b3548a5025604adceaecfa8bb895dc25fadbcf688c38d2e9e53384dc105ee930ba121c99efbcde0136c630db3505831b9bab2deed4140eae219222c73aa54c870c84ec33b7af9a7df92a42256799edbfb0ae010be4f8f164e4e0f7cd67d74164872c99171d45b40cb42f737326371e53fe989fec929181532f8469d0501a3b0eec7a7102c22ce9291c6a9aa0be9db5484c8c9dc48262068f976fe3355e48ffbb31d570bfa18fd61d93f9f5a3d313d0cf1ed2b3f4d217fd29797aacd40780b3c39a1497e2491956183e7ba21e0ed9ece1b6cb6612cac59e5ebe5bc307b47856319d0b08f3fee16e8da6d1eae07cfac35cc8dcc4810663bf2f2d8259cce6deeb8b2f477d9bac8f262d48e650a2e8636bdfb37a5f4c6debc43585b5ae4adccf5b0b10fa974672d1ee13cd82ea81d192d80ae98ff74299e29325b475c5cb9f00ee466f2ab75a8dda126c999275f249300b9a3e65711d673b4cdf24ccc17f59d4b607051a484a130ff105f02cd2a5ab1a3372b2cd470b28b45c4d635a15c3cec19504ba72a0fe7142fac901949ad410c9ad3010e0b016c960b0fe2907c0ef23a980f0ccd0b3857880c4d702d52819889a8619ca32a8a08e1b9a3d34c982ab80f28c62c96809551b872823fcd384ae89dee8b30fad51cae388435b9a0a62fddaaabc209eff272cb772c9523c92cbabefe8488f230f0a72e56c21d88b2c7436afacd65fe158d11fbbd82640130408b19fc0700feae044c6a171068070e21e2f9cc53b6a850a2ee5c75bf44fabf7d21efedeace6364503209b8a9d52e65cabce2600b3790af109f189c0135e31e11eeacc5da9b6a598117f8e375aed0f2135abc951b7ceeec8b5967db21837bc2f588a1525faa0d2c472d472f5e9e63974f8e2f4944aed84df6726c806c58313a4354ad941ed20bfd86185027ff11c5b346bd5795d50a9b4fd1467c653eeaa186b2d38791159419eddeca87e79f5a9c80aa28fe0ca0f1d366349b5e642184e6ca84ca8d29f567afb59549bf69cea57b866a3e4b8b4edd52d70b023f7cca15fb634ab118b9fe2f8ad3cc3b99ecdf260b22fc829e4df938a6493ceabf2bb89b5c280c0474a806bf522a55db337b8f19fcabfe8104243941a2472d29dd00799450c22f01d0979b6f235eb2ce9ab65bab29b7f0f8697550039f13f390211fa083434d13d28b8f95d7c45df72106548ff40e09bbe05b9a7d8c8fe2333bdfeb464a3d35fc42e1f35316b493e15138241f79dfd5a6a255970311b9b7a0af5a66119a77923f6da85dc9f347d8c11f1095b2c7a08e97fd45bb7884c5b6722ef5f14dc8abec126b50574f78f1f361a8ba313330376e9ea870d3f286e5be7180fa87f7fe5c69aa04d9a143cc1ea8d6e727a328f8ba8727c0b7a77a400fd9c47c5eee165fbec533ac4ae55f4feb5ed977984a8baca677713decb0c80bfd950b23c3a53a4f545da3940c47af96dbd0d344cb78cf8be8f453c5149d6f3256d3bfa693a6fdcfe634f5e71ef2af6a3c7764db6162353234f6f20dab7b59a55f16d07e46c74b7e745671aff7eefe42348fba22e7e33c29360a907ecc59f494ec526ef3de88b990254f95d5dc639b7b3b942e9d53f0534e585e18f50e34aafb6656823dc7f76819395cf69690406566750ae9aa67033b3fff424e22cdb3945aa25777dabc12cb96e6b17c43c21f57e3de46ce6b116ba01ebabf47cf006cd43d657c4dc984dbb5aef22cf640fbd07effb22debb9af58255b95acf8da4e1e501c19141b426793fc5a32fedcd454d67a853e95f215a35d00db1205828b411ff0fb9fbda556ddd7342d33594bf9cf0245e2f8dc5f930b62ffd6d0fe86a2a1ac3882fc106c32a8edfdb5566cbfe1ee09051ee8eb1c7e0f624b7956517241726dd002424779a3582c7831967ea70ac7aaaae4782b51696a25ed56a171d80ffcf126a48c7079794ea07f9952430e0527d21946be422da26f6ea2b53c23d099f916a53dc369bd0c9dcc84a4118860e88daaa4cd5a18251cf422a292d02955600be1440479699b0bc908877f8d1314dab1638a58b799787e2e4b06d99fa291d8de3face7c51182ad5758b5dd54b70128c2548288d147ce85eda355948498cf4cd7fee238b753dc4620c0f39cedd519a137171297f4db342bd8195b9de8c9fb2190cd5b3f3cb1c3e707f126acc82470d3e39098e1ee00665f8710086c9bd201bcccc1882aa0695c5a1a02615c407a036044e479562bd3f793d6d1e5b73d7d2c7789694a14f8ad687b6d25c10a3e8afdbd26d2bcbb601bbf12eee4d91ea807bc93bb8fb5a879844f150fa57542b44506e556ab87017460b445f21d2c678da50823a296056f197ee8c1486d3d88ea320bef8ca880e1b528451f6ed3ffb89a03960b63e74f03e32b976be33fa116e842d84d4e0a247893338b82ee0632be891e91e033a5f877ab268d5607e8dc2c2834776e3c7abbe77bf4aed59daba60e3c6cad105c6d50e9de5385957c56bd8ef17b2f608c3d655843a0fd44495b00f3de3cf7e754cb72b4ee6cb6f03ea3b0414e640dbe41e7b139860a1dd453a70fe16b0ff4703fb7cefe5d3bc9eb3b3dbffb999212fd8d4ac13b588c230bb3405df7093955517e9401926a46165e27d32b17b61a52814d03ef88a9eac30bd96d01d40fc0153fdc16cd5c7905729cea23110c78f4008b950071ad84d9185a780f7c45403ae7a7918f2e8411e0925d32efd382d34c87f72ca8b4ee5b36fcf82394e694da5d737d5c5cabc3282ecb9d4be7049537420d5db60ecbc82e35950191d1964387c151d53e74aeb0e80dadd9236d9f84019823b8b24cebb7b9d9c9fcc4a99d1850f8ce7085e1b77f5039014ca2214fb7979c543aba013aaa02036f79b81ee88eb846db3a41d041dec2deabc74dd1db8e06f217a84adf242a4e67eae53c457d4fe3e03decfdeecf774a08b8742d088563986d37b6c5c13f9f452cc0b78e90d1439469dee9fc7083788e34d243cca6dd4bcc23da8c69912cf56e9e72ee78827014e1b13ce24fa8432b396cd1cafdff19c9f87f93f8cf75f7bb5ce064faadf28faddf79b0cd4d1e2b1217e034335cd96bbdc0449b2b8c0ae559570974682e18a7110000c4106176bcac9cc3b2691de49e241ed71a994f18180bdee741ba822405ad9df3d5c8ed6bb6454d7d4aa4a706134b888da6a881c67523119d539ff74fd52d2a0abbc64eb8bc0535a29a12690232874a5be75a1906c26ca796586f1fa1daeabb2da8b82209041ed6996e53b85934d0d0919429446549d5124d619ace7f8f64ac98d34a4d4257d050dcbdf2cd1971a5845a4f7966b9d54b6bf9de561fd317c1d0457d942415ab1df2cbc23c0d4c1fc2bec3c96b2661c8c6198c791b9fcc99bc88c40a2f58dc461b61248fb09229c3be79ef6f7eca00e2ca36564125710ce085d9edf0d2b09e7355f726cba0376ced283ff1773d180e59839e3bece773bad074f615961ac08d9d50a06e689b3b5a2f5d2b5282111350fe65965fce8bd71fb8ade53417f7af1d75921050842bdd94317da19e7f6bc95e193b1f65d8c3b3234c548670353837af4b8703a3fb868fcad1a97ab102e86e03a6173c319abda64f970ce5bdd944b6c4c9eb9b7333a3562337112cc98b5ec6eed233536c9bff244e9dbc922266d39df31632e3c02784076d0491fdd050859739f911a91ad8829b6b32c19e52cbd45a1e3926846c4680786f8baf5d258037955ec0ad2162447b5bf5dbd8099afd0b3c68408aa4c554c7ed7a5aa0ae9f6c540f7c0695824c0accf51079a79fb6db6d6c9a772dd2efcb6e2ef77079f210a3b594ef3db982b8dd5a3108af81911ddb73ad9b87e8b8707eb88e50069d98d1a2ffabec820bef125ce11dab6f110e6735d1ba577c38d26829cc8af1e9b12c782ce76ca7d9d272754a311e6c4111f7526bcc89f471311c5398349d1fe10d99219cc1421d09a390770c2a9e36dcd2a93ec1635e2bb042daee9bb8a24474b5e4ff57285ccfd0a7d3dc2db6c85cd1d505029278c97d331fb09e1042063899254a38cbe89a131627cf365f1ed3dc9a2f9bb8979f3e533f2fb3432c4185cef27d1c86ade4da1d8ae1bcdcdc6622525947dd05dda241997d97468fb5fcd58fc6ac699ec34270853e53d8065f22477cdf063881eaba97664d5771403ed7e567b6fd02ee2f422742e5e326b146ea4245b840bf70a4c8cb3f0d308445f5eba650cb6e455a8802d57661a074318c1e84270c8e61a200fadcf107e4307fc2ef0ae16ae8007ee5ffd19c21b38f138d9bd86b76c29e1c4bdd85e0fdd0f83e16829d0c9580026f9083dbe3770f6c093a0cef6d94d7222f3b5c4ee06ea911f9134784ce9307252b4fd5b35d9146a2a97972d75bf159e9fbf70746d261e0f858080b4afada7273846d5bd7e3b852848962c466538d1f957f700298e59b1acbcbbdefe9a58614e09da106a3e46a7b614d01d2911cdbd83bf5ca64a9a3082655f080338a596485106864a39013cdd103e28fda4b724c58ced071613687b72213ff8a678f4b0ddcd7890781f49178f67149c3da4217285450cdc28a6060696a4f6d31be5acef416653fa73a268bec2f92c8c050e18229d5084265c46b15010665c8f97998dfc8bb2ecef70f77e2878a303a4bb8ff8388099fdcec529949c9f4a35a82bb9249e569d342d2dfccc3998088d698478a4d8d269edee23e1f62cb2f80ebc1c85df50b2ca9c42fe649d1ec5dbc6eda30f3f4dfa26f5afc092d309663afcb750463c00d1ed216e263ae1fa4d456438927778c0bd2c4df51f74f4814d5a51dbdffe4476026403141b320a1882c92d7f55b25c5772f53a200ff3153274569fc05a41605d2bfd7921e2733794bdc0383a748905b2f6988a2e12e21c4337e7013259613e597969199b90b754daf8759731e5e442a7aa9956e2946d533c02c399e8b48a8359544dbfeb19da7ea4125472cd35311b316d11c43e2e9d4a42233bf47c595e0a72e9373cc85d64aaa69d90cc5ea40f678e6013d19898e76c43af8ca6f12311fb5818af8cf1f13947f2cf0a5e945c4014b8aa4d9770a9d1fdaf31dc57dc23f9756bbd28126e0b8b4800340610c0946f069846dcfa9bf0bd851b61ddc7f5de4125ddde020555acea64ee425763d674e70da83ac3a1ef36843acef9d126cc527330c0c0d4154632ddac75881dedf29ad6d791f82567b"}) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x81200, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e24, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, {0xa, 0x4e22, 0x3, @ipv4={[], [], @empty}, 0x400}, 0x8, [0x4, 0x80000000, 0x9, 0x0, 0x9, 0x2, 0x4, 0x2]}, 0x5c) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xb21, 0x3a, 0x1, 0xffffffffffffffff}) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r5, 0x80045113, &(0x7f0000000000)) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, 0x0) 06:41:38 executing program 2: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000080)={0x34, 0x0, &(0x7f0000000040)}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7ffffffd, 0x22}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0x1}) 06:41:38 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x0, 0x22}) 06:41:38 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10001, 0x0, 0x0, 0xffffffffffffffff}) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x100, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, 0x0) 06:41:38 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7ffffffd}) 06:41:38 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10001, 0x2, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) 06:41:38 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7ffffffd}) [ 2038.522309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2038.529438] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2038.544076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2038.551004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2038.562457] device bridge_slave_1 left promiscuous mode [ 2038.568846] bridge0: port 2(bridge_slave_1) entered disabled state [ 2038.577216] device bridge_slave_0 left promiscuous mode [ 2038.582896] bridge0: port 1(bridge_slave_0) entered disabled state [ 2038.596606] device veth1_macvtap left promiscuous mode [ 2038.601985] device veth0_macvtap left promiscuous mode [ 2038.613829] device veth1_vlan left promiscuous mode [ 2038.620268] device veth0_vlan left promiscuous mode [ 2038.755107] device hsr_slave_1 left promiscuous mode [ 2038.769856] device hsr_slave_0 left promiscuous mode [ 2038.787709] team0 (unregistering): Port device team_slave_1 removed [ 2038.801080] team0 (unregistering): Port device team_slave_0 removed [ 2038.810569] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2038.824442] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2038.892871] bond0 (unregistering): Released all slaves [ 2039.641688] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2039.660483] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2039.665643] CPU: 1 PID: 11215 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 2039.677759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2039.687101] Call Trace: [ 2039.689683] dump_stack+0x1b2/0x281 [ 2039.693302] warn_alloc.cold+0x96/0x1cc [ 2039.697278] ? zone_watermark_ok_safe+0x220/0x220 [ 2039.702122] __alloc_pages_nodemask+0x2127/0x2720 [ 2039.706961] ? lock_acquire+0x170/0x3f0 [ 2039.710931] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2039.715768] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2039.721211] ? __mutex_unlock_slowpath+0x75/0x770 [ 2039.726041] ? retint_kernel+0x2d/0x2d [ 2039.729922] alloc_pages_current+0x155/0x260 [ 2039.734327] ion_page_pool_alloc+0x118/0x1b0 [ 2039.738728] ion_system_heap_allocate+0x133/0x8c0 [ 2039.743645] ? ion_alloc+0x187/0x810 [ 2039.747350] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2039.752794] ? ion_system_contig_heap_create+0x130/0x130 [ 2039.758233] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2039.763238] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2039.768177] ion_alloc+0x204/0x810 [ 2039.771708] ? ion_dma_buf_release+0x40/0x40 [ 2039.776107] ? __might_fault+0x177/0x1b0 [ 2039.780177] ion_ioctl+0xea/0x1f0 [ 2039.783619] ? ion_query_heaps+0x360/0x360 [ 2039.787939] ? _raw_spin_unlock+0x29/0x40 [ 2039.792075] ? ion_query_heaps+0x360/0x360 [ 2039.796306] do_vfs_ioctl+0x75a/0xff0 [ 2039.800102] ? ioctl_preallocate+0x1a0/0x1a0 [ 2039.804510] ? lock_downgrade+0x740/0x740 [ 2039.808655] ? __fget+0x225/0x360 [ 2039.812108] ? do_vfs_ioctl+0xff0/0xff0 [ 2039.816075] ? security_file_ioctl+0x83/0xb0 [ 2039.820481] SyS_ioctl+0x7f/0xb0 [ 2039.823829] ? do_vfs_ioctl+0xff0/0xff0 [ 2039.827800] do_syscall_64+0x1d5/0x640 [ 2039.831670] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2039.836847] RIP: 0033:0x466459 [ 2039.840012] RSP: 002b:00007f27c4f04188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2039.847702] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 2039.854949] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2039.862321] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2039.869568] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 2039.876816] R13: 00007ffda0b0ca7f R14: 00007f27c4f04300 R15: 0000000000022000 [ 2039.904525] Mem-Info: [ 2039.909079] active_anon:22633 inactive_anon:30376 isolated_anon:0 [ 2039.909079] active_file:1695 inactive_file:5168 isolated_file:0 [ 2039.909079] unevictable:0 dirty:5 writeback:0 unstable:0 [ 2039.909079] slab_reclaimable:12962 slab_unreclaimable:114793 [ 2039.909079] mapped:57434 shmem:31505 pagetables:741 bounce:0 [ 2039.909079] free:147527 free_pcp:43 free_cma:0 [ 2039.946849] Node 0 active_anon:89724kB inactive_anon:80068kB active_file:5116kB inactive_file:19616kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:227020kB dirty:20kB writeback:0kB shmem:84316kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2039.979185] Node 1 active_anon:808kB inactive_anon:41436kB active_file:1664kB inactive_file:1056kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2716kB dirty:0kB writeback:0kB shmem:41704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2040.006610] Node 0 DMA free:11124kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2040.034044] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2040.039740] Node 0 DMA32 free:461072kB min:36200kB low:45248kB high:54296kB active_anon:89684kB inactive_anon:80068kB active_file:5116kB inactive_file:19616kB unevictable:0kB writepending:20kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7136kB pagetables:2964kB bounce:0kB free_pcp:196kB local_pcp:140kB free_cma:0kB [ 2040.070053] lowmem_reserve[]: 0 0 0 0 0 [ 2040.074095] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2040.101094] lowmem_reserve[]: 0 0 0 0 0 [ 2040.101430] IPVS: ftp: loaded support on port[0] = 21 [ 2040.105127] Node 1 Normal free:118120kB min:53696kB low:67120kB high:80544kB active_anon:808kB inactive_anon:41436kB active_file:1664kB inactive_file:1056kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2040.141379] lowmem_reserve[]: 0 0 0 0 0 [ 2040.145426] Node 0 DMA: 21*4kB (UME) 38*8kB (UME) 31*16kB (UME) 24*32kB (UM) 2*64kB (M) 7*128kB (UME) 3*256kB (UE) 3*512kB (UE) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 11124kB [ 2040.162314] Node 0 DMA32: 288*4kB (UME) 5491*8kB (UME) 10051*16kB (UE) 7982*32kB (UE) 2*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 461448kB [ 2040.177061] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2040.188876] Node 1 Normal: 1586*4kB (UM) 2690*8kB (UM) 2159*16kB (UM) 1714*32kB (UM) 15*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 118216kB [ 2040.203998] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2040.214294] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2040.224205] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2040.235155] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2040.244469] 38260 total pagecache pages [ 2040.249853] 0 pages in swap cache [ 2040.254262] Swap cache stats: add 0, delete 0, find 0/0 [ 2040.259829] Free swap = 0kB [ 2040.262920] Total swap = 0kB [ 2040.267893] 2097051 pages RAM [ 2040.271647] 0 pages HighMem/MovableOnly [ 2040.277868] 363846 pages reserved [ 2040.281385] 0 pages cma reserved [ 2040.328987] chnl_net:caif_netlink_parms(): no params data found [ 2040.548247] bridge0: port 1(bridge_slave_0) entered blocking state [ 2040.556031] bridge0: port 1(bridge_slave_0) entered disabled state [ 2040.566917] device bridge_slave_0 entered promiscuous mode [ 2040.577808] bridge0: port 2(bridge_slave_1) entered blocking state [ 2040.584253] bridge0: port 2(bridge_slave_1) entered disabled state [ 2040.599566] device bridge_slave_1 entered promiscuous mode [ 2040.631743] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2040.644052] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2040.673599] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2040.684679] team0: Port device team_slave_0 added [ 2040.709388] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2040.718565] team0: Port device team_slave_1 added [ 2040.751557] IPVS: ftp: loaded support on port[0] = 21 [ 2040.773969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2040.781854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2040.811191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2040.839434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2040.848934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2040.878517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2040.937472] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2040.962542] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2041.026780] device hsr_slave_0 entered promiscuous mode [ 2041.032855] device hsr_slave_1 entered promiscuous mode [ 2041.071895] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2041.232939] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2041.325678] Bluetooth: hci1 command 0x0409 tx timeout [ 2041.345067] syz-executor.1 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2041.394501] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2041.435721] CPU: 1 PID: 9256 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 2041.443522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2041.452862] Call Trace: [ 2041.455435] dump_stack+0x1b2/0x281 [ 2041.459070] dump_header+0x178/0x82f [ 2041.462773] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2041.467867] ? ___ratelimit+0x2cd/0x530 [ 2041.471831] oom_kill_process.cold+0x10/0xb18 [ 2041.476327] out_of_memory+0xe3e/0x1190 [ 2041.480297] ? oom_killer_disable+0x1c0/0x1c0 [ 2041.484802] ? mutex_trylock+0x152/0x1a0 [ 2041.488857] __alloc_pages_nodemask+0x23e1/0x2720 [ 2041.493707] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2041.498553] alloc_pages_current+0x155/0x260 [ 2041.502952] filemap_fault+0xea3/0x1980 [ 2041.506925] ext4_filemap_fault+0x84/0xb0 [ 2041.511061] __do_fault+0xfa/0x380 [ 2041.514590] __handle_mm_fault+0x2497/0x4620 [ 2041.518997] ? vm_insert_page+0x7c0/0x7c0 [ 2041.523139] ? nanosleep_copyout+0x100/0x100 [ 2041.527554] handle_mm_fault+0x391/0x860 [ 2041.531609] __do_page_fault+0x549/0xad0 [ 2041.535665] ? spurious_fault+0x640/0x640 [ 2041.539803] ? do_page_fault+0x60/0x500 [ 2041.543769] ? page_fault+0x2f/0x50 [ 2041.547387] page_fault+0x45/0x50 [ 2041.550826] RIP: 1f1db2:0x5 [ 2041.553744] RSP: 0023:00007ffda0b0cd3c EFLAGS: 00000047 [ 2041.611156] Mem-Info: [ 2041.621028] active_anon:22678 inactive_anon:30379 isolated_anon:0 [ 2041.621028] active_file:46 inactive_file:0 isolated_file:0 [ 2041.621028] unevictable:0 dirty:0 writeback:4 unstable:0 [ 2041.621028] slab_reclaimable:12966 slab_unreclaimable:115904 [ 2041.621028] mapped:52897 shmem:31509 pagetables:741 bounce:0 [ 2041.621028] free:25108 free_pcp:0 free_cma:0 [ 2041.670525] Node 0 active_anon:89904kB inactive_anon:80080kB active_file:116kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211536kB dirty:0kB writeback:16kB shmem:84332kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2041.751003] Node 1 active_anon:808kB inactive_anon:41436kB active_file:68kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:52kB dirty:0kB writeback:0kB shmem:41704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2041.795748] Node 0 DMA free:11052kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2041.868961] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2041.874114] Node 0 DMA32 free:36124kB min:36200kB low:45248kB high:54296kB active_anon:89864kB inactive_anon:80080kB active_file:44kB inactive_file:0kB unevictable:0kB writepending:4kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7200kB pagetables:2964kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2041.910725] lowmem_reserve[]: 0 0 0 0 0 [ 2041.948749] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2042.071161] lowmem_reserve[]: 0 0 0 0 0 [ 2042.075177] Node 1 Normal free:53444kB min:53696kB low:67120kB high:80544kB active_anon:808kB inactive_anon:41436kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2042.199846] lowmem_reserve[]: 0 0 0 0 0 [ 2042.203891] Node 0 DMA: 13*4kB (UME) 29*8kB (UME) 29*16kB (UME) 22*32kB (UM) 4*64kB (UM) 7*128kB (UME) 3*256kB (UE) 3*512kB (UE) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 11052kB [ 2042.223788] Node 0 DMA32: 522*4kB (UME) 476*8kB (UME) 112*16kB (UME) 918*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 37064kB [ 2042.255722] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2042.296925] Node 1 Normal: 19*4kB (UM) 17*8kB (UM) 11*16kB (M) 1558*32kB (UM) 48*64kB (UM) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53444kB [ 2042.371671] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2042.435546] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2042.444241] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2042.493145] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2042.542650] 31568 total pagecache pages [ 2042.562500] 0 pages in swap cache [ 2042.585510] Swap cache stats: add 0, delete 0, find 0/0 [ 2042.590870] Free swap = 0kB [ 2042.593872] Total swap = 0kB [ 2042.634479] 2097051 pages RAM [ 2042.644815] 0 pages HighMem/MovableOnly [ 2042.656867] 363846 pages reserved [ 2042.660402] 0 pages cma reserved [ 2042.663753] Out of memory (oom_kill_allocating_task): Kill process 9256 (syz-executor.1) score 0 or sacrifice child [ 2042.769372] Killed process 11215 (syz-executor.1) total-vm:93516kB, anon-rss:156kB, file-rss:34820kB, shmem-rss:0kB [ 2042.777703] Bluetooth: hci4 command 0x0409 tx timeout [ 2042.829306] oom_reaper: reaped process 11215 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2042.848602] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2042.866341] systemd-journal cpuset=/ mems_allowed=0-1 [ 2042.871548] CPU: 0 PID: 10093 Comm: systemd-journal Not tainted 4.14.228-syzkaller #0 [ 2042.879502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2042.888849] Call Trace: [ 2042.891432] dump_stack+0x1b2/0x281 [ 2042.895105] dump_header+0x178/0x82f [ 2042.898813] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2042.903907] ? ___ratelimit+0x2cd/0x530 [ 2042.907877] oom_kill_process.cold+0x10/0xb18 [ 2042.912370] out_of_memory+0xe3e/0x1190 [ 2042.916448] ? oom_killer_disable+0x1c0/0x1c0 [ 2042.920932] ? mutex_trylock+0x152/0x1a0 [ 2042.925008] __alloc_pages_nodemask+0x23e1/0x2720 [ 2042.929847] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2042.934674] alloc_pages_current+0x155/0x260 [ 2042.939155] filemap_fault+0xea3/0x1980 [ 2042.943112] ext4_filemap_fault+0x84/0xb0 [ 2042.947236] __do_fault+0xfa/0x380 [ 2042.950767] __handle_mm_fault+0x2497/0x4620 [ 2042.955155] ? vm_insert_page+0x7c0/0x7c0 [ 2042.959283] ? lock_downgrade+0x740/0x740 [ 2042.963415] handle_mm_fault+0x391/0x860 [ 2042.967460] __do_page_fault+0x549/0xad0 [ 2042.971501] ? spurious_fault+0x640/0x640 [ 2042.975656] ? do_page_fault+0x60/0x500 [ 2042.979612] ? page_fault+0x2f/0x50 [ 2042.983218] page_fault+0x45/0x50 [ 2042.986660] RIP: 0001:0x1 [ 2042.989397] RSP: 7c3d9310:00007fffcdfe5ec0 EFLAGS: 7fffcdfe5cd0 [ 2042.995616] syz-executor.1: [ 2042.996269] Mem-Info: [ 2043.001686] page allocation failure: order:0 [ 2043.004696] active_anon:22654 inactive_anon:30379 isolated_anon:0 [ 2043.004696] active_file:12 inactive_file:15 isolated_file:0 [ 2043.004696] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2043.004696] slab_reclaimable:12966 slab_unreclaimable:115677 [ 2043.004696] mapped:52868 shmem:31509 pagetables:741 bounce:0 [ 2043.004696] free:13958 free_pcp:111 free_cma:0 [ 2043.017711] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2043.051075] Node 0 active_anon:89808kB inactive_anon:80080kB active_file:144kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211472kB dirty:0kB writeback:0kB shmem:84332kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2043.055336] (null) [ 2043.058221] Node 1 active_anon:808kB inactive_anon:41436kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:41704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2043.058226] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2043.058240] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2043.058260] Node 0 DMA32 free:18076kB min:36200kB low:45248kB high:54296kB active_anon:89768kB inactive_anon:80080kB active_file:144kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7168kB pagetables:2964kB bounce:0kB free_pcp:332kB local_pcp:204kB free_cma:0kB [ 2043.058278] lowmem_reserve[]: 0 0 0 0 0 [ 2043.058297] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2043.058313] lowmem_reserve[]: 0 0 0 0 0 [ 2043.105453] syz-executor.1 cpuset= [ 2043.120230] Node 1 [ 2043.150469] / [ 2043.180450] Normal free:26784kB min:53696kB low:67120kB high:80544kB active_anon:808kB inactive_anon:41436kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:0kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 2043.215347] mems_allowed=0-1 [ 2043.219108] lowmem_reserve[]: 0 0 0 0 0 [ 2043.255244] Node 0 DMA: 13*4kB (UME) 19*8kB (UME) 29*16kB (UME) 22*32kB (UM) 4*64kB (UM) 7*128kB (UME) 3*256kB (UE) 3*512kB (UE) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 10972kB [ 2043.255869] CPU: 1 PID: 11215 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 2043.274671] Node 0 [ 2043.279101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2043.279105] Call Trace: [ 2043.279121] dump_stack+0x1b2/0x281 [ 2043.279134] warn_alloc.cold+0x96/0x1cc [ 2043.281342] DMA32: [ 2043.290679] ? zone_watermark_ok_safe+0x220/0x220 [ 2043.290688] ? usleep_range+0x130/0x130 [ 2043.290697] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2043.290709] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2043.290719] ? run_timer_softirq+0x5a0/0x5a0 [ 2043.290734] __alloc_pages_nodemask+0x2127/0x2720 [ 2043.296533] 577*4kB [ 2043.296912] ? lock_acquire+0x170/0x3f0 [ 2043.300851] (ME) [ 2043.303100] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2043.309646] 358*8kB [ 2043.311865] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2043.318650] (UME) [ 2043.321951] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2043.328110] 106*16kB [ 2043.331158] alloc_pages_current+0x155/0x260 [ 2043.333444] (ME) [ 2043.337401] ion_page_pool_alloc+0x118/0x1b0 [ 2043.337410] ion_system_heap_allocate+0x133/0x8c0 [ 2043.337420] ? ion_alloc+0x187/0x810 [ 2043.337430] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2043.337439] ? ion_system_contig_heap_create+0x130/0x130 [ 2043.341229] 352*32kB [ 2043.344304] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2043.348366] (UME) [ 2043.351189] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2043.353332] 0*64kB [ 2043.358765] ion_alloc+0x204/0x810 [ 2043.358779] ? ion_dma_buf_release+0x40/0x40 [ 2043.358791] ? __might_fault+0x177/0x1b0 [ 2043.358802] ion_ioctl+0xea/0x1f0 [ 2043.358811] ? ion_query_heaps+0x360/0x360 [ 2043.358824] ? _raw_spin_unlock+0x29/0x40 [ 2043.362998] 0*128kB [ 2043.365601] ? ion_query_heaps+0x360/0x360 [ 2043.365612] do_vfs_ioctl+0x75a/0xff0 [ 2043.365623] ? ioctl_preallocate+0x1a0/0x1a0 [ 2043.365633] ? lock_downgrade+0x740/0x740 [ 2043.365646] ? __fget+0x225/0x360 [ 2043.369414] 0*256kB [ 2043.372088] ? do_vfs_ioctl+0xff0/0xff0 [ 2043.379224] 0*512kB [ 2043.380741] ? security_file_ioctl+0x83/0xb0 [ 2043.387907] 0*1024kB [ 2043.391620] SyS_ioctl+0x7f/0xb0 [ 2043.394001] 0*2048kB [ 2043.398995] ? do_vfs_ioctl+0xff0/0xff0 [ 2043.399006] do_syscall_64+0x1d5/0x640 [ 2043.399020] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2043.399028] RIP: 0033:0x466459 [ 2043.399032] RSP: 002b:00007f27c4f04188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2043.399040] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 2043.399047] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2043.402908] 0*4096kB [ 2043.406013] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2043.406018] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 2043.406023] R13: 00007ffda0b0ca7f R14: 00007f27c4f04300 R15: 0000000000022000 [ 2043.420158] Bluetooth: hci1 command 0x041b tx timeout [ 2043.423654] = 18132kB [ 2043.423759] Mem-Info: [ 2043.427931] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2043.427977] Node 1 Normal: 16*4kB (M) 16*8kB (M) 12*16kB (UM) [ 2043.438252] active_anon:22654 inactive_anon:30379 isolated_anon:0 [ 2043.438252] active_file:37 inactive_file:0 isolated_file:0 [ 2043.438252] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2043.438252] slab_reclaimable:12966 slab_unreclaimable:115677 [ 2043.438252] mapped:52868 shmem:31509 pagetables:741 bounce:0 [ 2043.438252] free:13958 free_pcp:113 free_cma:0 [ 2043.442026] 725*32kB [ 2043.442432] Node 0 active_anon:89808kB inactive_anon:80080kB active_file:144kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211472kB dirty:0kB writeback:0kB shmem:84332kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2043.446827] (UM) 48*64kB (UM) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26784kB [ 2043.446866] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2043.446872] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2043.446877] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2043.446883] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2043.446886] 31536 total pagecache pages [ 2043.446896] 0 pages in swap cache [ 2043.446900] Swap cache stats: add 0, delete 0, find 0/0 [ 2043.446903] Free swap = 0kB [ 2043.446906] Total swap = 0kB [ 2043.446911] 2097051 pages RAM [ 2043.446917] 0 pages HighMem/MovableOnly [ 2043.462334] Node 1 active_anon:808kB inactive_anon:41436kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:41704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2043.466575] 363846 pages reserved [ 2043.470917] Node 0 [ 2043.473237] 0 pages cma reserved [ 2043.483535] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2043.492098] Out of memory (oom_kill_allocating_task): Kill process 10093 (systemd-journal) score 0 or sacrifice child [ 2043.496232] lowmem_reserve[]: [ 2043.499916] Killed process 10093 (systemd-journal) total-vm:46096kB, anon-rss:480kB, file-rss:0kB, shmem-rss:2576kB [ 2043.518472] 0 [ 2043.547176] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 2043.566675] 2717 [ 2043.612516] (null) [ 2043.639712] 2718 [ 2043.648061] systemd-journal: [ 2043.661332] 2718 [ 2043.664380] page allocation failure: order:0 [ 2043.683291] 2718 [ 2043.685468] , order=0, oom_score_adj=0 [ 2043.694288] syz-fuzzer cpuset= [ 2043.706087] Node 0 [ 2043.726482] , mode:0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 2043.739157] DMA32 free:18076kB min:36200kB low:45248kB high:54296kB active_anon:89768kB inactive_anon:80080kB active_file:144kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7168kB pagetables:2964kB bounce:0kB free_pcp:332kB local_pcp:128kB free_cma:0kB [ 2043.761378] (null) [ 2043.781514] lowmem_reserve[]: [ 2043.786546] / [ 2043.806956] 0 [ 2043.809626] systemd-journal cpuset= [ 2043.812320] 0 [ 2043.813656] / [ 2043.832229] 0 [ 2043.859859] mems_allowed=0-1 [ 2043.871475] 0 [ 2043.872368] CPU: 0 PID: 3624 Comm: syz-fuzzer Not tainted 4.14.228-syzkaller #0 [ 2043.874083] 0 [ 2043.875866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2043.875870] Call Trace: [ 2043.875886] dump_stack+0x1b2/0x281 [ 2043.875898] dump_header+0x178/0x82f [ 2043.878978] Node 0 [ 2043.880777] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2043.888222] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2043.889979] ? ___ratelimit+0x2cd/0x530 [ 2043.899339] lowmem_reserve[]: [ 2043.901908] oom_kill_process.cold+0x10/0xb18 [ 2043.905627] 0 [ 2043.909311] out_of_memory+0xe3e/0x1190 [ 2043.911510] 0 [ 2043.916611] ? oom_killer_disable+0x1c0/0x1c0 [ 2043.916619] ? mutex_trylock+0x152/0x1a0 [ 2043.916629] __alloc_pages_nodemask+0x23e1/0x2720 [ 2043.941685] 0 [ 2043.945636] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2043.945657] alloc_pages_current+0x155/0x260 [ 2043.948724] 0 [ 2043.953198] filemap_fault+0xea3/0x1980 [ 2043.954973] 0 [ 2043.958936] ext4_filemap_fault+0x84/0xb0 [ 2043.958946] __do_fault+0xfa/0x380 [ 2043.965196] __handle_mm_fault+0x2497/0x4620 [ 2043.969249] Node 1 [ 2043.974051] ? vm_insert_page+0x7c0/0x7c0 [ 2043.975862] Normal free:26784kB min:53696kB low:67120kB high:80544kB active_anon:808kB inactive_anon:41436kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:0kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2043.980673] handle_mm_fault+0x391/0x860 [ 2043.985038] lowmem_reserve[]: [ 2043.986824] __do_page_fault+0x549/0xad0 [ 2043.986835] ? spurious_fault+0x640/0x640 [ 2043.986844] ? do_page_fault+0x60/0x500 [ 2043.990790] 0 [ 2043.992569] ? page_fault+0x2f/0x50 [ 2043.996701] 0 [ 2044.000220] page_fault+0x45/0x50 [ 2044.004777] 0 [ 2044.006992] RIP: 46a900:0x1e63cc1a05a [ 2044.006996] RSP: 03c6:000000c00065de40 EFLAGS: 00000003 [ 2044.009658] mems_allowed=0-1 [ 2044.011137] 0 [ 2044.040604] CPU: 0 PID: 10093 Comm: systemd-journal Not tainted 4.14.228-syzkaller #0 [ 2044.054913] 0 [ 2044.057546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2044.057550] Call Trace: [ 2044.057566] dump_stack+0x1b2/0x281 [ 2044.057576] warn_alloc.cold+0x96/0x1cc [ 2044.057585] ? zone_watermark_ok_safe+0x220/0x220 [ 2044.057592] ? usleep_range+0x130/0x130 [ 2044.057599] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2044.057609] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2044.057617] ? run_timer_softirq+0x5a0/0x5a0 [ 2044.057632] __alloc_pages_nodemask+0x2127/0x2720 [ 2044.057652] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2044.057676] alloc_pages_current+0x155/0x260 [ 2044.063427] filemap_fault+0xea3/0x1980 [ 2044.067045] Node 0 [ 2044.068819] ext4_filemap_fault+0x84/0xb0 [ 2044.072237] DMA: [ 2044.074019] __do_fault+0xfa/0x380 [ 2044.077820] 13*4kB [ 2044.083151] __handle_mm_fault+0x2497/0x4620 [ 2044.086241] (UME) [ 2044.088011] ? vm_insert_page+0x7c0/0x7c0 [ 2044.095963] 19*8kB [ 2044.097841] ? lock_downgrade+0x740/0x740 [ 2044.107182] (UME) [ 2044.109740] handle_mm_fault+0x391/0x860 [ 2044.113329] 29*16kB [ 2044.117284] __do_page_fault+0x549/0xad0 [ 2044.117294] ? spurious_fault+0x640/0x640 [ 2044.117303] ? do_page_fault+0x60/0x500 [ 2044.122123] (UME) [ 2044.126086] ? page_fault+0x2f/0x50 [ 2044.126093] page_fault+0x45/0x50 [ 2044.126105] RIP: 0001:0x1 [ 2044.131190] Mem-Info: [ 2044.136170] RSP: 7c3d9310:00007fffcdfe5ec0 EFLAGS: 7fffcdfe5cd0 [ 2044.145385] 22*32kB [ 2044.157588] active_anon:22654 inactive_anon:30379 isolated_anon:0 [ 2044.157588] active_file:12 inactive_file:15 isolated_file:0 [ 2044.157588] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2044.157588] slab_reclaimable:12966 slab_unreclaimable:115667 [ 2044.157588] mapped:52868 shmem:31509 pagetables:741 bounce:0 [ 2044.157588] free:13972 free_pcp:117 free_cma:0 [ 2044.160556] (UM) [ 2044.160816] Node 0 active_anon:89808kB inactive_anon:80080kB active_file:52kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211472kB dirty:0kB writeback:0kB shmem:84332kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2044.164946] 4*64kB (UM) [ 2044.178286] Node 1 active_anon:808kB inactive_anon:41436kB active_file:0kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:41704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2044.181110] 7*128kB [ 2044.183458] Node 0 [ 2044.185709] (UME) 3*256kB (UE) 3*512kB (UE) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 10972kB [ 2044.185745] Node 0 DMA32: 577*4kB (ME) 358*8kB (UME) 106*16kB (ME) 353*32kB (UME) 0*64kB 0*128kB 0*256kB [ 2044.199587] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2044.204219] 0*512kB [ 2044.210550] lowmem_reserve[]: [ 2044.214043] 0*1024kB [ 2044.221343] 0 [ 2044.224252] 0*2048kB [ 2044.224977] 2717 [ 2044.234023] 0*4096kB [ 2044.274681] 2718 [ 2044.304350] = 18164kB [ 2044.335706] 2718 [ 2044.345839] Node 0 [ 2044.358363] 2718 [ 2044.381425] Normal: [ 2044.390454] 0*4kB [ 2044.392839] Node 0 [ 2044.394874] 0*8kB [ 2044.400134] DMA32 free:18132kB min:36200kB low:45248kB high:54296kB active_anon:89768kB inactive_anon:80080kB active_file:52kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7168kB pagetables:2964kB bounce:0kB free_pcp:348kB local_pcp:144kB free_cma:0kB [ 2044.406634] 0*16kB [ 2044.413312] lowmem_reserve[]: [ 2044.447321] 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2044.454742] 0 0 0 0 0 [ 2044.462017] Node 1 [ 2044.462233] Node 0 [ 2044.462236] Normal: 16*4kB [ 2044.464549] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2044.468509] (M) [ 2044.476450] lowmem_reserve[]: [ 2044.500351] 16*8kB (M) 12*16kB (UM) 725*32kB (UM) 48*64kB (UM) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26784kB [ 2044.505382] 0 0 0 0 0 [ 2044.515179] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2044.525666] Node 1 Normal free:26784kB min:53696kB low:67120kB high:80544kB active_anon:808kB inactive_anon:41436kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:0kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2044.531503] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2044.563305] lowmem_reserve[]: 0 0 0 0 0 [ 2044.568722] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2044.575476] Node 0 DMA: 13*4kB (UME) 19*8kB (UME) 29*16kB (UME) 22*32kB (UM) 4*64kB (UM) 7*128kB (UME) 3*256kB (UE) 3*512kB (UE) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 10972kB [ 2044.579747] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2044.601142] Node 0 DMA32: 577*4kB (ME) 358*8kB (UME) 106*16kB (ME) 353*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18164kB [ 2044.607141] 31536 total pagecache pages [ 2044.621533] 0 pages in swap cache [ 2044.623345] Node 0 [ 2044.624995] Swap cache stats: add 0, delete 0, find 0/0 [ 2044.625001] Normal: [ 2044.630648] Free swap = 0kB [ 2044.632595] 0*4kB [ 2044.634893] Total swap = 0kB [ 2044.645195] 2097051 pages RAM [ 2044.646106] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2044.651746] 0 pages HighMem/MovableOnly [ 2044.663161] 363846 pages reserved [ 2044.665393] Node 1 Normal: 16*4kB (M) 16*8kB (M) 12*16kB (UM) 725*32kB (UM) 48*64kB (UM) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26784kB [ 2044.669960] 0 pages cma reserved [ 2044.688988] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2044.708745] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2044.739344] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2044.764674] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2044.799497] 32720 total pagecache pages [ 2044.810127] 0 pages in swap cache [ 2044.825015] Swap cache stats: add 0, delete 0, find 0/0 [ 2044.845275] Free swap = 0kB [ 2044.848336] Total swap = 0kB [ 2044.851349] 2097051 pages RAM [ 2044.854444] 0 pages HighMem/MovableOnly [ 2044.859110] Bluetooth: hci4 command 0x041b tx timeout [ 2044.885316] 363846 pages reserved [ 2044.888779] 0 pages cma reserved [ 2044.892138] Out of memory (oom_kill_allocating_task): Kill process 3624 (syz-fuzzer) score 0 or sacrifice child [ 2044.934201] Killed process 10092 (syz-executor.5) total-vm:84924kB, anon-rss:68kB, file-rss:0kB, shmem-rss:0kB [ 2044.965229] oom_reaper: reaped process 10093 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:2576kB [ 2044.992183] oom_reaper: reaped process 10092 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2045.079424] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2045.118651] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2045.135565] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2045.147877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2045.155808] systemd[1]: Stopped Journal Service. [ 2045.157190] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2045.187311] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2045.193470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2045.198223] systemd[1]: Starting Journal Service... [ 2045.205793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2045.228471] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2045.234551] 8021q: adding VLAN 0 to HW filter on device team0 [ 2045.262169] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2045.269446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2045.284949] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2045.327837] bridge0: port 1(bridge_slave_0) entered blocking state [ 2045.334251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2045.344293] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2045.356804] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2045.369201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2045.381613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2045.395461] bridge0: port 2(bridge_slave_1) entered blocking state [ 2045.401837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2045.410470] systemd-journald[11447]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 2045.461425] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2045.477428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2045.519191] Bluetooth: hci1 command 0x040f tx timeout [ 2045.573677] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2045.598648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2045.615999] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2045.646531] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2045.664112] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2045.675219] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2045.680443] CPU: 1 PID: 11215 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 2045.688342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2045.697686] Call Trace: [ 2045.700354] dump_stack+0x1b2/0x281 [ 2045.703966] warn_alloc.cold+0x96/0x1cc [ 2045.707922] ? zone_watermark_ok_safe+0x220/0x220 [ 2045.712754] __alloc_pages_nodemask+0x2127/0x2720 [ 2045.717874] ? lock_acquire+0x170/0x3f0 [ 2045.721831] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2045.726656] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2045.732088] ? __mutex_unlock_slowpath+0x75/0x770 [ 2045.736910] alloc_pages_current+0x155/0x260 [ 2045.741296] ion_page_pool_alloc+0x118/0x1b0 [ 2045.745684] ion_system_heap_allocate+0x133/0x8c0 [ 2045.750506] ? _raw_spin_unlock+0x29/0x40 [ 2045.754633] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2045.759541] ? ion_system_contig_heap_create+0x130/0x130 [ 2045.765055] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2045.770051] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2045.774872] ion_alloc+0x27a/0x810 [ 2045.778409] ? ion_dma_buf_release+0x40/0x40 [ 2045.782909] ? __might_fault+0x177/0x1b0 [ 2045.786951] ion_ioctl+0xea/0x1f0 [ 2045.790382] ? ion_query_heaps+0x360/0x360 [ 2045.794596] ? _raw_spin_unlock+0x29/0x40 [ 2045.798720] ? ion_query_heaps+0x360/0x360 [ 2045.802959] do_vfs_ioctl+0x75a/0xff0 [ 2045.806743] ? ioctl_preallocate+0x1a0/0x1a0 [ 2045.811128] ? lock_downgrade+0x740/0x740 [ 2045.815344] ? __fget+0x225/0x360 [ 2045.818777] ? do_vfs_ioctl+0xff0/0xff0 [ 2045.822733] ? security_file_ioctl+0x83/0xb0 [ 2045.827122] SyS_ioctl+0x7f/0xb0 [ 2045.830466] ? do_vfs_ioctl+0xff0/0xff0 [ 2045.834468] do_syscall_64+0x1d5/0x640 [ 2045.838340] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2045.843506] RIP: 0033:0x466459 [ 2045.846672] RSP: 002b:00007f27c4f04188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2045.854354] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 2045.861599] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2045.868946] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2045.876208] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 2045.883468] R13: 00007ffda0b0ca7f R14: 00007f27c4f04300 R15: 0000000000022000 [ 2045.933185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2045.946330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2045.953960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2045.975763] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2045.986050] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2046.005330] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2046.020693] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2046.035635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2046.043189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2046.065759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2046.073431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2046.116894] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2046.122906] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2046.158664] chnl_net:caif_netlink_parms(): no params data found [ 2046.203570] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2046.215677] warn_alloc_show_mem: 1 callbacks suppressed [ 2046.215680] Mem-Info: [ 2046.223459] active_anon:22615 inactive_anon:32408 isolated_anon:0 [ 2046.223459] active_file:1623 inactive_file:1365 isolated_file:0 [ 2046.223459] unevictable:0 dirty:37 writeback:0 unstable:0 [ 2046.223459] slab_reclaimable:12995 slab_unreclaimable:117454 [ 2046.223459] mapped:46137 shmem:33553 pagetables:696 bounce:0 [ 2046.223459] free:153759 free_pcp:370 free_cma:0 [ 2046.234486] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2046.273606] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2046.281472] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2046.309470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2046.318210] Node 0 active_anon:89720kB inactive_anon:88196kB active_file:3828kB inactive_file:3292kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:180464kB dirty:148kB writeback:0kB shmem:92508kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2046.322823] systemd[1]: Started Journal Service. [ 2046.351393] Node 1 active_anon:740kB inactive_anon:41436kB active_file:2864kB inactive_file:2068kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4184kB dirty:0kB writeback:0kB shmem:41704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2046.391936] Node 0 DMA free:11028kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:600kB inactive_file:104kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2046.393353] bridge0: port 1(bridge_slave_0) entered blocking state [ 2046.429540] bridge0: port 1(bridge_slave_0) entered disabled state [ 2046.430054] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2046.437155] device bridge_slave_0 entered promiscuous mode [ 2046.442009] Node 0 DMA32 free:487200kB min:36200kB low:45248kB high:54296kB active_anon:89780kB inactive_anon:88196kB active_file:3428kB inactive_file:3188kB unevictable:0kB writepending:148kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7136kB pagetables:2784kB bounce:0kB free_pcp:1268kB local_pcp:668kB free_cma:0kB [ 2046.479465] lowmem_reserve[]: 0 0 0 0 0 [ 2046.491199] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2046.491220] bridge0: port 2(bridge_slave_1) entered blocking state [ 2046.491245] bridge0: port 2(bridge_slave_1) entered disabled state [ 2046.526481] lowmem_reserve[]: 0 0 0 0 0 [ 2046.533755] Node 1 Normal free:114120kB min:53696kB low:67120kB high:80544kB active_anon:740kB inactive_anon:41436kB active_file:2964kB inactive_file:1968kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:0kB bounce:0kB free_pcp:196kB local_pcp:68kB free_cma:0kB [ 2046.545987] device bridge_slave_1 entered promiscuous mode [ 2046.565749] lowmem_reserve[]: 0 0 0 0 0 [ 2046.572369] Node 0 DMA: 23*4kB (UME) 29*8kB (UME) 21*16kB (UME) 16*32kB (UM) 0*64kB 3*128kB (UME) 3*256kB (UE) 3*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11028kB [ 2046.589169] Node 0 DMA32: 4602*4kB (UM) 6358*8kB (UE) 10396*16kB (UME) 7813*32kB (UME) 15*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 486584kB [ 2046.605765] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2046.616712] Node 1 Normal: 1580*4kB (UM) 2665*8kB (UM) 2137*16kB (UM) 1634*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 114120kB [ 2046.631733] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2046.640988] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2046.642059] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2046.650658] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2046.665229] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2046.674268] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2046.683965] 36688 total pagecache pages [ 2046.688558] 0 pages in swap cache [ 2046.692450] Swap cache stats: add 0, delete 0, find 0/0 [ 2046.698822] Free swap = 0kB [ 2046.707938] Total swap = 0kB [ 2046.710960] 2097051 pages RAM [ 2046.714050] 0 pages HighMem/MovableOnly [ 2046.714834] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2046.719565] 363846 pages reserved [ 2046.726856] team0: Port device team_slave_0 added [ 2046.732989] 0 pages cma reserved [ 2046.733915] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2046.748565] team0: Port device team_slave_1 added [ 2046.785032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2046.794342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2046.824542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2046.841429] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2046.854913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2046.865481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2046.894818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2046.911591] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2046.923842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2046.938853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2046.966387] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2046.973598] Bluetooth: hci4 command 0x040f tx timeout [ 2046.988035] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2047.049287] device hsr_slave_0 entered promiscuous mode [ 2047.064640] device hsr_slave_1 entered promiscuous mode [ 2047.074770] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2047.083953] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2047.102506] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2047.109787] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2047.118728] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2047.126810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2047.134708] device bridge_slave_1 left promiscuous mode [ 2047.144049] bridge0: port 2(bridge_slave_1) entered disabled state [ 2047.153104] device bridge_slave_0 left promiscuous mode [ 2047.162290] bridge0: port 1(bridge_slave_0) entered disabled state [ 2047.172841] device veth1_macvtap left promiscuous mode [ 2047.181833] device veth0_macvtap left promiscuous mode [ 2047.188613] device veth1_vlan left promiscuous mode [ 2047.193655] device veth0_vlan left promiscuous mode [ 2047.383490] device hsr_slave_1 left promiscuous mode [ 2047.398857] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2047.428208] device hsr_slave_0 left promiscuous mode [ 2047.444894] in:imklog cpuset=/ mems_allowed=0-1 [ 2047.457944] CPU: 1 PID: 11176 Comm: in:imklog Not tainted 4.14.228-syzkaller #0 [ 2047.465390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2047.474732] Call Trace: [ 2047.475044] syz-executor.1: page allocation failure: order:0 [ 2047.477313] dump_stack+0x1b2/0x281 [ 2047.477340] dump_header+0x178/0x82f [ 2047.483127] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2047.486730] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2047.486738] ? ___ratelimit+0x2cd/0x530 [ 2047.486746] oom_kill_process.cold+0x10/0xb18 [ 2047.486762] out_of_memory+0xe3e/0x1190 [ 2047.486773] ? oom_killer_disable+0x1c0/0x1c0 [ 2047.492598] (null) [ 2047.497537] ? mutex_trylock+0x152/0x1a0 [ 2047.497548] __alloc_pages_nodemask+0x23e1/0x2720 [ 2047.497568] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2047.502642] syz-executor.1 cpuset= [ 2047.506606] alloc_pages_current+0x155/0x260 [ 2047.506617] filemap_fault+0xea3/0x1980 [ 2047.506638] ext4_filemap_fault+0x84/0xb0 [ 2047.512807] / [ 2047.515071] __do_fault+0xfa/0x380 [ 2047.519598] mems_allowed=0-1 [ 2047.521707] __handle_mm_fault+0x2497/0x4620 [ 2047.564143] ? vm_insert_page+0x7c0/0x7c0 [ 2047.568281] ? lock_downgrade+0x740/0x740 [ 2047.572422] handle_mm_fault+0x391/0x860 [ 2047.576466] __do_page_fault+0x549/0xad0 [ 2047.580531] ? spurious_fault+0x640/0x640 [ 2047.584661] ? do_page_fault+0x60/0x500 [ 2047.588633] ? page_fault+0x2f/0x50 [ 2047.592240] page_fault+0x45/0x50 [ 2047.595674] RIP: 1fa0:0x1f9f [ 2047.598669] RSP: 0000:00005591479739d0 EFLAGS: 7f05f4ab7da0 [ 2047.598688] CPU: 0 PID: 11215 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 2047.605029] Bluetooth: hci1 command 0x0419 tx timeout [ 2047.612264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2047.618829] Mem-Info: [ 2047.626767] Call Trace: [ 2047.626784] dump_stack+0x1b2/0x281 [ 2047.626797] warn_alloc.cold+0x96/0x1cc [ 2047.626815] ? zone_watermark_ok_safe+0x220/0x220 [ 2047.629215] active_anon:22616 inactive_anon:32408 isolated_anon:0 [ 2047.629215] active_file:21 inactive_file:21 isolated_file:0 [ 2047.629215] unevictable:0 dirty:22 writeback:0 unstable:0 [ 2047.629215] slab_reclaimable:12989 slab_unreclaimable:117226 [ 2047.629215] mapped:43925 shmem:33553 pagetables:696 bounce:0 [ 2047.629215] free:13800 free_pcp:94 free_cma:0 [ 2047.631771] ? usleep_range+0x130/0x130 [ 2047.635415] Node 0 active_anon:89724kB inactive_anon:88196kB active_file:40kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175616kB dirty:88kB writeback:0kB shmem:92508kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2047.639347] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2047.644178] Node 1 active_anon:740kB inactive_anon:41436kB active_file:44kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:84kB dirty:0kB writeback:0kB shmem:41704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2047.677378] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2047.677387] ? run_timer_softirq+0x5a0/0x5a0 [ 2047.677404] __alloc_pages_nodemask+0x2127/0x2720 [ 2047.681347] Node 0 [ 2047.709017] ? lock_acquire+0x170/0x3f0 [ 2047.709032] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2047.714112] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2047.740882] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2047.740895] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2047.740905] ? retint_kernel+0x2d/0x2d [ 2047.745900] lowmem_reserve[]: [ 2047.750281] alloc_pages_current+0x155/0x260 [ 2047.755105] 0 [ 2047.757313] ion_page_pool_alloc+0x118/0x1b0 [ 2047.761253] 2717 [ 2047.766075] ion_system_heap_allocate+0x133/0x8c0 [ 2047.766085] ? _raw_spin_unlock+0x29/0x40 [ 2047.766095] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2047.791667] 2718 [ 2047.796131] ? ion_system_contig_heap_create+0x130/0x130 [ 2047.796139] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2047.796149] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2047.801576] 2718 [ 2047.805445] ion_alloc+0x27a/0x810 [ 2047.805461] ? ion_dma_buf_release+0x40/0x40 [ 2047.808537] 2718 [ 2047.812926] ? __might_fault+0x177/0x1b0 [ 2047.819114] ion_ioctl+0xea/0x1f0 [ 2047.819122] ? ion_query_heaps+0x360/0x360 [ 2047.819134] ? _raw_spin_unlock+0x29/0x40 [ 2047.821252] Node 0 [ 2047.826071] ? ion_query_heaps+0x360/0x360 [ 2047.826081] do_vfs_ioctl+0x75a/0xff0 [ 2047.826092] ? ioctl_preallocate+0x1a0/0x1a0 [ 2047.830219] DMA32 free:17932kB min:36200kB low:45248kB high:54296kB active_anon:89684kB inactive_anon:88196kB active_file:60kB inactive_file:48kB unevictable:0kB writepending:188kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7136kB pagetables:2784kB bounce:0kB free_pcp:256kB local_pcp:136kB free_cma:0kB [ 2047.835114] ? lock_downgrade+0x740/0x740 [ 2047.835126] ? __fget+0x225/0x360 [ 2047.835134] ? do_vfs_ioctl+0xff0/0xff0 [ 2047.837168] lowmem_reserve[]: [ 2047.842597] ? security_file_ioctl+0x83/0xb0 [ 2047.847606] 0 [ 2047.852417] SyS_ioctl+0x7f/0xb0 [ 2047.854451] 0 [ 2047.857974] ? do_vfs_ioctl+0xff0/0xff0 [ 2047.857984] do_syscall_64+0x1d5/0x640 [ 2047.857998] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2047.862371] 0 [ 2047.864413] RIP: 0033:0x466459 [ 2047.868457] 0 [ 2047.871889] RSP: 002b:00007f27c4f04188 EFLAGS: 00000246 [ 2047.876109] 0 [ 2047.880221] ORIG_RAX: 0000000000000010 [ 2047.886636] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 2047.886641] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2047.886646] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2047.886651] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 2047.886657] R13: 00007ffda0b0ca7f R14: 00007f27c4f04300 R15: 0000000000022000 [ 2047.890441] Node 0 [ 2047.904197] team0 (unregistering): Port device team_slave_1 removed [ 2047.949589] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2047.956669] Mem-Info: [ 2047.962509] lowmem_reserve[]: [ 2047.964725] team0 (unregistering): Port device team_slave_0 removed [ 2047.971621] 0 [ 2047.974990] active_anon:22616 inactive_anon:32408 isolated_anon:0 [ 2047.974990] active_file:16 inactive_file:15 isolated_file:0 [ 2047.974990] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2047.974990] slab_reclaimable:12980 slab_unreclaimable:117234 [ 2047.974990] mapped:43899 shmem:33553 pagetables:696 bounce:0 [ 2047.974990] free:14043 free_pcp:0 free_cma:0 [ 2047.983004] 0 [ 2047.987740] Node 0 active_anon:89724kB inactive_anon:88196kB active_file:60kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175596kB dirty:0kB writeback:0kB shmem:92508kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2048.005866] 0 [ 2048.010134] Node 1 active_anon:740kB inactive_anon:41436kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:41704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2048.025133] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2048.025980] Node 0 [ 2048.059433] 0 [ 2048.062323] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2048.064079] 0 [ 2048.106547] lowmem_reserve[]: [ 2048.160268] 0 [ 2048.166975] Node 1 [ 2048.198356] 2717 [ 2048.200238] Normal free:26668kB min:53696kB low:67120kB high:80544kB active_anon:740kB inactive_anon:41436kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2048.200774] 2718 [ 2048.202848] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2048.233464] 2718 [ 2048.244731] lowmem_reserve[]: [ 2048.250860] 2718 [ 2048.253991] 0 [ 2048.262809] bond0 (unregistering): Released all slaves [ 2048.263847] Node 0 [ 2048.272981] 0 0 0 0 [ 2048.283073] Node 0 DMA: 12*4kB (ME) 14*8kB (UME) 12*16kB (UME) 8*32kB (UM) 2*64kB (M) 6*128kB (UME) 3*256kB (UE) 3*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10976kB [ 2048.287917] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2048.305445] DMA32 free:19460kB min:36200kB low:45248kB high:54296kB active_anon:89684kB inactive_anon:88196kB active_file:60kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7136kB pagetables:2784kB bounce:0kB free_pcp:32kB local_pcp:464kB free_cma:0kB [ 2048.309310] Node 0 [ 2048.335687] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2048.342053] DMA32: 281*4kB (UME) 147*8kB (UME) 153*16kB (UME) 403*32kB (UME) 18*64kB (UM) 2*128kB (M) 0*256kB 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 19564kB [ 2048.344557] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2048.364975] lowmem_reserve[]: 0 0 0 0 0 [ 2048.366616] Node 0 [ 2048.368991] Node 0 [ 2048.368994] Normal: 0*4kB [ 2048.371220] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2048.373433] 0*8kB [ 2048.380320] lowmem_reserve[]: [ 2048.418369] 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2048.421591] 0 0 0 0 0 [ 2048.434406] Node 1 Normal free:26668kB min:53696kB low:67120kB high:80544kB active_anon:740kB inactive_anon:41436kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2048.439971] Node 1 [ 2048.464844] lowmem_reserve[]: 0 0 0 0 0 [ 2048.471166] Node 0 DMA: 12*4kB (ME) 14*8kB (UME) 12*16kB (UME) 8*32kB (UM) 2*64kB (M) 6*128kB (UME) 3*256kB (UE) 3*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10976kB [ 2048.472394] Normal: [ 2048.489738] Node 0 DMA32: 281*4kB (UME) 147*8kB (UME) 153*16kB (UME) 403*32kB (UME) 18*64kB (UM) 2*128kB (M) 0*256kB 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 19564kB [ 2048.496877] 23*4kB (M) 15*8kB (UM) 15*16kB (UM) 705*32kB (UM) 3*64kB (M) 2*128kB (M) 1*256kB (M) 0*512kB 3*1024kB (M) 0*2048kB 0*4096kB = 26788kB [ 2048.515026] Node 0 Normal: 0*4kB 0*8kB [ 2048.528232] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2048.543023] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2048.544902] 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2048.554794] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2048.575267] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2048.581427] Node 1 Normal: 23*4kB (M) 15*8kB (UM) 15*16kB (UM) 705*32kB (UM) 3*64kB (M) 2*128kB [ 2048.583910] 33584 total pagecache pages [ 2048.583920] 0 pages in swap cache [ 2048.606404] Swap cache stats: add 0, delete 0, find 0/0 [ 2048.611855] Free swap = 0kB [ 2048.612912] (M) 1*256kB (M) 0*512kB 3*1024kB (M) 0*2048kB 0*4096kB = 26788kB [ 2048.616570] Total swap = 0kB [ 2048.622324] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2048.628641] 2097051 pages RAM [ 2048.639337] 0 pages HighMem/MovableOnly [ 2048.643295] 363846 pages reserved [ 2048.650766] 0 pages cma reserved [ 2048.654126] Out of memory (oom_kill_allocating_task): Kill process 11176 (in:imklog) score 0 or sacrifice child [ 2048.657074] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2048.669359] Killed process 11174 (rsyslogd) total-vm:254332kB, anon-rss:820kB, file-rss:0kB, shmem-rss:0kB [ 2048.684112] oom_reaper: reaped process 11174 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2048.706877] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2048.716838] kworker/u4:3 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 2048.744166] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2048.748153] kworker/u4:3 cpuset=/ mems_allowed=0-1 [ 2048.760244] CPU: 0 PID: 10677 Comm: kworker/u4:3 Not tainted 4.14.228-syzkaller #0 [ 2048.767944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2048.772466] 33584 total pagecache pages [ 2048.777292] Workqueue: events_unbound call_usermodehelper_exec_work [ 2048.777299] Call Trace: [ 2048.777314] dump_stack+0x1b2/0x281 [ 2048.781263] 0 pages in swap cache [ 2048.787647] dump_header+0x178/0x82f [ 2048.787657] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2048.787667] ? ___ratelimit+0x2cd/0x530 [ 2048.804856] Swap cache stats: add 0, delete 0, find 0/0 [ 2048.806052] oom_kill_process.cold+0x10/0xb18 [ 2048.809995] Free swap = 0kB [ 2048.815337] ? lock_downgrade+0x740/0x740 [ 2048.815351] out_of_memory+0x2dc/0x1190 [ 2048.815364] ? oom_killer_disable+0x1c0/0x1c0 [ 2048.834854] Total swap = 0kB [ 2048.835396] ? mutex_trylock+0x152/0x1a0 [ 2048.838387] 2097051 pages RAM [ 2048.842445] __alloc_pages_nodemask+0x23e1/0x2720 [ 2048.850364] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2048.854848] 0 pages HighMem/MovableOnly [ 2048.855194] ? fs_reclaim_release+0xd0/0x110 [ 2048.859139] 363846 pages reserved [ 2048.863537] ? kmem_cache_alloc_node+0x38b/0x410 [ 2048.871697] copy_process.part.0+0x265/0x71c0 [ 2048.876182] ? __lock_acquire+0x5fc/0x3f20 [ 2048.880408] ? debug_object_activate+0x292/0x490 [ 2048.884844] 0 pages cma reserved [ 2048.885166] ? static_obj+0x50/0x50 [ 2048.892114] ? lock_acquire+0x170/0x3f0 [ 2048.896079] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 2048.901519] ? __cleanup_sighand+0x40/0x40 [ 2048.905743] ? mod_timer+0x4e7/0xf70 [ 2048.909450] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 2048.914889] _do_fork+0x184/0xc80 [ 2048.918330] ? fork_idle+0x270/0x270 [ 2048.922027] ? mark_held_locks+0xa6/0xf0 [ 2048.926072] ? _raw_spin_unlock_irq+0x24/0x80 [ 2048.930555] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2048.935557] ? _raw_spin_unlock_irq+0x5a/0x80 [ 2048.940038] ? kernel_sigaction+0x13b/0x200 [ 2048.944350] ? recalc_sigpending+0x1d0/0x1d0 [ 2048.948750] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 2048.954186] kernel_thread+0x2f/0x40 [ 2048.957889] call_usermodehelper_exec_work+0x97/0x2a0 [ 2048.963153] ? call_usermodehelper+0x80/0x80 [ 2048.967549] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2048.973014] process_one_work+0x793/0x14a0 [ 2048.977245] ? work_busy+0x320/0x320 [ 2048.980947] ? worker_thread+0x158/0xff0 [ 2048.984998] ? _raw_spin_unlock_irq+0x24/0x80 [ 2048.989484] worker_thread+0x5cc/0xff0 [ 2048.993367] ? rescuer_thread+0xc80/0xc80 [ 2048.997498] kthread+0x30d/0x420 [ 2049.000850] ? kthread_create_on_node+0xd0/0xd0 [ 2049.005505] ret_from_fork+0x24/0x30 [ 2049.016272] Bluetooth: hci4 command 0x0419 tx timeout [ 2049.444864] Mem-Info: [ 2049.447392] active_anon:22403 inactive_anon:32408 isolated_anon:0 [ 2049.447392] active_file:614 inactive_file:1578 isolated_file:0 [ 2049.447392] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2049.447392] slab_reclaimable:12969 slab_unreclaimable:118697 [ 2049.447392] mapped:44956 shmem:33553 pagetables:666 bounce:0 [ 2049.447392] free:308403 free_pcp:542 free_cma:0 [ 2049.486022] Node 0 active_anon:88872kB inactive_anon:88196kB active_file:256kB inactive_file:760kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175796kB dirty:0kB writeback:0kB shmem:92508kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2049.515163] Node 1 active_anon:740kB inactive_anon:41436kB active_file:2200kB inactive_file:5552kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4028kB dirty:0kB writeback:0kB shmem:41704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2049.564822] Node 0 DMA free:11424kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2049.624818] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2049.644813] Node 0 DMA32 free:396732kB min:36200kB low:45248kB high:54296kB active_anon:88932kB inactive_anon:88196kB active_file:456kB inactive_file:960kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7040kB pagetables:2664kB bounce:0kB free_pcp:1280kB local_pcp:660kB free_cma:0kB [ 2049.675885] lowmem_reserve[]: 0 0 0 0 0 [ 2049.694843] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2049.754802] lowmem_reserve[]: 0 0 0 0 0 [ 2049.758820] Node 1 Normal free:1031252kB min:53696kB low:67120kB high:80544kB active_anon:740kB inactive_anon:41436kB active_file:2200kB inactive_file:5552kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:0kB bounce:0kB free_pcp:1444kB local_pcp:700kB free_cma:0kB [ 2049.814814] lowmem_reserve[]: 0 0 0 0 0 [ 2049.818911] Node 0 DMA: 23*4kB (UME) 29*8kB (UME) 25*16kB (UME) 21*32kB (UM) 5*64kB (UM) 8*128kB (UME) 3*256kB (UE) 3*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 12212kB [ 2049.836124] Node 0 DMA32: 5848*4kB (UME) 7431*8kB (UE) 10586*16kB (UE) 7596*32kB (UE) 168*64kB (U) 2*128kB (U) 0*256kB 0*512kB 9*1024kB (U) 0*2048kB 0*4096kB = 515512kB [ 2049.875230] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2049.890721] Node 1 Normal: 1615*4kB (UM) 2690*8kB (UM) 2149*16kB (UM) 1250*32kB (UM) 781*64kB (UM) 438*128kB (UM) 185*256kB (UM) 83*512kB (UM) 533*1024kB (UM) 121*2048kB (U) 1*4096kB (U) = 1095964kB [ 2049.908969] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2049.918704] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2049.928607] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2049.939330] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2049.948127] 36088 total pagecache pages [ 2049.952410] 0 pages in swap cache [ 2049.957279] Swap cache stats: add 0, delete 0, find 0/0 [ 2049.962802] Free swap = 0kB [ 2049.966803] Total swap = 0kB [ 2049.969883] 2097051 pages RAM [ 2049.972483] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2049.972976] 0 pages HighMem/MovableOnly [ 2049.985024] 363846 pages reserved [ 2049.988475] 0 pages cma reserved [ 2049.991827] Out of memory: Kill process 7964 (syz-fuzzer) score 10 or sacrifice child [ 2049.994842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2050.001286] Killed process 10616 (syz-executor.2) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 2050.007672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2050.026473] device veth0_vlan entered promiscuous mode [ 2050.035152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2050.043760] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2050.052928] device veth1_vlan entered promiscuous mode [ 2050.066290] oom_reaper: reaped process 10616 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2050.074152] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2050.087689] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2050.095279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2050.103005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2050.112823] device veth0_macvtap entered promiscuous mode [ 2050.121457] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2050.142392] device veth1_macvtap entered promiscuous mode [ 2050.153347] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2050.185716] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2050.220265] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2050.250859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2050.264171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2050.273420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2050.286257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2050.296534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2050.308301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2050.319910] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2050.329109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2050.343004] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2050.352782] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2050.361495] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2050.376106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2050.388982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2050.401930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2050.412013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2050.424449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2050.433639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2050.443490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2050.453867] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2050.460973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2050.471741] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2050.480680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2050.516727] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2050.575722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2050.591274] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2050.609089] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2050.615570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2050.622751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2050.637423] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2050.643505] 8021q: adding VLAN 0 to HW filter on device team0 [ 2050.653511] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2050.669664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2050.688626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2050.700509] bridge0: port 1(bridge_slave_0) entered blocking state [ 2050.706920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2050.724814] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2050.734113] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2050.745760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2050.758150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2050.767409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2050.779166] bridge0: port 2(bridge_slave_1) entered blocking state [ 2050.785562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2050.801825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2050.813435] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2050.828973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2050.842153] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2050.854199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2050.863172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2050.877632] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2050.885705] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2050.892591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2050.908310] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2050.919189] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2050.930048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2050.942236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2050.953350] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2050.960336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2050.968842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2050.982543] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2050.988784] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2051.003190] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2051.011286] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2051.017727] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2051.024419] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2051.035229] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2051.041908] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2051.049844] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2051.056645] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2051.064561] device bridge_slave_1 left promiscuous mode [ 2051.070622] bridge0: port 2(bridge_slave_1) entered disabled state [ 2051.078236] device bridge_slave_0 left promiscuous mode [ 2051.083747] bridge0: port 1(bridge_slave_0) entered disabled state [ 2051.093292] device veth1_macvtap left promiscuous mode [ 2051.098889] device veth0_macvtap left promiscuous mode [ 2051.104317] device veth1_vlan left promiscuous mode [ 2051.110179] device veth0_vlan left promiscuous mode [ 2051.215785] device hsr_slave_1 left promiscuous mode [ 2051.224039] device hsr_slave_0 left promiscuous mode [ 2051.241400] team0 (unregistering): Port device team_slave_1 removed [ 2051.254714] team0 (unregistering): Port device team_slave_0 removed [ 2051.264562] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2051.276094] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2051.311494] bond0 (unregistering): Released all slaves [ 2051.327060] 8021q: adding VLAN 0 to HW filter on device batadv0 06:41:51 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10001, 0x2, 0x0, 0xffffffffffffffff}) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000000)=0x3, 0x1) r3 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@sco={0x1f, @none}, &(0x7f00000000c0)=0x80, 0x1000) connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @any, 0x80}, 0xa) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, 0x0) 06:41:51 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x806, 0x800) r1 = socket(0x21, 0x800, 0x7) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000040)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000240)={{r2, 0xf3, 0xca, 0x5, 0xd4, 0x1, 0x5, 0x1, 0x1f, 0x2, 0x9, 0x100000000, 0x5, 0x1, 0x4}, 0x18, [0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000300)={0x0, r3, "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", "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"}) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, 0x0) 06:41:51 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7ffffffd}) 06:41:51 executing program 2: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000080)={0x34, 0x0, &(0x7f0000000040)}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7ffffffd, 0x22}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0x1}) [ 2051.436169] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2051.449397] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2051.457493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2051.468217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2051.514097] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2051.526052] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2051.532936] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2051.546347] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2051.559367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2051.569268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2051.586336] device veth0_vlan entered promiscuous mode [ 2051.598381] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2051.606807] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2051.616686] device veth1_vlan entered promiscuous mode [ 2051.622566] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2051.638597] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2051.656599] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2051.669546] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2051.676598] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2051.684021] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2051.694422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2051.702237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2051.713976] device veth0_macvtap entered promiscuous mode [ 2051.720815] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2051.735447] device veth1_macvtap entered promiscuous mode [ 2051.741680] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2051.755818] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2051.777806] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2051.799857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2051.824588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2051.833727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2051.864593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2051.873732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2051.883667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2051.894963] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2051.901917] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2051.910061] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2051.923229] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2051.933646] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2051.942176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2051.954875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2051.965385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2051.974478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2051.984702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2051.993802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2052.003753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2052.014195] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2052.021878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2052.029359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2052.037695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 06:41:52 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7ffffffd, 0x22}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x1}) 06:41:52 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x185102, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/btrfs-control\x00', 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffd) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x7ffffffd}) 06:41:52 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r0, 0x8919, &(0x7f00000000c0)={'vcan0\x00', @ifru_ivalue}) r1 = socket(0x29, 0x80006, 0x6) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00082bbd800005000000020000000a000900ffffffffffff0000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) 06:41:52 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000140)=""/4096, &(0x7f0000000040)=0x1000) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7ffffffd, 0x22}) 06:41:52 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x11, 0x4d0800) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)={0x90b8}, 0x4) r1 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xc, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x7f}) 06:41:52 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7ffffffd, 0x22}) 06:41:52 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7ffffffd, 0x22}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x1}) [ 2052.853579] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2052.853600] syz-executor.1: page allocation failure: order:4 [ 2052.865093] syz-executor.4: [ 2052.880546] (null) [ 2052.887568] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2052.891531] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2052.912811] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2052.919735] CPU: 1 PID: 11746 Comm: syz-executor.3 Not tainted 4.14.228-syzkaller #0 [ 2052.928536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2052.937978] Call Trace: [ 2052.939147] syz-executor.1 cpuset= [ 2052.940561] dump_stack+0x1b2/0x281 [ 2052.940576] warn_alloc.cold+0x96/0x1cc [ 2052.940588] ? zone_watermark_ok_safe+0x220/0x220 [ 2052.947456] / [ 2052.947731] __alloc_pages_nodemask+0x2127/0x2720 [ 2052.960565] mems_allowed=0-1 [ 2052.963045] ? lock_acquire+0x170/0x3f0 [ 2052.963061] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2052.963078] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2052.980557] ? __mutex_unlock_slowpath+0x75/0x770 [ 2052.985390] alloc_pages_current+0x155/0x260 [ 2052.989797] ion_page_pool_alloc+0x118/0x1b0 [ 2052.994210] ion_system_heap_allocate+0x133/0x8c0 [ 2052.999043] ? ion_alloc+0x187/0x810 [ 2053.002751] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2053.008197] ? ion_system_contig_heap_create+0x130/0x130 [ 2053.013637] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2053.018652] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2053.023485] ion_alloc+0x204/0x810 [ 2053.027037] ? ion_dma_buf_release+0x40/0x40 [ 2053.031440] ? __might_fault+0x177/0x1b0 [ 2053.035490] ion_ioctl+0xea/0x1f0 [ 2053.038935] ? ion_query_heaps+0x360/0x360 [ 2053.043164] ? ion_query_heaps+0x360/0x360 [ 2053.047397] do_vfs_ioctl+0x75a/0xff0 [ 2053.051193] ? ioctl_preallocate+0x1a0/0x1a0 [ 2053.055591] ? lock_downgrade+0x740/0x740 [ 2053.059739] ? __fget+0x225/0x360 [ 2053.063201] ? do_vfs_ioctl+0xff0/0xff0 [ 2053.067181] ? security_file_ioctl+0x83/0xb0 [ 2053.071585] SyS_ioctl+0x7f/0xb0 [ 2053.074935] ? do_vfs_ioctl+0xff0/0xff0 [ 2053.078905] do_syscall_64+0x1d5/0x640 [ 2053.082788] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2053.087971] RIP: 0033:0x466459 [ 2053.091149] RSP: 002b:00007fd4b8064188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2053.098844] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2053.106106] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2053.113458] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2053.120719] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2053.127978] R13: 00007ffca99dab2f R14: 00007fd4b8064300 R15: 0000000000022000 [ 2053.138650] CPU: 0 PID: 11742 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 2053.146539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2053.152321] syz-executor.4 cpuset= [ 2053.155877] Call Trace: [ 2053.155894] dump_stack+0x1b2/0x281 [ 2053.155908] warn_alloc.cold+0x96/0x1cc [ 2053.155919] ? zone_watermark_ok_safe+0x220/0x220 [ 2053.155938] __alloc_pages_nodemask+0x2127/0x2720 [ 2053.166103] / [ 2053.169675] ? lock_acquire+0x170/0x3f0 [ 2053.183115] mems_allowed=0-1 [ 2053.184975] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2053.184993] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2053.185005] ? __mutex_unlock_slowpath+0x75/0x770 [ 2053.185018] alloc_pages_current+0x155/0x260 [ 2053.207549] ion_page_pool_alloc+0x118/0x1b0 [ 2053.211953] ion_system_heap_allocate+0x133/0x8c0 [ 2053.216778] ? ion_alloc+0x187/0x810 [ 2053.220471] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2053.225900] ? ion_system_contig_heap_create+0x130/0x130 [ 2053.231328] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2053.236326] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2053.241179] ion_alloc+0x204/0x810 [ 2053.244702] ? ion_dma_buf_release+0x40/0x40 [ 2053.249089] ? __might_fault+0x177/0x1b0 [ 2053.253129] ion_ioctl+0xea/0x1f0 [ 2053.256560] ? ion_query_heaps+0x360/0x360 [ 2053.260771] ? ion_query_heaps+0x360/0x360 [ 2053.264989] do_vfs_ioctl+0x75a/0xff0 [ 2053.268768] ? ioctl_preallocate+0x1a0/0x1a0 [ 2053.273155] ? lock_downgrade+0x740/0x740 [ 2053.277283] ? __fget+0x225/0x360 [ 2053.280714] ? do_vfs_ioctl+0xff0/0xff0 [ 2053.284675] ? security_file_ioctl+0x83/0xb0 [ 2053.289071] SyS_ioctl+0x7f/0xb0 [ 2053.292420] ? do_vfs_ioctl+0xff0/0xff0 [ 2053.296374] do_syscall_64+0x1d5/0x640 [ 2053.300246] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2053.305422] RIP: 0033:0x466459 [ 2053.308590] RSP: 002b:00007f27c4f46188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2053.316359] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2053.323622] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2053.330870] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2053.338118] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2053.345364] R13: 00007ffda0b0ca7f R14: 00007f27c4f46300 R15: 0000000000022000 [ 2053.352669] CPU: 1 PID: 11732 Comm: syz-executor.4 Not tainted 4.14.228-syzkaller #0 [ 2053.360554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2053.370014] Call Trace: [ 2053.372600] dump_stack+0x1b2/0x281 [ 2053.376233] warn_alloc.cold+0x96/0x1cc [ 2053.380312] ? zone_watermark_ok_safe+0x220/0x220 [ 2053.385182] __alloc_pages_nodemask+0x2127/0x2720 [ 2053.390017] ? _raw_spin_unlock_irq+0x5a/0x80 [ 2053.394508] ? finish_task_switch+0x178/0x610 [ 2053.399004] ? finish_task_switch+0x14d/0x610 [ 2053.403497] ? lock_acquire+0x170/0x3f0 [ 2053.407483] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2053.412350] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2053.417823] ? __mutex_unlock_slowpath+0x75/0x770 [ 2053.422656] ? alloc_pages_current+0x84/0x260 [ 2053.427150] alloc_pages_current+0x155/0x260 [ 2053.431557] ion_page_pool_alloc+0x118/0x1b0 [ 2053.435965] ion_system_heap_allocate+0x133/0x8c0 [ 2053.440811] ? ion_alloc+0x187/0x810 [ 2053.444533] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2053.449987] ? ion_system_contig_heap_create+0x130/0x130 [ 2053.455439] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2053.460451] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2053.465389] ion_alloc+0x204/0x810 [ 2053.468943] ? ion_dma_buf_release+0x40/0x40 [ 2053.473367] ? __might_fault+0x177/0x1b0 [ 2053.477431] ion_ioctl+0xea/0x1f0 [ 2053.480878] ? ion_query_heaps+0x360/0x360 [ 2053.485112] ? ion_query_heaps+0x360/0x360 [ 2053.489361] do_vfs_ioctl+0x75a/0xff0 [ 2053.493167] ? ioctl_preallocate+0x1a0/0x1a0 [ 2053.497579] ? lock_downgrade+0x740/0x740 [ 2053.501731] ? __fget+0x225/0x360 [ 2053.505177] ? do_vfs_ioctl+0xff0/0xff0 [ 2053.509154] ? security_file_ioctl+0x83/0xb0 [ 2053.513657] SyS_ioctl+0x7f/0xb0 [ 2053.517027] ? do_vfs_ioctl+0xff0/0xff0 [ 2053.521004] do_syscall_64+0x1d5/0x640 [ 2053.524908] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2053.530095] RIP: 0033:0x466459 [ 2053.533277] RSP: 002b:00007f54ed8a3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2053.540982] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2053.548263] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2053.555531] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2053.562804] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2053.570069] R13: 00007ffe8895ccbf R14: 00007f54ed8a3300 R15: 0000000000022000 [ 2053.621837] Mem-Info: [ 2053.627595] active_anon:22620 inactive_anon:32405 isolated_anon:12 [ 2053.627595] active_file:1768 inactive_file:5836 isolated_file:0 [ 2053.627595] unevictable:0 dirty:102 writeback:0 unstable:0 [ 2053.627595] slab_reclaimable:13029 slab_unreclaimable:116329 [ 2053.627595] mapped:57441 shmem:33549 pagetables:783 bounce:0 [ 2053.627595] free:212906 free_pcp:303 free_cma:0 [ 2053.664309] Node 0 active_anon:89832kB inactive_anon:88184kB active_file:3264kB inactive_file:19724kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:225540kB dirty:400kB writeback:0kB shmem:92492kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2053.710250] Node 1 active_anon:648kB inactive_anon:41436kB active_file:3808kB inactive_file:3620kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:4224kB dirty:8kB writeback:0kB shmem:41704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2053.741303] Node 0 DMA free:11136kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2053.770757] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2053.776575] Node 0 DMA32 free:464120kB min:36200kB low:45248kB high:54296kB active_anon:89792kB inactive_anon:88184kB active_file:3264kB inactive_file:19724kB unevictable:0kB writepending:400kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7392kB pagetables:3132kB bounce:0kB free_pcp:564kB local_pcp:488kB free_cma:0kB [ 2053.811085] lowmem_reserve[]: 0 0 0 0 0 [ 2053.815621] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2053.847377] lowmem_reserve[]: 0 0 0 0 0 [ 2053.857576] Node 1 Normal free:143664kB min:53696kB low:67120kB high:80544kB active_anon:648kB inactive_anon:41436kB active_file:3808kB inactive_file:3620kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:0kB bounce:0kB free_pcp:640kB local_pcp:0kB free_cma:0kB [ 2053.914111] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2053.928473] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2053.953468] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2053.954522] lowmem_reserve[]: [ 2053.958685] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2053.969647] 0 [ 2053.972544] CPU: 0 PID: 11731 Comm: syz-executor.0 Not tainted 4.14.228-syzkaller #0 [ 2053.975789] 0 [ 2053.982202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2053.982206] Call Trace: [ 2053.982223] dump_stack+0x1b2/0x281 [ 2053.982235] warn_alloc.cold+0x96/0x1cc [ 2053.999845] 0 [ 2054.003568] ? zone_watermark_ok_safe+0x220/0x220 [ 2054.003590] __alloc_pages_nodemask+0x2127/0x2720 [ 2054.015014] ? io_schedule_timeout+0x140/0x140 [ 2054.017853] 0 [ 2054.019689] ? lock_acquire+0x170/0x3f0 [ 2054.019704] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2054.026351] 0 [ 2054.030272] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2054.030284] ? __mutex_unlock_slowpath+0x75/0x770 [ 2054.042312] ? retint_kernel+0x2d/0x2d [ 2054.042326] alloc_pages_current+0x155/0x260 [ 2054.042339] ion_page_pool_alloc+0x118/0x1b0 [ 2054.054978] ion_system_heap_allocate+0x133/0x8c0 [ 2054.058786] Node 0 DMA: [ 2054.059809] ? ion_alloc+0x187/0x810 [ 2054.059824] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2054.068593] 22*4kB [ 2054.071605] ? ion_system_contig_heap_create+0x130/0x130 [ 2054.071615] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2054.071627] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2054.084270] (UME) [ 2054.089091] ion_alloc+0x204/0x810 [ 2054.089106] ? ion_dma_buf_release+0x40/0x40 [ 2054.089121] ? __might_fault+0x177/0x1b0 [ 2054.102064] 27*8kB [ 2054.103201] ion_ioctl+0xea/0x1f0 [ 2054.103209] ? ion_query_heaps+0x360/0x360 [ 2054.103220] ? ion_query_heaps+0x360/0x360 [ 2054.112027] (UME) [ 2054.113087] do_vfs_ioctl+0x75a/0xff0 [ 2054.113099] ? ioctl_preallocate+0x1a0/0x1a0 [ 2054.113111] ? lock_downgrade+0x740/0x740 [ 2054.131555] 23*16kB (UME) 21*32kB [ 2054.131774] ? __fget+0x225/0x360 [ 2054.131783] ? do_vfs_ioctl+0xff0/0xff0 [ 2054.142827] ? security_file_ioctl+0x83/0xb0 [ 2054.144077] (UM) [ 2054.147224] SyS_ioctl+0x7f/0xb0 [ 2054.147232] ? do_vfs_ioctl+0xff0/0xff0 [ 2054.147243] do_syscall_64+0x1d5/0x640 [ 2054.147257] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2054.147265] RIP: 0033:0x466459 [ 2054.158773] 3*64kB [ 2054.160479] RSP: 002b:00007f158f768188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2054.160489] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2054.160493] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2054.160500] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2054.181305] (UM) [ 2054.185993] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2054.185999] R13: 00007ffd93ba4faf R14: 00007f158f768300 R15: 0000000000022000 [ 2054.192031] CPU: 0 PID: 11750 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 2054.224961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2054.232373] 5*128kB [ 2054.234302] Call Trace: [ 2054.234321] dump_stack+0x1b2/0x281 [ 2054.234333] warn_alloc.cold+0x96/0x1cc [ 2054.234344] ? zone_watermark_ok_safe+0x220/0x220 [ 2054.243230] (UME) [ 2054.246800] __alloc_pages_nodemask+0x2127/0x2720 [ 2054.246818] ? lock_acquire+0x170/0x3f0 [ 2054.246832] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2054.264117] 1*256kB [ 2054.267559] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2054.267572] ? __mutex_unlock_slowpath+0x75/0x770 [ 2054.267586] alloc_pages_current+0x155/0x260 [ 2054.282187] (E) [ 2054.284543] ion_page_pool_alloc+0x118/0x1b0 [ 2054.284553] ion_system_heap_allocate+0x133/0x8c0 [ 2054.284561] ? ion_alloc+0x187/0x810 [ 2054.284573] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2054.296602] 3*512kB [ 2054.299478] ? ion_system_contig_heap_create+0x130/0x130 [ 2054.299489] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2054.299501] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2054.322482] ion_alloc+0x204/0x810 [ 2054.326019] ? ion_dma_buf_release+0x40/0x40 [ 2054.330425] ? __might_fault+0x177/0x1b0 [ 2054.331879] (UE) [ 2054.334588] ion_ioctl+0xea/0x1f0 [ 2054.334598] ? ion_query_heaps+0x360/0x360 [ 2054.334608] ? ion_query_heaps+0x360/0x360 [ 2054.334619] do_vfs_ioctl+0x75a/0xff0 [ 2054.346692] 3*1024kB [ 2054.348539] ? ioctl_preallocate+0x1a0/0x1a0 [ 2054.348548] ? lock_downgrade+0x740/0x740 [ 2054.348560] ? __fget+0x225/0x360 [ 2054.358872] (UME) [ 2054.359116] ? do_vfs_ioctl+0xff0/0xff0 [ 2054.372762] ? security_file_ioctl+0x83/0xb0 [ 2054.377177] SyS_ioctl+0x7f/0xb0 [ 2054.378525] 2*2048kB [ 2054.380526] ? do_vfs_ioctl+0xff0/0xff0 [ 2054.380538] do_syscall_64+0x1d5/0x640 [ 2054.380551] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2054.390991] (UM) [ 2054.395935] RIP: 0033:0x466459 [ 2054.395939] RSP: 002b:00007f27c4f25188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2054.395948] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2054.395952] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2054.395956] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2054.395962] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2054.415044] 0*4096kB [ 2054.416310] R13: 00007ffda0b0ca7f R14: 00007f27c4f25300 R15: 0000000000022000 [ 2054.539732] = 11136kB [ 2054.550857] Node 0 DMA32: 29*4kB (ME) 12*8kB (UME) 146*16kB (E) 4345*32kB (UE) 328*64kB (UM) 654*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 246292kB [ 2054.599313] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2054.631997] Node 1 Normal: 1596*4kB (UM) 2678*8kB (UM) 2149*16kB (UM) 1304*32kB (UM) 0*64kB 2*128kB (U) 0*256kB 0*512kB 129*1024kB (U) 121*2048kB (U) 1*4096kB (U) = 488176kB [ 2054.687952] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2054.717800] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2054.732402] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2054.756503] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2054.819440] 39878 total pagecache pages [ 2054.830049] 0 pages in swap cache [ 2054.842832] Swap cache stats: add 0, delete 0, find 0/0 [ 2054.853125] Free swap = 0kB [ 2054.880143] Total swap = 0kB [ 2054.884001] 2097051 pages RAM [ 2054.889286] 0 pages HighMem/MovableOnly [ 2054.913522] 363846 pages reserved [ 2054.927063] 0 pages cma reserved [ 2055.448126] syz-executor.1 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2055.517300] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2055.522436] CPU: 0 PID: 9256 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 2055.530219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2055.539734] Call Trace: [ 2055.542328] dump_stack+0x1b2/0x281 [ 2055.545972] dump_header+0x178/0x82f [ 2055.549678] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2055.554774] ? ___ratelimit+0x2cd/0x530 [ 2055.558739] oom_kill_process.cold+0x10/0xb18 [ 2055.563234] out_of_memory+0xe3e/0x1190 [ 2055.567204] ? oom_killer_disable+0x1c0/0x1c0 [ 2055.571687] ? mutex_trylock+0x152/0x1a0 [ 2055.575738] __alloc_pages_nodemask+0x23e1/0x2720 [ 2055.580665] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2055.585513] alloc_pages_current+0x155/0x260 [ 2055.589913] filemap_fault+0xea3/0x1980 [ 2055.593883] ext4_filemap_fault+0x84/0xb0 [ 2055.598017] __do_fault+0xfa/0x380 [ 2055.601544] __handle_mm_fault+0x2497/0x4620 [ 2055.606040] ? vm_insert_page+0x7c0/0x7c0 [ 2055.610174] ? nanosleep_copyout+0x100/0x100 [ 2055.614579] handle_mm_fault+0x391/0x860 [ 2055.618719] __do_page_fault+0x549/0xad0 [ 2055.622769] ? spurious_fault+0x640/0x640 [ 2055.626903] ? do_page_fault+0x60/0x500 [ 2055.630861] ? page_fault+0x2f/0x50 [ 2055.634472] page_fault+0x45/0x50 [ 2055.637917] RIP: 1f56ab:0x2 [ 2055.640832] RSP: 002a:00007ffda0b0cd3c EFLAGS: 00000032 [ 2055.666191] Mem-Info: [ 2055.713586] active_anon:22606 inactive_anon:32405 isolated_anon:0 [ 2055.713586] active_file:38 inactive_file:0 isolated_file:0 [ 2055.713586] unevictable:0 dirty:3 writeback:0 unstable:0 [ 2055.713586] slab_reclaimable:12985 slab_unreclaimable:116551 [ 2055.713586] mapped:52704 shmem:33549 pagetables:821 bounce:0 [ 2055.713586] free:25112 free_pcp:0 free_cma:0 [ 2056.138523] Node 0 active_anon:89736kB inactive_anon:88184kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210728kB dirty:0kB writeback:0kB shmem:92488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2056.239352] Node 1 active_anon:688kB inactive_anon:41436kB active_file:156kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):8kB mapped:0kB dirty:0kB writeback:0kB shmem:41704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2056.266287] Node 0 DMA free:11040kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2056.292584] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2056.297642] Node 0 DMA32 free:36124kB min:36200kB low:45248kB high:54296kB active_anon:89696kB inactive_anon:88184kB active_file:0kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7264kB pagetables:3192kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2056.326152] lowmem_reserve[]: 0 0 0 0 0 [ 2056.330135] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2056.458474] lowmem_reserve[]: 0 0 0 0 0 [ 2056.462486] Node 1 Normal free:53416kB min:53696kB low:67120kB high:80544kB active_anon:688kB inactive_anon:41436kB active_file:36kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:20kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2056.783554] lowmem_reserve[]: 0 0 0 0 0 [ 2056.833949] Node 0 DMA: 12*4kB (ME) 20*8kB (UME) 23*16kB (UME) 21*32kB (UM) 3*64kB (UM) 5*128kB (UME) 1*256kB (E) 3*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11040kB [ 2056.868502] Node 0 DMA32: 199*4kB (ME) 91*8kB (ME) 195*16kB (ME) 64*32kB (UME) 25*64kB (UM) 29*128kB (UM) 74*256kB (UM) 2*512kB (M) 4*1024kB (M) 0*2048kB 0*4096kB = 36068kB [ 2056.958161] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2056.982928] Node 1 Normal: 50*4kB (UM) 42*8kB (UM) 35*16kB (UM) 23*32kB (UM) 10*64kB (UM) 4*128kB (M) 1*256kB (U) 0*512kB 1*1024kB (U) 22*2048kB (U) 1*4096kB (M) = 53416kB [ 2057.012799] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2057.037768] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2057.056882] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2057.080192] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2057.108493] 33582 total pagecache pages [ 2057.112493] 0 pages in swap cache [ 2057.130472] Swap cache stats: add 0, delete 0, find 0/0 [ 2057.142733] Free swap = 0kB [ 2057.153719] Total swap = 0kB [ 2057.163825] 2097051 pages RAM [ 2057.181940] 0 pages HighMem/MovableOnly [ 2057.192575] 363846 pages reserved [ 2057.210879] 0 pages cma reserved [ 2057.242240] Out of memory (oom_kill_allocating_task): Kill process 9256 (syz-executor.1) score 0 or sacrifice child [ 2057.268925] Killed process 11742 (syz-executor.1) total-vm:93384kB, anon-rss:152kB, file-rss:34820kB, shmem-rss:0kB [ 2057.330541] oom_reaper: reaped process 11742 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2057.445992] syz-executor.5 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2057.461421] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2057.466581] CPU: 0 PID: 11747 Comm: syz-executor.5 Not tainted 4.14.228-syzkaller #0 [ 2057.474537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2057.483877] Call Trace: [ 2057.486443] dump_stack+0x1b2/0x281 [ 2057.490050] dump_header+0x178/0x82f [ 2057.493849] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2057.498925] ? ___ratelimit+0x2cd/0x530 [ 2057.502885] oom_kill_process.cold+0x10/0xb18 [ 2057.507364] out_of_memory+0xe3e/0x1190 [ 2057.511313] ? oom_killer_disable+0x1c0/0x1c0 [ 2057.515781] ? mutex_trylock+0x152/0x1a0 [ 2057.519853] __alloc_pages_nodemask+0x23e1/0x2720 [ 2057.524684] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2057.529510] alloc_pages_current+0x155/0x260 [ 2057.533933] filemap_fault+0xea3/0x1980 [ 2057.537892] ext4_filemap_fault+0x84/0xb0 [ 2057.542014] __do_fault+0xfa/0x380 [ 2057.545544] __handle_mm_fault+0x2497/0x4620 [ 2057.549935] ? vm_insert_page+0x7c0/0x7c0 [ 2057.554093] ? __fsnotify_inode_delete+0x20/0x20 [ 2057.558822] ? __fsnotify_update_child_dentry_flags.part.0+0x2e0/0x2e0 [ 2057.565470] handle_mm_fault+0x391/0x860 [ 2057.569509] __do_page_fault+0x549/0xad0 [ 2057.573546] ? spurious_fault+0x640/0x640 [ 2057.577680] ? do_page_fault+0x60/0x500 [ 2057.581629] ? page_fault+0x2f/0x50 [ 2057.585230] page_fault+0x45/0x50 [ 2057.588671] RIP: 56ca68: (null) [ 2057.592704] RSP: c9f151c8:0000000000000003 EFLAGS: ffffffff [ 2057.593627] Mem-Info: [ 2057.601898] active_anon:22606 inactive_anon:32405 isolated_anon:0 [ 2057.601898] active_file:21 inactive_file:13 isolated_file:8 [ 2057.601898] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2057.601898] slab_reclaimable:12982 slab_unreclaimable:116577 [ 2057.601898] mapped:52682 shmem:33548 pagetables:803 bounce:0 [ 2057.601898] free:13976 free_pcp:60 free_cma:0 [ 2057.635110] Node 0 active_anon:89736kB inactive_anon:88184kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210728kB dirty:0kB writeback:0kB shmem:92488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2057.662804] Node 1 active_anon:688kB inactive_anon:41436kB active_file:100kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):32kB mapped:0kB dirty:0kB writeback:0kB shmem:41704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2057.689726] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2057.716343] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2057.721346] Node 0 DMA32 free:18060kB min:36200kB low:45248kB high:54296kB active_anon:89696kB inactive_anon:88184kB active_file:16kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7328kB pagetables:3192kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 2057.750653] lowmem_reserve[]: 0 0 0 0 0 [ 2057.754677] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2057.780221] lowmem_reserve[]: 0 0 0 0 0 [ 2057.784294] Node 1 Normal free:26872kB min:53696kB low:67120kB high:80544kB active_anon:688kB inactive_anon:41436kB active_file:96kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:20kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2057.812595] lowmem_reserve[]: 0 0 0 0 0 [ 2057.816604] Node 0 DMA: 12*4kB (ME) 14*8kB (UME) 21*16kB (UME) 21*32kB (UM) 3*64kB (UM) 5*128kB (UME) 1*256kB (E) 3*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10960kB [ 2057.832395] Node 0 DMA32: 205*4kB (UME) 91*8kB (ME) 195*16kB (UME) 62*32kB (ME) 23*64kB (M) 15*128kB (UM) 10*256kB (UM) 3*512kB (M) 4*1024kB (M) 0*2048kB 0*4096kB = 18236kB [ 2057.848431] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2057.859131] Node 1 Normal: 49*4kB (M) 41*8kB (M) 33*16kB (M) 21*32kB (M) 9*64kB (UM) 5*128kB (UM) 0*256kB 0*512kB 1*1024kB (U) 9*2048kB (U) 1*4096kB (M) = 26492kB [ 2057.873964] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2057.882782] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2057.891418] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2057.900267] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2057.908843] 33582 total pagecache pages [ 2057.912802] 0 pages in swap cache [ 2057.916249] Swap cache stats: add 0, delete 0, find 0/0 [ 2057.921585] Free swap = 0kB [ 2057.924626] Total swap = 0kB [ 2057.927626] 2097051 pages RAM [ 2057.930710] 0 pages HighMem/MovableOnly [ 2057.934698] 363846 pages reserved [ 2057.938136] 0 pages cma reserved [ 2057.941482] Out of memory (oom_kill_allocating_task): Kill process 11747 (syz-executor.5) score 0 or sacrifice child [ 2057.952340] Killed process 11747 (syz-executor.5) total-vm:84924kB, anon-rss:76kB, file-rss:34240kB, shmem-rss:0kB [ 2057.969586] oom_reaper: reaped process 11747 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2058.006209] kworker/u4:2 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 2058.012629] syz-executor.1: [ 2058.019061] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2058.040079] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2058.067709] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2058.072255] kworker/u4:2 cpuset= [ 2058.072830] CPU: 0 PID: 11750 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 2058.072831] / mems_allowed=0-1 [ 2058.076172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2058.076177] Call Trace: [ 2058.076193] dump_stack+0x1b2/0x281 [ 2058.076206] warn_alloc.cold+0x96/0x1cc [ 2058.106649] ? zone_watermark_ok_safe+0x220/0x220 [ 2058.111467] ? usleep_range+0x130/0x130 [ 2058.115418] ? queue_work_on+0x10d/0x1d0 [ 2058.119457] ? _find_next_bit+0xdb/0x100 [ 2058.123495] ? run_timer_softirq+0x5a0/0x5a0 [ 2058.127885] __alloc_pages_nodemask+0x2127/0x2720 [ 2058.132707] ? lock_acquire+0x170/0x3f0 [ 2058.136661] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2058.141477] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2058.145951] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2058.151382] alloc_pages_current+0x155/0x260 [ 2058.155768] ion_page_pool_alloc+0x118/0x1b0 [ 2058.160152] ion_system_heap_allocate+0x133/0x8c0 [ 2058.164977] ? ion_alloc+0x187/0x810 [ 2058.168668] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2058.174106] ? ion_system_contig_heap_create+0x130/0x130 [ 2058.179531] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2058.184527] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2058.189346] ion_alloc+0x204/0x810 [ 2058.192875] ? ion_dma_buf_release+0x40/0x40 [ 2058.197260] ? __might_fault+0x177/0x1b0 [ 2058.201295] ion_ioctl+0xea/0x1f0 [ 2058.204723] ? ion_query_heaps+0x360/0x360 [ 2058.208941] ? ion_query_heaps+0x360/0x360 [ 2058.213166] do_vfs_ioctl+0x75a/0xff0 [ 2058.216942] ? ioctl_preallocate+0x1a0/0x1a0 [ 2058.221326] ? lock_downgrade+0x740/0x740 [ 2058.225455] ? __fget+0x225/0x360 [ 2058.228898] ? do_vfs_ioctl+0xff0/0xff0 [ 2058.232862] ? security_file_ioctl+0x83/0xb0 [ 2058.237245] SyS_ioctl+0x7f/0xb0 [ 2058.240583] ? do_vfs_ioctl+0xff0/0xff0 [ 2058.244537] do_syscall_64+0x1d5/0x640 [ 2058.248403] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2058.253567] RIP: 0033:0x466459 [ 2058.256733] RSP: 002b:00007f27c4f25188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2058.264418] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2058.271663] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2058.278908] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2058.286155] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2058.293402] R13: 00007ffda0b0ca7f R14: 00007f27c4f25300 R15: 0000000000022000 [ 2058.300657] CPU: 1 PID: 135 Comm: kworker/u4:2 Not tainted 4.14.228-syzkaller #0 [ 2058.309744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2058.316212] syz-executor.1 cpuset=/ [ 2058.319092] Workqueue: events_unbound call_usermodehelper_exec_work [ 2058.322824] mems_allowed=0-1 [ 2058.329293] Call Trace: [ 2058.329310] dump_stack+0x1b2/0x281 [ 2058.329321] dump_header+0x178/0x82f [ 2058.329332] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2058.329340] ? ___ratelimit+0x2cd/0x530 [ 2058.329350] oom_kill_process.cold+0x10/0xb18 [ 2058.329360] ? lock_downgrade+0x740/0x740 [ 2058.329373] out_of_memory+0x2dc/0x1190 [ 2058.329385] ? oom_killer_disable+0x1c0/0x1c0 [ 2058.329394] ? mutex_trylock+0x152/0x1a0 [ 2058.373691] __alloc_pages_nodemask+0x23e1/0x2720 [ 2058.378525] ? deref_stack_reg+0x124/0x1a0 [ 2058.382754] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2058.387571] ? fs_reclaim_release+0xd0/0x110 [ 2058.391960] ? kmem_cache_alloc_node+0x38b/0x410 [ 2058.396699] copy_process.part.0+0x265/0x71c0 [ 2058.401183] ? __lock_acquire+0x5fc/0x3f20 [ 2058.405412] ? debug_object_activate+0x292/0x490 [ 2058.410147] ? static_obj+0x50/0x50 [ 2058.413749] ? lock_acquire+0x170/0x3f0 [ 2058.417704] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 2058.423137] ? __cleanup_sighand+0x40/0x40 [ 2058.427353] ? mod_timer+0x4e7/0xf70 [ 2058.431048] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 2058.436482] _do_fork+0x184/0xc80 [ 2058.439927] ? fork_idle+0x270/0x270 [ 2058.443626] ? lock_downgrade+0x740/0x740 [ 2058.447758] ? process_one_work+0x6c4/0x14a0 [ 2058.452170] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 2058.457599] kernel_thread+0x2f/0x40 [ 2058.461297] call_usermodehelper_exec_work+0x1ac/0x2a0 [ 2058.466557] ? call_usermodehelper+0x80/0x80 [ 2058.470946] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2058.476379] process_one_work+0x793/0x14a0 [ 2058.480624] ? work_busy+0x320/0x320 [ 2058.484328] ? worker_thread+0x158/0xff0 [ 2058.488374] ? _raw_spin_unlock_irq+0x24/0x80 [ 2058.492844] worker_thread+0x5cc/0xff0 [ 2058.496718] ? rescuer_thread+0xc80/0xc80 [ 2058.500848] kthread+0x30d/0x420 [ 2058.504202] ? kthread_create_on_node+0xd0/0xd0 [ 2058.508860] ret_from_fork+0x24/0x30 [ 2058.512554] CPU: 0 PID: 11742 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 2058.520437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2058.529871] Call Trace: [ 2058.532429] Mem-Info: [ 2058.532461] dump_stack+0x1b2/0x281 [ 2058.534879] active_anon:22583 inactive_anon:32405 isolated_anon:0 [ 2058.534879] active_file:41 inactive_file:0 isolated_file:0 [ 2058.534879] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2058.534879] slab_reclaimable:12982 slab_unreclaimable:116387 [ 2058.534879] mapped:52682 shmem:33548 pagetables:803 bounce:0 [ 2058.534879] free:13778 free_pcp:27 free_cma:0 [ 2058.538467] warn_alloc.cold+0x96/0x1cc [ 2058.571528] Node 0 active_anon:89644kB inactive_anon:88184kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210728kB dirty:0kB writeback:0kB shmem:92488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2058.575465] ? zone_watermark_ok_safe+0x220/0x220 [ 2058.575486] ? usleep_range+0x130/0x130 [ 2058.575494] ? try_to_free_pages+0x23f/0x6e0 [ 2058.603101] Node 1 active_anon:688kB inactive_anon:41436kB active_file:164kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:41704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2058.607902] ? _find_next_bit+0xdb/0x100 [ 2058.607914] ? run_timer_softirq+0x5a0/0x5a0 [ 2058.611860] Node 0 [ 2058.616250] __alloc_pages_nodemask+0x2127/0x2720 [ 2058.616266] ? lock_acquire+0x170/0x3f0 [ 2058.642974] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2058.646996] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2058.647006] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2058.651388] lowmem_reserve[]: [ 2058.653615] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2058.658439] 0 [ 2058.662395] alloc_pages_current+0x155/0x260 [ 2058.688064] warn_alloc_show_mem: 4 callbacks suppressed [ 2058.688066] Mem-Info: [ 2058.692858] ion_page_pool_alloc+0x118/0x1b0 [ 2058.697340] 2717 [ 2058.700408] ion_system_heap_allocate+0x133/0x8c0 [ 2058.705855] active_anon:22583 inactive_anon:32405 isolated_anon:0 [ 2058.705855] active_file:41 inactive_file:0 isolated_file:0 [ 2058.705855] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2058.705855] slab_reclaimable:12982 slab_unreclaimable:116387 [ 2058.705855] mapped:52682 shmem:33548 pagetables:803 bounce:0 [ 2058.705855] free:13778 free_pcp:27 free_cma:0 [ 2058.707612] ? ion_alloc+0x187/0x810 [ 2058.711997] Node 0 active_anon:89644kB inactive_anon:88184kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210728kB dirty:0kB writeback:0kB shmem:92488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2058.717339] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2058.717348] ? ion_system_contig_heap_create+0x130/0x130 [ 2058.717358] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2058.719756] 2718 [ 2058.724140] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2058.724150] ion_alloc+0x204/0x810 [ 2058.724162] ? ion_dma_buf_release+0x40/0x40 [ 2058.726190] 2718 [ 2058.731231] ? __might_fault+0x177/0x1b0 [ 2058.764390] Node 1 active_anon:688kB inactive_anon:41436kB active_file:164kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:41704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2058.768048] ion_ioctl+0xea/0x1f0 [ 2058.795445] Node 0 [ 2058.800867] ? ion_query_heaps+0x360/0x360 [ 2058.806302] 2718 [ 2058.811279] ? ion_query_heaps+0x360/0x360 [ 2058.818124] do_vfs_ioctl+0x75a/0xff0 [ 2058.818135] ? ioctl_preallocate+0x1a0/0x1a0 [ 2058.818145] ? lock_downgrade+0x740/0x740 [ 2058.821682] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2058.826086] ? __fget+0x225/0x360 [ 2058.826094] ? do_vfs_ioctl+0xff0/0xff0 [ 2058.826105] ? security_file_ioctl+0x83/0xb0 [ 2058.828135] lowmem_reserve[]: [ 2058.832184] SyS_ioctl+0x7f/0xb0 [ 2058.858889] Node 0 [ 2058.862305] ? do_vfs_ioctl+0xff0/0xff0 [ 2058.864531] DMA32 free:17660kB min:36200kB low:45248kB high:54296kB active_anon:89604kB inactive_anon:88184kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7328kB pagetables:3192kB bounce:0kB free_pcp:108kB local_pcp:0kB free_cma:0kB [ 2058.868725] do_syscall_64+0x1d5/0x640 [ 2058.870767] lowmem_reserve[]: [ 2058.874982] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2058.874991] RIP: 0033:0x466459 [ 2058.878760] 0 [ 2058.883141] RSP: 002b:00007f27c4f46188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2058.887296] 0 [ 2058.913536] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2058.913541] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2058.913546] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2058.913551] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2058.913558] R13: 00007ffda0b0ca7f R14: 00007f27c4f46300 R15: 0000000000022000 [ 2058.917000] 0 [ 2059.042997] 2717 2718 2718 2718 [ 2059.065202] Node 0 DMA32 free:57712kB min:36200kB low:45248kB high:54296kB active_anon:89572kB inactive_anon:88184kB active_file:200kB inactive_file:6204kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7296kB pagetables:3104kB bounce:0kB free_pcp:980kB local_pcp:212kB free_cma:0kB [ 2059.143988] lowmem_reserve[]: 0 0 0 0 0 [ 2059.164673] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2059.217748] lowmem_reserve[]: 0 0 0 0 0 [ 2059.222467] Node 1 Normal free:58620kB min:53696kB low:67120kB high:80544kB active_anon:688kB inactive_anon:41436kB active_file:68kB inactive_file:64kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:20kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2059.275894] 0 0 0 [ 2059.286120] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2059.312581] lowmem_reserve[]: 0 0 0 0 0 [ 2059.325827] Node 0 DMA: 12*4kB (UME) 13*8kB (ME) 21*16kB (UME) 21*32kB (UM) 5*64kB (UM) 8*128kB (UME) 3*256kB (UE) 3*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11976kB [ 2059.345505] lowmem_reserve[]: 0 0 0 0 0 [ 2059.351495] Node 1 Normal free:58620kB min:53696kB low:67120kB high:80544kB active_anon:688kB inactive_anon:41436kB active_file:68kB inactive_file:64kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:20kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 2059.384033] Node 0 DMA32: 2461*4kB (UE) 2884*8kB (UE) 1952*16kB (UME) 243*32kB (UME) 1*64kB (U) 1*128kB (U) 2*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 72628kB [ 2059.411535] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2059.430150] Node 1 Normal: 49*4kB (M) 41*8kB (M) 33*16kB (M) 21*32kB (M) 100*64kB (UM) 17*128kB (UM) 11*256kB (U) 9*512kB (U) 18*1024kB (U) 9*2048kB (U) 1*4096kB (M) = 58684kB [ 2059.448825] lowmem_reserve[]: 0 0 0 0 0 [ 2059.462021] Node 0 DMA: 12*4kB (UME) 13*8kB (ME) 21*16kB (UME) 21*32kB (UM) 5*64kB (UM) 8*128kB (UME) 3*256kB (UE) 3*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11976kB [ 2059.482585] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2059.510294] Node 0 DMA32: 1742*4kB (UME) 3064*8kB (UME) 2080*16kB (UE) 499*32kB (UME) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 81240kB [ 2059.512408] IPVS: ftp: loaded support on port[0] = 21 [ 2059.527797] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2059.583807] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2059.597588] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2059.615935] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2059.628109] Node 1 Normal: 169*4kB (UM) 139*8kB (UM) 207*16kB (UM) 93*32kB (UM) 105*64kB (UM) 29*128kB (UM) 16*256kB (U) 10*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 27724kB [ 2059.663763] 35730 total pagecache pages [ 2059.674365] 0 pages in swap cache [ 2059.678044] Swap cache stats: add 0, delete 0, find 0/0 [ 2059.683400] Free swap = 0kB [ 2059.694188] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2059.703028] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2059.742609] Total swap = 0kB [ 2059.760789] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2059.774271] 2097051 pages RAM [ 2059.777381] 0 pages HighMem/MovableOnly [ 2059.781347] 363846 pages reserved [ 2059.796547] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2059.811315] 0 pages cma reserved [ 2059.815178] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2059.820317] CPU: 1 PID: 11742 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 2059.828187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2059.837532] Call Trace: [ 2059.840124] dump_stack+0x1b2/0x281 [ 2059.843752] warn_alloc.cold+0x96/0x1cc [ 2059.847723] ? zone_watermark_ok_safe+0x220/0x220 [ 2059.852578] __alloc_pages_nodemask+0x2127/0x2720 [ 2059.857414] ? lock_acquire+0x170/0x3f0 [ 2059.861384] ? lock_acquire+0x170/0x3f0 [ 2059.865354] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2059.870204] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2059.875736] ? __mutex_unlock_slowpath+0x75/0x770 [ 2059.880583] alloc_pages_current+0x155/0x260 [ 2059.884999] ion_page_pool_alloc+0x118/0x1b0 [ 2059.889400] ion_system_heap_allocate+0x133/0x8c0 [ 2059.894253] ? _raw_spin_unlock+0x29/0x40 [ 2059.898396] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2059.903316] ? ion_system_contig_heap_create+0x130/0x130 [ 2059.908762] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2059.913773] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2059.918616] ion_alloc+0x27a/0x810 [ 2059.922151] ? ion_dma_buf_release+0x40/0x40 [ 2059.926556] ? __might_fault+0x177/0x1b0 [ 2059.930602] ion_ioctl+0xea/0x1f0 [ 2059.934055] ? ion_query_heaps+0x360/0x360 [ 2059.938287] ? ion_query_heaps+0x360/0x360 [ 2059.942512] do_vfs_ioctl+0x75a/0xff0 [ 2059.946317] ? ioctl_preallocate+0x1a0/0x1a0 [ 2059.950714] ? lock_downgrade+0x740/0x740 [ 2059.954856] ? __fget+0x225/0x360 [ 2059.958304] ? do_vfs_ioctl+0xff0/0xff0 [ 2059.962267] ? security_file_ioctl+0x83/0xb0 [ 2059.966672] SyS_ioctl+0x7f/0xb0 [ 2059.970029] ? do_vfs_ioctl+0xff0/0xff0 [ 2059.973998] do_syscall_64+0x1d5/0x640 [ 2059.977881] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2059.983072] RIP: 0033:0x466459 [ 2059.986250] RSP: 002b:00007f27c4f46188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2059.993956] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2060.001234] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2060.008493] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2060.015753] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2060.023015] R13: 00007ffda0b0ca7f R14: 00007f27c4f46300 R15: 0000000000022000 [ 2060.041604] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2060.051621] 34014 total pagecache pages [ 2060.058190] 0 pages in swap cache [ 2060.061649] Swap cache stats: add 0, delete 0, find 0/0 [ 2060.067606] Free swap = 0kB [ 2060.070658] Total swap = 0kB [ 2060.073668] 2097051 pages RAM [ 2060.079963] 0 pages HighMem/MovableOnly [ 2060.084054] 363846 pages reserved [ 2060.087496] 0 pages cma reserved [ 2060.090852] Out of memory: Kill process 11729 (syz-executor.0) score 1004 or sacrifice child [ 2060.124406] Killed process 11731 (syz-executor.0) total-vm:93384kB, anon-rss:156kB, file-rss:34820kB, shmem-rss:0kB [ 2060.168847] warn_alloc_show_mem: 1 callbacks suppressed [ 2060.168850] Mem-Info: [ 2060.182522] oom_reaper: reaped process 11731 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2060.216253] active_anon:22691 inactive_anon:32408 isolated_anon:0 [ 2060.216253] active_file:472 inactive_file:592 isolated_file:0 [ 2060.216253] unevictable:0 dirty:1 writeback:0 unstable:0 [ 2060.216253] slab_reclaimable:12924 slab_unreclaimable:118308 [ 2060.216253] mapped:53597 shmem:33555 pagetables:798 bounce:0 [ 2060.216253] free:106191 free_pcp:286 free_cma:0 [ 2060.341932] Node 0 active_anon:90124kB inactive_anon:88196kB active_file:4kB inactive_file:76kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210888kB dirty:4kB writeback:0kB shmem:92516kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2060.390698] Node 1 active_anon:640kB inactive_anon:41436kB active_file:24kB inactive_file:3024kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2100kB dirty:0kB writeback:0kB shmem:41704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2060.402861] chnl_net:caif_netlink_parms(): no params data found [ 2060.422392] Node 0 DMA free:11112kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2060.481024] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2060.511012] oom_reaper: reaped process 11732 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2060.521613] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2060.534382] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2060.540880] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2060.550862] Node 0 [ 2060.555845] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2060.555864] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2060.555882] CPU: 0 PID: 11731 Comm: syz-executor.0 Not tainted 4.14.228-syzkaller #0 [ 2060.555887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2060.555891] Call Trace: [ 2060.555907] dump_stack+0x1b2/0x281 [ 2060.555921] warn_alloc.cold+0x96/0x1cc [ 2060.555932] ? zone_watermark_ok_safe+0x220/0x220 [ 2060.555942] ? usleep_range+0x130/0x130 [ 2060.555957] ? try_to_free_pages+0x23f/0x6e0 [ 2060.558267] syz-executor.4 cpuset= [ 2060.569963] ? _find_next_bit+0xdb/0x100 [ 2060.569973] ? run_timer_softirq+0x5a0/0x5a0 [ 2060.569989] __alloc_pages_nodemask+0x2127/0x2720 [ 2060.575101] DMA32 free:17668kB min:36200kB low:45248kB high:54296kB active_anon:90184kB inactive_anon:88196kB active_file:0kB inactive_file:292kB unevictable:0kB writepending:4kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7424kB pagetables:3192kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2060.582925] ? lock_acquire+0x170/0x3f0 [ 2060.594944] syz-executor.2 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask= [ 2060.598422] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2060.598434] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2060.598450] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2060.602501] (null) [ 2060.607346] ? alloc_pages_current+0x123/0x260 [ 2060.607355] alloc_pages_current+0x155/0x260 [ 2060.607366] ion_page_pool_alloc+0x118/0x1b0 [ 2060.611332] / [ 2060.615690] ion_system_heap_allocate+0x133/0x8c0 [ 2060.619238] lowmem_reserve[]: [ 2060.623342] ? ion_alloc+0x187/0x810 [ 2060.627743] mems_allowed=0-1 [ 2060.632544] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2060.660492] , order=0, oom_score_adj=0 [ 2060.664422] ? ion_system_contig_heap_create+0x130/0x130 [ 2060.664432] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2060.664444] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2060.673653] syz-executor.2 cpuset= [ 2060.673720] 0 [ 2060.678453] ion_alloc+0x204/0x810 [ 2060.682930] 0 [ 2060.688366] ? ion_dma_buf_release+0x40/0x40 [ 2060.688378] ? __might_fault+0x177/0x1b0 [ 2060.688389] ion_ioctl+0xea/0x1f0 [ 2060.695086] ? ion_query_heaps+0x360/0x360 [ 2060.695098] ? ion_query_heaps+0x360/0x360 [ 2060.695107] do_vfs_ioctl+0x75a/0xff0 [ 2060.695118] ? ioctl_preallocate+0x1a0/0x1a0 [ 2060.695129] ? lock_downgrade+0x740/0x740 [ 2060.695142] ? __fget+0x225/0x360 [ 2060.699633] 0 [ 2060.704025] ? do_vfs_ioctl+0xff0/0xff0 [ 2060.704035] ? security_file_ioctl+0x83/0xb0 [ 2060.704045] SyS_ioctl+0x7f/0xb0 [ 2060.705864] / [ 2060.710564] ? do_vfs_ioctl+0xff0/0xff0 [ 2060.710574] do_syscall_64+0x1d5/0x640 [ 2060.710588] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2060.710595] RIP: 0033:0x466459 [ 2060.713757] 0 [ 2060.717423] RSP: 002b:00007f158f768188 EFLAGS: 00000246 [ 2060.720502] 0 [ 2060.725939] ORIG_RAX: 0000000000000010 [ 2060.725945] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2060.725950] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2060.725954] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2060.725962] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2060.743629] mems_allowed=0-1 [ 2060.745139] R13: 00007ffd93ba4faf R14: 00007f158f768300 R15: 0000000000022000 [ 2060.768455] CPU: 0 PID: 11750 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 2060.771809] Node 0 [ 2060.776019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2060.776022] Call Trace: [ 2060.776036] dump_stack+0x1b2/0x281 [ 2060.776049] warn_alloc.cold+0x96/0x1cc [ 2060.776059] ? zone_watermark_ok_safe+0x220/0x220 [ 2060.776078] __alloc_pages_nodemask+0x2127/0x2720 [ 2060.776092] ? lock_acquire+0x170/0x3f0 [ 2060.776104] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2060.776119] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2060.776130] ? __mutex_unlock_slowpath+0x75/0x770 [ 2060.776143] alloc_pages_current+0x155/0x260 [ 2060.776154] ion_page_pool_alloc+0x118/0x1b0 [ 2060.776162] ion_system_heap_allocate+0x133/0x8c0 [ 2060.776172] ? _raw_spin_unlock+0x29/0x40 [ 2060.776179] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2060.776186] ? ion_system_contig_heap_create+0x130/0x130 [ 2060.776194] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2060.776204] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2060.776213] ion_alloc+0x27a/0x810 [ 2060.776226] ? ion_dma_buf_release+0x40/0x40 [ 2060.776237] ? __might_fault+0x177/0x1b0 [ 2060.776246] ion_ioctl+0xea/0x1f0 [ 2060.803639] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2060.805518] ? ion_query_heaps+0x360/0x360 [ 2060.807205] lowmem_reserve[]: [ 2060.811165] ? ion_query_heaps+0x360/0x360 [ 2060.833641] 0 [ 2060.836173] do_vfs_ioctl+0x75a/0xff0 [ 2060.843500] 0 [ 2060.850756] ? ioctl_preallocate+0x1a0/0x1a0 [ 2060.850764] ? lock_downgrade+0x740/0x740 [ 2060.850777] ? __fget+0x225/0x360 [ 2060.903614] 0 [ 2060.905085] ? do_vfs_ioctl+0xff0/0xff0 [ 2060.909896] 0 [ 2060.914727] ? security_file_ioctl+0x83/0xb0 [ 2060.914738] SyS_ioctl+0x7f/0xb0 [ 2060.953606] 0 [ 2060.956416] ? do_vfs_ioctl+0xff0/0xff0 [ 2060.966830] do_syscall_64+0x1d5/0x640 [ 2060.966845] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2060.966853] RIP: 0033:0x466459 [ 2061.003602] Node 1 [ 2061.011918] RSP: 002b:00007f27c4f25188 EFLAGS: 00000246 [ 2061.043613] Normal free:26424kB min:53696kB low:67120kB high:80544kB active_anon:640kB inactive_anon:41436kB active_file:116kB inactive_file:360kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 2061.044435] ORIG_RAX: 0000000000000010 [ 2061.048385] lowmem_reserve[]: [ 2061.050165] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2061.073595] 0 [ 2061.075928] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2061.078135] 0 [ 2061.083472] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2061.083480] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2061.150750] R13: 00007ffda0b0ca7f R14: 00007f27c4f25300 R15: 0000000000022000 [ 2061.158009] CPU: 1 PID: 11732 Comm: syz-executor.4 Not tainted 4.14.228-syzkaller #0 [ 2061.165880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2061.167616] Bluetooth: hci5 command 0x0409 tx timeout [ 2061.175215] Call Trace: [ 2061.175230] dump_stack+0x1b2/0x281 [ 2061.175243] warn_alloc.cold+0x96/0x1cc [ 2061.175254] ? zone_watermark_ok_safe+0x220/0x220 [ 2061.175263] ? usleep_range+0x130/0x130 [ 2061.175272] ? queue_work_on+0x10d/0x1d0 [ 2061.175283] ? _find_next_bit+0xdb/0x100 [ 2061.175292] ? run_timer_softirq+0x5a0/0x5a0 [ 2061.175310] __alloc_pages_nodemask+0x2127/0x2720 [ 2061.182934] Mem-Info: [ 2061.183056] ? lock_acquire+0x170/0x3f0 [ 2061.193686] active_anon:22690 inactive_anon:32408 isolated_anon:0 [ 2061.193686] active_file:20 inactive_file:0 isolated_file:5 [ 2061.193686] unevictable:0 dirty:12 writeback:0 unstable:0 [ 2061.193686] slab_reclaimable:12924 slab_unreclaimable:117983 [ 2061.193686] mapped:52752 shmem:33555 pagetables:798 bounce:0 [ 2061.193686] free:13849 free_pcp:1 free_cma:0 [ 2061.195419] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2061.199369] Node 0 active_anon:90120kB inactive_anon:88196kB active_file:68kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210928kB dirty:44kB writeback:0kB shmem:92516kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2061.203403] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2061.223627] Node 1 active_anon:640kB inactive_anon:41436kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):20kB mapped:80kB dirty:4kB writeback:0kB shmem:41704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2061.256093] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2061.256108] alloc_pages_current+0x155/0x260 [ 2061.256119] ion_page_pool_alloc+0x118/0x1b0 [ 2061.256127] ion_system_heap_allocate+0x133/0x8c0 [ 2061.256135] ? ion_alloc+0x187/0x810 [ 2061.256143] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2061.256151] ? ion_system_contig_heap_create+0x130/0x130 [ 2061.256159] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2061.256169] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2061.294444] Node 0 [ 2061.319984] ion_alloc+0x204/0x810 [ 2061.319999] ? ion_dma_buf_release+0x40/0x40 [ 2061.320012] ? __might_fault+0x177/0x1b0 [ 2061.320024] ion_ioctl+0xea/0x1f0 [ 2061.320034] ? ion_query_heaps+0x360/0x360 [ 2061.373590] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2061.377620] ? ion_query_heaps+0x360/0x360 [ 2061.381035] lowmem_reserve[]: [ 2061.385250] do_vfs_ioctl+0x75a/0xff0 [ 2061.385263] ? ioctl_preallocate+0x1a0/0x1a0 [ 2061.385272] ? lock_downgrade+0x740/0x740 [ 2061.385285] ? __fget+0x225/0x360 [ 2061.433825] ? do_vfs_ioctl+0xff0/0xff0 [ 2061.437800] ? security_file_ioctl+0x83/0xb0 [ 2061.442182] SyS_ioctl+0x7f/0xb0 [ 2061.443776] 0 [ 2061.445654] ? do_vfs_ioctl+0xff0/0xff0 [ 2061.445656] 2717 2718 [ 2061.447442] do_syscall_64+0x1d5/0x640 [ 2061.451385] 2718 [ 2061.453865] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2061.453873] RIP: 0033:0x466459 [ 2061.453877] RSP: 002b:00007f54ed8a3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2061.453885] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2061.453889] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2061.453894] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2061.453898] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2061.453906] R13: 00007ffe8895ccbf R14: 00007f54ed8a3300 R15: 0000000000022000 [ 2061.486259] 2718 [ 2061.504244] 0 [ 2061.505019] CPU: 0 PID: 11749 Comm: syz-executor.2 Not tainted 4.14.228-syzkaller #0 [ 2061.512218] 0 [ 2061.514258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2061.514261] Call Trace: [ 2061.514275] dump_stack+0x1b2/0x281 [ 2061.514286] dump_header+0x178/0x82f [ 2061.514297] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2061.514305] ? ___ratelimit+0x2cd/0x530 [ 2061.514315] oom_kill_process.cold+0x10/0xb18 [ 2061.514330] out_of_memory+0xe3e/0x1190 [ 2061.514341] ? oom_killer_disable+0x1c0/0x1c0 [ 2061.514348] ? mutex_trylock+0x152/0x1a0 [ 2061.514360] __alloc_pages_nodemask+0x23e1/0x2720 [ 2061.518303] 0 [ 2061.524017] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2061.524037] ? mark_held_locks+0xa6/0xf0 [ 2061.535170] ? cache_grow_begin+0x41/0x630 [ 2061.535180] cache_grow_begin+0x91/0x630 [ 2061.535189] ? cache_grow_begin+0x91/0x630 [ 2061.537751] Node 0 [ 2061.541351] fallback_alloc+0x207/0x2c0 [ 2061.545050] DMA: [ 2061.550124] kmem_cache_alloc+0x1e5/0x3c0 [ 2061.554084] 13*4kB [ 2061.558540] __kernfs_new_node+0x6f/0x470 [ 2061.562482] (UME) [ 2061.566959] kernfs_new_node+0x7b/0xe0 [ 2061.566967] __kernfs_create_file+0x3d/0x320 [ 2061.566977] sysfs_add_file_mode_ns+0x1e1/0x450 [ 2061.571009] 14*8kB [ 2061.575832] internal_create_group+0x22b/0x710 [ 2061.575846] sysfs_create_groups+0x92/0x130 [ 2061.577620] (UME) [ 2061.582443] device_add+0x7e5/0x15c0 [ 2061.586495] 11*16kB [ 2061.590691] ? device_is_dependent+0x2a0/0x2a0 [ 2061.594755] (ME) [ 2061.598966] netdev_register_kobject+0x181/0x410 [ 2061.601185] 8*32kB [ 2061.605137] register_netdevice+0x955/0xe40 [ 2061.605147] ? netdev_change_features+0xa0/0xa0 [ 2061.605160] ipcaif_newlink+0x3f/0x1d0 [ 2061.607192] (UM) [ 2061.611313] rtnl_newlink+0xfab/0x1860 [ 2061.613520] 2*64kB [ 2061.617645] ? rtnl_newlink+0x43d/0x1860 [ 2061.619764] (M) [ 2061.623623] ? __lock_acquire+0x5fc/0x3f20 [ 2061.623636] ? ipcaif_changelink+0x40/0x40 [ 2061.623644] ? trace_hardirqs_on+0x10/0x10 [ 2061.628023] 4*128kB [ 2061.632671] ? rtnl_dellink+0x6a0/0x6a0 [ 2061.634893] (ME) [ 2061.639457] ? trace_hardirqs_on+0x10/0x10 [ 2061.643766] 2*256kB [ 2061.645881] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 2061.649560] (UE) [ 2061.651871] ? deref_stack_reg+0x124/0x1a0 [ 2061.656453] 2*512kB [ 2061.658504] ? lock_acquire+0x170/0x3f0 [ 2061.663200] (UE) [ 2061.665416] ? lock_downgrade+0x740/0x740 [ 2061.665425] ? rtnl_dellink+0x6a0/0x6a0 [ 2061.665434] rtnetlink_rcv_msg+0x3be/0xb10 [ 2061.669724] 2*1024kB [ 2061.674369] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 2061.674377] ? __netlink_lookup+0x345/0x5d0 [ 2061.674389] netlink_rcv_skb+0x125/0x390 [ 2061.678244] (ME) [ 2061.680284] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 2061.684161] 3*2048kB [ 2061.686357] ? netlink_ack+0x9a0/0x9a0 [ 2061.690385] (UM) [ 2061.692345] netlink_unicast+0x437/0x610 [ 2061.696557] 0*4096kB [ 2061.700755] ? netlink_sendskb+0xd0/0xd0 [ 2061.704973] = 10964kB [ 2061.707262] ? __check_object_size+0x179/0x230 [ 2061.711203] Node 0 [ 2061.713243] netlink_sendmsg+0x62e/0xb80 [ 2061.717460] DMA32: [ 2061.719749] ? nlmsg_notify+0x170/0x170 [ 2061.725612] 190*4kB [ 2061.727643] ? security_socket_sendmsg+0x83/0xb0 [ 2061.731837] (UME) [ 2061.734134] ? nlmsg_notify+0x170/0x170 [ 2061.734141] sock_sendmsg+0xb5/0x100 [ 2061.734149] SyS_sendto+0x1c7/0x2c0 [ 2061.734157] ? SyS_getpeername+0x220/0x220 [ 2061.738104] 151*8kB [ 2061.740161] ? up_read+0x17/0x30 [ 2061.744280] (UME) [ 2061.748219] ? __do_page_fault+0x159/0xad0 [ 2061.752421] 168*16kB [ 2061.754808] ? do_syscall_64+0x4c/0x640 [ 2061.754815] ? SyS_getpeername+0x220/0x220 [ 2061.754825] do_syscall_64+0x1d5/0x640 [ 2061.759288] (UME) [ 2061.763589] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2061.763596] RIP: 0033:0x4193ec [ 2061.763601] RSP: 002b:00007ffebcc829f0 EFLAGS: 00000293 [ 2061.767647] 412*32kB [ 2061.769682] ORIG_RAX: 000000000000002c [ 2061.774163] (UME) [ 2061.776537] RAX: ffffffffffffffda RBX: 00000000014a4320 RCX: 00000000004193ec [ 2061.780395] 1*64kB [ 2061.782464] RDX: 0000000000000038 RSI: 00000000014a4370 RDI: 0000000000000003 [ 2061.786508] (M) [ 2061.788877] RBP: 0000000000000000 R08: 00007ffebcc82a44 R09: 000000000000000c [ 2061.788883] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2061.792914] 0*128kB [ 2061.795303] R13: 00000000014a4370 R14: 0000000000000003 R15: 0000000000000000 [ 2061.812200] 0*256kB [ 2061.813297] Node 0 [ 2061.815637] 0*512kB 0*1024kB [ 2061.821760] DMA32 free:17904kB min:36200kB low:45248kB high:54296kB active_anon:89996kB inactive_anon:88196kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7296kB pagetables:3192kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2061.822515] 0*2048kB [ 2061.826650] lowmem_reserve[]: [ 2061.832303] 0*4096kB [ 2061.833902] 0 [ 2061.838096] = 17904kB [ 2061.840392] 0 [ 2061.853541] Node 0 [ 2061.863531] 0 [ 2061.866659] Normal: [ 2061.871808] 0 [ 2061.875001] 0*4kB [ 2061.903543] 0 [ 2061.963523] 0*8kB [ 2061.969880] 0*16kB [ 2061.972958] Node 0 [ 2061.993522] 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2062.023653] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2062.023656] lowmem_reserve[]: 0 0 0 0 0 [ 2062.023675] Node 1 Normal free:152148kB min:53696kB low:67120kB high:80544kB active_anon:636kB inactive_anon:41436kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:0kB bounce:0kB free_pcp:636kB local_pcp:0kB free_cma:0kB [ 2062.023695] lowmem_reserve[]: [ 2062.051089] Node 1 [ 2062.052639] 0 [ 2062.081045] Normal: 108*4kB (UM) 51*8kB (UM) 34*16kB (UM) 19*32kB (UM) 507*64kB (UM) 246*128kB (UM) 108*256kB (U) 41*512kB (U) 15*1024kB (U) 7*2048kB (U) 2*4096kB (UM) = 152456kB [ 2062.113518] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2062.122370] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2062.143544] 0 0 0 0 [ 2062.145834] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2062.145997] Node 0 [ 2062.154835] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2062.173511] DMA: 13*4kB (UME) 14*8kB (UME) 11*16kB (ME) 8*32kB (UM) 2*64kB (M) 4*128kB (ME) 2*256kB (UE) 2*512kB (UE) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 10964kB [ 2062.175772] 33586 total pagecache pages [ 2062.188472] Node 0 DMA32: 2307*4kB (UME) 7327*8kB (UME) 4066*16kB (UME) 513*32kB (UME) 111*64kB (UM) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 156676kB [ 2062.205668] 0 pages in swap cache [ 2062.233394] Swap cache stats: add 0, delete 0, find 0/0 [ 2062.283516] Free swap = 0kB [ 2062.286537] Total swap = 0kB [ 2062.289546] 2097051 pages RAM [ 2062.292634] 0 pages HighMem/MovableOnly [ 2062.303521] Node 0 Normal: 0*4kB [ 2062.303535] 363846 pages reserved [ 2062.303540] 0 pages cma reserved [ 2062.306980] 0*8kB [ 2062.310421] Mem-Info: [ 2062.320805] active_anon:22668 inactive_anon:32408 isolated_anon:0 [ 2062.320805] active_file:13 inactive_file:13 isolated_file:5 [ 2062.320805] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2062.320805] slab_reclaimable:12908 slab_unreclaimable:117866 [ 2062.320805] mapped:52725 shmem:33555 pagetables:798 bounce:0 [ 2062.320805] free:120206 free_pcp:517 free_cma:0 [ 2062.323516] 0*16kB 0*32kB 0*64kB [ 2062.363872] Node 0 active_anon:90036kB inactive_anon:88196kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210900kB dirty:0kB writeback:0kB shmem:92516kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2062.363884] Node 1 active_anon:636kB inactive_anon:41436kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):20kB mapped:0kB dirty:0kB writeback:0kB shmem:41704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2062.367324] 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2062.425670] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2062.463490] Node 1 Normal: 108*4kB (UM) 51*8kB (UM) 34*16kB (UM) 19*32kB (UM) 507*64kB (UM) 246*128kB (UM) 108*256kB (U) 41*512kB (U) 15*1024kB (U) 7*2048kB (U) 2*4096kB (UM) = 152456kB [ 2062.493545] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2062.533474] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2062.535583] lowmem_reserve[]: [ 2062.542052] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2062.542053] 0 2717 [ 2062.545704] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2062.564930] 33586 total pagecache pages [ 2062.568906] 0 pages in swap cache [ 2062.572352] Swap cache stats: add 0, delete 0, find 0/0 [ 2062.577728] Free swap = 0kB [ 2062.580735] Total swap = 0kB [ 2062.583853] 2097051 pages RAM [ 2062.613475] 0 pages HighMem/MovableOnly [ 2062.617545] 363846 pages reserved [ 2062.629236] 0 pages cma reserved [ 2062.629272] 2718 2718 2718 [ 2062.635883] Node 0 DMA32 free:443192kB min:36200kB low:45248kB high:54296kB active_anon:89996kB inactive_anon:88196kB active_file:240kB inactive_file:492kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7296kB pagetables:3192kB bounce:0kB free_pcp:856kB local_pcp:496kB free_cma:0kB [ 2062.765775] lowmem_reserve[]: 0 0 0 0 0 [ 2062.769934] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2062.843486] lowmem_reserve[]: 0 0 0 0 0 [ 2062.847780] Node 1 Normal free:876624kB min:53696kB low:67120kB high:80544kB active_anon:636kB inactive_anon:41436kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:0kB bounce:0kB free_pcp:1348kB local_pcp:648kB free_cma:0kB [ 2062.933431] lowmem_reserve[]: 0 0 0 0 0 [ 2062.946178] Node 0 DMA: 13*4kB (UME) 14*8kB (UME) 11*16kB (ME) 8*32kB (UM) 4*64kB (UM) 4*128kB (ME) 2*256kB (UE) 2*512kB (UE) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 11092kB [ 2063.006458] Node 0 DMA32: 2794*4kB (UE) 14927*8kB (UE) 9850*16kB (UME) 3199*32kB (UME) 543*64kB (UM) 97*128kB (U) 48*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 450016kB [ 2063.033436] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2063.053687] Node 1 Normal: 864*4kB (UM) 448*8kB (UM) 497*16kB (UM) 606*32kB (UM) 2273*64kB (UM) 801*128kB (UM) 507*256kB (UM) 131*512kB (U) 525*1024kB (U) 179*2048kB (U) 48*4096kB (UM) = 1580048kB [ 2063.072034] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2063.081107] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2063.090011] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2063.123411] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2063.131998] 34370 total pagecache pages [ 2063.136247] 0 pages in swap cache [ 2063.139716] Swap cache stats: add 0, delete 0, find 0/0 [ 2063.153560] Free swap = 0kB [ 2063.156579] Total swap = 0kB [ 2063.159749] 2097051 pages RAM [ 2063.162845] 0 pages HighMem/MovableOnly [ 2063.173618] 363846 pages reserved [ 2063.177067] 0 pages cma reserved [ 2063.180420] Out of memory (oom_kill_allocating_task): Kill process 11749 (syz-executor.2) score 0 or sacrifice child [ 2063.192035] Killed process 11749 (syz-executor.2) total-vm:93120kB, anon-rss:80kB, file-rss:34456kB, shmem-rss:0kB [ 2063.230345] oom_reaper: reaped process 11749 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2063.243482] Bluetooth: hci5 command 0x041b tx timeout [ 2064.141699] bond0 (unregistering): Released all slaves [ 2064.226743] oom_reaper: reaped process 11746 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2064.263504] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2064.300838] syz-executor.3 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 2064.307548] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2064.330709] CPU: 0 PID: 11731 Comm: syz-executor.0 Not tainted 4.14.228-syzkaller #0 [ 2064.338610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2064.348055] Call Trace: [ 2064.350636] dump_stack+0x1b2/0x281 [ 2064.354257] warn_alloc.cold+0x96/0x1cc [ 2064.358336] ? zone_watermark_ok_safe+0x220/0x220 [ 2064.363183] __alloc_pages_nodemask+0x2127/0x2720 [ 2064.368016] ? _raw_spin_unlock_irq+0x24/0x80 [ 2064.372517] ? lock_acquire+0x170/0x3f0 [ 2064.376486] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2064.381342] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2064.386796] ? __mutex_unlock_slowpath+0x75/0x770 [ 2064.391632] alloc_pages_current+0x155/0x260 [ 2064.396034] ion_page_pool_alloc+0x118/0x1b0 [ 2064.400431] ion_system_heap_allocate+0x133/0x8c0 [ 2064.405267] ? _raw_spin_unlock+0x29/0x40 [ 2064.409403] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2064.414335] ? ion_system_contig_heap_create+0x130/0x130 [ 2064.419776] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2064.424786] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2064.429706] ion_alloc+0x27a/0x810 [ 2064.433247] ? ion_dma_buf_release+0x40/0x40 [ 2064.437647] ? __might_fault+0x177/0x1b0 [ 2064.441699] ion_ioctl+0xea/0x1f0 [ 2064.445140] ? ion_query_heaps+0x360/0x360 [ 2064.449367] ? ion_query_heaps+0x360/0x360 [ 2064.453591] do_vfs_ioctl+0x75a/0xff0 [ 2064.457383] ? ioctl_preallocate+0x1a0/0x1a0 [ 2064.461781] ? lock_downgrade+0x740/0x740 [ 2064.465920] ? __fget+0x225/0x360 [ 2064.469364] ? do_vfs_ioctl+0xff0/0xff0 [ 2064.473326] ? security_file_ioctl+0x83/0xb0 [ 2064.477722] SyS_ioctl+0x7f/0xb0 [ 2064.481079] ? do_vfs_ioctl+0xff0/0xff0 [ 2064.485045] do_syscall_64+0x1d5/0x640 [ 2064.488929] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2064.494112] RIP: 0033:0x466459 [ 2064.497288] RSP: 002b:00007f158f768188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2064.505001] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2064.512259] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2064.520410] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2064.527679] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2064.534958] R13: 00007ffd93ba4faf R14: 00007f158f768300 R15: 0000000000022000 [ 2064.549616] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2064.555120] CPU: 0 PID: 11746 Comm: syz-executor.3 Not tainted 4.14.228-syzkaller #0 [ 2064.562994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2064.572334] Call Trace: [ 2064.573264] syz-executor.4: page allocation failure: order:4 [ 2064.574911] dump_stack+0x1b2/0x281 [ 2064.574925] dump_header+0x178/0x82f [ 2064.580697] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2064.584310] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2064.584320] ? ___ratelimit+0x2cd/0x530 [ 2064.584332] oom_kill_process.cold+0x10/0xb18 [ 2064.584351] out_of_memory+0xe3e/0x1190 [ 2064.612657] ? oom_killer_disable+0x1c0/0x1c0 [ 2064.616436] (null) [ 2064.617135] ? mutex_trylock+0x152/0x1a0 [ 2064.619269] syz-executor.4 cpuset= [ 2064.623300] __alloc_pages_nodemask+0x23e1/0x2720 [ 2064.623315] ? lock_acquire+0x170/0x3f0 [ 2064.623330] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2064.640526] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2064.645017] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2064.650466] alloc_pages_current+0x155/0x260 [ 2064.654865] ion_page_pool_alloc+0x118/0x1b0 [ 2064.657837] / mems_allowed=0-1 [ 2064.659398] ion_system_heap_allocate+0x133/0x8c0 [ 2064.659411] ? ion_alloc+0x187/0x810 [ 2064.671093] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2064.676528] ? ion_system_contig_heap_create+0x130/0x130 [ 2064.681956] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2064.686959] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2064.691909] ion_alloc+0x204/0x810 [ 2064.695523] ? ion_dma_buf_release+0x40/0x40 [ 2064.699916] ? __might_fault+0x177/0x1b0 [ 2064.703963] ion_ioctl+0xea/0x1f0 [ 2064.707409] ? ion_query_heaps+0x360/0x360 [ 2064.711629] ? ion_query_heaps+0x360/0x360 [ 2064.715844] do_vfs_ioctl+0x75a/0xff0 [ 2064.719621] ? ioctl_preallocate+0x1a0/0x1a0 [ 2064.724011] ? lock_downgrade+0x740/0x740 [ 2064.728151] ? __fget+0x225/0x360 [ 2064.731591] ? do_vfs_ioctl+0xff0/0xff0 [ 2064.735549] ? security_file_ioctl+0x83/0xb0 [ 2064.739949] SyS_ioctl+0x7f/0xb0 [ 2064.743296] ? do_vfs_ioctl+0xff0/0xff0 [ 2064.747261] do_syscall_64+0x1d5/0x640 [ 2064.751145] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2064.756315] RIP: 0033:0x466459 [ 2064.759482] RSP: 002b:00007fd4b8064188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2064.767173] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2064.774423] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2064.781667] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2064.788919] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2064.796170] R13: 00007ffca99dab2f R14: 00007fd4b8064300 R15: 0000000000022000 [ 2064.806925] Mem-Info: [ 2064.809348] active_anon:22565 inactive_anon:32406 isolated_anon:0 [ 2064.809348] active_file:29 inactive_file:9 isolated_file:0 [ 2064.809348] unevictable:0 dirty:14 writeback:0 unstable:0 [ 2064.809348] slab_reclaimable:12900 slab_unreclaimable:117172 [ 2064.809348] mapped:44101 shmem:33551 pagetables:754 bounce:0 [ 2064.809348] free:13919 free_pcp:0 free_cma:0 [ 2064.816843] syz-executor.1: [ 2064.842701] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2064.854004] Node 0 active_anon:89528kB inactive_anon:88188kB active_file:40kB inactive_file:84kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176336kB dirty:16kB writeback:36kB shmem:92500kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2064.865317] CPU: 1 PID: 11732 Comm: syz-executor.4 Not tainted 4.14.228-syzkaller #0 [ 2064.893013] Node 1 active_anon:636kB inactive_anon:41436kB active_file:24kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:41704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2064.896856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2064.896860] Call Trace: [ 2064.896877] dump_stack+0x1b2/0x281 [ 2064.896894] warn_alloc.cold+0x96/0x1cc [ 2064.928220] syz-executor.1 cpuset= [ 2064.932926] ? zone_watermark_ok_safe+0x220/0x220 [ 2064.935984] / [ 2064.939113] __alloc_pages_nodemask+0x2127/0x2720 [ 2064.943046] mems_allowed=0-1 [ 2064.946565] ? lock_acquire+0x170/0x3f0 [ 2064.946578] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2064.946595] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2064.946606] ? __mutex_unlock_slowpath+0x75/0x770 [ 2064.946619] alloc_pages_current+0x155/0x260 [ 2064.965232] Node 0 [ 2064.969781] ion_page_pool_alloc+0x118/0x1b0 [ 2064.990986] ion_system_heap_allocate+0x133/0x8c0 [ 2064.994925] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2064.995810] ? _raw_spin_unlock+0x29/0x40 [ 2065.025502] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2065.025506] warn_alloc_show_mem: 2 callbacks suppressed [ 2065.025510] Mem-Info: [ 2065.030419] ? ion_system_contig_heap_create+0x130/0x130 [ 2065.043589] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2065.048618] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2065.053450] ion_alloc+0x27a/0x810 [ 2065.054315] active_anon:22532 inactive_anon:32406 isolated_anon:0 [ 2065.054315] active_file:16 inactive_file:16 isolated_file:0 [ 2065.054315] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2065.054315] slab_reclaimable:12900 slab_unreclaimable:117151 [ 2065.054315] mapped:44063 shmem:33551 pagetables:754 bounce:0 [ 2065.054315] free:13967 free_pcp:0 free_cma:0 [ 2065.056983] ? ion_dma_buf_release+0x40/0x40 [ 2065.094584] ? __might_fault+0x177/0x1b0 [ 2065.098634] ion_ioctl+0xea/0x1f0 [ 2065.102066] ? ion_query_heaps+0x360/0x360 [ 2065.105432] lowmem_reserve[]: 0 [ 2065.106283] ? ion_query_heaps+0x360/0x360 [ 2065.106289] 2717 [ 2065.109547] do_vfs_ioctl+0x75a/0xff0 [ 2065.119581] ? ioctl_preallocate+0x1a0/0x1a0 [ 2065.123974] ? lock_downgrade+0x740/0x740 [ 2065.125398] 2718 2718 [ 2065.128110] ? __fget+0x225/0x360 [ 2065.128112] 2718 [ 2065.130593] ? do_vfs_ioctl+0xff0/0xff0 [ 2065.140018] ? security_file_ioctl+0x83/0xb0 [ 2065.144412] SyS_ioctl+0x7f/0xb0 [ 2065.145399] page allocation failure: order:0 [ 2065.147769] ? do_vfs_ioctl+0xff0/0xff0 [ 2065.147773] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2065.152175] do_syscall_64+0x1d5/0x640 [ 2065.165318] Node 0 DMA32 free:18088kB min:36200kB low:45248kB high:54296kB active_anon:89452kB inactive_anon:88188kB active_file:56kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7232kB pagetables:3016kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2065.167595] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2065.167604] RIP: 0033:0x466459 [ 2065.200135] syz-executor.1 cpuset= [ 2065.201490] RSP: 002b:00007f54ed8a3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2065.215875] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2065.216902] Node 0 active_anon:89492kB inactive_anon:88188kB active_file:56kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176252kB dirty:0kB writeback:0kB shmem:92500kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2065.223128] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2065.255491] / [ 2065.257935] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2065.257944] mems_allowed=0-1 [ 2065.259628] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2065.259635] R13: 00007ffe8895ccbf R14: 00007f54ed8a3300 R15: 0000000000022000 [ 2065.284569] CPU: 0 PID: 11750 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 2065.292441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2065.301780] Call Trace: [ 2065.304362] dump_stack+0x1b2/0x281 [ 2065.307969] warn_alloc.cold+0x96/0x1cc [ 2065.311921] ? zone_watermark_ok_safe+0x220/0x220 [ 2065.316831] ? usleep_range+0x130/0x130 [ 2065.320791] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2065.325901] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2065.330891] ? run_timer_softirq+0x5a0/0x5a0 [ 2065.335290] __alloc_pages_nodemask+0x2127/0x2720 [ 2065.340126] ? lock_acquire+0x170/0x3f0 [ 2065.344089] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2065.348907] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2065.353391] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2065.358836] alloc_pages_current+0x155/0x260 [ 2065.363229] ion_page_pool_alloc+0x118/0x1b0 [ 2065.367703] ion_system_heap_allocate+0x133/0x8c0 [ 2065.372522] ? _raw_spin_unlock+0x29/0x40 [ 2065.376652] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2065.381564] ? ion_system_contig_heap_create+0x130/0x130 [ 2065.386994] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2065.391985] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2065.396808] ion_alloc+0x27a/0x810 [ 2065.400427] ? ion_dma_buf_release+0x40/0x40 [ 2065.404818] ? __might_fault+0x177/0x1b0 [ 2065.408858] ion_ioctl+0xea/0x1f0 [ 2065.412309] ? ion_query_heaps+0x360/0x360 [ 2065.416527] ? ion_query_heaps+0x360/0x360 [ 2065.420749] do_vfs_ioctl+0x75a/0xff0 [ 2065.424532] ? ioctl_preallocate+0x1a0/0x1a0 [ 2065.428931] ? lock_downgrade+0x740/0x740 [ 2065.433150] ? __fget+0x225/0x360 [ 2065.436586] ? do_vfs_ioctl+0xff0/0xff0 [ 2065.440542] ? security_file_ioctl+0x83/0xb0 [ 2065.444933] SyS_ioctl+0x7f/0xb0 [ 2065.448287] ? do_vfs_ioctl+0xff0/0xff0 [ 2065.452240] do_syscall_64+0x1d5/0x640 [ 2065.456132] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2065.461303] RIP: 0033:0x466459 [ 2065.464473] RSP: 002b:00007f27c4f25188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2065.472155] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2065.479427] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2065.486679] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2065.493932] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2065.501186] R13: 00007ffda0b0ca7f R14: 00007f27c4f25300 R15: 0000000000022000 [ 2065.508452] CPU: 1 PID: 11742 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 2065.513367] lowmem_reserve[]: [ 2065.516430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2065.516436] Call Trace: [ 2065.519520] 0 [ 2065.528867] dump_stack+0x1b2/0x281 [ 2065.528880] warn_alloc.cold+0x96/0x1cc [ 2065.528891] ? zone_watermark_ok_safe+0x220/0x220 [ 2065.528900] ? usleep_range+0x130/0x130 [ 2065.528908] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2065.528919] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2065.528929] ? run_timer_softirq+0x5a0/0x5a0 [ 2065.528945] __alloc_pages_nodemask+0x2127/0x2720 [ 2065.528959] ? lock_acquire+0x170/0x3f0 [ 2065.535594] Node 1 active_anon:636kB inactive_anon:41436kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:41704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2065.536911] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2065.540852] Node 0 [ 2065.545681] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2065.545697] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2065.545710] ? alloc_pages_current+0x37/0x260 [ 2065.545721] alloc_pages_current+0x155/0x260 [ 2065.549676] 0 [ 2065.554769] ion_page_pool_alloc+0x118/0x1b0 [ 2065.554780] ion_system_heap_allocate+0x133/0x8c0 [ 2065.554789] ? _raw_spin_unlock+0x29/0x40 [ 2065.554797] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2065.554805] ? ion_system_contig_heap_create+0x130/0x130 [ 2065.554815] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2065.554826] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2065.554837] ion_alloc+0x27a/0x810 [ 2065.564465] 0 [ 2065.569049] ? ion_dma_buf_release+0x40/0x40 [ 2065.572990] 0 [ 2065.599526] ? __might_fault+0x177/0x1b0 [ 2065.599536] ion_ioctl+0xea/0x1f0 [ 2065.599545] ? ion_query_heaps+0x360/0x360 [ 2065.599555] ? ion_query_heaps+0x360/0x360 [ 2065.599564] do_vfs_ioctl+0x75a/0xff0 [ 2065.599574] ? ioctl_preallocate+0x1a0/0x1a0 [ 2065.599583] ? lock_downgrade+0x740/0x740 [ 2065.599595] ? __fget+0x225/0x360 [ 2065.599604] ? do_vfs_ioctl+0xff0/0xff0 [ 2065.599614] ? security_file_ioctl+0x83/0xb0 [ 2065.599623] SyS_ioctl+0x7f/0xb0 [ 2065.607352] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2065.611129] ? do_vfs_ioctl+0xff0/0xff0 [ 2065.616579] lowmem_reserve[]: [ 2065.621025] do_syscall_64+0x1d5/0x640 [ 2065.629404] 0 [ 2065.631631] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2065.636563] 2717 [ 2065.640739] RIP: 0033:0x466459 [ 2065.650056] 2718 [ 2065.651082] RSP: 002b:00007f27c4f46188 EFLAGS: 00000246 [ 2065.656112] 0 [ 2065.660907] ORIG_RAX: 0000000000000010 [ 2065.668321] 2718 [ 2065.670682] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2065.672460] 2718 [ 2065.676495] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2065.676499] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2065.676504] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2065.676508] R13: 00007ffda0b0ca7f R14: 00007f27c4f46300 R15: 0000000000022000 [ 2065.820731] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2065.846438] lowmem_reserve[]: 0 0 0 0 0 [ 2065.850996] Node 1 Normal free:71032kB min:53696kB low:67120kB high:80544kB active_anon:636kB inactive_anon:41436kB active_file:8kB inactive_file:1404kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:0kB bounce:0kB free_pcp:308kB local_pcp:120kB free_cma:0kB [ 2065.880322] lowmem_reserve[]: 0 0 0 0 0 [ 2065.885811] Node 0 DMA: 19*4kB (UME) 14*8kB (UME) 12*16kB (UME) 8*32kB (UM) 3*64kB (UM) 4*128kB (ME) 2*256kB (UE) 2*512kB (UE) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 11068kB [ 2065.902359] Node 0 DMA32: 545*4kB (UE) 430*8kB (UME) 1190*16kB (UME) 634*32kB (UME) 119*64kB (U) 6*128kB (UM) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53588kB [ 2065.928489] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2065.944120] Node 1 Normal: 315*4kB (UM) 755*8kB (U) 233*16kB (UM) 45*32kB (UM) 118*64kB (UM) 13*128kB (UM) 6*256kB (UM) 45*512kB (U) 18*1024kB (U) 11*2048kB (U) 1*4096kB (U) = 91316kB [ 2065.962882] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2065.986304] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2066.026613] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2066.043533] warn_alloc_show_mem: 1 callbacks suppressed [ 2066.043536] Mem-Info: [ 2066.051322] active_anon:22532 inactive_anon:32406 isolated_anon:0 [ 2066.051322] active_file:16 inactive_file:1412 isolated_file:0 [ 2066.051322] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2066.051322] slab_reclaimable:12900 slab_unreclaimable:116927 [ 2066.051322] mapped:44993 shmem:33551 pagetables:754 bounce:0 [ 2066.051322] free:49154 free_pcp:620 free_cma:0 [ 2066.093117] Node 0 DMA32 free:90220kB min:36200kB low:45248kB high:54296kB active_anon:89452kB inactive_anon:88188kB active_file:56kB inactive_file:4688kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7232kB pagetables:3016kB bounce:0kB free_pcp:1188kB local_pcp:644kB free_cma:0kB [ 2066.122545] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2066.143111] 35277 total pagecache pages [ 2066.147233] 0 pages in swap cache [ 2066.150678] Swap cache stats: add 0, delete 0, find 0/0 [ 2066.163130] Free swap = 0kB [ 2066.166254] Total swap = 0kB [ 2066.169328] 2097051 pages RAM [ 2066.172476] 0 pages HighMem/MovableOnly [ 2066.181730] lowmem_reserve[]: 0 0 0 0 0 [ 2066.193119] 363846 pages reserved [ 2066.196631] 0 pages cma reserved [ 2066.199988] Out of memory (oom_kill_allocating_task): Kill process 11746 (syz-executor.3) score 0 or sacrifice child [ 2066.214267] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2066.223563] Node 0 active_anon:89692kB inactive_anon:88188kB active_file:156kB inactive_file:6696kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:185284kB dirty:0kB writeback:0kB shmem:92500kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2066.288349] Killed process 11746 (syz-executor.3) total-vm:93384kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2066.326019] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2066.343213] lowmem_reserve[]: 0 0 0 0 0 [ 2066.353126] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2066.358278] CPU: 0 PID: 11746 Comm: syz-executor.3 Not tainted 4.14.228-syzkaller #0 [ 2066.363284] Node 1 [ 2066.366148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2066.366152] Call Trace: [ 2066.366166] dump_stack+0x1b2/0x281 [ 2066.366179] warn_alloc.cold+0x96/0x1cc [ 2066.383707] Normal free:138260kB min:53696kB low:67120kB high:80544kB active_anon:636kB inactive_anon:41436kB active_file:8kB inactive_file:1552kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:0kB bounce:0kB free_pcp:1308kB local_pcp:692kB free_cma:0kB [ 2066.383931] ? zone_watermark_ok_safe+0x220/0x220 [ 2066.387879] lowmem_reserve[]: [ 2066.415966] ? wait_for_completion_io+0x10/0x10 [ 2066.415980] __alloc_pages_nodemask+0x2127/0x2720 [ 2066.415996] ? lock_acquire+0x170/0x3f0 [ 2066.437332] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2066.442166] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2066.446658] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2066.452108] alloc_pages_current+0x155/0x260 [ 2066.456508] ion_page_pool_alloc+0x118/0x1b0 [ 2066.460903] ion_system_heap_allocate+0x133/0x8c0 [ 2066.465739] ? ion_alloc+0x187/0x810 [ 2066.469441] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2066.474882] ? ion_system_contig_heap_create+0x130/0x130 [ 2066.480322] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2066.485336] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2066.486428] 0 0 [ 2066.490169] ion_alloc+0x204/0x810 [ 2066.490182] ? ion_dma_buf_release+0x40/0x40 [ 2066.500080] ? __might_fault+0x177/0x1b0 [ 2066.502278] 0 [ 2066.504130] ion_ioctl+0xea/0x1f0 [ 2066.504138] ? ion_query_heaps+0x360/0x360 [ 2066.504148] ? ion_query_heaps+0x360/0x360 [ 2066.505923] 0 [ 2066.509439] do_vfs_ioctl+0x75a/0xff0 [ 2066.523064] 0 [ 2066.523469] ? ioctl_preallocate+0x1a0/0x1a0 [ 2066.525295] Node 0 [ 2066.529641] ? lock_downgrade+0x740/0x740 [ 2066.529655] ? __fget+0x225/0x360 [ 2066.531862] DMA: [ 2066.535988] ? do_vfs_ioctl+0xff0/0xff0 [ 2066.535998] ? security_file_ioctl+0x83/0xb0 [ 2066.536009] SyS_ioctl+0x7f/0xb0 [ 2066.536016] ? do_vfs_ioctl+0xff0/0xff0 [ 2066.536027] do_syscall_64+0x1d5/0x640 [ 2066.549573] 26*4kB [ 2066.549857] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2066.553211] (UME) [ 2066.557149] RIP: 0033:0x466459 [ 2066.571138] 14*8kB [ 2066.573712] RSP: 002b:00007fd4b8064188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2066.573721] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2066.573726] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2066.573730] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2066.573740] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2066.575954] (UME) [ 2066.583642] R13: 00007ffca99dab2f R14: 00007fd4b8064300 R15: 0000000000022000 [ 2066.594160] Node 1 active_anon:636kB inactive_anon:41436kB active_file:108kB inactive_file:1380kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1288kB dirty:0kB writeback:0kB shmem:41704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2066.638786] 12*16kB (UME) 8*32kB (UM) 3*64kB (UM) 4*128kB (ME) 2*256kB (UE) 2*512kB (UE) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 11096kB [ 2066.678508] Node 0 DMA free:11088kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 06:42:06 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x4000000010003, 0x31, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0xbe2, 0x8, &(0x7f0000000080)="f8f9fa97554456ef0dfec02bdd2c7874abb45075c133aaec24928290a6f7d86ca0a887a278a6c8478562d7617fec0708ffd6126e085b3cf758aca5e5f325499664e7d39d0d2632d29e3248839e69b087be33067d4e3d928240ed4d0126afbcd5c4d1bdd349c7465e57b4bdf3793cfa51487188cc7bf992fe4836a61f5285181e"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000140)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000000340)={{r1}, r2, 0x4, @unused=[0x5, 0x9, 0x2, 0x9], @name="d6f38ade8ce6d00a57006ab62330a8302ab852a9c87e33c66a86d54c3fc8ccac1aae4af054a0909bbd36f6378f932ef39b7d1b0cb963ccc65530fb2857a5566a5a5712e9265f4bdc203b73435fe970c5bdfb4622f91dcefaab1d9b1efaf1f636ea4ba73093b4d1ccdd470393e658e576e698f027e6757206903a29189cc98666e4e8704be97b92522752f4c9199c87fdb258ad20ba6150c60676f5733b7c1d4de666138a5c7fe7e56dc8155aa78d9cff723e36f3cc1dc1ede8484b3f1362a070c29b409918553576fc9368b91c74fb8d5de08f82f3ffb3fcbdc82c2ecfc120a8af535b867fccb7c6d4c0e14ee826b812c6ced6fcccd992336ee2b47187dd3c52fef93ae462f520a07fb6b060039530baea3b7697aec78c336598b17b4d39f8088ed82e8cd002fe193a67284b725517eebd21da4bedb885be581c38c2b3692a5a6e27816fc944a96744751fb5d59933a0bfa39f1dbb7e1aa55b94395dc0bdc0186451f1a812dd9e802cd429a5a3e176c4d9ac0dd3f5a99bbc18abfd8afcefb36c190c5116da223b2c3d7f9a04fff4f1bec34c84d8c8a68839463ec23850999581f84aadf176aa6e4e86325321ecaf27d19e5b27463448a47a68fe6e0c33142d448614b7dcbb13a324c44ac738471c61778330a49cd510ade21ce2878e03b3d8e361faedb5b4c69de645416696df567f53ae2da29818010ca514d6e6910bbeeb8acf9a189d422b3147f1625bf16cd925aedacb743477603d56479f093678211510420d72ba7c111f5aca39233d8f67f709f847b40c4d981ead2171974731ab8ffc24b4c09edc84d576616129c2e8a36020ca132d2f59f6f834d7f5573baa1f67099449812c038c8872a6c54a5c8d68eeebd1b7fbba2645a409070120686e708e9172249c6173854559f30ee28d1e2ae34ee935180b7aa6e9915c38a8f1aa555e4b16d635aa381382a875b9822121c15e537c3e6ca60f45a4196b22504d13e2e6121d458cbbfb051581c16b925565198b14dd773c9d512e1a345fee626401ce824560f47b8d176862d43511aba02a8ab08a3b0e1ba816058ca45c3ab4a212fda465b9c1b7fe1800e67a6d29318e1fa7bd5dc9068de4bb0318198f3ca16f530c4ae7491b648d8aadd63aeaaf5826aa73af72f0d19066b9300edc23f668f3ffaf0fa75c53cd33d8045ff36e03c07f6ee9be56cbfab08c786fb7445815d3b1a024f65f1905f890257a9678eb88555ad0dada52440ae130f390c0ed0b5741979686717cc3ff43cbbc255ede702f4d92bd855f4bb34d6f891af9439d752bd196f6498551766ba4e24f230e2d077ced7d8bddf61eefb6f3f12853b9dd3cae1642dee2d9c3a46ee67e84aec5d0ed94c7f42f8aa6bfbf2b19816597c22d2dbff68f441985a5212e8e17c08d5a57b3f9f26159f38c4591e4cc4433a0a1a813f749fc3abf0ca9d5e8009252855313d6af5ba1523acf42c0e008ec46bc7a4f78dc3664a34deb447280e348f85e28dd635774e88cb584ce17edb73a9d388ff31c723e5cd98257106dde87452c5716531e898c48497e02bed4feece635e5a974ca5594cb3d59738ef0e398f2b7a9b6a8a6b4073f8bc5d2d02a8e3a70f062d0de17f5bece7be5ea1c60b7c55e4113eb8b272e95d0fe8d8f69c3780b9064dbd2804f07777e3e4d82830073eb4b0df06fa4ff9feeb93a57695065a49bfed84857e5235eb7989cf3e78a6770e2f77eb0c65fa3870ba4abcccdab7b9f280cc428b7ccd20efd3564bd1b19e35c8c8d06aaf1b63c0f4c15b928686fda3a3a08bea91fb78f5beb9db6b83ea31cc78e0458b549176296186bbd991388e7428f0fd7f69fbf3527fd6e83384ded884d9b03f25b3e3bbb0a329b7d2f61c9bcae1e3476139287cbc5bc76b60efbe4c2937acfa2ff0cc404c81368e78a0d921f88869e4ab9fb738dd32c9f45eee4bb808bfd05e61b5f179dfbe3b372fbb73c947dc853f6cfc346e547245a4cd6ac1beb8e1bc41dc79cbb8d701b69422b57daeef01e7f8e50f00e818f2194800e34ecbd91ace495c3cf41831087e668fca34d7db10063bbc534c8bad3508ede30b683555e34c0786fc0436e78b8887377452c9548a1d6883e9ed1b6e41ea12b1c4991aabe6ae532220627fc1fa1babbc409ce6653e6a686494867e10da6435e3f7adeda7f1c8a2bccd726337dd8767badd62d5910b9b657119386c679d8f74d975cb7f6cec113be9dc78c53fc1b2cf92af80c18a2ce019bb5896bfab19977b403d582f84ac5dfc2d16a4680be26156943548dc88ed7ad6f44a820bb4ec44d28f333e37a1f1bd8239dccd222e8747ed91531a59c887844c2606bd8f4d46087005e4029bd77c6c0b21fad279e5a30b00fd0a4c409a3c9b9fcadbbb92dccccf5eb993bc4b875354ad6a5a30e970ed86b1382cd09ebaa77e1ca3f38999618dcc440db8b933115a4b80d726edb7cc112dc54b100e0128fce2423494dd7382c47346e5d94a6e35ba6e3e973c9c5004bb51d2fba860d0ab64fcec005a3562f749edf073e470a42519ef496f6ee4806d0c7e09ac88fe082767ef5d283b1fa85eb16756a62383d9e3b0737671d70370dd11e84c41b42d7571fda853c756a999b513280ea1443db69a52fd4ab8c6bc67b47c6539f1c72b0bc32538489e188faa16b5bddcda7e6705456932f63b85b0ab6d4b982e63b7c1a250a2ff3cfc25c01f91f57f8b72702b9f2388c6aa0009c26e2276fdeb76227fcd8dbac3dd445a678ed5ad0e6bf0ab4665883726cb80971bf814034b37ff92b5b4d3f138003d21830e1c4ae1e5af83e4d95e8af5efd2a57d5957acc4ec0f7181f11f9699b88d1b85423a11c5fb200cdec6f2d54ececbf04db4854958960c538829601da3533d9814b5522e0352c64a7439eb69be59290462767b65a06dcab8cc5bb42b55abacbbea91b575fa511504ce43eb636f66592c71f723d7489ecaf8ece863f128f7605ee261c2c7249a00daded96c2040da8439c66b93c0bee44f3e3aa2e4f4bb51ef4f34cd3218a25921afa4d30d9bc7f506008bb787ae2d68ba3d53f800d0dea40f73f21848fcc071942f373e8e61eed91974fb0fe144c5122af341b5bc039281f296c97d77c9e24e18ce51f479ebb6f0e3f8b2736146f3a2913977df52f31e2b061292d0e458d5da7b2dca67b6918371dd0a53b19554388338b9ddbd60d2c71bf68024ca9f601cdad0021d597d7ba1cba35f856af53522c3056c5d68f39e65099a77931a7144981229c8af1f7cc4cb1dbd6e7195a2d8ef3b8f96d92ee16976525ca2adc3f437a9ae2673fbddb60fac3cc28a73b6b2e34b35712315e740ddb5a3fb36aff4cba72e2e7805572292d23fb0340caef72d14aa104261ab7a3e691c5124b99cbdb581b132c8bfe26fccd44e2ab0d3cfa1d9b0224ed22fa7cc3aecf8e03015a8da78fef4c39c3e1747b88457408b12f4cf3a21491235c1a4b92c36b5a63fb30ea0131953665668b9dc08b95e5b48aefe7de9ecf3e40543ca1529b22445196392d9292f13de20f83ecd4885f959b0c6be002c8c8749923cd01b0aa5de7f97ad29f5a704dfaaf364590146277cd725c8ee57319d4b82fd5fdfab144148e6161ade5b080391137e5bd1d5902a59f590b67fa72dcc8c87a4df7d8300b4c5084f306c9dd084be8ebf746027b9d75958f7ca0bf560b923b92fa8650b744fb8294857dcadc888de6b424fea18cc8f9c71a448fb253e243d2a81f03ec74046256d5848b201152077605ab6ab96e3fcb235558720182355ef8bfb851ba69b127feae6ab657527c41147539073833faa53521ca21cdcb1b18dcfcc89168b48d18bb79f7d74b7865ecb59fd14ab00d96d0139eff62ea270d1fd92a4910baed0c40b3d9a8d7c30969c462583ba16c7b0e1a72a45952b2a775697de0b74e04fae173a08dda2eef70cfcfe2b68d96b6e7ce98ee7e492bd0b4a7c170aae351a1514d8a97f6def36661123db64514f545986cb322cded88e4f920ba6224cf62b34d8be5550083397540ff3a707b56f3724148426a212a2f1f1e20907f7489d21d10a80f34fd92c84ab558d83f3cb3cf1e277160b6b88cdb2d1d2eb4be3d79fa8eda7319936f937536c79c63656e3211fab9c1b63d2cbc9de64d9f46bf70733e58cf06a4f0ee7f34b144fdd0405ffe762c1a6474f42755a5228586309826a7977b450e54e5e88bca6e873dfdff5d523abb95d7881bfb44e64a1cc207f0dcba89ee979e5be35e38cb3d4243214b6528700c8831efecc116a3f45f0c8db18453b8651b4b9d1e74fee6f94197c1a240c22cca8c3f557b51bc2721928460f33ed1d8287a5329fbe9af342d0249de27d63680112ce7333f21e6c6d20531517e0a82b647e0bbb004b9071a1b76eb5d9c72a7bc363bac2180616c643c3d0873d4934958a41d9f303be4f3c989906c1b3fb5b91ae67f877582918c773c648a10081439ad80623b00c21766728cad573feba3fb9754917f12739ed68de8139065ddb3660b420605113a3133867bee998832b6b775b9f6449b346d8f3f8bbdd638623ae64e2d7016e70979a51f82aa136ce4bc254824443fd56e29773d1d50ca10a61f613eaebff82e5d9f8764f79d24390d9c4673f72d62c2b13bd1394d72a13be004b6e2d9bdb0309d56776ef571a02003eb8b8beb5fc080bee896ccb1155a74bd6ad22ae157a4fbcf7229089f877e39ffc58982e5bf4b67c8fb4c9a5b3a21220871e6f06e1e6c9a0de8f9aad03bc993a9baacef3256fb2e555d0bbac290df683e54c1acb617ae4cae5b8f5cd40c0dea2a612a004073b68daf8510c37d3152ddc522075a6b340a1f6c6184f3d94fa140561c0a7f46ed155eceb0a04a6cad67ba64bb05aee4e076d513f6d84bcde74d00e134a7d84c8a486f32646053a49c7f19fcbb89d48561057999c736d9f5e3961674150a04759fd1cc9f9555d23db15ed1aa5eb7b322975dd245029fae05bab3307ed8305bf76f75355a1a3d6eb297e3e3aa80da9f43fdd253b03070837d4a42e29ade7be2fd3d32a457f3fc9af37ca13847aa8307d1fab4a5684ab30453ef1359d20fa48dc0b9e0bff714587325628e6f15ba4e7719841a2ec600c789dd9e5c6d8731e1f2799f0d595c238ced09dcc97b18fc72110a7df31aa3544405fc5a5282a900818b38f66d2a9d6a82b1ee596d0129fc3a537a939db2775fb93dc6c60f7ab3fba3198652674a40532757f80aa0204bd8d35160029e1a18d6cabbc1580a042c0c773cea9001f7377f5b1588d65b22942a8c4bf5ecbb8454252eeae311b7bfceb5d670540dd6880a253f723d7ff49e2baec28b66b1a094e40508e27f94f14a75a5f50c45a2a9d0711b8f87c2952091e3e4e47262fd81b0678ea0b95d4b1f159a61f69395889807c04070fb415483a41c802da95313243b1efc137e4407e885f56cf2a74b11d023cee088d0551effb979334e534cb8e73e5f7f785010499c9c0b5c2d45a47c46cb6a973915fc7ed93d723e13bbb029cfabafd391815fa9fdcd66a4885e70cafdb2033920f61a56ce0fec7b2b62e3ddf23d9cc67322386d936dc6b27e2012c6fa65adc3f91478e7e817ec9aec1137f3ed743239fdf793c29e49daf7c705a75b30f37823908d4ca1c14858edb82d5399ddaf53c6dc302196c18683be2accbfac796a0964e9ab1b36ee7de2d61041a45e2c42e98f1818c1dfbf4abb352d09787c106e448450758f"}) [ 2066.703071] Node 0 DMA32: 90*4kB (E) 108*8kB (UE) 219*16kB (UE) 1090*32kB (UME) 87*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 45176kB [ 2066.717210] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2066.732177] Node 0 DMA32 free:45216kB min:36200kB low:45248kB high:54296kB active_anon:89752kB inactive_anon:88188kB active_file:656kB inactive_file:10252kB unevictable:0kB writepending:148kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7200kB pagetables:3016kB bounce:0kB free_pcp:868kB local_pcp:680kB free_cma:0kB [ 2066.744026] Node 0 [ 2066.763756] lowmem_reserve[]: 0 0 0 0 0 [ 2066.771249] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2066.791976] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB [ 2066.798321] lowmem_reserve[]: [ 2066.798632] 0*4096kB [ 2066.808604] 0 0 0 0 0 [ 2066.817887] Node 1 Normal free:106296kB min:53696kB low:67120kB high:80544kB active_anon:636kB inactive_anon:41436kB active_file:108kB inactive_file:4480kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:0kB bounce:0kB free_pcp:740kB local_pcp:620kB free_cma:0kB [ 2066.820543] = 0kB [ 2066.852234] lowmem_reserve[]: 0 0 0 0 0 [ 2066.857967] Node 0 DMA: 26*4kB (UME) 14*8kB (UME) 12*16kB (UME) 8*32kB (UM) 3*64kB (UM) 4*128kB (ME) 2*256kB (UE) 2*512kB (UE) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 11096kB [ 2066.875950] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 0*16kB 0*32kB 179*64kB (U) 15*128kB (U) 14*256kB (U) 46*512kB (U) 18*1024kB (U) 11*2048kB (U) 0*4096kB = 81496kB [ 2066.881686] Node 0 DMA32: 90*4kB (E) 108*8kB (UE) 224*16kB (UME) 1081*32kB (UME) 80*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 44520kB [ 2066.909776] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2066.938044] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2066.953441] Node 1 Normal: 389*4kB (UM) 4*8kB (UM) 4*16kB (UM) 3*32kB (UM) 39*64kB (UM) 16*128kB (UM) 16*256kB (UM) 47*512kB (UM) 23*1024kB (UM) 8*2048kB (U) 0*4096kB = 74388kB [ 2066.975553] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2067.003282] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2067.016640] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2067.023045] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2067.033947] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2067.052808] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2067.062890] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2067.071622] 39175 total pagecache pages [ 2067.072823] 39175 total pagecache pages [ 2067.075650] 0 pages in swap cache [ 2067.075655] Swap cache stats: add 0, delete 0, find 0/0 [ 2067.075658] Free swap = 0kB [ 2067.075662] Total swap = 0kB [ 2067.075668] 2097051 pages RAM [ 2067.084443] 0 pages in swap cache [ 2067.088446] 0 pages HighMem/MovableOnly [ 2067.091444] Swap cache stats: add 0, delete 0, find 0/0 [ 2067.094487] 363846 pages reserved [ 2067.094491] 0 pages cma reserved [ 2067.122082] Free swap = 0kB [ 2067.125905] Total swap = 0kB [ 2067.135938] 2097051 pages RAM [ 2067.139051] 0 pages HighMem/MovableOnly [ 2067.155488] 363846 pages reserved [ 2067.158951] 0 pages cma reserved 06:42:07 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7ffffffd, 0x22}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="080025bd7000fbdbbe250e00b2f73aab913900c8e8689c00010000000500a900010000000800ec8e927450f05393cb9440de35fa69265559841959fd96de5ca0ee8a44bcd70a5d5f1cd652f18b8f0ac9726ab05fb94993544920d6cff3d536445d9d9efda308728bfe867d49529c81959f2791864be3c252bda08a6d6909fffc7d2602685ae3bd75e0397c177e8b"], 0x2c}, 0x1, 0x0, 0x0, 0x18004}, 0x10) 06:42:07 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000140)=""/4096, &(0x7f0000000040)=0x1000) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7ffffffd, 0x22}) [ 2068.170401] syz-executor.5 invoked oom-killer: gfp_mask=0x14082c2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 [ 2068.211021] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2068.221796] CPU: 1 PID: 11886 Comm: syz-executor.5 Not tainted 4.14.228-syzkaller #0 [ 2068.229694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2068.239046] Call Trace: [ 2068.241620] dump_stack+0x1b2/0x281 [ 2068.245241] dump_header+0x178/0x82f [ 2068.248934] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2068.254013] ? ___ratelimit+0x2cd/0x530 [ 2068.257963] oom_kill_process.cold+0x10/0xb18 [ 2068.262538] out_of_memory+0xe3e/0x1190 [ 2068.266491] ? oom_killer_disable+0x1c0/0x1c0 [ 2068.270961] ? mutex_trylock+0x152/0x1a0 [ 2068.275000] __alloc_pages_nodemask+0x23e1/0x2720 [ 2068.279823] ? __lock_acquire+0x5fc/0x3f20 [ 2068.284036] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2068.288865] alloc_pages_current+0x155/0x260 [ 2068.293247] __vmalloc_area_node+0x40a/0x680 [ 2068.297635] ? __vmalloc_node_range+0x150/0x150 [ 2068.302279] ? __get_vm_area_node+0x27d/0x340 [ 2068.306750] __vmalloc_node_range+0xbe/0x150 [ 2068.311134] vmalloc_user+0x47/0xa0 [ 2068.314733] ? kcov_mmap+0x2b/0x120 [ 2068.318343] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2068.323334] kcov_mmap+0x2b/0x120 [ 2068.326851] ? kmem_cache_alloc+0x35f/0x3c0 [ 2068.331160] mmap_region+0xa1a/0x1220 [ 2068.335113] do_mmap+0x5b3/0xcb0 [ 2068.338457] vm_mmap_pgoff+0x14e/0x1a0 [ 2068.342322] ? vma_is_stack_for_current+0xb0/0xb0 [ 2068.347141] ? __fget+0x225/0x360 [ 2068.350585] SyS_mmap_pgoff+0x249/0x510 [ 2068.354542] ? find_mergeable_anon_vma+0x230/0x230 [ 2068.359447] ? do_syscall_64+0x4c/0x640 [ 2068.363397] ? align_vdso_addr+0x250/0x250 [ 2068.367607] do_syscall_64+0x1d5/0x640 [ 2068.371477] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2068.376642] RIP: 0033:0x4664a2 [ 2068.379893] RSP: 002b:00007ffc06ac59c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2068.387576] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000004664a2 [ 2068.394818] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000000000000 [ 2068.402061] RBP: 0000000000000000 R08: 00000000000000eb R09: 0000000000000000 [ 2068.409396] R10: 0000000000000001 R11: 0000000000000246 R12: 000000000056c288 [ 2068.416642] R13: 000000000056ca68 R14: 0000000000000000 R15: 00000000000000ec [ 2068.482812] Mem-Info: [ 2068.490280] active_anon:22617 inactive_anon:32409 isolated_anon:0 [ 2068.490280] active_file:68 inactive_file:103 isolated_file:0 [ 2068.490280] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2068.490280] slab_reclaimable:12897 slab_unreclaimable:117412 [ 2068.490280] mapped:45757 shmem:33553 pagetables:725 bounce:0 [ 2068.490280] free:25539 free_pcp:539 free_cma:0 [ 2068.531107] Node 0 active_anon:89636kB inactive_anon:88188kB active_file:0kB inactive_file:340kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:181416kB dirty:0kB writeback:0kB shmem:92492kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2068.563429] Node 1 active_anon:832kB inactive_anon:41448kB active_file:104kB inactive_file:808kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1612kB dirty:0kB writeback:0kB shmem:41720kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2068.605003] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:20kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2068.634948] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2068.639988] Node 0 DMA32 free:42896kB min:36200kB low:45248kB high:54296kB active_anon:89592kB inactive_anon:88188kB active_file:0kB inactive_file:860kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7200kB pagetables:2880kB bounce:0kB free_pcp:568kB local_pcp:208kB free_cma:0kB [ 2068.672180] lowmem_reserve[]: 0 0 0 0 0 [ 2068.676616] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2068.705344] lowmem_reserve[]: 0 0 0 0 0 [ 2068.709699] Node 1 Normal free:67008kB min:53696kB low:67120kB high:80544kB active_anon:832kB inactive_anon:41448kB active_file:824kB inactive_file:884kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:0kB bounce:0kB free_pcp:368kB local_pcp:196kB free_cma:0kB [ 2068.742286] lowmem_reserve[]: 0 0 0 0 0 [ 2068.746728] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2068.761579] Node 0 DMA: 68*4kB (UME) 16*8kB (UME) 12*16kB (UME) 9*32kB (UM) 2*64kB (M) 6*128kB (UME) 2*256kB (UE) 1*512kB (E) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 10992kB [ 2068.780683] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2068.786639] CPU: 1 PID: 11746 Comm: syz-executor.3 Not tainted 4.14.228-syzkaller #0 [ 2068.794517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2068.803857] Call Trace: [ 2068.806455] dump_stack+0x1b2/0x281 [ 2068.810084] warn_alloc.cold+0x96/0x1cc [ 2068.814052] ? zone_watermark_ok_safe+0x220/0x220 [ 2068.818909] __alloc_pages_nodemask+0x2127/0x2720 [ 2068.823769] ? lock_acquire+0x170/0x3f0 [ 2068.827754] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2068.832616] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2068.838068] ? __mutex_unlock_slowpath+0x75/0x770 [ 2068.842902] ? retint_kernel+0x2d/0x2d [ 2068.846784] alloc_pages_current+0x155/0x260 [ 2068.851185] ion_page_pool_alloc+0x118/0x1b0 [ 2068.855587] ion_system_heap_allocate+0x133/0x8c0 [ 2068.860427] ? _raw_spin_unlock+0x29/0x40 [ 2068.864569] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2068.869493] ? ion_system_contig_heap_create+0x130/0x130 [ 2068.874946] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2068.879974] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2068.884813] ion_alloc+0x27a/0x810 [ 2068.888356] ? ion_dma_buf_release+0x40/0x40 [ 2068.892762] ? __might_fault+0x177/0x1b0 [ 2068.896819] ion_ioctl+0xea/0x1f0 [ 2068.900269] ? ion_query_heaps+0x360/0x360 [ 2068.904496] ? ion_query_heaps+0x360/0x360 [ 2068.908725] do_vfs_ioctl+0x75a/0xff0 [ 2068.912519] ? ioctl_preallocate+0x1a0/0x1a0 [ 2068.916922] ? lock_downgrade+0x740/0x740 [ 2068.921069] ? __fget+0x225/0x360 [ 2068.924512] ? do_vfs_ioctl+0xff0/0xff0 [ 2068.928476] ? security_file_ioctl+0x83/0xb0 [ 2068.932909] SyS_ioctl+0x7f/0xb0 [ 2068.936269] ? do_vfs_ioctl+0xff0/0xff0 [ 2068.940243] do_syscall_64+0x1d5/0x640 [ 2068.944152] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2068.949329] RIP: 0033:0x466459 [ 2068.952510] RSP: 002b:00007fd4b8064188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2068.960209] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2068.967473] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2068.974732] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2068.981997] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2068.989260] R13: 00007ffca99dab2f R14: 00007fd4b8064300 R15: 0000000000022000 [ 2069.002005] Node 0 DMA32: 0*4kB 86*8kB (UE) 1591*16kB (UME) 1912*32kB (UE) 2*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 87456kB [ 2069.054008] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2069.068014] Node 1 Normal: 17644*4kB (UM) 3371*8kB (UM) 1724*16kB (UM) 1201*32kB (U) 438*64kB (U) 49*128kB (U) 6*256kB (U) 7*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 202984kB [ 2069.086675] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2069.096829] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2069.108556] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2069.118099] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2069.129658] 34694 total pagecache pages [ 2069.134293] 0 pages in swap cache [ 2069.137752] Swap cache stats: add 0, delete 0, find 0/0 [ 2069.146529] Free swap = 0kB [ 2069.149569] Total swap = 0kB [ 2069.152573] 2097051 pages RAM [ 2069.157963] 0 pages HighMem/MovableOnly [ 2069.162055] 363846 pages reserved [ 2069.168783] 0 pages cma reserved [ 2069.172167] Out of memory (oom_kill_allocating_task): Kill process 11886 (syz-executor.5) score 0 or sacrifice child [ 2069.186236] Killed process 11886 (syz-executor.5) total-vm:56252kB, anon-rss:68kB, file-rss:0kB, shmem-rss:0kB [ 2069.250265] warn_alloc_show_mem: 2 callbacks suppressed [ 2069.250268] Mem-Info: [ 2069.258811] active_anon:22644 inactive_anon:32409 isolated_anon:0 [ 2069.258811] active_file:17 inactive_file:620 isolated_file:0 [ 2069.258811] unevictable:0 dirty:6 writeback:0 unstable:0 [ 2069.258811] slab_reclaimable:12892 slab_unreclaimable:117582 [ 2069.258811] mapped:44536 shmem:33553 pagetables:733 bounce:0 [ 2069.258811] free:85239 free_pcp:483 free_cma:0 [ 2069.293215] Node 0 active_anon:89732kB inactive_anon:88188kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176468kB dirty:24kB writeback:0kB shmem:92492kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2069.321636] Node 1 active_anon:844kB inactive_anon:41448kB active_file:60kB inactive_file:3800kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2876kB dirty:0kB writeback:0kB shmem:41720kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2069.349493] Node 0 DMA free:11148kB min:204kB low:252kB high:300kB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:20kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2069.376462] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2069.381796] Node 0 DMA32 free:70132kB min:36200kB low:45248kB high:54296kB active_anon:89688kB inactive_anon:88188kB active_file:236kB inactive_file:1512kB unevictable:0kB writepending:24kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7200kB pagetables:2912kB bounce:0kB free_pcp:1028kB local_pcp:384kB free_cma:0kB [ 2069.411718] lowmem_reserve[]: 0 0 0 0 0 [ 2069.416451] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2069.442630] lowmem_reserve[]: 0 0 0 0 0 [ 2069.447184] Node 1 Normal free:303284kB min:53696kB low:67120kB high:80544kB active_anon:844kB inactive_anon:41448kB active_file:60kB inactive_file:3800kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:0kB bounce:0kB free_pcp:1320kB local_pcp:680kB free_cma:0kB [ 2069.476735] lowmem_reserve[]: 0 0 0 0 0 [ 2069.481182] Node 0 DMA: 119*4kB (UME) 30*8kB (UME) 14*16kB (UME) 10*32kB (UM) 2*64kB (M) 6*128kB (UME) 2*256kB (UE) 1*512kB (E) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 11372kB [ 2069.497855] Node 0 DMA32: 2625*4kB (UE) 400*8kB (UME) 973*16kB (UME) 1599*32kB (UE) 39*64kB (UM) 17*128kB (UM) 23*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 90996kB [ 2069.513695] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2069.524846] Node 1 Normal: 16661*4kB (UM) 4123*8kB (UM) 2489*16kB (UM) 1854*32kB (UM) 954*64kB (UM) 150*128kB (U) 27*256kB (U) 25*512kB (UM) 2*1024kB (U) 5*2048kB (U) 0*4096kB = 311036kB [ 2069.543161] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2069.552470] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2069.562509] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2069.573415] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2069.582376] 35284 total pagecache pages [ 2069.587696] 0 pages in swap cache [ 2069.592001] Swap cache stats: add 0, delete 0, find 0/0 [ 2069.599977] Free swap = 0kB [ 2069.607890] Total swap = 0kB [ 2069.615070] 2097051 pages RAM [ 2069.622268] 0 pages HighMem/MovableOnly [ 2069.628510] 363846 pages reserved [ 2069.640134] 0 pages cma reserved [ 2069.802793] Bluetooth: hci2 command 0x0409 tx timeout 06:42:09 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7ffffffd, 0x22}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x1}) [ 2070.060079] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2070.081573] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2070.101521] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2070.107965] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2070.113784] CPU: 0 PID: 11897 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 2070.121754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2070.131104] Call Trace: [ 2070.133691] dump_stack+0x1b2/0x281 [ 2070.137321] warn_alloc.cold+0x96/0x1cc [ 2070.141326] ? zone_watermark_ok_safe+0x220/0x220 [ 2070.146172] __alloc_pages_nodemask+0x2127/0x2720 [ 2070.151021] ? lock_acquire+0x170/0x3f0 [ 2070.155022] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2070.159877] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2070.165327] ? __mutex_unlock_slowpath+0x75/0x770 [ 2070.170184] alloc_pages_current+0x155/0x260 [ 2070.174588] ion_page_pool_alloc+0x118/0x1b0 [ 2070.179007] ion_system_heap_allocate+0x133/0x8c0 [ 2070.183843] ? ion_alloc+0x187/0x810 [ 2070.187557] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2070.193004] ? ion_system_contig_heap_create+0x130/0x130 [ 2070.198448] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2070.203465] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2070.208309] ion_alloc+0x204/0x810 [ 2070.211850] ? ion_dma_buf_release+0x40/0x40 [ 2070.216351] ? __might_fault+0x177/0x1b0 [ 2070.220508] ion_ioctl+0xea/0x1f0 [ 2070.223978] ? ion_query_heaps+0x360/0x360 [ 2070.228212] ? ion_query_heaps+0x360/0x360 [ 2070.232441] do_vfs_ioctl+0x75a/0xff0 [ 2070.236251] ? ioctl_preallocate+0x1a0/0x1a0 [ 2070.240658] ? lock_downgrade+0x740/0x740 [ 2070.244816] ? __fget+0x225/0x360 [ 2070.248265] ? do_vfs_ioctl+0xff0/0xff0 [ 2070.252238] ? security_file_ioctl+0x83/0xb0 [ 2070.256651] SyS_ioctl+0x7f/0xb0 [ 2070.260022] ? do_vfs_ioctl+0xff0/0xff0 [ 2070.264000] do_syscall_64+0x1d5/0x640 [ 2070.267899] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2070.273088] RIP: 0033:0x466459 [ 2070.276268] RSP: 002b:00007f27c4f25188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2070.283969] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2070.291239] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2070.298673] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2070.305948] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2070.313215] R13: 00007ffda0b0ca7f R14: 00007f27c4f25300 R15: 0000000000022000 [ 2070.333836] CPU: 0 PID: 11896 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 2070.341728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2070.351077] Call Trace: [ 2070.353665] dump_stack+0x1b2/0x281 [ 2070.357286] warn_alloc.cold+0x96/0x1cc [ 2070.361352] ? zone_watermark_ok_safe+0x220/0x220 [ 2070.366237] __alloc_pages_nodemask+0x2127/0x2720 [ 2070.371094] ? lock_acquire+0x170/0x3f0 [ 2070.375194] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2070.380046] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2070.385495] ? __mutex_unlock_slowpath+0x75/0x770 [ 2070.390343] ? __sanitizer_cov_trace_pc+0x4a/0x50 [ 2070.395184] alloc_pages_current+0x155/0x260 [ 2070.399591] ion_page_pool_alloc+0x118/0x1b0 [ 2070.403995] ion_system_heap_allocate+0x133/0x8c0 [ 2070.408834] ? ion_alloc+0x187/0x810 [ 2070.412545] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2070.417998] ? ion_system_contig_heap_create+0x130/0x130 [ 2070.423451] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2070.428471] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2070.433436] ion_alloc+0x204/0x810 [ 2070.436970] ? ion_dma_buf_release+0x40/0x40 [ 2070.441372] ? __might_fault+0x177/0x1b0 [ 2070.445442] ion_ioctl+0xea/0x1f0 [ 2070.448898] ? ion_query_heaps+0x360/0x360 [ 2070.453139] ? ion_query_heaps+0x360/0x360 [ 2070.457366] do_vfs_ioctl+0x75a/0xff0 [ 2070.461164] ? ioctl_preallocate+0x1a0/0x1a0 [ 2070.465591] ? lock_downgrade+0x740/0x740 [ 2070.469735] ? __fget+0x225/0x360 [ 2070.473183] ? do_vfs_ioctl+0xff0/0xff0 [ 2070.477147] ? security_file_ioctl+0x83/0xb0 [ 2070.481659] SyS_ioctl+0x7f/0xb0 [ 2070.485143] ? do_vfs_ioctl+0xff0/0xff0 [ 2070.489141] do_syscall_64+0x1d5/0x640 [ 2070.493034] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2070.498318] RIP: 0033:0x466459 [ 2070.501535] RSP: 002b:00007f27c4f46188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2070.509236] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2070.516585] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2070.523943] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2070.531279] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2070.538527] R13: 00007ffda0b0ca7f R14: 00007f27c4f46300 R15: 0000000000022000 [ 2070.577714] Mem-Info: [ 2070.580213] active_anon:22514 inactive_anon:32407 isolated_anon:24 [ 2070.580213] active_file:697 inactive_file:4659 isolated_file:0 [ 2070.580213] unevictable:0 dirty:16 writeback:0 unstable:0 [ 2070.580213] slab_reclaimable:12869 slab_unreclaimable:117044 [ 2070.580213] mapped:39277 shmem:33549 pagetables:679 bounce:0 [ 2070.580213] free:47217 free_pcp:40 free_cma:0 [ 2070.614596] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2070.632039] Node 0 active_anon:89352kB inactive_anon:88180kB active_file:1020kB inactive_file:17300kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:154112kB dirty:56kB writeback:0kB shmem:92476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2070.641843] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2070.687730] CPU: 0 PID: 11899 Comm: syz-executor.0 Not tainted 4.14.228-syzkaller #0 [ 2070.695602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2070.704941] Call Trace: [ 2070.707526] dump_stack+0x1b2/0x281 [ 2070.711145] warn_alloc.cold+0x96/0x1cc [ 2070.715115] ? zone_watermark_ok_safe+0x220/0x220 [ 2070.719966] __alloc_pages_nodemask+0x2127/0x2720 [ 2070.724804] ? io_schedule_timeout+0x140/0x140 [ 2070.729384] ? lock_acquire+0x170/0x3f0 [ 2070.733357] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2070.738198] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2070.743657] ? __mutex_unlock_slowpath+0x75/0x770 [ 2070.748513] ? __sanitizer_cov_trace_pc+0x23/0x50 [ 2070.753355] alloc_pages_current+0x155/0x260 [ 2070.757809] ion_page_pool_alloc+0x118/0x1b0 [ 2070.762216] ion_system_heap_allocate+0x133/0x8c0 [ 2070.767053] ? ion_alloc+0x187/0x810 [ 2070.770758] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2070.776199] ? ion_system_contig_heap_create+0x130/0x130 [ 2070.781654] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2070.786698] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2070.791537] ion_alloc+0x204/0x810 [ 2070.795075] ? ion_dma_buf_release+0x40/0x40 [ 2070.799479] ? __might_fault+0x177/0x1b0 [ 2070.803540] ion_ioctl+0xea/0x1f0 [ 2070.806994] ? ion_query_heaps+0x360/0x360 [ 2070.811221] ? ion_query_heaps+0x360/0x360 [ 2070.815444] do_vfs_ioctl+0x75a/0xff0 [ 2070.819232] ? ioctl_preallocate+0x1a0/0x1a0 [ 2070.820881] Node 1 active_anon:704kB inactive_anon:41448kB active_file:1468kB inactive_file:1336kB unevictable:0kB isolated(anon):96kB isolated(file):0kB mapped:2796kB dirty:8kB writeback:0kB shmem:41720kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2070.823627] ? lock_downgrade+0x740/0x740 [ 2070.823641] ? __fget+0x225/0x360 [ 2070.823649] ? do_vfs_ioctl+0xff0/0xff0 [ 2070.823659] ? security_file_ioctl+0x83/0xb0 [ 2070.823669] SyS_ioctl+0x7f/0xb0 [ 2070.823675] ? do_vfs_ioctl+0xff0/0xff0 [ 2070.823686] do_syscall_64+0x1d5/0x640 [ 2070.823700] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2070.823708] RIP: 0033:0x466459 [ 2070.887476] RSP: 002b:00007f158f768188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2070.895281] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2070.902540] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2070.909805] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2070.917066] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2070.924327] R13: 00007ffd93ba4faf R14: 00007f158f768300 R15: 0000000000022000 [ 2070.929892] Node 0 DMA free:11112kB min:204kB low:252kB high:300kB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:20kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2070.993209] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2071.033277] Node 0 DMA32 free:44580kB min:36200kB low:45248kB high:54296kB active_anon:89472kB inactive_anon:88180kB active_file:1688kB inactive_file:17400kB unevictable:0kB writepending:32kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7136kB pagetables:2800kB bounce:0kB free_pcp:408kB local_pcp:220kB free_cma:0kB [ 2071.076119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2071.092876] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2071.103836] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2071.122880] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2071.136459] device bridge_slave_1 left promiscuous mode [ 2071.141962] bridge0: port 2(bridge_slave_1) entered disabled state [ 2071.172658] lowmem_reserve[]: 0 0 0 0 0 [ 2071.176685] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2071.223391] device bridge_slave_0 left promiscuous mode [ 2071.228918] bridge0: port 1(bridge_slave_0) entered disabled state [ 2071.265073] device veth1_macvtap left promiscuous mode [ 2071.270385] device veth0_macvtap left promiscuous mode [ 2071.282686] lowmem_reserve[]: 0 0 0 0 0 [ 2071.286719] Node 1 Normal free:100136kB min:53696kB low:67120kB high:80544kB active_anon:724kB inactive_anon:41448kB active_file:1416kB inactive_file:1564kB unevictable:0kB writepending:12kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:0kB bounce:0kB free_pcp:256kB local_pcp:140kB free_cma:0kB [ 2071.323344] device veth1_vlan left promiscuous mode [ 2071.328403] device veth0_vlan left promiscuous mode [ 2071.386995] lowmem_reserve[]: 0 0 0 0 0 [ 2071.391018] Node 0 DMA: 8*4kB (ME) 47*8kB (UME) 25*16kB (UME) 10*32kB (UM) 6*64kB (UM) 5*128kB (UME) 1*256kB (E) 1*512kB (E) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 11112kB [ 2071.451229] Node 0 DMA32: 0*4kB 1*8kB (E) 139*16kB (ME) 945*32kB (UME) 44*64kB (U) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35416kB [ 2071.510964] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2071.532459] Node 1 Normal: 1*4kB (U) 17*8kB (M) 26*16kB (UM) 8*32kB (M) 266*64kB (UM) 113*128kB (U) 36*256kB (U) 8*512kB (UM) 11*1024kB (U) 0*2048kB 1*4096kB (U) = 60972kB [ 2071.610182] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2071.620430] device hsr_slave_1 left promiscuous mode [ 2071.629819] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2071.652543] device hsr_slave_0 left promiscuous mode [ 2071.678009] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2071.688367] team0 (unregistering): Port device team_slave_1 removed [ 2071.701054] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2071.740907] 36860 total pagecache pages [ 2071.759198] team0 (unregistering): Port device team_slave_0 removed [ 2071.759505] 0 pages in swap cache [ 2071.779404] Swap cache stats: add 0, delete 0, find 0/0 [ 2071.792456] Free swap = 0kB [ 2071.795524] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2071.805146] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2071.820941] Total swap = 0kB [ 2071.834526] 2097051 pages RAM [ 2071.844147] 0 pages HighMem/MovableOnly [ 2071.856665] 363846 pages reserved [ 2071.864505] 0 pages cma reserved [ 2071.888767] bond0 (unregistering): Released all slaves [ 2071.892572] Bluetooth: hci2 command 0x041b tx timeout [ 2072.415055] syz-executor.0 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2072.443010] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2072.448983] CPU: 0 PID: 11225 Comm: syz-executor.0 Not tainted 4.14.228-syzkaller #0 [ 2072.456870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2072.466213] Call Trace: [ 2072.468793] dump_stack+0x1b2/0x281 [ 2072.472412] dump_header+0x178/0x82f [ 2072.476115] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2072.481210] ? ___ratelimit+0x2cd/0x530 [ 2072.485177] oom_kill_process.cold+0x10/0xb18 [ 2072.489669] out_of_memory+0xe3e/0x1190 [ 2072.493651] ? oom_killer_disable+0x1c0/0x1c0 [ 2072.498138] ? mutex_trylock+0x152/0x1a0 [ 2072.502191] __alloc_pages_nodemask+0x23e1/0x2720 [ 2072.507035] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2072.511880] alloc_pages_current+0x155/0x260 [ 2072.516276] filemap_fault+0xea3/0x1980 [ 2072.520255] ext4_filemap_fault+0x84/0xb0 [ 2072.524397] __do_fault+0xfa/0x380 [ 2072.527930] __handle_mm_fault+0x2497/0x4620 [ 2072.532336] ? vm_insert_page+0x7c0/0x7c0 [ 2072.536480] ? nanosleep_copyout+0x100/0x100 [ 2072.540892] handle_mm_fault+0x391/0x860 [ 2072.544944] __do_page_fault+0x549/0xad0 [ 2072.548995] ? spurious_fault+0x640/0x640 [ 2072.553135] ? do_page_fault+0x60/0x500 [ 2072.557102] ? page_fault+0x2f/0x50 [ 2072.560722] page_fault+0x45/0x50 [ 2072.564161] RIP: 1f9a64:0x4 [ 2072.567084] RSP: 0009:00007ffd93ba526c EFLAGS: 00000032 [ 2072.702509] Mem-Info: [ 2072.710443] active_anon:22655 inactive_anon:32407 isolated_anon:0 [ 2072.710443] active_file:32 inactive_file:763 isolated_file:0 [ 2072.710443] unevictable:0 dirty:5 writeback:0 unstable:0 [ 2072.710443] slab_reclaimable:12803 slab_unreclaimable:116267 [ 2072.710443] mapped:53476 shmem:33549 pagetables:790 bounce:0 [ 2072.710443] free:35749 free_pcp:389 free_cma:0 [ 2072.851374] Node 0 active_anon:89724kB inactive_anon:88180kB active_file:680kB inactive_file:444kB unevictable:0kB isolated(anon):0kB isolated(file):132kB mapped:159348kB dirty:0kB writeback:12kB shmem:92476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2072.952676] Node 1 active_anon:904kB inactive_anon:41448kB active_file:0kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:53100kB dirty:0kB writeback:0kB shmem:41720kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2073.024573] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:20kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2073.056447] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2073.070785] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2073.074093] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2073.079524] CPU: 0 PID: 11746 Comm: syz-executor.3 Not tainted 4.14.228-syzkaller #0 [ 2073.081036] Node 0 [ 2073.088888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2073.088891] Call Trace: [ 2073.088920] dump_stack+0x1b2/0x281 [ 2073.088934] warn_alloc.cold+0x96/0x1cc [ 2073.088945] ? zone_watermark_ok_safe+0x220/0x220 [ 2073.088953] ? usleep_range+0x130/0x130 [ 2073.088962] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2073.088985] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2073.129521] ? run_timer_softirq+0x5a0/0x5a0 [ 2073.133923] __alloc_pages_nodemask+0x2127/0x2720 [ 2073.138693] DMA32 free:17852kB min:36200kB low:45248kB high:54296kB active_anon:89712kB inactive_anon:88180kB active_file:308kB inactive_file:340kB unevictable:0kB writepending:12kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7136kB pagetables:2940kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2073.138755] ? lock_acquire+0x170/0x3f0 [ 2073.170899] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2073.175735] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2073.180227] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2073.185673] ? alloc_pages_current+0x16/0x260 [ 2073.190157] alloc_pages_current+0x155/0x260 [ 2073.194557] ion_page_pool_alloc+0x118/0x1b0 [ 2073.199048] ion_system_heap_allocate+0x133/0x8c0 [ 2073.203881] ? _raw_spin_unlock+0x29/0x40 [ 2073.208020] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2073.212947] ? ion_system_contig_heap_create+0x130/0x130 [ 2073.215858] lowmem_reserve[]: [ 2073.218474] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2073.218486] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2073.221567] 0 [ 2073.226574] ion_alloc+0x27a/0x810 [ 2073.226586] ? ion_dma_buf_release+0x40/0x40 [ 2073.226598] ? __might_fault+0x177/0x1b0 [ 2073.226608] ion_ioctl+0xea/0x1f0 [ 2073.226616] ? ion_query_heaps+0x360/0x360 [ 2073.226627] ? ion_query_heaps+0x360/0x360 [ 2073.226635] do_vfs_ioctl+0x75a/0xff0 [ 2073.226646] ? ioctl_preallocate+0x1a0/0x1a0 [ 2073.259913] 0 [ 2073.260821] ? lock_downgrade+0x740/0x740 [ 2073.265228] 0 [ 2073.266983] ? __fget+0x225/0x360 [ 2073.271096] 0 [ 2073.272879] ? do_vfs_ioctl+0xff0/0xff0 [ 2073.272891] ? security_file_ioctl+0x83/0xb0 [ 2073.272901] SyS_ioctl+0x7f/0xb0 [ 2073.272909] ? do_vfs_ioctl+0xff0/0xff0 [ 2073.272921] do_syscall_64+0x1d5/0x640 [ 2073.272937] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2073.272944] RIP: 0033:0x466459 [ 2073.272950] RSP: 002b:00007fd4b8064188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2073.307394] 0 [ 2073.313792] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2073.313798] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2073.313802] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2073.313807] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2073.313812] R13: 00007ffca99dab2f R14: 00007fd4b8064300 R15: 0000000000022000 [ 2073.349756] warn_alloc_show_mem: 2 callbacks suppressed [ 2073.349760] Mem-Info: [ 2073.374157] active_anon:22665 inactive_anon:32407 isolated_anon:0 [ 2073.374157] active_file:12 inactive_file:27 isolated_file:0 [ 2073.374157] unevictable:0 dirty:5 writeback:0 unstable:0 [ 2073.374157] slab_reclaimable:12779 slab_unreclaimable:115882 [ 2073.374157] mapped:52865 shmem:33549 pagetables:793 bounce:0 [ 2073.374157] free:13848 free_pcp:30 free_cma:0 [ 2073.422506] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2073.422586] Bluetooth: hci3 command 0x0406 tx timeout [ 2073.468304] Node 0 active_anon:89756kB inactive_anon:88180kB active_file:68kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:158360kB dirty:24kB writeback:0kB shmem:92476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2073.506478] lowmem_reserve[]: 0 0 0 0 0 [ 2073.509746] Node 1 active_anon:904kB inactive_anon:41448kB active_file:0kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:53100kB dirty:0kB writeback:0kB shmem:41720kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2073.510483] Node 1 [ 2073.552038] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:20kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2073.569906] Normal free:26568kB min:53696kB low:67120kB high:80544kB active_anon:904kB inactive_anon:41448kB active_file:0kB inactive_file:48kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:212kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 2073.596453] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2073.632225] Node 0 DMA32 free:17852kB min:36200kB low:45248kB high:54296kB active_anon:89712kB inactive_anon:88180kB active_file:108kB inactive_file:0kB unevictable:0kB writepending:12kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7136kB pagetables:2940kB bounce:0kB free_pcp:24kB local_pcp:0kB free_cma:0kB [ 2073.675185] lowmem_reserve[]: 0 0 0 0 0 [ 2073.679192] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2073.684045] lowmem_reserve[]: [ 2073.718591] lowmem_reserve[]: 0 0 0 0 0 [ 2073.731609] Node 1 Normal free:26568kB min:53696kB low:67120kB high:80544kB active_anon:904kB inactive_anon:41448kB active_file:80kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:212kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2073.741955] 0 [ 2073.774544] lowmem_reserve[]: 0 0 0 0 0 [ 2073.780439] Node 0 DMA: 11*4kB (ME) 14*8kB (UME) 12*16kB (UME) 8*32kB (UM) 2*64kB (M) 6*128kB (UME) 3*256kB (UE) 1*512kB (E) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 10972kB [ 2073.790825] 0 0 0 0 [ 2073.798336] Node 0 DMA: 11*4kB (ME) 14*8kB (UME) 12*16kB (UME) 8*32kB (UM) 2*64kB (M) 6*128kB (UME) 3*256kB (UE) 1*512kB (E) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 10972kB [ 2073.807870] Node 0 DMA32: 228*4kB (UME) 137*8kB (UME) 152*16kB (UME) 62*32kB (UME) 120*64kB (U) 30*128kB (U) 2*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18456kB [ 2073.845006] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2073.859693] Node 0 DMA32: 228*4kB (UME) 137*8kB (UME) 152*16kB (UME) 62*32kB (UME) 120*64kB (U) 30*128kB (U) 2*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18456kB [ 2073.865241] Node 1 Normal: 52*4kB (M) 44*8kB (UM) 23*16kB (M) 8*32kB (UM) 6*64kB (M) 2*128kB (M) 1*256kB (M) 16*512kB (U) 12*1024kB (U) 0*2048kB 1*4096kB (U) = 26656kB [ 2073.906261] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2073.920400] IPVS: ftp: loaded support on port[0] = 21 [ 2073.937920] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2073.951128] Node 1 Normal: 52*4kB (M) 45*8kB (UM) 24*16kB (UM) 7*32kB (M) 6*64kB (M) 3*128kB (UM) 1*256kB (M) 16*512kB (U) 12*1024kB (U) 0*2048kB 1*4096kB (U) = 26776kB [ 2073.957517] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2073.981421] Bluetooth: hci2 command 0x040f tx timeout [ 2073.988690] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2073.991016] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2074.002864] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2074.023597] 33571 total pagecache pages [ 2074.027691] 0 pages in swap cache [ 2074.028029] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2074.031134] Swap cache stats: add 0, delete 0, find 0/0 [ 2074.053913] Free swap = 0kB [ 2074.057051] Total swap = 0kB [ 2074.058263] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2074.060053] 2097051 pages RAM [ 2074.080103] 0 pages HighMem/MovableOnly [ 2074.084110] 363846 pages reserved [ 2074.086868] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2074.087652] 0 pages cma reserved [ 2074.111534] 33571 total pagecache pages [ 2074.133104] 0 pages in swap cache [ 2074.142096] Swap cache stats: add 0, delete 0, find 0/0 [ 2074.172752] Free swap = 0kB [ 2074.175968] Total swap = 0kB [ 2074.178988] 2097051 pages RAM [ 2074.182079] 0 pages HighMem/MovableOnly [ 2074.212580] 363846 pages reserved [ 2074.216046] 0 pages cma reserved [ 2074.219401] Out of memory (oom_kill_allocating_task): Kill process 11225 (syz-executor.0) score 0 or sacrifice child [ 2074.272735] Killed process 11899 (syz-executor.0) total-vm:93384kB, anon-rss:156kB, file-rss:34820kB, shmem-rss:0kB [ 2074.309039] oom_reaper: reaped process 11899 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2074.593820] chnl_net:caif_netlink_parms(): no params data found [ 2075.084569] bridge0: port 1(bridge_slave_0) entered blocking state [ 2075.091069] bridge0: port 1(bridge_slave_0) entered disabled state [ 2075.123126] device bridge_slave_0 entered promiscuous mode [ 2075.142064] bridge0: port 2(bridge_slave_1) entered blocking state [ 2075.162346] bridge0: port 2(bridge_slave_1) entered disabled state [ 2075.219951] device bridge_slave_1 entered promiscuous mode [ 2075.320097] IPVS: ftp: loaded support on port[0] = 21 [ 2075.323345] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2075.344123] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2075.469187] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2075.483878] team0: Port device team_slave_0 added [ 2075.516360] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2075.535809] team0: Port device team_slave_1 added [ 2075.726448] chnl_net:caif_netlink_parms(): no params data found [ 2075.781577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2075.792759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2075.842220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2075.889915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2075.908174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2075.962618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2076.042150] Bluetooth: hci2 command 0x0419 tx timeout [ 2076.075367] oom_reaper: reaped process 11896 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2076.371105] IPVS: ftp: loaded support on port[0] = 21 [ 2076.376678] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2076.384819] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2076.481638] device hsr_slave_0 entered promiscuous mode [ 2076.502469] device hsr_slave_1 entered promiscuous mode [ 2076.535164] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2076.563740] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2076.791821] bridge0: port 1(bridge_slave_0) entered blocking state [ 2076.799205] bridge0: port 1(bridge_slave_0) entered disabled state [ 2076.809655] device bridge_slave_0 entered promiscuous mode [ 2076.835110] chnl_net:caif_netlink_parms(): no params data found [ 2076.848742] bridge0: port 2(bridge_slave_1) entered blocking state [ 2076.855602] bridge0: port 2(bridge_slave_1) entered disabled state [ 2076.866108] device bridge_slave_1 entered promiscuous mode [ 2076.961069] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2076.973509] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2076.999603] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2077.068429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2077.075991] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2077.090005] team0: Port device team_slave_0 added [ 2077.107931] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2077.115500] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2077.123249] team0: Port device team_slave_1 added [ 2077.138628] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2077.154754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2077.162335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2077.169871] bridge0: port 1(bridge_slave_0) entered blocking state [ 2077.176573] bridge0: port 1(bridge_slave_0) entered disabled state [ 2077.187306] device bridge_slave_0 entered promiscuous mode [ 2077.198209] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2077.208453] 8021q: adding VLAN 0 to HW filter on device team0 [ 2077.226718] bridge0: port 2(bridge_slave_1) entered blocking state [ 2077.233859] bridge0: port 2(bridge_slave_1) entered disabled state [ 2077.242793] Bluetooth: hci0 command 0x0409 tx timeout [ 2077.252665] device bridge_slave_1 entered promiscuous mode [ 2077.261265] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2077.286122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2077.293623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2077.354350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2077.375125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2077.394683] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2077.414499] bridge0: port 1(bridge_slave_0) entered blocking state [ 2077.420979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2077.452474] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2077.460010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2077.495520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2077.568950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2077.589451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2077.596974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2077.612476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2077.620121] bridge0: port 2(bridge_slave_1) entered blocking state [ 2077.626518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2077.658665] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2077.682294] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2077.690921] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2077.715837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2077.735138] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2077.742592] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2077.750636] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2077.794529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2077.801972] Bluetooth: hci5 command 0x0409 tx timeout [ 2077.825079] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2077.859774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2077.868577] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2077.896575] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2077.912830] team0: Port device team_slave_0 added [ 2077.925105] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2077.943555] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2077.950654] team0: Port device team_slave_1 added [ 2077.980520] device hsr_slave_0 entered promiscuous mode [ 2077.996123] device hsr_slave_1 entered promiscuous mode [ 2078.018448] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2078.038277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2078.048882] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2078.073440] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2078.082632] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2078.101834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2078.112182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2078.171901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2078.202830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2078.212431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2078.220241] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2078.234392] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2078.248517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2078.272051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2078.301954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2078.323378] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2078.334146] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2078.340190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2078.363796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2078.371370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2078.382941] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2078.398324] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2078.418405] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2078.437658] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2078.448181] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2078.462013] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2078.564661] syz-executor.1 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 2078.581949] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2078.597854] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2078.597911] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2078.604262] CPU: 1 PID: 11896 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 2078.616145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2078.625485] Call Trace: [ 2078.628074] dump_stack+0x1b2/0x281 [ 2078.631701] dump_header+0x178/0x82f [ 2078.635413] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2078.640495] ? ___ratelimit+0x2cd/0x530 [ 2078.644536] oom_kill_process.cold+0x10/0xb18 [ 2078.649022] out_of_memory+0xe3e/0x1190 [ 2078.652977] ? oom_killer_disable+0x1c0/0x1c0 [ 2078.657450] ? mutex_trylock+0x152/0x1a0 [ 2078.661492] __alloc_pages_nodemask+0x23e1/0x2720 [ 2078.666320] ? lock_acquire+0x170/0x3f0 [ 2078.670278] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2078.675098] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2078.679575] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2078.685010] alloc_pages_current+0x155/0x260 [ 2078.689416] ion_page_pool_alloc+0x118/0x1b0 [ 2078.693803] ion_system_heap_allocate+0x133/0x8c0 [ 2078.698711] ? ion_alloc+0x187/0x810 [ 2078.702506] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2078.707934] ? ion_system_contig_heap_create+0x130/0x130 [ 2078.713362] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2078.718360] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2078.723181] ion_alloc+0x204/0x810 [ 2078.726701] ? ion_dma_buf_release+0x40/0x40 [ 2078.731088] ? __might_fault+0x177/0x1b0 [ 2078.735129] ion_ioctl+0xea/0x1f0 [ 2078.738559] ? ion_query_heaps+0x360/0x360 [ 2078.742776] ? ion_query_heaps+0x360/0x360 [ 2078.747003] do_vfs_ioctl+0x75a/0xff0 [ 2078.750782] ? ioctl_preallocate+0x1a0/0x1a0 [ 2078.755167] ? lock_downgrade+0x740/0x740 [ 2078.759294] ? __fget+0x225/0x360 [ 2078.762725] ? do_vfs_ioctl+0xff0/0xff0 [ 2078.766677] ? security_file_ioctl+0x83/0xb0 [ 2078.771062] SyS_ioctl+0x7f/0xb0 [ 2078.774416] ? do_vfs_ioctl+0xff0/0xff0 [ 2078.778370] do_syscall_64+0x1d5/0x640 [ 2078.782339] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2078.787505] RIP: 0033:0x466459 [ 2078.790673] RSP: 002b:00007f27c4f46188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2078.798359] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2078.805606] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2078.812855] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2078.820102] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2078.827348] R13: 00007ffda0b0ca7f R14: 00007f27c4f46300 R15: 0000000000022000 [ 2078.834795] CPU: 0 PID: 11897 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 2078.842681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2078.852060] Call Trace: [ 2078.854645] dump_stack+0x1b2/0x281 [ 2078.858268] warn_alloc.cold+0x96/0x1cc [ 2078.862237] ? zone_watermark_ok_safe+0x220/0x220 [ 2078.864518] Mem-Info: [ 2078.867069] ? usleep_range+0x130/0x130 [ 2078.869473] active_anon:22650 inactive_anon:32412 isolated_anon:0 [ 2078.869473] active_file:35 inactive_file:18 isolated_file:0 [ 2078.869473] unevictable:0 dirty:4 writeback:18 unstable:0 [ 2078.869473] slab_reclaimable:12760 slab_unreclaimable:117446 [ 2078.869473] mapped:52878 shmem:33557 pagetables:741 bounce:0 [ 2078.869473] free:13749 free_pcp:30 free_cma:0 [ 2078.873415] ? try_to_free_pages+0x23f/0x6e0 [ 2078.873425] ? _find_next_bit+0xdb/0x100 [ 2078.873435] ? run_timer_softirq+0x5a0/0x5a0 [ 2078.873452] __alloc_pages_nodemask+0x2127/0x2720 [ 2078.873467] ? lock_acquire+0x170/0x3f0 [ 2078.873483] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2078.873491] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2078.873505] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2078.873531] alloc_pages_current+0x155/0x260 [ 2078.917157] Node 0 active_anon:88876kB inactive_anon:88176kB active_file:92kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:158412kB dirty:0kB writeback:40kB shmem:92472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2078.919558] ion_page_pool_alloc+0x118/0x1b0 [ 2078.930207] Node 1 active_anon:1724kB inactive_anon:41472kB active_file:48kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:53100kB dirty:16kB writeback:32kB shmem:41756kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2078.933151] ion_system_heap_allocate+0x133/0x8c0 [ 2078.933161] ? ion_alloc+0x187/0x810 [ 2078.933172] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2078.933181] ? ion_system_contig_heap_create+0x130/0x130 [ 2078.933191] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2078.933202] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2078.933212] ion_alloc+0x204/0x810 [ 2078.933224] ? ion_dma_buf_release+0x40/0x40 [ 2078.933235] ? __might_fault+0x177/0x1b0 [ 2078.948147] Node 0 [ 2078.975268] ion_ioctl+0xea/0x1f0 [ 2078.975278] ? ion_query_heaps+0x360/0x360 [ 2078.975289] ? ion_query_heaps+0x360/0x360 [ 2078.975299] do_vfs_ioctl+0x75a/0xff0 [ 2078.975310] ? ioctl_preallocate+0x1a0/0x1a0 [ 2078.975319] ? lock_downgrade+0x740/0x740 [ 2078.975330] ? __fget+0x225/0x360 [ 2078.975339] ? do_vfs_ioctl+0xff0/0xff0 [ 2078.975350] ? security_file_ioctl+0x83/0xb0 [ 2078.975360] SyS_ioctl+0x7f/0xb0 [ 2078.975367] ? do_vfs_ioctl+0xff0/0xff0 [ 2078.975378] do_syscall_64+0x1d5/0x640 [ 2078.975392] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2078.975398] RIP: 0033:0x466459 [ 2078.975403] RSP: 002b:00007f27c4f25188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2078.975412] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2078.975417] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2078.975421] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2078.975426] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2078.975431] R13: 00007ffda0b0ca7f R14: 00007f27c4f25300 R15: 0000000000022000 [ 2078.986420] Mem-Info: [ 2079.014783] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:20kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2079.024962] active_anon:22673 inactive_anon:32412 isolated_anon:0 [ 2079.024962] active_file:17 inactive_file:17 isolated_file:0 [ 2079.024962] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2079.024962] slab_reclaimable:12760 slab_unreclaimable:117432 [ 2079.024962] mapped:52866 shmem:33557 pagetables:750 bounce:0 [ 2079.024962] free:13795 free_pcp:29 free_cma:0 [ 2079.030460] lowmem_reserve[]: [ 2079.040494] Node 0 active_anon:88888kB inactive_anon:88176kB active_file:12kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:158364kB dirty:0kB writeback:0kB shmem:92472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2079.046617] 0 [ 2079.052382] Node 1 active_anon:1804kB inactive_anon:41472kB active_file:56kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:53100kB dirty:0kB writeback:0kB shmem:41756kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2079.054776] 2717 [ 2079.058820] Node 0 [ 2079.064856] 2718 [ 2079.078870] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:20kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2079.080070] 2718 [ 2079.090613] lowmem_reserve[]: [ 2079.097559] 2718 [ 2079.100765] 0 [ 2079.113789] 2717 [ 2079.121350] Node 0 [ 2079.128419] 2718 [ 2079.131515] DMA32 free:17800kB min:36200kB low:45248kB high:54296kB active_anon:88848kB inactive_anon:88176kB active_file:12kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7104kB pagetables:2648kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB [ 2079.137713] 2718 2718 [ 2079.137723] Node 0 DMA32 free:17800kB min:36200kB low:45248kB high:54296kB active_anon:88848kB inactive_anon:88176kB active_file:12kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7104kB pagetables:2648kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB [ 2079.137742] lowmem_reserve[]: 0 0 0 0 0 [ 2079.137765] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2079.137782] lowmem_reserve[]: [ 2079.152519] lowmem_reserve[]: [ 2079.159909] 0 [ 2079.188675] 0 [ 2079.218686] 0 [ 2079.253197] 0 [ 2079.282845] 0 [ 2079.310849] 0 [ 2079.317760] 0 [ 2079.327060] 0 [ 2079.349344] Bluetooth: hci0 command 0x041b tx timeout [ 2079.354445] 0 [ 2079.388593] 0 [ 2079.427181] Node 1 [ 2079.427244] Node 0 [ 2079.429034] Normal free:26412kB min:53696kB low:67120kB high:80544kB active_anon:1804kB inactive_anon:41472kB active_file:56kB inactive_file:44kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:640kB pagetables:332kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2079.430810] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2079.437712] lowmem_reserve[]: [ 2079.448042] lowmem_reserve[]: [ 2079.475395] 0 0 0 0 0 [ 2079.509018] 0 0 0 0 0 [ 2079.510039] Node 0 DMA: 12*4kB (ME) 13*8kB (ME) 12*16kB (UME) 8*32kB (UM) 2*64kB (M) 4*128kB (ME) 4*256kB (UE) 1*512kB (E) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 10968kB [ 2079.515855] Node 1 Normal free:26412kB min:53696kB low:67120kB high:80544kB active_anon:1804kB inactive_anon:41472kB active_file:156kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:640kB pagetables:332kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2079.536136] Node 0 DMA32: 278*4kB (ME) 182*8kB (MEH) 160*16kB (UME) 30*32kB (ME) 49*64kB (UMEH) 5*128kB (UMEH) 3*256kB (UM) 2*512kB (UM) 6*1024kB (UM) 0*2048kB 0*4096kB = 17800kB [ 2079.577436] lowmem_reserve[]: 0 0 0 0 0 [ 2079.597611] Node 0 [ 2079.601518] Node 0 [ 2079.601520] Normal: 0*4kB [ 2079.605335] DMA: [ 2079.607710] 0*8kB [ 2079.608835] 12*4kB [ 2079.610868] 0*16kB [ 2079.618399] (ME) 13*8kB (ME) 12*16kB (UME) 8*32kB (UM) 2*64kB (M) 4*128kB (ME) 4*256kB (UE) 1*512kB (E) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 10968kB [ 2079.620790] 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2079.646978] Node 0 DMA32: 278*4kB (ME) 182*8kB (MEH) 160*16kB (UME) 30*32kB (ME) 49*64kB (UMEH) 5*128kB (UMEH) 3*256kB (UM) 2*512kB (UM) 6*1024kB (UM) 0*2048kB 0*4096kB = 17800kB [ 2079.658033] Node 1 [ 2079.682280] Node 0 [ 2079.682311] Normal: [ 2079.684502] Normal: [ 2079.686717] 109*4kB [ 2079.689015] 0*4kB [ 2079.691308] (UM) [ 2079.699527] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2079.701767] 71*8kB (M) 52*16kB (M) 28*32kB (M) 24*64kB (UM) 15*128kB (M) 7*256kB (M) 4*512kB (M) 2*1024kB (UM) 1*2048kB (M) 3*4096kB (U) = 26412kB [ 2079.717292] Node 1 Normal: 109*4kB (UM) 71*8kB (M) 52*16kB (M) 28*32kB (M) 24*64kB (UM) 15*128kB (M) 7*256kB (M) 4*512kB (M) 2*1024kB (UM) 1*2048kB (M) 3*4096kB (U) = 26412kB [ 2079.731102] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2079.746361] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2079.755242] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2079.758942] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2079.772757] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2079.781127] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2079.790049] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2079.798782] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2079.800790] 33591 total pagecache pages [ 2079.809370] 33591 total pagecache pages [ 2079.809379] 0 pages in swap cache [ 2079.809384] Swap cache stats: add 0, delete 0, find 0/0 [ 2079.809387] Free swap = 0kB [ 2079.809390] Total swap = 0kB [ 2079.809397] 2097051 pages RAM [ 2079.809400] 0 pages HighMem/MovableOnly [ 2079.809404] 363846 pages reserved [ 2079.809407] 0 pages cma reserved [ 2079.809415] Out of memory (oom_kill_allocating_task): Kill process 11896 (syz-executor.1) score 0 or sacrifice child [ 2079.809436] Killed process 11896 (syz-executor.1) total-vm:93516kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2079.809533] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2079.815255] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 2079.824265] (null) [ 2079.831487] 0 pages in swap cache [ 2079.836235] syz-executor.1 cpuset= [ 2079.839483] Swap cache stats: add 0, delete 0, find 0/0 [ 2079.845811] / [ 2079.851540] (null) [ 2079.861060] mems_allowed=0-1 [ 2079.872704] Free swap = 0kB [ 2079.885866] CPU: 1 PID: 11896 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 2079.888192] Bluetooth: hci5 command 0x041b tx timeout [ 2079.890224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2079.899022] , order=0, oom_score_adj=0 [ 2079.902506] Call Trace: [ 2079.902523] dump_stack+0x1b2/0x281 [ 2079.902536] warn_alloc.cold+0x96/0x1cc [ 2079.904221] syz-fuzzer cpuset= [ 2079.906348] ? zone_watermark_ok_safe+0x220/0x220 [ 2079.909419] / [ 2079.912529] ? wait_for_completion_io+0x10/0x10 [ 2079.920495] Total swap = 0kB [ 2079.925651] __alloc_pages_nodemask+0x2127/0x2720 [ 2079.925669] ? lock_acquire+0x170/0x3f0 [ 2079.935030] mems_allowed=0-1 [ 2079.938982] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2079.941687] 2097051 pages RAM [ 2079.945138] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2079.949079] 0 pages HighMem/MovableOnly [ 2079.952254] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2079.952271] alloc_pages_current+0x155/0x260 [ 2079.971679] 363846 pages reserved [ 2079.975181] ion_page_pool_alloc+0x118/0x1b0 [ 2079.978257] 0 pages cma reserved [ 2079.983078] ion_system_heap_allocate+0x133/0x8c0 [ 2079.983088] ? ion_alloc+0x187/0x810 [ 2079.983099] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2080.029555] ? ion_system_contig_heap_create+0x130/0x130 [ 2080.034994] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2080.039990] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2080.044820] ion_alloc+0x204/0x810 [ 2080.048358] ? ion_dma_buf_release+0x40/0x40 [ 2080.052750] ? __might_fault+0x177/0x1b0 [ 2080.056792] ion_ioctl+0xea/0x1f0 [ 2080.060221] ? ion_query_heaps+0x360/0x360 [ 2080.064440] ? ion_query_heaps+0x360/0x360 [ 2080.068666] do_vfs_ioctl+0x75a/0xff0 [ 2080.072463] ? ioctl_preallocate+0x1a0/0x1a0 [ 2080.076850] ? lock_downgrade+0x740/0x740 [ 2080.080979] ? __fget+0x225/0x360 [ 2080.084416] ? do_vfs_ioctl+0xff0/0xff0 [ 2080.088385] ? security_file_ioctl+0x83/0xb0 [ 2080.092781] SyS_ioctl+0x7f/0xb0 [ 2080.096130] ? do_vfs_ioctl+0xff0/0xff0 [ 2080.100086] do_syscall_64+0x1d5/0x640 [ 2080.103963] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2080.109158] RIP: 0033:0x466459 [ 2080.112331] RSP: 002b:00007f27c4f46188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2080.120013] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2080.127269] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2080.134520] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2080.141770] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2080.149032] R13: 00007ffda0b0ca7f R14: 00007f27c4f46300 R15: 0000000000022000 [ 2080.156300] CPU: 0 PID: 3624 Comm: syz-fuzzer Not tainted 4.14.228-syzkaller #0 [ 2080.163745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2080.173173] Call Trace: [ 2080.175747] dump_stack+0x1b2/0x281 [ 2080.179365] dump_header+0x178/0x82f [ 2080.181680] Mem-Info: [ 2080.183067] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2080.185459] active_anon:22673 inactive_anon:32412 isolated_anon:0 [ 2080.185459] active_file:18 inactive_file:16 isolated_file:0 [ 2080.185459] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2080.185459] slab_reclaimable:12760 slab_unreclaimable:117326 [ 2080.185459] mapped:52866 shmem:33557 pagetables:750 bounce:0 [ 2080.185459] free:25640 free_pcp:78 free_cma:0 [ 2080.190538] ? ___ratelimit+0x2cd/0x530 [ 2080.227610] oom_kill_process.cold+0x10/0xb18 [ 2080.232113] out_of_memory+0xe3e/0x1190 [ 2080.236611] ? oom_killer_disable+0x1c0/0x1c0 [ 2080.241106] ? mutex_trylock+0x152/0x1a0 [ 2080.245163] __alloc_pages_nodemask+0x23e1/0x2720 [ 2080.250010] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2080.254946] alloc_pages_current+0x155/0x260 [ 2080.259344] filemap_fault+0xea3/0x1980 [ 2080.263319] ext4_filemap_fault+0x84/0xb0 [ 2080.267456] __do_fault+0xfa/0x380 [ 2080.270984] __handle_mm_fault+0x2497/0x4620 [ 2080.275387] ? vm_insert_page+0x7c0/0x7c0 [ 2080.279627] handle_mm_fault+0x391/0x860 [ 2080.283681] __do_page_fault+0x549/0xad0 [ 2080.287734] ? spurious_fault+0x640/0x640 [ 2080.291874] ? do_page_fault+0x60/0x500 [ 2080.295831] ? page_fault+0x2f/0x50 [ 2080.299444] page_fault+0x45/0x50 [ 2080.302884] RIP: 46a900:0x1ed12a4ccf6 [ 2080.306667] RSP: 03e7:000000c00065de30 EFLAGS: 00000003 [ 2080.314860] Mem-Info: [ 2080.331681] Node 0 active_anon:88888kB inactive_anon:88176kB active_file:20kB inactive_file:2016kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:159264kB dirty:0kB writeback:0kB shmem:92472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2080.351342] active_anon:22673 inactive_anon:32412 isolated_anon:0 [ 2080.351342] active_file:18 inactive_file:1091 isolated_file:0 [ 2080.351342] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2080.351342] slab_reclaimable:12760 slab_unreclaimable:117403 [ 2080.351342] mapped:53441 shmem:33557 pagetables:750 bounce:0 [ 2080.351342] free:46155 free_pcp:368 free_cma:0 [ 2080.398513] Node 0 active_anon:88888kB inactive_anon:88176kB active_file:20kB inactive_file:4616kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:161164kB dirty:0kB writeback:0kB shmem:92472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2080.417191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2080.432795] Node 1 active_anon:1804kB inactive_anon:41472kB active_file:52kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:53100kB dirty:0kB writeback:0kB shmem:41756kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2080.451686] Node 1 active_anon:1804kB inactive_anon:41472kB active_file:52kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:53100kB dirty:0kB writeback:0kB shmem:41756kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2080.496271] device hsr_slave_0 entered promiscuous mode [ 2080.501784] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:20kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2080.521693] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:20kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2080.533249] lowmem_reserve[]: [ 2080.554693] device hsr_slave_1 entered promiscuous mode [ 2080.571831] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2080.575486] 0 [ 2080.576865] Node 0 [ 2080.576867] 2717 2718 [ 2080.578660] DMA32 free:139280kB min:36200kB low:45248kB high:54296kB active_anon:88848kB inactive_anon:88176kB active_file:120kB inactive_file:4716kB unevictable:0kB writepending:148kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7136kB pagetables:2648kB bounce:0kB free_pcp:872kB local_pcp:720kB free_cma:0kB [ 2080.578663] lowmem_reserve[]: 0 0 0 0 0 [ 2080.578681] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2080.578698] lowmem_reserve[]: 0 0 0 0 0 [ 2080.578717] Node 1 Normal free:140740kB min:53696kB low:67120kB high:80544kB active_anon:1804kB inactive_anon:41472kB active_file:52kB inactive_file:48kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:608kB pagetables:332kB bounce:0kB free_pcp:836kB local_pcp:700kB free_cma:0kB [ 2080.578739] lowmem_reserve[]: [ 2080.583896] 2718 [ 2080.651640] 0 [ 2080.682994] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2080.701645] 0 0 0 0 [ 2080.715092] Node 0 DMA: 41*4kB (UME) 13*8kB (ME) 12*16kB (UME) 8*32kB (UM) 2*64kB (M) 4*128kB (ME) 4*256kB (UE) 1*512kB (E) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 11084kB [ 2080.736925] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2080.742173] Node 0 DMA32: 16314*4kB (UMEH) 5931*8kB (UMEH) 3824*16kB (UEH) 904*32kB (UEH) 34*64kB (UEH) 9*128kB (UMEH) 2*256kB (UM) 1*512kB (U) 5*1024kB (U) 0*2048kB 0*4096kB = 212288kB [ 2080.787491] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2080.845559] Node 1 Normal: 5745*4kB (UM) 303*8kB (UM) 241*16kB (UM) 185*32kB (UM) 97*64kB (UM) 47*128kB (UM) 10*256kB (UM) 4*512kB (M) 47*1024kB (UM) 18*2048kB (UM) 3*4096kB (U) = 149292kB [ 2080.875986] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2080.935459] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2080.947693] 2718 [ 2080.949767] Node 0 DMA32 free:257884kB min:36200kB low:45248kB high:54296kB active_anon:88848kB inactive_anon:88176kB active_file:3388kB inactive_file:6644kB unevictable:0kB writepending:116kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7168kB pagetables:2644kB bounce:0kB free_pcp:1224kB local_pcp:480kB free_cma:0kB [ 2080.961825] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2081.038309] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2081.052015] lowmem_reserve[]: 0 0 0 0 0 [ 2081.061909] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2081.062581] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2081.082401] 36091 total pagecache pages [ 2081.118614] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2081.147313] 0 pages in swap cache [ 2081.151044] lowmem_reserve[]: 0 0 0 0 0 [ 2081.151804] Swap cache stats: add 0, delete 0, find 0/0 [ 2081.162748] Node 1 Normal free:89176kB min:53696kB low:67120kB high:80544kB active_anon:1280kB inactive_anon:41472kB active_file:56kB inactive_file:48kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:576kB pagetables:212kB bounce:0kB free_pcp:1316kB local_pcp:636kB free_cma:0kB [ 2081.191514] Free swap = 0kB [ 2081.194880] Total swap = 0kB [ 2081.201233] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2081.209454] 2097051 pages RAM [ 2081.222633] 0 pages HighMem/MovableOnly [ 2081.226616] 363846 pages reserved [ 2081.230054] 0 pages cma reserved [ 2081.231567] lowmem_reserve[]: 0 0 0 0 0 [ 2081.237479] Node 0 DMA: 41*4kB (UME) 13*8kB (ME) 12*16kB (UME) 8*32kB (UM) 3*64kB (UM) 5*128kB (UME) 3*256kB (UE) 1*512kB (E) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 11020kB [ 2081.247941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2081.263284] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2081.271078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2081.283046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2081.285076] Node 0 DMA32: 24881*4kB (UEH) 7846*8kB (UEH) 4867*16kB (UMEH) 1811*32kB (UMEH) 11*64kB (H) 1*128kB (H) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 298948kB [ 2081.298825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2081.345547] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2081.359356] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2081.374072] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2081.385641] Node 1 Normal: 9612*4kB (UM) 1865*8kB (UM) 1144*16kB (UM) 988*32kB (UM) 268*64kB (U) 4*128kB (U) 3*256kB (U) 1*512kB (U) 7*1024kB (U) 5*2048kB (U) 0*4096kB = 139640kB [ 2081.402046] Bluetooth: hci0 command 0x040f tx timeout [ 2081.417401] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2081.428669] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2081.435176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2081.446453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2081.505040] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2081.528310] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2081.545510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2081.567113] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2081.577439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2081.595201] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2081.601362] 8021q: adding VLAN 0 to HW filter on device team0 [ 2081.607639] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2081.634306] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2081.640381] 8021q: adding VLAN 0 to HW filter on device team0 [ 2081.646779] 36091 total pagecache pages [ 2081.650751] 0 pages in swap cache [ 2081.661607] Swap cache stats: add 0, delete 0, find 0/0 [ 2081.666975] Free swap = 0kB [ 2081.669978] Total swap = 0kB [ 2081.677982] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2081.685791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2081.702930] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2081.710585] bridge0: port 1(bridge_slave_0) entered blocking state [ 2081.716959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2081.724151] 2097051 pages RAM [ 2081.727251] 0 pages HighMem/MovableOnly [ 2081.731295] 363846 pages reserved [ 2081.744205] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2081.751538] 0 pages cma reserved [ 2081.754993] Out of memory (oom_kill_allocating_task): Kill process 3624 (syz-fuzzer) score 0 or sacrifice child [ 2081.764262] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2081.775941] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2081.783899] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2081.790368] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2081.811589] Killed process 11178 (syz-executor.3) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 2081.811779] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2081.832224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2081.845383] oom_reaper: reaped process 11178 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2081.881925] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2081.889586] bridge0: port 1(bridge_slave_0) entered blocking state [ 2081.895959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2081.935777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2081.943726] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2081.951341] bridge0: port 2(bridge_slave_1) entered blocking state [ 2081.957723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2081.970730] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2081.979291] Bluetooth: hci5 command 0x040f tx timeout [ 2081.998307] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2082.018332] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2082.025504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2082.041974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2082.049742] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2082.064665] bridge0: port 2(bridge_slave_1) entered blocking state [ 2082.064885] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2082.071092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2082.094069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2082.101503] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2082.102122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2082.106611] CPU: 1 PID: 11896 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 2082.114908] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2082.121362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2082.131149] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2082.137862] Call Trace: [ 2082.137879] dump_stack+0x1b2/0x281 [ 2082.137893] warn_alloc.cold+0x96/0x1cc [ 2082.137905] ? zone_watermark_ok_safe+0x220/0x220 [ 2082.154701] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2082.155620] __alloc_pages_nodemask+0x2127/0x2720 [ 2082.162999] device veth0_vlan entered promiscuous mode [ 2082.167162] ? lock_acquire+0x170/0x3f0 [ 2082.176549] device veth1_vlan entered promiscuous mode [ 2082.177253] ? lock_acquire+0x170/0x3f0 [ 2082.182018] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2082.186457] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2082.192826] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2082.196730] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2082.206290] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2082.207883] ? __mutex_unlock_slowpath+0x75/0x770 [ 2082.215696] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2082.220045] alloc_pages_current+0x155/0x260 [ 2082.226752] device veth0_macvtap entered promiscuous mode [ 2082.231591] ion_page_pool_alloc+0x118/0x1b0 [ 2082.231602] ion_system_heap_allocate+0x133/0x8c0 [ 2082.231612] ? _raw_spin_unlock+0x29/0x40 [ 2082.231621] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2082.237088] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2082.241543] ? ion_system_contig_heap_create+0x130/0x130 [ 2082.241553] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2082.241563] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2082.241573] ion_alloc+0x27a/0x810 [ 2082.248852] device veth1_macvtap entered promiscuous mode [ 2082.250780] ? ion_dma_buf_release+0x40/0x40 [ 2082.255647] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2082.259815] ? __might_fault+0x177/0x1b0 [ 2082.268557] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2082.271538] ion_ioctl+0xea/0x1f0 [ 2082.271547] ? ion_query_heaps+0x360/0x360 [ 2082.271557] ? ion_query_heaps+0x360/0x360 [ 2082.271568] do_vfs_ioctl+0x75a/0xff0 [ 2082.279387] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2082.281382] ? ioctl_preallocate+0x1a0/0x1a0 [ 2082.286590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2082.290417] ? lock_downgrade+0x740/0x740 [ 2082.295012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2082.301019] ? __fget+0x225/0x360 [ 2082.305193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2082.311948] ? do_vfs_ioctl+0xff0/0xff0 [ 2082.311959] ? security_file_ioctl+0x83/0xb0 [ 2082.311971] SyS_ioctl+0x7f/0xb0 [ 2082.315771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2082.319611] ? do_vfs_ioctl+0xff0/0xff0 [ 2082.323960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2082.327598] do_syscall_64+0x1d5/0x640 [ 2082.334632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2082.338885] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2082.349669] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2082.352682] RIP: 0033:0x466459 [ 2082.352687] RSP: 002b:00007f27c4f46188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2082.352697] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2082.352702] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2082.352706] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2082.352713] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2082.362070] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2082.365246] R13: 00007ffda0b0ca7f R14: 00007f27c4f46300 R15: 0000000000022000 [ 2082.377147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2082.498879] Mem-Info: [ 2082.501303] active_anon:22507 inactive_anon:32412 isolated_anon:0 [ 2082.501303] active_file:874 inactive_file:1666 isolated_file:0 [ 2082.501303] unevictable:0 dirty:37 writeback:0 unstable:0 [ 2082.501303] slab_reclaimable:12747 slab_unreclaimable:116839 [ 2082.501303] mapped:45425 shmem:33557 pagetables:682 bounce:0 [ 2082.501303] free:128968 free_pcp:48 free_cma:0 [ 2082.502620] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2082.551464] Node 0 active_anon:88748kB inactive_anon:88176kB active_file:3440kB inactive_file:6616kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:128596kB dirty:148kB writeback:0kB shmem:92472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2082.558805] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2082.594747] CPU: 0 PID: 11897 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 2082.602620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2082.611458] Node 1 active_anon:1280kB inactive_anon:41472kB active_file:56kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:53104kB dirty:0kB writeback:0kB shmem:41756kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2082.611970] Call Trace: [ 2082.641802] dump_stack+0x1b2/0x281 [ 2082.645425] warn_alloc.cold+0x96/0x1cc [ 2082.649391] ? zone_watermark_ok_safe+0x220/0x220 [ 2082.654354] __alloc_pages_nodemask+0x2127/0x2720 [ 2082.659194] ? lock_acquire+0x170/0x3f0 [ 2082.661448] Node 0 DMA free:10996kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:20kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2082.663167] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2082.663185] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2082.699843] ? __mutex_unlock_slowpath+0x75/0x770 [ 2082.704685] alloc_pages_current+0x155/0x260 [ 2082.709090] ion_page_pool_alloc+0x118/0x1b0 [ 2082.713494] ion_system_heap_allocate+0x133/0x8c0 [ 2082.718329] ? _raw_spin_unlock+0x29/0x40 [ 2082.721442] lowmem_reserve[]: [ 2082.722465] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2082.722467] 0 2717 [ 2082.725556] ? ion_system_contig_heap_create+0x130/0x130 [ 2082.730464] 2718 [ 2082.732853] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2082.732864] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2082.732874] ion_alloc+0x27a/0x810 [ 2082.732885] ? ion_dma_buf_release+0x40/0x40 [ 2082.732897] ? __might_fault+0x177/0x1b0 [ 2082.751418] 2718 [ 2082.753699] ion_ioctl+0xea/0x1f0 [ 2082.758080] 2718 [ 2082.762115] ? ion_query_heaps+0x360/0x360 [ 2082.762127] ? ion_query_heaps+0x360/0x360 [ 2082.762136] do_vfs_ioctl+0x75a/0xff0 [ 2082.762145] ? ioctl_preallocate+0x1a0/0x1a0 [ 2082.762154] ? lock_downgrade+0x740/0x740 [ 2082.762166] ? __fget+0x225/0x360 [ 2082.762174] ? do_vfs_ioctl+0xff0/0xff0 [ 2082.762185] ? security_file_ioctl+0x83/0xb0 [ 2082.762195] SyS_ioctl+0x7f/0xb0 [ 2082.762202] ? do_vfs_ioctl+0xff0/0xff0 [ 2082.762212] do_syscall_64+0x1d5/0x640 [ 2082.762225] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2082.762231] RIP: 0033:0x466459 [ 2082.762235] RSP: 002b:00007f27c4f25188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2082.762243] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2082.762247] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2082.762251] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2082.762255] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2082.762260] R13: 00007ffda0b0ca7f R14: 00007f27c4f25300 R15: 0000000000022000 [ 2082.772466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2082.805941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2082.809818] Node 0 [ 2082.814027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2082.831415] DMA32 free:347892kB min:36200kB low:45248kB high:54296kB active_anon:88708kB inactive_anon:88176kB active_file:3440kB inactive_file:6616kB unevictable:0kB writepending:148kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7072kB pagetables:2496kB bounce:0kB free_pcp:108kB local_pcp:0kB free_cma:0kB [ 2082.840810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2082.861471] lowmem_reserve[]: [ 2082.870248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2082.892400] 0 [ 2082.902962] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2082.961002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2082.968315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2082.971417] 0 0 0 0 [ 2082.979562] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2082.986965] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2083.002923] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2083.061948] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2083.081389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2083.081558] lowmem_reserve[]: 0 0 0 0 0 [ 2083.089178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2083.104963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2083.113912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2083.121410] Node 1 Normal free:546900kB min:53696kB low:67120kB high:80544kB active_anon:1076kB inactive_anon:41472kB active_file:56kB inactive_file:48kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:576kB pagetables:212kB bounce:0kB free_pcp:916kB local_pcp:620kB free_cma:0kB [ 2083.122314] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2083.165185] lowmem_reserve[]: 0 0 0 0 0 [ 2083.181388] Node 0 DMA: 45*4kB (UME) 14*8kB (UME) 14*16kB (UME) 8*32kB (UM) 2*64kB (M) 5*128kB (UME) 3*256kB (UE) 1*512kB (E) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 11012kB [ 2083.181797] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2083.211420] Node 0 DMA32: 29134*4kB (UMH) 9635*8kB (UEH) 5740*16kB (UEH) 2619*32kB (UEH) 13*64kB (UH) 3*128kB (UH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 370480kB [ 2083.231580] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2083.235257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2083.242384] Node 1 Normal: 14894*4kB (UM) 4318*8kB (UM) 3598*16kB (UM) 3454*32kB (UM) 1563*64kB (U) 42*128kB (U) 40*256kB (U) 26*512kB (U) 36*1024kB (U) 61*2048kB (U) 8*4096kB (U) = 585736kB [ 2083.268295] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2083.268474] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2083.277344] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2083.288209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2083.303953] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2083.311531] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2083.315462] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2083.320363] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2083.344536] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2083.376506] 36812 total pagecache pages [ 2083.376510] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2083.376886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2083.380504] 0 pages in swap cache [ 2083.402039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2083.409734] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2083.425909] Swap cache stats: add 0, delete 0, find 0/0 [ 2083.431276] Free swap = 0kB [ 2083.434495] Total swap = 0kB [ 2083.435010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2083.437500] 2097051 pages RAM [ 2083.447886] 0 pages HighMem/MovableOnly [ 2083.461419] 363846 pages reserved [ 2083.464879] 0 pages cma reserved [ 2083.465174] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2083.486984] Bluetooth: hci0 command 0x0419 tx timeout [ 2083.487988] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2083.506767] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2083.514913] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2083.531949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2083.555848] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2083.569572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2083.591992] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2083.601654] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2083.611675] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2083.619267] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2083.642217] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2083.648249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2083.671987] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2083.678935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2083.687578] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2083.712138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2083.719649] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2083.728677] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2083.747159] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2083.762692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2083.770224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2083.794392] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2083.802487] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2083.817662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2083.825430] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2083.841842] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2083.861510] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2083.869977] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2083.881633] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2083.902977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2083.928955] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2083.966926] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2083.985651] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2084.005450] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2084.018070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2084.041372] Bluetooth: hci5 command 0x0419 tx timeout [ 2084.120872] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2084.155553] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2084.165325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2084.176904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2084.220118] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2084.250580] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2084.276598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2084.284856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2084.350358] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2084.367938] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2084.377903] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2084.397572] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2084.410097] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2084.454879] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2084.478646] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2084.495197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2084.508742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2084.532622] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2084.550442] device veth0_vlan entered promiscuous mode 06:42:24 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7ffffffd, 0x22}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x1}) 06:42:24 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000080)={0x34, 0x0, &(0x7f0000000040)}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7ffffffd, 0x22}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0x1}) 06:42:24 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x7ffffffd, 0x22}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x1}) [ 2084.560797] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2084.584422] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready 06:42:24 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x7ffffffd, 0x22}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x1}) [ 2084.612520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2084.628784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2084.648870] device veth0_vlan entered promiscuous mode 06:42:24 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x7ffffffd, 0x22}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x1}) [ 2084.678432] device veth1_vlan entered promiscuous mode [ 2084.692272] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2084.700429] batman_adv: batadv0: Interface deactivated: batadv_slave_0 06:42:24 executing program 0: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7ffffffd, 0x22}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x1}) [ 2084.734836] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2084.766481] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2084.774325] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2084.796134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2084.807989] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2084.825363] CPU: 1 PID: 12582 Comm: syz-executor.2 Not tainted 4.14.228-syzkaller #0 06:42:24 executing program 0: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7ffffffd, 0x22}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x1}) [ 2084.830803] device bridge_slave_1 left promiscuous mode [ 2084.833330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2084.833334] Call Trace: [ 2084.833350] dump_stack+0x1b2/0x281 [ 2084.833362] warn_alloc.cold+0x96/0x1cc [ 2084.833373] ? zone_watermark_ok_safe+0x220/0x220 [ 2084.833391] __alloc_pages_nodemask+0x2127/0x2720 [ 2084.843486] bridge0: port 2(bridge_slave_1) entered disabled state [ 2084.848073] ? io_schedule_timeout+0x140/0x140 [ 2084.848090] ? lock_acquire+0x170/0x3f0 [ 2084.848105] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2084.887538] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2084.892984] ? __mutex_unlock_slowpath+0x75/0x770 [ 2084.897850] alloc_pages_current+0x155/0x260 [ 2084.902254] ion_page_pool_alloc+0x118/0x1b0 [ 2084.906652] ion_system_heap_allocate+0x133/0x8c0 [ 2084.911483] ? ion_alloc+0x187/0x810 [ 2084.915190] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2084.920626] ? ion_system_contig_heap_create+0x130/0x130 [ 2084.926074] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2084.931087] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2084.935906] ion_alloc+0x204/0x810 [ 2084.939426] ? ion_dma_buf_release+0x40/0x40 [ 2084.943812] ? __might_fault+0x177/0x1b0 [ 2084.947869] ion_ioctl+0xea/0x1f0 [ 2084.951299] ? ion_query_heaps+0x360/0x360 [ 2084.955597] ? ion_query_heaps+0x360/0x360 [ 2084.959814] do_vfs_ioctl+0x75a/0xff0 [ 2084.963597] ? ioctl_preallocate+0x1a0/0x1a0 [ 2084.968007] ? lock_downgrade+0x740/0x740 [ 2084.972136] ? __fget+0x225/0x360 [ 2084.975565] ? do_vfs_ioctl+0xff0/0xff0 [ 2084.979519] ? security_file_ioctl+0x83/0xb0 [ 2084.983918] SyS_ioctl+0x7f/0xb0 [ 2084.987258] ? do_vfs_ioctl+0xff0/0xff0 [ 2084.991218] do_syscall_64+0x1d5/0x640 [ 2084.995090] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2085.000256] RIP: 0033:0x466459 [ 2085.003424] RSP: 002b:00007fb129331188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2085.011142] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2085.018394] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2085.025643] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2085.032897] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2085.040142] R13: 00007ffd0a29ad5f R14: 00007fb129331300 R15: 0000000000022000 [ 2085.055297] device bridge_slave_0 left promiscuous mode [ 2085.063063] bridge0: port 1(bridge_slave_0) entered disabled state 06:42:24 executing program 0: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7ffffffd, 0x22}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x1}) [ 2085.086746] device veth1_macvtap left promiscuous mode [ 2085.096157] device veth0_macvtap left promiscuous mode [ 2085.109175] device veth1_vlan left promiscuous mode [ 2085.118632] device veth0_vlan left promiscuous mode [ 2085.253388] device hsr_slave_1 left promiscuous mode [ 2085.276065] device hsr_slave_0 left promiscuous mode [ 2085.289903] warn_alloc_show_mem: 1 callbacks suppressed [ 2085.289906] Mem-Info: [ 2085.299749] active_anon:22634 inactive_anon:32409 isolated_anon:0 [ 2085.299749] active_file:65 inactive_file:2666 isolated_file:0 [ 2085.299749] unevictable:0 dirty:19 writeback:0 unstable:0 [ 2085.299749] slab_reclaimable:12713 slab_unreclaimable:117756 [ 2085.299749] mapped:46014 shmem:33553 pagetables:711 bounce:0 [ 2085.299749] free:50194 free_pcp:463 free_cma:0 [ 2085.357885] team0 (unregistering): Port device team_slave_1 removed [ 2085.368252] team0 (unregistering): Port device team_slave_0 removed [ 2085.375460] Node 0 active_anon:89480kB inactive_anon:88164kB active_file:104kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:123972kB dirty:60kB writeback:0kB shmem:92456kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2085.403282] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2085.411485] Node 1 active_anon:1056kB inactive_anon:41472kB active_file:156kB inactive_file:11392kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:61184kB dirty:16kB writeback:0kB shmem:41756kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2085.414613] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2085.440164] Node 0 DMA free:11124kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:20kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2085.515236] bond0 (unregistering): Released all slaves [ 2085.524831] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2085.529909] Node 0 DMA32 free:25948kB min:36200kB low:45248kB high:54296kB active_anon:89440kB inactive_anon:88164kB active_file:132kB inactive_file:424kB unevictable:0kB writepending:60kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7136kB pagetables:2660kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2085.559402] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2085.582829] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2085.597519] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2085.618136] syz-executor.4 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2085.661370] lowmem_reserve[]: 0 0 0 0 0 [ 2085.676573] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2085.676916] syz-executor.4 cpuset= [ 2085.707275] lowmem_reserve[]: 0 0 0 0 0 [ 2085.718500] Node 1 Normal free:26804kB min:53696kB low:67120kB high:80544kB active_anon:1056kB inactive_anon:41472kB active_file:564kB inactive_file:148kB unevictable:0kB writepending:16kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:576kB pagetables:164kB bounce:0kB free_pcp:180kB local_pcp:16kB free_cma:0kB [ 2085.736509] / [ 2085.748023] lowmem_reserve[]: 0 0 0 0 0 [ 2085.754006] Node 0 DMA: 97*4kB (UME) 19*8kB (UME) 15*16kB (UME) 9*32kB (UM) 3*64kB (UM) 4*128kB (ME) 2*256kB (UE) 1*512kB (E) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 10988kB [ 2085.769294] mems_allowed=0-1 [ 2085.771133] Node 0 DMA32: 380*4kB (MEH) 112*8kB (MEH) 155*16kB (MEH) 144*32kB (UMEH) 55*64kB (UMH) 13*128kB (UMH) 5*256kB (M) 2*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 18016kB [ 2085.773843] CPU: 1 PID: 11905 Comm: syz-executor.4 Not tainted 4.14.228-syzkaller #0 [ 2085.796709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2085.806054] Call Trace: [ 2085.808634] dump_stack+0x1b2/0x281 [ 2085.812264] dump_header+0x178/0x82f [ 2085.816086] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2085.821189] ? ___ratelimit+0x2cd/0x530 [ 2085.825158] oom_kill_process.cold+0x10/0xb18 [ 2085.829654] out_of_memory+0xe3e/0x1190 [ 2085.833641] ? oom_killer_disable+0x1c0/0x1c0 [ 2085.838127] ? mutex_trylock+0x152/0x1a0 [ 2085.842180] __alloc_pages_nodemask+0x23e1/0x2720 [ 2085.849196] Node 0 Normal: 0*4kB 0*8kB [ 2085.849885] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2085.849905] alloc_pages_current+0x155/0x260 [ 2085.863068] filemap_fault+0xea3/0x1980 [ 2085.864510] 0*16kB 0*32kB 0*64kB [ 2085.867035] ext4_filemap_fault+0x84/0xb0 [ 2085.867040] 0*128kB [ 2085.870509] __do_fault+0xfa/0x380 [ 2085.880481] __handle_mm_fault+0x2497/0x4620 [ 2085.884878] ? vm_insert_page+0x7c0/0x7c0 [ 2085.889010] ? task_work_run+0xfd/0x190 [ 2085.891082] 0*256kB 0*512kB 0*1024kB 0*2048kB [ 2085.892971] handle_mm_fault+0x391/0x860 [ 2085.892981] __do_page_fault+0x549/0xad0 [ 2085.897546] 0*4096kB [ 2085.901585] ? spurious_fault+0x640/0x640 [ 2085.901592] ? do_page_fault+0x60/0x500 [ 2085.901599] ? page_fault+0x2f/0x50 [ 2085.901606] page_fault+0x45/0x50 [ 2085.921081] = 0kB [ 2085.923347] RIP: 4bf56a:0x32aaaaaaaaaa [ 2085.925384] Node 1 [ 2085.929259] RSP: b59a33b0:0000000000000003 EFLAGS: 7fffb59a3760 [ 2085.932758] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2085.942223] Mem-Info: [ 2085.962672] active_anon:22618 inactive_anon:32409 isolated_anon:0 [ 2085.962672] active_file:12 inactive_file:12 isolated_file:0 [ 2085.962672] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2085.962672] slab_reclaimable:12713 slab_unreclaimable:117420 [ 2085.962672] mapped:44242 shmem:33553 pagetables:723 bounce:0 [ 2085.962672] free:14166 free_pcp:1 free_cma:0 [ 2085.985984] Normal: [ 2085.999285] syz-executor.1 cpuset= [ 2086.014836] 96*4kB (UM) 46*8kB (UM) 25*16kB (UM) 797*32kB (UM) 7*64kB (U) 2*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27616kB [ 2086.043264] Node 0 active_anon:89480kB inactive_anon:88164kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:123868kB dirty:0kB writeback:0kB shmem:92456kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2086.043405] / [ 2086.077594] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2086.088159] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2086.102945] mems_allowed=0-1 [ 2086.106086] CPU: 0 PID: 11896 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 2086.113952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2086.118370] Node 1 active_anon:992kB inactive_anon:41472kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:53100kB dirty:0kB writeback:0kB shmem:41756kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2086.123289] Call Trace: [ 2086.123305] dump_stack+0x1b2/0x281 [ 2086.123318] warn_alloc.cold+0x96/0x1cc [ 2086.123330] ? zone_watermark_ok_safe+0x220/0x220 [ 2086.123339] ? usleep_range+0x130/0x130 [ 2086.123347] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2086.123362] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2086.179266] ? run_timer_softirq+0x5a0/0x5a0 [ 2086.183671] __alloc_pages_nodemask+0x2127/0x2720 [ 2086.188507] ? lock_acquire+0x170/0x3f0 [ 2086.192476] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2086.197307] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2086.201793] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2086.207236] alloc_pages_current+0x155/0x260 [ 2086.211648] ion_page_pool_alloc+0x118/0x1b0 [ 2086.216050] ion_system_heap_allocate+0x133/0x8c0 [ 2086.218472] Node 0 DMA free:10988kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:20kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2086.220891] ? _raw_spin_unlock+0x29/0x40 [ 2086.220901] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2086.256227] ? ion_system_contig_heap_create+0x130/0x130 [ 2086.261676] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2086.266686] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2086.271522] ion_alloc+0x27a/0x810 [ 2086.275057] ? ion_dma_buf_release+0x40/0x40 [ 2086.279555] ? __might_fault+0x177/0x1b0 [ 2086.283606] ion_ioctl+0xea/0x1f0 [ 2086.287048] ? ion_query_heaps+0x360/0x360 [ 2086.291273] ? ion_query_heaps+0x360/0x360 [ 2086.295101] lowmem_reserve[]: 0 [ 2086.295494] do_vfs_ioctl+0x75a/0xff0 [ 2086.295505] ? ioctl_preallocate+0x1a0/0x1a0 [ 2086.298776] 2717 [ 2086.302570] ? lock_downgrade+0x740/0x740 [ 2086.302581] ? __fget+0x225/0x360 [ 2086.302588] ? do_vfs_ioctl+0xff0/0xff0 [ 2086.302599] ? security_file_ioctl+0x83/0xb0 [ 2086.302608] SyS_ioctl+0x7f/0xb0 [ 2086.302615] ? do_vfs_ioctl+0xff0/0xff0 [ 2086.302625] do_syscall_64+0x1d5/0x640 [ 2086.302639] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2086.324208] 2718 [ 2086.324968] RIP: 0033:0x466459 [ 2086.328306] 2718 [ 2086.332270] RSP: 002b:00007f27c4f46188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2086.332279] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2086.332285] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2086.332289] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2086.332294] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2086.332299] R13: 00007ffda0b0ca7f R14: 00007f27c4f46300 R15: 0000000000022000 [ 2086.340113] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2086.385477] 2718 [ 2086.391441] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2086.418087] 33577 total pagecache pages [ 2086.422176] 0 pages in swap cache [ 2086.425468] Node 0 [ 2086.425615] Swap cache stats: add 0, delete 0, find 0/0 [ 2086.425632] DMA32 free:18148kB min:36200kB low:45248kB high:54296kB active_anon:89440kB inactive_anon:88164kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7040kB pagetables:2660kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2086.427833] Free swap = 0kB [ 2086.454283] lowmem_reserve[]: [ 2086.467764] Total swap = 0kB [ 2086.473958] 2097051 pages RAM [ 2086.477053] 0 pages HighMem/MovableOnly [ 2086.486791] 363846 pages reserved [ 2086.490235] 0 pages cma reserved [ 2086.494206] 0 0 0 0 0 [ 2086.495542] Mem-Info: [ 2086.496717] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2086.499122] active_anon:22618 inactive_anon:32409 isolated_anon:0 [ 2086.499122] active_file:12 inactive_file:12 isolated_file:0 [ 2086.499122] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2086.499122] slab_reclaimable:12713 slab_unreclaimable:117288 [ 2086.499122] mapped:44242 shmem:33553 pagetables:723 bounce:0 [ 2086.499122] free:14298 free_pcp:1 free_cma:0 [ 2086.499137] Node 0 active_anon:89480kB inactive_anon:88164kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:123868kB dirty:0kB writeback:0kB shmem:92456kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2086.587173] lowmem_reserve[]: 0 0 0 0 0 [ 2086.592845] Node 1 Normal free:27528kB min:53696kB low:67120kB high:80544kB active_anon:992kB inactive_anon:41472kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:576kB pagetables:212kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 2086.593241] Node 1 active_anon:992kB inactive_anon:41472kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:53100kB dirty:0kB writeback:0kB shmem:41756kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2086.657333] Node 0 DMA free:10988kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:20kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2086.694190] lowmem_reserve[]: 0 0 0 0 0 [ 2086.698195] Node 0 DMA: 97*4kB (UME) 19*8kB (UME) 15*16kB (UME) 9*32kB (UM) 3*64kB (UM) 4*128kB (ME) 2*256kB (UE) 1*512kB (E) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 10988kB [ 2086.701085] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2086.718839] Node 0 DMA32 free:18676kB min:36200kB low:45248kB high:54296kB active_anon:89440kB inactive_anon:88164kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7040kB pagetables:2660kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2086.738178] Node 0 [ 2086.758784] lowmem_reserve[]: [ 2086.766656] DMA32: [ 2086.766825] 0 [ 2086.769770] 379*4kB [ 2086.780191] 0 0 0 0 [ 2086.787590] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2086.795997] (UME) [ 2086.824592] lowmem_reserve[]: 0 0 0 0 0 [ 2086.830745] Node 1 Normal free:27528kB min:53696kB low:67120kB high:80544kB active_anon:992kB inactive_anon:41472kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:576kB pagetables:212kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 2086.872007] 179*8kB (UME) 162*16kB (UME) 145*32kB (UME) 54*64kB (UM) 12*128kB (UM) 4*256kB (M) 3*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 18756kB [ 2086.905243] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2086.912683] lowmem_reserve[]: 0 0 0 0 0 [ 2086.919944] Node 0 DMA: 97*4kB (UME) 19*8kB (UME) 15*16kB (UME) 9*32kB (UM) 3*64kB (UM) 4*128kB (ME) 2*256kB (UE) 1*512kB (E) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 10988kB [ 2086.924733] Node 1 Normal: 96*4kB (UM) 46*8kB (UM) 25*16kB (UM) 797*32kB (UM) 7*64kB (U) 2*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27616kB [ 2086.961001] Node 0 DMA32: 379*4kB (UME) 179*8kB (UME) 162*16kB (UME) 145*32kB (UME) 54*64kB (UM) 12*128kB (UM) 4*256kB (M) 3*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 18756kB [ 2086.976881] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2087.010786] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2087.022975] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2087.024959] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2087.042719] Node 1 Normal: 96*4kB (UM) 46*8kB (UM) 25*16kB (UM) 797*32kB (UM) 7*64kB (U) 2*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27616kB [ 2087.055936] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2087.080621] 33577 total pagecache pages [ 2087.082651] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2087.088993] 0 pages in swap cache [ 2087.093473] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2087.093480] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2087.093486] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2087.093489] 33577 total pagecache pages [ 2087.093497] 0 pages in swap cache [ 2087.093501] Swap cache stats: add 0, delete 0, find 0/0 [ 2087.093504] Free swap = 0kB [ 2087.093508] Total swap = 0kB [ 2087.105210] Swap cache stats: add 0, delete 0, find 0/0 [ 2087.115690] 2097051 pages RAM [ 2087.136307] Free swap = 0kB [ 2087.141216] 0 pages HighMem/MovableOnly [ 2087.154839] Total swap = 0kB [ 2087.159457] 363846 pages reserved [ 2087.160646] 2097051 pages RAM [ 2087.164664] 0 pages cma reserved [ 2087.194888] 0 pages HighMem/MovableOnly [ 2087.198945] 363846 pages reserved [ 2087.214017] 0 pages cma reserved [ 2087.217489] Out of memory (oom_kill_allocating_task): Kill process 11905 (syz-executor.4) score 0 or sacrifice child [ 2087.254005] Killed process 11905 (syz-executor.4) total-vm:93120kB, anon-rss:84kB, file-rss:34616kB, shmem-rss:0kB [ 2087.270750] oom_reaper: reaped process 11905 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2087.742970] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2087.773653] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2087.780532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2087.792242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2087.816343] device veth0_macvtap entered promiscuous mode [ 2087.823554] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2087.840618] device veth1_macvtap entered promiscuous mode [ 2087.847114] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2087.867278] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2087.880255] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2087.898402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2087.914840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2087.927096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2087.940450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2087.950022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2087.963179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2087.974194] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2087.984056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2087.995319] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2088.005550] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2088.014131] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2088.024865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2088.035425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2088.049174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2088.077562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2088.104188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2088.125250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2088.151137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2088.179454] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2088.194099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2088.207749] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2088.216167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2088.493770] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2088.505680] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2088.531055] device bridge_slave_1 left promiscuous mode [ 2088.536572] bridge0: port 2(bridge_slave_1) entered disabled state [ 2088.564586] device bridge_slave_0 left promiscuous mode [ 2088.570109] bridge0: port 1(bridge_slave_0) entered disabled state [ 2088.604565] device veth0_vlan left promiscuous mode [ 2088.699669] device hsr_slave_1 left promiscuous mode [ 2088.710502] device hsr_slave_0 left promiscuous mode [ 2088.730624] team0 (unregistering): Port device team_slave_1 removed [ 2088.744945] team0 (unregistering): Port device team_slave_0 removed [ 2088.755656] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2088.785545] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2088.860843] bond0 (unregistering): Released all slaves 06:42:28 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x214800, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f0000000080)={0x1, 0x3, 0x1f, 0x0, 0x81, 0x7, 0x20, 0xf9, 0x3f, 0x9, 0x0, "2110f8e3ce279eab6e85fe00e24477e9ab5a58257065fcb63e74e52eafa01f91"}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10001, 0x2, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, 0x0) 06:42:28 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x7ffffffd, 0x22}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x1}) 06:42:28 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000140)=""/4096, &(0x7f0000000040)=0x1000) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7ffffffd, 0x22}) 06:42:28 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x800, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7ffffffd, 0x22}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$inet6(0xa, 0x1, 0x1) [ 2089.713587] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2089.738953] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2089.749646] CPU: 1 PID: 12645 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 2089.757525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2089.766871] Call Trace: [ 2089.769459] dump_stack+0x1b2/0x281 [ 2089.773087] warn_alloc.cold+0x96/0x1cc [ 2089.777057] ? zone_watermark_ok_safe+0x220/0x220 [ 2089.781914] __alloc_pages_nodemask+0x2127/0x2720 [ 2089.786749] ? _raw_spin_unlock_irq+0x24/0x80 [ 2089.791236] ? lock_acquire+0x170/0x3f0 [ 2089.795232] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2089.800077] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2089.805524] ? __mutex_unlock_slowpath+0x75/0x770 [ 2089.810386] alloc_pages_current+0x155/0x260 [ 2089.814801] ion_page_pool_alloc+0x118/0x1b0 [ 2089.819202] ion_system_heap_allocate+0x133/0x8c0 [ 2089.824036] ? ion_alloc+0x187/0x810 [ 2089.827759] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2089.833200] ? ion_system_contig_heap_create+0x130/0x130 [ 2089.838646] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2089.843655] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2089.848490] ion_alloc+0x204/0x810 [ 2089.852024] ? ion_dma_buf_release+0x40/0x40 [ 2089.856441] ? __might_fault+0x177/0x1b0 [ 2089.860494] ion_ioctl+0xea/0x1f0 [ 2089.863941] ? ion_query_heaps+0x360/0x360 [ 2089.868169] ? ion_query_heaps+0x360/0x360 [ 2089.872398] do_vfs_ioctl+0x75a/0xff0 [ 2089.876206] ? ioctl_preallocate+0x1a0/0x1a0 [ 2089.880605] ? lock_downgrade+0x740/0x740 [ 2089.884747] ? __fget+0x225/0x360 [ 2089.888190] ? do_vfs_ioctl+0xff0/0xff0 [ 2089.892158] ? security_file_ioctl+0x83/0xb0 [ 2089.896556] SyS_ioctl+0x7f/0xb0 [ 2089.899910] ? do_vfs_ioctl+0xff0/0xff0 [ 2089.903885] do_syscall_64+0x1d5/0x640 [ 2089.907771] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2089.912990] RIP: 0033:0x466459 [ 2089.916165] RSP: 002b:00007f27c4f46188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2089.923865] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2089.931124] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2089.938386] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2089.945650] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2089.952910] R13: 00007ffda0b0ca7f R14: 00007f27c4f46300 R15: 0000000000022000 [ 2090.206794] Mem-Info: [ 2090.212588] active_anon:22633 inactive_anon:32409 isolated_anon:0 [ 2090.212588] active_file:1232 inactive_file:4991 isolated_file:0 [ 2090.212588] unevictable:0 dirty:37 writeback:0 unstable:0 [ 2090.212588] slab_reclaimable:12665 slab_unreclaimable:115834 [ 2090.212588] mapped:48433 shmem:33553 pagetables:696 bounce:0 [ 2090.212588] free:314711 free_pcp:445 free_cma:0 [ 2090.273002] Node 0 active_anon:89752kB inactive_anon:88176kB active_file:1172kB inactive_file:15348kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:167988kB dirty:112kB writeback:0kB shmem:92472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2090.301399] Node 1 active_anon:780kB inactive_anon:41460kB active_file:3756kB inactive_file:4616kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:25744kB dirty:36kB writeback:0kB shmem:41740kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2090.328968] Node 0 DMA free:11196kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2090.355617] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2090.361222] Node 0 DMA32 free:540012kB min:36200kB low:45248kB high:54296kB active_anon:89712kB inactive_anon:88176kB active_file:1172kB inactive_file:15348kB unevictable:0kB writepending:112kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7072kB pagetables:2732kB bounce:0kB free_pcp:1068kB local_pcp:396kB free_cma:0kB [ 2090.391274] lowmem_reserve[]: 0 0 0 0 0 [ 2090.395333] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2090.422520] lowmem_reserve[]: 0 0 0 0 0 [ 2090.427429] Node 1 Normal free:525512kB min:53696kB low:67120kB high:80544kB active_anon:780kB inactive_anon:41460kB active_file:3756kB inactive_file:4616kB unevictable:0kB writepending:36kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:52kB bounce:0kB free_pcp:684kB local_pcp:0kB free_cma:0kB [ 2090.497885] lowmem_reserve[]: 0 0 0 0 0 [ 2090.505408] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2090.508610] Node 0 [ 2090.530636] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2090.533236] DMA: [ 2090.537985] CPU: 0 PID: 12646 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 2090.537991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2090.537994] Call Trace: [ 2090.538010] dump_stack+0x1b2/0x281 [ 2090.540081] 217*4kB [ 2090.547940] warn_alloc.cold+0x96/0x1cc [ 2090.547952] ? zone_watermark_ok_safe+0x220/0x220 [ 2090.547975] __alloc_pages_nodemask+0x2127/0x2720 [ 2090.547991] ? lock_acquire+0x170/0x3f0 [ 2090.548005] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2090.548022] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2090.548034] ? __mutex_unlock_slowpath+0x75/0x770 [ 2090.559825] (UME) [ 2090.559943] alloc_pages_current+0x155/0x260 [ 2090.563653] 123*8kB [ 2090.565855] ion_page_pool_alloc+0x118/0x1b0 [ 2090.565865] ion_system_heap_allocate+0x133/0x8c0 [ 2090.569834] (UME) [ 2090.574750] ? ion_alloc+0x187/0x810 [ 2090.574774] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2090.574783] ? ion_system_contig_heap_create+0x130/0x130 [ 2090.574792] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2090.574803] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2090.574813] ion_alloc+0x204/0x810 [ 2090.574826] ? ion_dma_buf_release+0x40/0x40 [ 2090.574837] ? __might_fault+0x177/0x1b0 [ 2090.574865] ion_ioctl+0xea/0x1f0 [ 2090.574875] ? ion_query_heaps+0x360/0x360 [ 2090.582378] 44*16kB [ 2090.583929] ? ion_query_heaps+0x360/0x360 [ 2090.583939] do_vfs_ioctl+0x75a/0xff0 [ 2090.588869] (UME) [ 2090.594281] ? ioctl_preallocate+0x1a0/0x1a0 [ 2090.594290] ? lock_downgrade+0x740/0x740 [ 2090.594302] ? __fget+0x225/0x360 [ 2090.594314] ? do_vfs_ioctl+0xff0/0xff0 [ 2090.594323] ? security_file_ioctl+0x83/0xb0 [ 2090.594332] SyS_ioctl+0x7f/0xb0 [ 2090.599258] 12*32kB [ 2090.601284] ? do_vfs_ioctl+0xff0/0xff0 [ 2090.601322] do_syscall_64+0x1d5/0x640 [ 2090.601337] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2090.601344] RIP: 0033:0x466459 [ 2090.601349] RSP: 002b:00007f27c4f25188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2090.601359] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2090.601364] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2090.601368] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2090.601373] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2090.601378] R13: 00007ffda0b0ca7f R14: 00007f27c4f25300 R15: 0000000000022000 [ 2090.763906] (UM) 2*64kB (M) 5*128kB (UME) 1*256kB (E) 2*512kB (UE) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 11132kB [ 2090.774456] Node 0 DMA32: 23878*4kB (UME) 17227*8kB (UME) 9064*16kB (UE) 3801*32kB (UME) 56*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 503568kB [ 2090.789273] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2090.800725] Node 1 Normal: 18340*4kB (U) 7242*8kB (U) 5329*16kB (U) 5089*32kB (U) 2546*64kB (U) 634*128kB (U) 64*256kB (U) 34*512kB (U) 19*1024kB (U) 2*2048kB (U) 0*4096kB = 680848kB [ 2090.817453] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2090.827362] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2090.836543] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2090.846142] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2090.855312] 39794 total pagecache pages [ 2090.859330] 0 pages in swap cache [ 2090.864037] Swap cache stats: add 0, delete 0, find 0/0 [ 2090.876246] Free swap = 0kB [ 2090.883725] Total swap = 0kB [ 2090.890149] 2097051 pages RAM [ 2090.897298] 0 pages HighMem/MovableOnly [ 2090.905887] 363846 pages reserved [ 2090.913742] 0 pages cma reserved [ 2090.920781] Bluetooth: hci1 command 0x0409 tx timeout [ 2091.303734] IPVS: ftp: loaded support on port[0] = 21 [ 2091.461329] chnl_net:caif_netlink_parms(): no params data found [ 2091.535283] bridge0: port 1(bridge_slave_0) entered blocking state [ 2091.542468] bridge0: port 1(bridge_slave_0) entered disabled state [ 2091.549706] device bridge_slave_0 entered promiscuous mode [ 2091.571400] bridge0: port 2(bridge_slave_1) entered blocking state [ 2091.578015] bridge0: port 2(bridge_slave_1) entered disabled state [ 2091.601576] device bridge_slave_1 entered promiscuous mode [ 2091.643519] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2091.652930] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2091.685797] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2091.711160] team0: Port device team_slave_0 added [ 2091.716797] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2091.725175] team0: Port device team_slave_1 added [ 2091.746531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2091.753371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2091.780180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2091.793229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2091.799465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2091.827663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2091.839103] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2091.847137] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2091.874794] device hsr_slave_0 entered promiscuous mode [ 2091.881840] device hsr_slave_1 entered promiscuous mode [ 2091.887948] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2091.901037] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2092.016644] bridge0: port 2(bridge_slave_1) entered blocking state [ 2092.023141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2092.029872] bridge0: port 1(bridge_slave_0) entered blocking state [ 2092.036352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2092.087765] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 2092.094587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2092.107358] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2092.117614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2092.128672] bridge0: port 1(bridge_slave_0) entered disabled state [ 2092.140912] bridge0: port 2(bridge_slave_1) entered disabled state [ 2092.184609] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2092.200718] 8021q: adding VLAN 0 to HW filter on device team0 [ 2092.213544] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2092.229124] bridge0: port 1(bridge_slave_0) entered blocking state [ 2092.241229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2092.262433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2092.270297] bridge0: port 2(bridge_slave_1) entered blocking state [ 2092.276912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2092.289051] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2092.310177] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2092.317546] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2092.329057] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2092.337727] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2092.364994] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2092.377681] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2092.417743] IPVS: ftp: loaded support on port[0] = 21 [ 2092.436855] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2092.457344] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2092.505188] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2092.521451] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2092.528167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2092.558665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2092.972168] modprobe invoked oom-killer: gfp_mask=0x14200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2092.987205] modprobe cpuset=/ mems_allowed=0-1 [ 2092.991885] CPU: 1 PID: 12878 Comm: modprobe Not tainted 4.14.228-syzkaller #0 [ 2092.999251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2093.008688] Call Trace: [ 2093.011268] dump_stack+0x1b2/0x281 [ 2093.014887] dump_header+0x178/0x82f [ 2093.018591] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2093.023684] ? ___ratelimit+0x2cd/0x530 [ 2093.027653] oom_kill_process.cold+0x10/0xb18 [ 2093.032254] out_of_memory+0xe3e/0x1190 [ 2093.036225] ? oom_killer_disable+0x1c0/0x1c0 [ 2093.040709] ? mutex_trylock+0x152/0x1a0 [ 2093.044764] __alloc_pages_nodemask+0x23e1/0x2720 [ 2093.049609] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2093.054440] ? perf_event_mmap+0x74/0xb80 [ 2093.058695] ? __lock_acquire+0x5fc/0x3f20 [ 2093.062928] alloc_pages_vma+0xd2/0x6d0 [ 2093.066895] __handle_mm_fault+0xe4f/0x4620 [ 2093.071207] ? vm_insert_page+0x7c0/0x7c0 [ 2093.075355] handle_mm_fault+0x391/0x860 [ 2093.079409] __do_page_fault+0x549/0xad0 [ 2093.083462] ? spurious_fault+0x640/0x640 [ 2093.087599] ? do_page_fault+0x60/0x500 [ 2093.091563] ? page_fault+0x2f/0x50 [ 2093.095178] page_fault+0x45/0x50 [ 2093.098620] RIP: 0000:0x5565972cd000 [ 2093.102318] RSP: 972cf160:00007ffe3fb635d0 EFLAGS: 7f309e55b170 [ 2093.111941] Bluetooth: hci1 command 0x041b tx timeout [ 2093.353747] Mem-Info: [ 2093.356203] active_anon:22715 inactive_anon:32412 isolated_anon:0 [ 2093.356203] active_file:29 inactive_file:15 isolated_file:0 [ 2093.356203] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2093.356203] slab_reclaimable:12655 slab_unreclaimable:117574 [ 2093.356203] mapped:52988 shmem:33557 pagetables:747 bounce:0 [ 2093.356203] free:25091 free_pcp:0 free_cma:0 [ 2093.413477] Node 0 active_anon:89928kB inactive_anon:88176kB active_file:84kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:192516kB dirty:0kB writeback:0kB shmem:92472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2093.529434] Node 1 active_anon:932kB inactive_anon:41472kB active_file:20kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:19436kB dirty:0kB writeback:0kB shmem:41756kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2093.652415] Node 0 DMA free:11060kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2093.720329] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2093.725480] Node 0 DMA32 free:35936kB min:36200kB low:45248kB high:54296kB active_anon:89888kB inactive_anon:88176kB active_file:116kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7200kB pagetables:2932kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB [ 2093.862817] lowmem_reserve[]: 0 0 0 0 0 [ 2093.866968] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2093.910767] lowmem_reserve[]: 0 0 0 0 0 [ 2093.927210] Node 1 Normal free:53140kB min:53696kB low:67120kB high:80544kB active_anon:932kB inactive_anon:41472kB active_file:12kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2093.963741] lowmem_reserve[]: 0 0 0 0 0 [ 2093.967750] Node 0 DMA: 13*4kB (UME) 34*8kB (UME) 17*16kB (UME) 9*32kB (UM) 17*64kB (UM) 13*128kB (UME) 1*256kB (E) 2*512kB (UE) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 11060kB [ 2093.989725] Node 0 DMA32: 437*4kB (UME) 255*8kB (UME) 224*16kB (UME) 65*32kB (UME) 246*64kB (UM) 54*128kB (UM) 7*256kB (UM) 4*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 35948kB [ 2094.011483] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2094.026602] Node 1 Normal: 46*4kB (M) 28*8kB (M) 19*16kB (M) 12*32kB (UM) 5*64kB (M) 4*128kB (UM) 3*256kB (UM) 1*512kB (M) 5*1024kB (UM) 16*2048kB (UM) 3*4096kB (U) = 53384kB [ 2094.049751] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2094.058626] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2094.073049] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2094.084008] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2094.097417] 33590 total pagecache pages [ 2094.103390] 0 pages in swap cache [ 2094.106831] Swap cache stats: add 0, delete 0, find 0/0 [ 2094.116502] Free swap = 0kB [ 2094.119520] Total swap = 0kB [ 2094.124616] 2097051 pages RAM [ 2094.127714] 0 pages HighMem/MovableOnly [ 2094.133838] 363846 pages reserved [ 2094.137291] 0 pages cma reserved [ 2094.142757] Out of memory (oom_kill_allocating_task): Kill process 12878 (modprobe) score 0 or sacrifice child [ 2094.154956] Killed process 12878 (modprobe) total-vm:4184kB, anon-rss:36kB, file-rss:0kB, shmem-rss:0kB [ 2094.166868] oom_reaper: reaped process 12878 (modprobe), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2094.182436] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2094.228638] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2094.234010] CPU: 1 PID: 3624 Comm: syz-fuzzer Not tainted 4.14.228-syzkaller #0 [ 2094.241470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2094.250815] Call Trace: [ 2094.253410] dump_stack+0x1b2/0x281 [ 2094.257040] dump_header+0x178/0x82f [ 2094.260761] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2094.265862] ? ___ratelimit+0x2cd/0x530 [ 2094.269818] oom_kill_process.cold+0x10/0xb18 [ 2094.274400] out_of_memory+0xe3e/0x1190 [ 2094.278355] ? oom_killer_disable+0x1c0/0x1c0 [ 2094.282826] ? mutex_trylock+0x152/0x1a0 [ 2094.286863] __alloc_pages_nodemask+0x23e1/0x2720 [ 2094.291693] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2094.296523] alloc_pages_current+0x155/0x260 [ 2094.300920] filemap_fault+0xea3/0x1980 [ 2094.304880] ext4_filemap_fault+0x84/0xb0 [ 2094.309004] __do_fault+0xfa/0x380 [ 2094.312539] __handle_mm_fault+0x2497/0x4620 [ 2094.316924] ? vm_insert_page+0x7c0/0x7c0 [ 2094.321058] handle_mm_fault+0x391/0x860 [ 2094.325099] __do_page_fault+0x549/0xad0 [ 2094.329156] ? spurious_fault+0x640/0x640 [ 2094.333379] ? do_page_fault+0x60/0x500 [ 2094.337461] ? page_fault+0x2f/0x50 [ 2094.341070] page_fault+0x45/0x50 [ 2094.344504] RIP: 46a900:0x1f21be673d0 [ 2094.348289] RSP: 03cf:000000c00065df28 EFLAGS: 00000003 [ 2094.352380] Mem-Info: [ 2094.360160] active_anon:22700 inactive_anon:32412 isolated_anon:0 [ 2094.360160] active_file:7 inactive_file:13 isolated_file:0 [ 2094.360160] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2094.360160] slab_reclaimable:12655 slab_unreclaimable:117559 [ 2094.360160] mapped:52993 shmem:33557 pagetables:740 bounce:0 [ 2094.360160] free:24973 free_pcp:44 free_cma:0 [ 2094.396904] Node 0 active_anon:89868kB inactive_anon:88176kB active_file:48kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:192536kB dirty:0kB writeback:0kB shmem:92472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2094.427649] Node 1 active_anon:932kB inactive_anon:41472kB active_file:0kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:19436kB dirty:0kB writeback:0kB shmem:41756kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2094.457604] Node 0 DMA free:11060kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2094.460789] Bluetooth: hci5 command 0x0409 tx timeout [ 2094.496566] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2094.506538] Node 0 DMA32 free:35692kB min:36200kB low:45248kB high:54296kB active_anon:89828kB inactive_anon:88176kB active_file:64kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7168kB pagetables:2908kB bounce:0kB free_pcp:164kB local_pcp:0kB free_cma:0kB [ 2094.549210] lowmem_reserve[]: 0 0 0 0 0 [ 2094.557148] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2094.591743] lowmem_reserve[]: 0 0 0 0 0 [ 2094.595869] Node 1 Normal free:53140kB min:53696kB low:67120kB high:80544kB active_anon:932kB inactive_anon:41472kB active_file:0kB inactive_file:48kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:52kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 2094.633605] lowmem_reserve[]: 0 0 0 0 0 [ 2094.637599] Node 0 DMA: 13*4kB (UME) 34*8kB (UME) 17*16kB (UME) 9*32kB (UM) 17*64kB (UM) 13*128kB (UME) 1*256kB (E) 2*512kB (UE) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 11060kB [ 2094.660651] Node 0 DMA32: 382*4kB (UME) 370*8kB (UME) 223*16kB (UME) 65*32kB (UME) 248*64kB (UM) 54*128kB (UM) 7*256kB (UM) 4*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 36760kB [ 2094.758112] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2094.810669] Node 1 Normal: 47*4kB (UM) 28*8kB (M) 19*16kB (M) 12*32kB (UM) 5*64kB (M) 4*128kB (UM) 3*256kB (UM) 1*512kB (M) 5*1024kB (UM) 16*2048kB (UM) 3*4096kB (U) = 53388kB [ 2094.843735] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2094.880224] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2094.888806] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2094.922744] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2094.931388] 33591 total pagecache pages [ 2094.935359] 0 pages in swap cache [ 2094.938806] Swap cache stats: add 0, delete 0, find 0/0 [ 2094.944200] Free swap = 0kB [ 2094.947201] Total swap = 0kB [ 2094.950257] 2097051 pages RAM [ 2094.953347] 0 pages HighMem/MovableOnly [ 2094.957453] 363846 pages reserved [ 2094.960928] 0 pages cma reserved [ 2094.964310] Out of memory (oom_kill_allocating_task): Kill process 3624 (syz-fuzzer) score 0 or sacrifice child [ 2094.974624] Killed process 11902 (syz-executor.5) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 2094.993216] oom_reaper: reaped process 11902 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2095.240236] Bluetooth: hci1 command 0x040f tx timeout [ 2095.573451] syz-executor.4 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2095.602309] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2095.607445] CPU: 0 PID: 12654 Comm: syz-executor.4 Not tainted 4.14.228-syzkaller #0 [ 2095.615314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2095.624655] Call Trace: [ 2095.627240] dump_stack+0x1b2/0x281 [ 2095.630863] dump_header+0x178/0x82f [ 2095.634575] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2095.639667] ? ___ratelimit+0x2cd/0x530 [ 2095.643640] oom_kill_process.cold+0x10/0xb18 [ 2095.648139] out_of_memory+0xe3e/0x1190 [ 2095.652136] ? oom_killer_disable+0x1c0/0x1c0 [ 2095.656615] ? mutex_trylock+0x152/0x1a0 [ 2095.660668] __alloc_pages_nodemask+0x23e1/0x2720 [ 2095.665531] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2095.670381] alloc_pages_current+0x155/0x260 [ 2095.674782] filemap_fault+0xea3/0x1980 [ 2095.678756] ext4_filemap_fault+0x84/0xb0 [ 2095.682900] __do_fault+0xfa/0x380 [ 2095.686428] __handle_mm_fault+0x2497/0x4620 [ 2095.690827] ? vm_insert_page+0x7c0/0x7c0 [ 2095.694963] ? __tun_chr_ioctl.isra.0+0x3310/0x3310 [ 2095.699968] ? do_vfs_ioctl+0xe2/0xff0 [ 2095.703853] handle_mm_fault+0x391/0x860 [ 2095.707923] __do_page_fault+0x549/0xad0 [ 2095.711977] ? spurious_fault+0x640/0x640 [ 2095.716122] ? do_page_fault+0x60/0x500 [ 2095.720082] ? page_fault+0x2f/0x50 [ 2095.723699] page_fault+0x45/0x50 [ 2095.727225] RIP: b77498c0: (null) [ 2095.731445] RSP: b774a468:00007ffeb7749df0 EFLAGS: 7ffeb7749df0 [ 2095.750675] Mem-Info: [ 2095.759149] active_anon:22675 inactive_anon:32412 isolated_anon:0 [ 2095.759149] active_file:12 inactive_file:0 isolated_file:0 [ 2095.759149] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2095.759149] slab_reclaimable:12655 slab_unreclaimable:116451 [ 2095.759149] mapped:44288 shmem:33557 pagetables:703 bounce:0 [ 2095.759149] free:25165 free_pcp:30 free_cma:0 [ 2095.988674] Node 0 active_anon:89772kB inactive_anon:88176kB active_file:116kB inactive_file:104kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:177248kB dirty:0kB writeback:0kB shmem:92472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2096.173276] Node 1 active_anon:872kB inactive_anon:41472kB active_file:44kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:41756kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2096.267442] Node 0 DMA free:11060kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2096.438326] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2096.470728] Node 0 DMA32 free:36156kB min:36200kB low:45248kB high:54296kB active_anon:89732kB inactive_anon:88176kB active_file:16kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7136kB pagetables:2780kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 2096.520284] Bluetooth: hci5 command 0x041b tx timeout [ 2096.619882] lowmem_reserve[]: 0 0 0 0 0 [ 2096.640427] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2096.765725] lowmem_reserve[]: 0 0 0 0 0 [ 2096.769769] Node 1 Normal free:53660kB min:53696kB low:67120kB high:80544kB active_anon:872kB inactive_anon:41472kB active_file:72kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2096.903519] lowmem_reserve[]: 0 0 0 0 0 [ 2096.907539] Node 0 DMA: 14*4kB (UME) 34*8kB (UME) 17*16kB (UME) 9*32kB (UM) 17*64kB (UM) 13*128kB (UME) 1*256kB (E) 2*512kB (UE) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 11064kB [ 2097.028823] Node 0 DMA32: 417*4kB (UME) 299*8kB (UME) 229*16kB (UME) 61*32kB (UME) 255*64kB (UM) 56*128kB (UM) 7*256kB (UM) 4*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 37004kB [ 2097.128892] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2097.200025] Node 1 Normal: 48*4kB (UM) 30*8kB (UM) 21*16kB (M) 13*32kB (UM) 4*64kB (M) 5*128kB (UM) 4*256kB (UM) 1*512kB (M) 5*1024kB (UM) 16*2048kB (UM) 3*4096kB (U) = 53792kB [ 2097.285400] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2097.320320] Bluetooth: hci1 command 0x0419 tx timeout [ 2097.334411] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2097.386714] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2097.444708] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2097.490226] 33602 total pagecache pages [ 2097.494223] 0 pages in swap cache [ 2097.497666] Swap cache stats: add 0, delete 0, find 0/0 [ 2097.535809] Free swap = 0kB [ 2097.538838] Total swap = 0kB [ 2097.541936] 2097051 pages RAM [ 2097.545025] 0 pages HighMem/MovableOnly [ 2097.549087] 363846 pages reserved [ 2097.622539] 0 pages cma reserved [ 2097.625927] Out of memory (oom_kill_allocating_task): Kill process 12654 (syz-executor.4) score 0 or sacrifice child [ 2097.697404] Killed process 12654 (syz-executor.4) total-vm:93120kB, anon-rss:72kB, file-rss:33460kB, shmem-rss:0kB [ 2097.756899] oom_reaper: reaped process 12654 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2097.768372] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2097.793483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2097.880645] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2097.883541] systemd-udevd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=-1000 [ 2097.887352] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2097.907462] systemd-udevd cpuset=/ mems_allowed=0-1 [ 2097.913564] CPU: 0 PID: 4625 Comm: systemd-udevd Not tainted 4.14.228-syzkaller #0 [ 2097.921268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2097.930699] Call Trace: [ 2097.933392] dump_stack+0x1b2/0x281 [ 2097.937018] dump_header+0x178/0x82f [ 2097.940721] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2097.945822] ? ___ratelimit+0x2cd/0x530 [ 2097.949821] oom_kill_process.cold+0x10/0xb18 [ 2097.954307] ? lock_downgrade+0x740/0x740 [ 2097.958448] out_of_memory+0x2dc/0x1190 [ 2097.962421] ? oom_killer_disable+0x1c0/0x1c0 [ 2097.966894] ? mutex_trylock+0x152/0x1a0 [ 2097.970935] __alloc_pages_nodemask+0x23e1/0x2720 [ 2097.975777] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2097.980620] alloc_pages_current+0x155/0x260 [ 2097.985020] filemap_fault+0xea3/0x1980 [ 2097.988997] ext4_filemap_fault+0x84/0xb0 [ 2097.993126] __do_fault+0xfa/0x380 [ 2097.996739] __handle_mm_fault+0x2497/0x4620 [ 2098.001130] ? trace_hardirqs_on+0x10/0x10 [ 2098.005341] ? vm_insert_page+0x7c0/0x7c0 [ 2098.009502] handle_mm_fault+0x391/0x860 [ 2098.013541] __do_page_fault+0x549/0xad0 [ 2098.017593] ? spurious_fault+0x640/0x640 [ 2098.021718] ? do_page_fault+0x60/0x500 [ 2098.025678] ? page_fault+0x2f/0x50 [ 2098.029298] page_fault+0x45/0x50 [ 2098.033090] RIP: d17bd67b: (null) [ 2098.039037] RSP: d2a8ac00:000055e8d17be28e EFLAGS: 55e8d2a8ac00 [ 2098.056009] Mem-Info: [ 2098.075926] active_anon:22648 inactive_anon:32412 isolated_anon:0 [ 2098.075926] active_file:17 inactive_file:17 isolated_file:0 [ 2098.075926] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2098.075926] slab_reclaimable:12643 slab_unreclaimable:116044 [ 2098.075926] mapped:44287 shmem:33557 pagetables:673 bounce:0 [ 2098.075926] free:25031 free_pcp:121 free_cma:0 [ 2098.121533] Node 0 active_anon:89744kB inactive_anon:88176kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:177148kB dirty:0kB writeback:0kB shmem:92472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2098.160941] Node 1 active_anon:848kB inactive_anon:41472kB active_file:52kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:41756kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2098.199290] Node 0 DMA free:11064kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2098.237177] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2098.246392] Node 0 DMA32 free:35920kB min:36200kB low:45248kB high:54296kB active_anon:89704kB inactive_anon:88176kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7136kB pagetables:2692kB bounce:0kB free_pcp:364kB local_pcp:132kB free_cma:0kB [ 2098.286724] lowmem_reserve[]: 0 0 0 0 0 [ 2098.294873] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2098.331924] lowmem_reserve[]: 0 0 0 0 0 [ 2098.336031] Node 1 Normal free:53140kB min:53696kB low:67120kB high:80544kB active_anon:848kB inactive_anon:41472kB active_file:152kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:0kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 2098.372152] lowmem_reserve[]: 0 0 0 0 0 [ 2098.376151] Node 0 DMA: 14*4kB (UME) 34*8kB (UME) 17*16kB (UME) 9*32kB (UM) 17*64kB (UM) 13*128kB (UME) 1*256kB (E) 2*512kB (UE) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 11064kB [ 2098.399267] Node 0 DMA32: 442*4kB (UME) 231*8kB (UME) 226*16kB (UME) 60*32kB (ME) 246*64kB (UM) 56*128kB (UM) 7*256kB (UM) 4*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 35904kB [ 2098.422739] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2098.437217] Node 1 Normal: 47*4kB (M) 28*8kB (M) 21*16kB (M) 13*32kB (M) 4*64kB (M) 4*128kB (UM) 2*256kB (M) 1*512kB (M) 5*1024kB (UM) 16*2048kB (UM) 3*4096kB (U) = 53132kB [ 2098.460162] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2098.469002] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2098.485315] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2098.495997] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2098.511958] 33591 total pagecache pages [ 2098.515937] 0 pages in swap cache [ 2098.519380] Swap cache stats: add 0, delete 0, find 0/0 [ 2098.528768] Free swap = 0kB [ 2098.535455] Total swap = 0kB [ 2098.538585] 2097051 pages RAM [ 2098.549706] 0 pages HighMem/MovableOnly [ 2098.557751] 363846 pages reserved [ 2098.568604] 0 pages cma reserved [ 2098.575968] Out of memory: Kill process 12644 (syz-executor.1) score 1004 or sacrifice child [ 2098.589019] Killed process 12645 (syz-executor.1) total-vm:93648kB, anon-rss:160kB, file-rss:34820kB, shmem-rss:0kB [ 2098.642386] oom_reaper: reaped process 12645 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2098.674014] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2098.723841] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2098.728629] CPU: 0 PID: 7977 Comm: syz-fuzzer Not tainted 4.14.228-syzkaller #0 [ 2098.736068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2098.745409] Call Trace: [ 2098.748001] dump_stack+0x1b2/0x281 [ 2098.749864] syz-executor.1: page allocation failure: order:0 [ 2098.751623] dump_header+0x178/0x82f [ 2098.751634] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2098.757415] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2098.761125] ? ___ratelimit+0x2cd/0x530 [ 2098.761135] oom_kill_process.cold+0x10/0xb18 [ 2098.761152] out_of_memory+0xe3e/0x1190 [ 2098.761163] ? oom_killer_disable+0x1c0/0x1c0 [ 2098.761170] ? mutex_trylock+0x152/0x1a0 [ 2098.761180] __alloc_pages_nodemask+0x23e1/0x2720 [ 2098.761202] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2098.761226] alloc_pages_current+0x155/0x260 [ 2098.783133] (null) [ 2098.785801] filemap_fault+0xea3/0x1980 [ 2098.806698] syz-executor.1 cpuset= [ 2098.808354] ext4_filemap_fault+0x84/0xb0 [ 2098.817416] / [ 2098.818061] __do_fault+0xfa/0x380 [ 2098.827402] __handle_mm_fault+0x2497/0x4620 [ 2098.831805] ? vm_insert_page+0x7c0/0x7c0 [ 2098.833792] mems_allowed=0-1 [ 2098.835938] ? __might_fault+0x177/0x1b0 [ 2098.843077] handle_mm_fault+0x391/0x860 [ 2098.847127] __do_page_fault+0x549/0xad0 [ 2098.851172] ? spurious_fault+0x640/0x640 [ 2098.855308] ? do_page_fault+0x60/0x500 [ 2098.859255] ? page_fault+0x2f/0x50 [ 2098.859825] syz-executor.1: [ 2098.862867] page_fault+0x45/0x50 [ 2098.862869] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2098.865863] RIP: b8300:0xc000082240 [ 2098.869320] (null) [ 2098.879169] RSP: 0000:000000c000521e40 EFLAGS: 00000003 [ 2098.885019] CPU: 1 PID: 12645 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 2098.898228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2098.901054] Mem-Info: [ 2098.907588] Call Trace: [ 2098.910018] active_anon:22622 inactive_anon:32412 isolated_anon:0 [ 2098.910018] active_file:4 inactive_file:25 isolated_file:0 [ 2098.910018] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2098.910018] slab_reclaimable:12638 slab_unreclaimable:115610 [ 2098.910018] mapped:44287 shmem:33557 pagetables:673 bounce:0 [ 2098.910018] free:13944 free_pcp:122 free_cma:0 [ 2098.912563] dump_stack+0x1b2/0x281 [ 2098.945803] Node 0 active_anon:89644kB inactive_anon:88176kB active_file:0kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:177148kB dirty:0kB writeback:0kB shmem:92472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2098.949426] warn_alloc.cold+0x96/0x1cc [ 2098.976944] Node 1 active_anon:844kB inactive_anon:41472kB active_file:44kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:41756kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2098.980866] ? zone_watermark_ok_safe+0x220/0x220 [ 2098.980875] ? usleep_range+0x130/0x130 [ 2098.980886] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2099.007589] Node 0 [ 2099.012407] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2099.012417] ? run_timer_softirq+0x5a0/0x5a0 [ 2099.012432] __alloc_pages_nodemask+0x2127/0x2720 [ 2099.016377] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2099.021454] ? lock_acquire+0x170/0x3f0 [ 2099.021471] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2099.023679] lowmem_reserve[]: [ 2099.028802] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2099.033199] 0 [ 2099.038023] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2099.063608] 2717 [ 2099.067590] ? alloc_pages_current+0xe3/0x260 [ 2099.072421] 2718 [ 2099.075492] alloc_pages_current+0x155/0x260 [ 2099.079978] 2718 [ 2099.081761] ion_page_pool_alloc+0x118/0x1b0 [ 2099.087196] 2718 [ 2099.089245] ion_system_heap_allocate+0x133/0x8c0 [ 2099.095763] ? ion_alloc+0x187/0x810 [ 2099.100262] Node 0 [ 2099.102304] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2099.106687] DMA32 free:17984kB min:36200kB low:45248kB high:54296kB active_anon:89604kB inactive_anon:88176kB active_file:0kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7136kB pagetables:2692kB bounce:0kB free_pcp:248kB local_pcp:112kB free_cma:0kB [ 2099.108724] ? ion_system_contig_heap_create+0x130/0x130 [ 2099.113580] lowmem_reserve[]: [ 2099.117256] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2099.117267] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2099.119473] 0 [ 2099.124902] ion_alloc+0x204/0x810 [ 2099.124915] ? ion_dma_buf_release+0x40/0x40 [ 2099.124927] ? __might_fault+0x177/0x1b0 [ 2099.153217] 0 [ 2099.158633] ion_ioctl+0xea/0x1f0 [ 2099.161740] 0 [ 2099.166716] ? ion_query_heaps+0x360/0x360 [ 2099.171557] 0 [ 2099.173409] ? ion_query_heaps+0x360/0x360 [ 2099.176914] 0 [ 2099.181303] do_vfs_ioctl+0x75a/0xff0 [ 2099.181315] ? ioctl_preallocate+0x1a0/0x1a0 [ 2099.181324] ? lock_downgrade+0x740/0x740 [ 2099.187163] ? __fget+0x225/0x360 [ 2099.190614] Node 0 [ 2099.192377] ? do_vfs_ioctl+0xff0/0xff0 [ 2099.196586] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2099.198363] ? security_file_ioctl+0x83/0xb0 [ 2099.202584] lowmem_reserve[]: [ 2099.204353] SyS_ioctl+0x7f/0xb0 [ 2099.208120] 0 [ 2099.212506] ? do_vfs_ioctl+0xff0/0xff0 [ 2099.212516] do_syscall_64+0x1d5/0x640 [ 2099.212529] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2099.216640] 0 [ 2099.220069] RIP: 0033:0x466459 [ 2099.220074] RSP: 002b:00007f27c4f46188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2099.220084] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2099.220091] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2099.222318] 0 [ 2099.226265] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2099.226271] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2099.251376] 0 [ 2099.255606] R13: 00007ffda0b0ca7f R14: 00007f27c4f46300 R15: 0000000000022000 [ 2099.258693] 0 [ 2099.262375] syz-executor.1 cpuset= [ 2099.267794] / [ 2099.291393] Node 1 [ 2099.296810] mems_allowed=0-1 [ 2099.322162] Normal free:26840kB min:53696kB low:67120kB high:80544kB active_anon:844kB inactive_anon:41472kB active_file:52kB inactive_file:52kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:0kB bounce:0kB free_pcp:240kB local_pcp:120kB free_cma:0kB [ 2099.322768] CPU: 1 PID: 12646 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 2099.337479] lowmem_reserve[]: [ 2099.339201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2099.342313] 0 [ 2099.370303] Call Trace: [ 2099.370322] dump_stack+0x1b2/0x281 [ 2099.370337] warn_alloc.cold+0x96/0x1cc [ 2099.378193] 0 [ 2099.381279] ? zone_watermark_ok_safe+0x220/0x220 [ 2099.381288] ? usleep_range+0x130/0x130 [ 2099.381299] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2099.390660] 0 [ 2099.392431] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2099.394983] 0 [ 2099.398588] ? run_timer_softirq+0x5a0/0x5a0 [ 2099.402548] 0 [ 2099.404319] __alloc_pages_nodemask+0x2127/0x2720 [ 2099.413079] ? __schedule+0x893/0x1de0 [ 2099.413093] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2099.418166] Node 0 [ 2099.419948] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2099.419960] ? retint_kernel+0x2d/0x2d [ 2099.419975] ? alloc_pages_current+0x123/0x260 [ 2099.424968] DMA: [ 2099.426754] alloc_pages_current+0x155/0x260 [ 2099.431155] 14*4kB [ 2099.432928] ion_page_pool_alloc+0x118/0x1b0 [ 2099.437735] (UME) [ 2099.441604] ion_system_heap_allocate+0x133/0x8c0 [ 2099.441613] ? ion_alloc+0x187/0x810 [ 2099.441623] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2099.446436] 20*8kB [ 2099.448654] ? ion_system_contig_heap_create+0x130/0x130 [ 2099.453396] (UME) [ 2099.457267] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2099.461835] 17*16kB [ 2099.463865] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2099.468243] (UME) [ 2099.470463] ion_alloc+0x204/0x810 [ 2099.470478] ? ion_dma_buf_release+0x40/0x40 [ 2099.474882] 9*32kB [ 2099.477146] ? __might_fault+0x177/0x1b0 [ 2099.481969] (UM) [ 2099.485768] ion_ioctl+0xea/0x1f0 [ 2099.491245] 17*64kB [ 2099.493447] ? ion_query_heaps+0x360/0x360 [ 2099.498866] (UM) [ 2099.501000] ? ion_query_heaps+0x360/0x360 [ 2099.501009] do_vfs_ioctl+0x75a/0xff0 [ 2099.501020] ? ioctl_preallocate+0x1a0/0x1a0 [ 2099.506005] 13*128kB [ 2099.508308] ? lock_downgrade+0x740/0x740 [ 2099.513135] (UME) [ 2099.515252] ? __fget+0x225/0x360 [ 2099.518774] 1*256kB [ 2099.523238] ? do_vfs_ioctl+0xff0/0xff0 [ 2099.523249] ? security_file_ioctl+0x83/0xb0 [ 2099.523258] SyS_ioctl+0x7f/0xb0 [ 2099.525468] (E) [ 2099.529945] ? do_vfs_ioctl+0xff0/0xff0 [ 2099.529956] do_syscall_64+0x1d5/0x640 [ 2099.529969] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2099.532033] 2*512kB [ 2099.535464] RIP: 0033:0x466459 [ 2099.537759] (UE) 2*1024kB [ 2099.541970] RSP: 002b:00007f27c4f25188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2099.541980] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2099.541984] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2099.541989] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2099.541994] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2099.542001] R13: 00007ffda0b0ca7f R14: 00007f27c4f25300 R15: 0000000000022000 [ 2099.544038] (ME) [ 2099.548436] warn_alloc_show_mem: 1 callbacks suppressed [ 2099.548439] Mem-Info: [ 2099.583856] 2*2048kB [ 2099.584665] active_anon:22622 inactive_anon:32412 isolated_anon:0 [ 2099.584665] active_file:17 inactive_file:17 isolated_file:0 [ 2099.584665] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2099.584665] slab_reclaimable:12638 slab_unreclaimable:115609 [ 2099.584665] mapped:44287 shmem:33557 pagetables:673 bounce:0 [ 2099.584665] free:13944 free_pcp:120 free_cma:0 [ 2099.588572] (UM) [ 2099.592494] Node 0 active_anon:89644kB inactive_anon:88176kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:177148kB dirty:0kB writeback:0kB shmem:92472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2099.592510] Node 1 active_anon:844kB inactive_anon:41472kB active_file:52kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:41756kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2099.592514] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2099.592533] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2099.592553] Node 0 DMA32 free:17984kB min:36200kB low:45248kB high:54296kB active_anon:89604kB inactive_anon:88176kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7136kB pagetables:2692kB bounce:0kB free_pcp:240kB local_pcp:136kB free_cma:0kB [ 2099.592572] lowmem_reserve[]: [ 2099.614807] 0*4096kB [ 2099.621131] 0 0 0 0 0 [ 2099.621162] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2099.621181] lowmem_reserve[]: 0 0 0 0 0 [ 2099.621201] Node 1 [ 2099.645298] = 10952kB [ 2099.650559] Normal free:26840kB min:53696kB low:67120kB high:80544kB active_anon:844kB inactive_anon:41472kB active_file:52kB inactive_file:52kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:0kB bounce:0kB free_pcp:240kB local_pcp:120kB free_cma:0kB [ 2099.650562] lowmem_reserve[]: 0 0 0 0 0 [ 2099.650583] Node 0 DMA: 14*4kB (UME) 20*8kB (UME) 17*16kB [ 2099.664555] Node 0 [ 2099.696323] (UME) 9*32kB (UM) 17*64kB (UM) 13*128kB (UME) 1*256kB (E) 2*512kB (UE) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 10952kB [ 2099.696374] Node 0 DMA32: 442*4kB (ME) 231*8kB (ME) 226*16kB (UME) 60*32kB (ME) 36*64kB (M) [ 2099.715825] DMA32: [ 2099.749742] 21*128kB [ 2099.760083] device bridge_slave_1 left promiscuous mode [ 2099.809723] (UM) [ 2099.914370] 411*4kB (ME) 331*8kB (UME) 289*16kB (UME) 62*32kB (UME) 38*64kB (UM) 23*128kB (UM) 7*256kB (UM) 4*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 20116kB [ 2099.996203] bridge0: port 2(bridge_slave_1) entered disabled state [ 2100.017093] device bridge_slave_0 left promiscuous mode [ 2100.030889] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2100.033130] bridge0: port 1(bridge_slave_0) entered disabled state [ 2100.066814] device veth1_macvtap left promiscuous mode [ 2100.069905] Node 1 Normal: 0*4kB 1*8kB (U) 2*16kB (UM) 2*32kB (UM) 1*64kB (M) 0*128kB 2*256kB (UM) 2*512kB (UM) 170*1024kB (UM) 49*2048kB (UM) 8*4096kB (U) = 308904kB [ 2100.079916] 7*256kB [ 2100.087514] device veth0_macvtap left promiscuous mode [ 2100.107627] (UM) 4*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 17984kB [ 2100.117053] device veth1_vlan left promiscuous mode [ 2100.130150] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2100.132472] device veth0_vlan left promiscuous mode [ 2100.138990] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2100.144263] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2100.198969] Node 1 Normal: 0*4kB 1*8kB (U) 2*16kB (UM) 3*32kB (UM) 1487*64kB (UM) 7*128kB (U) 10*256kB (UM) 6*512kB (UM) 87*1024kB (UM) 51*2048kB (UM) 15*4096kB (U) = 356808kB [ 2100.199984] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2100.266696] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2100.269661] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2100.307702] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2100.320013] 35404 total pagecache pages [ 2100.324005] 0 pages in swap cache [ 2100.327449] Swap cache stats: add 0, delete 0, find 0/0 [ 2100.340955] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2100.360187] Free swap = 0kB [ 2100.363229] Total swap = 0kB [ 2100.366292] 2097051 pages RAM [ 2100.369400] 0 pages HighMem/MovableOnly [ 2100.372583] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2100.390076] 363846 pages reserved [ 2100.393531] 0 pages cma reserved [ 2100.396957] Out of memory (oom_kill_allocating_task): Kill process 7977 (syz-fuzzer) score 0 or sacrifice child [ 2100.407147] 35404 total pagecache pages [ 2100.423814] 0 pages in swap cache [ 2100.427409] Swap cache stats: add 0, delete 0, find 0/0 [ 2100.432870] Killed process 11224 (syz-executor.0) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 2100.462350] oom_reaper: reaped process 11224 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2100.480461] Free swap = 0kB [ 2100.483590] Total swap = 0kB [ 2100.487367] device hsr_slave_1 left promiscuous mode [ 2100.492563] 2097051 pages RAM [ 2100.500037] 0 pages HighMem/MovableOnly [ 2100.504052] 363846 pages reserved [ 2100.516331] device hsr_slave_0 left promiscuous mode [ 2100.517698] 0 pages cma reserved [ 2100.551430] team0 (unregistering): Port device team_slave_1 removed [ 2100.576125] team0 (unregistering): Port device team_slave_0 removed [ 2100.603062] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2100.624344] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2100.688572] bond0 (unregistering): Released all slaves [ 2100.822389] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2100.852129] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2100.859232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2100.872482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2101.021499] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2101.021523] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2101.052874] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2101.074483] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2101.075864] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2101.085414] CPU: 0 PID: 12645 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 2101.092310] syz-executor.1 cpuset= [ 2101.093564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2101.093567] Call Trace: [ 2101.093582] dump_stack+0x1b2/0x281 [ 2101.093595] warn_alloc.cold+0x96/0x1cc [ 2101.099935] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2101.106462] ? zone_watermark_ok_safe+0x220/0x220 [ 2101.106484] __alloc_pages_nodemask+0x2127/0x2720 [ 2101.111952] / [ 2101.112655] ? lock_acquire+0x170/0x3f0 [ 2101.121272] mems_allowed=0-1 [ 2101.122641] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2101.122658] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2101.147648] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2101.151393] ? __mutex_unlock_slowpath+0x75/0x770 [ 2101.151403] ? __alloc_pages_nodemask+0x278/0x2720 [ 2101.151416] alloc_pages_current+0x155/0x260 [ 2101.151429] ion_page_pool_alloc+0x118/0x1b0 [ 2101.151438] ion_system_heap_allocate+0x133/0x8c0 [ 2101.151447] ? _raw_spin_unlock+0x29/0x40 [ 2101.151456] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2101.170973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2101.172143] ? ion_system_contig_heap_create+0x130/0x130 [ 2101.176968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2101.181369] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2101.181380] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2101.181391] ion_alloc+0x27a/0x810 [ 2101.181405] ? ion_dma_buf_release+0x40/0x40 [ 2101.181416] ? __might_fault+0x177/0x1b0 [ 2101.181426] ion_ioctl+0xea/0x1f0 [ 2101.195960] device veth0_vlan entered promiscuous mode [ 2101.197418] ? ion_query_heaps+0x360/0x360 [ 2101.216121] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2101.219698] ? ion_query_heaps+0x360/0x360 [ 2101.219709] do_vfs_ioctl+0x75a/0xff0 [ 2101.219720] ? ioctl_preallocate+0x1a0/0x1a0 [ 2101.219730] ? lock_downgrade+0x740/0x740 [ 2101.219743] ? __fget+0x225/0x360 [ 2101.219751] ? do_vfs_ioctl+0xff0/0xff0 [ 2101.219762] ? security_file_ioctl+0x83/0xb0 [ 2101.219772] SyS_ioctl+0x7f/0xb0 [ 2101.219779] ? do_vfs_ioctl+0xff0/0xff0 [ 2101.219790] do_syscall_64+0x1d5/0x640 [ 2101.219805] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2101.219813] RIP: 0033:0x466459 [ 2101.219818] RSP: 002b:00007f27c4f46188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2101.219827] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2101.219831] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2101.219836] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2101.219841] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2101.219846] R13: 00007ffda0b0ca7f R14: 00007f27c4f46300 R15: 0000000000022000 [ 2101.344062] CPU: 1 PID: 12646 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 2101.351936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2101.361279] Call Trace: [ 2101.363864] dump_stack+0x1b2/0x281 [ 2101.367487] warn_alloc.cold+0x96/0x1cc [ 2101.371452] ? zone_watermark_ok_safe+0x220/0x220 [ 2101.376306] __alloc_pages_nodemask+0x2127/0x2720 [ 2101.381138] ? lock_acquire+0x170/0x3f0 [ 2101.385104] ? lock_acquire+0x170/0x3f0 [ 2101.389166] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2101.394006] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2101.399449] ? __mutex_unlock_slowpath+0x75/0x770 [ 2101.404287] alloc_pages_current+0x155/0x260 [ 2101.408688] ion_page_pool_alloc+0x118/0x1b0 [ 2101.413085] ion_system_heap_allocate+0x133/0x8c0 [ 2101.417916] ? _raw_spin_unlock+0x29/0x40 [ 2101.422049] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2101.423915] warn_alloc_show_mem: 1 callbacks suppressed [ 2101.423918] Mem-Info: [ 2101.426958] ? ion_system_contig_heap_create+0x130/0x130 [ 2101.426967] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2101.426975] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2101.426984] ion_alloc+0x27a/0x810 [ 2101.451217] active_anon:22548 inactive_anon:32407 isolated_anon:0 [ 2101.451217] active_file:723 inactive_file:2074 isolated_file:0 [ 2101.451217] unevictable:0 dirty:54 writeback:0 unstable:0 [ 2101.451217] slab_reclaimable:12559 slab_unreclaimable:114899 [ 2101.451217] mapped:28912 shmem:33549 pagetables:608 bounce:0 [ 2101.451217] free:76712 free_pcp:213 free_cma:0 [ 2101.453635] ? ion_dma_buf_release+0x40/0x40 [ 2101.453656] ? __might_fault+0x177/0x1b0 [ 2101.495765] ion_ioctl+0xea/0x1f0 [ 2101.499209] ? ion_query_heaps+0x360/0x360 [ 2101.503437] ? ion_query_heaps+0x360/0x360 [ 2101.507658] do_vfs_ioctl+0x75a/0xff0 [ 2101.511458] ? ioctl_preallocate+0x1a0/0x1a0 [ 2101.516035] ? lock_downgrade+0x740/0x740 [ 2101.520187] ? __fget+0x225/0x360 [ 2101.523638] ? do_vfs_ioctl+0xff0/0xff0 [ 2101.527602] ? security_file_ioctl+0x83/0xb0 [ 2101.532118] SyS_ioctl+0x7f/0xb0 [ 2101.535475] ? do_vfs_ioctl+0xff0/0xff0 [ 2101.539444] do_syscall_64+0x1d5/0x640 [ 2101.540563] Node 0 active_anon:89336kB inactive_anon:88176kB active_file:44kB inactive_file:3768kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:110520kB dirty:32kB writeback:0kB shmem:92472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2101.543324] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2101.543332] RIP: 0033:0x466459 [ 2101.543338] RSP: 002b:00007f27c4f25188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2101.587214] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2101.594474] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2101.601750] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2101.609021] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2101.616280] R13: 00007ffda0b0ca7f R14: 00007f27c4f25300 R15: 0000000000022000 [ 2101.618249] Node 1 active_anon:856kB inactive_anon:41452kB active_file:2848kB inactive_file:4528kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:5128kB dirty:184kB writeback:0kB shmem:41724kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2101.715497] Node 0 DMA free:11336kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2101.750013] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2101.762532] device veth1_vlan entered promiscuous mode [ 2101.808245] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2101.819934] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2101.834026] Node 0 DMA32 free:391552kB min:36200kB low:45248kB high:54296kB active_anon:89296kB inactive_anon:88176kB active_file:44kB inactive_file:3768kB unevictable:0kB writepending:32kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7040kB pagetables:2432kB bounce:0kB free_pcp:972kB local_pcp:232kB free_cma:0kB [ 2101.869289] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2101.889642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2101.901076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2101.923654] device veth0_macvtap entered promiscuous mode [ 2101.933276] lowmem_reserve[]: 0 0 0 0 0 [ 2101.943013] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2101.943163] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2101.963050] device veth1_macvtap entered promiscuous mode [ 2102.020340] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2102.020360] lowmem_reserve[]: 0 0 0 0 0 [ 2102.044411] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2102.048692] Node 1 Normal free:336152kB min:53696kB low:67120kB high:80544kB active_anon:856kB inactive_anon:41452kB active_file:2856kB inactive_file:4520kB unevictable:0kB writepending:184kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:0kB bounce:0kB free_pcp:636kB local_pcp:0kB free_cma:0kB [ 2102.072396] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2102.121279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2102.129464] lowmem_reserve[]: 0 0 0 0 0 [ 2102.134994] Node 0 DMA: 96*4kB (UME) 20*8kB (UME) 17*16kB (UME) 9*32kB (UM) 18*64kB (UM) 17*128kB (UME) 3*256kB (UE) 2*512kB (UE) 3*1024kB (UME) 1*2048kB (M) 0*4096kB = 11344kB [ 2102.147142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2102.175507] Node 0 DMA32: 19336*4kB (UE) 13162*8kB (UME) 6998*16kB (UME) 2374*32kB (UE) 333*64kB (UM) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 392016kB [ 2102.176590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2102.213780] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2102.235319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2102.249316] Node 1 Normal: 5445*4kB (UM) 3084*8kB (UM) 2679*16kB (UM) 2658*32kB (UM) 3101*64kB (UM) 185*128kB (U) 0*256kB 0*512kB 1*1024kB (U) 0*2048kB 6*4096kB (U) = 422116kB [ 2102.277287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2102.296209] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2102.313692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2102.330091] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2102.351672] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2102.357581] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2102.367823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2102.391243] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2102.399226] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2102.412934] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2102.428672] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2102.440289] 36355 total pagecache pages [ 2102.448981] 0 pages in swap cache [ 2102.460536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2102.469009] Swap cache stats: add 0, delete 0, find 0/0 [ 2102.484339] Free swap = 0kB [ 2102.492417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2102.504804] Total swap = 0kB [ 2102.512471] 2097051 pages RAM [ 2102.516636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2102.530636] 0 pages HighMem/MovableOnly [ 2102.539999] 363846 pages reserved [ 2102.549187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2102.563665] 0 pages cma reserved [ 2102.576003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2102.598081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2102.609002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2102.620738] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2102.628673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2102.642053] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2102.651076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2103.605208] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2103.634640] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2103.648325] CPU: 0 PID: 12937 Comm: syz-executor.3 Not tainted 4.14.228-syzkaller #0 [ 2103.656210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2103.665559] Call Trace: [ 2103.668132] dump_stack+0x1b2/0x281 [ 2103.671744] warn_alloc.cold+0x96/0x1cc [ 2103.675717] ? zone_watermark_ok_safe+0x220/0x220 [ 2103.680547] __alloc_pages_nodemask+0x2127/0x2720 [ 2103.685371] ? _raw_spin_unlock_irq+0x5a/0x80 [ 2103.689846] ? finish_task_switch+0x178/0x610 [ 2103.694319] ? finish_task_switch+0x14d/0x610 [ 2103.698813] ? lock_acquire+0x170/0x3f0 [ 2103.702772] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2103.707596] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2103.713023] ? __mutex_unlock_slowpath+0x75/0x770 [ 2103.717858] ? alloc_pages_current+0x84/0x260 [ 2103.722335] alloc_pages_current+0x155/0x260 [ 2103.726740] ion_page_pool_alloc+0x118/0x1b0 [ 2103.731126] ion_system_heap_allocate+0x133/0x8c0 [ 2103.735965] ? ion_alloc+0x187/0x810 [ 2103.739658] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2103.745091] ? ion_system_contig_heap_create+0x130/0x130 [ 2103.750521] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2103.755514] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2103.760336] ion_alloc+0x204/0x810 [ 2103.763856] ? ion_dma_buf_release+0x40/0x40 [ 2103.768242] ? __might_fault+0x177/0x1b0 [ 2103.772281] ion_ioctl+0xea/0x1f0 [ 2103.775709] ? ion_query_heaps+0x360/0x360 [ 2103.779923] ? ion_query_heaps+0x360/0x360 [ 2103.784154] do_vfs_ioctl+0x75a/0xff0 [ 2103.787935] ? ioctl_preallocate+0x1a0/0x1a0 [ 2103.792321] ? lock_downgrade+0x740/0x740 [ 2103.796448] ? __fget+0x225/0x360 [ 2103.799877] ? do_vfs_ioctl+0xff0/0xff0 [ 2103.803850] ? security_file_ioctl+0x83/0xb0 [ 2103.808236] SyS_ioctl+0x7f/0xb0 [ 2103.811577] ? do_vfs_ioctl+0xff0/0xff0 [ 2103.815537] do_syscall_64+0x1d5/0x640 [ 2103.819403] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2103.824657] RIP: 0033:0x466459 [ 2103.827825] RSP: 002b:00007f6a11946188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2103.835522] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2103.842779] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2103.850027] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2103.857283] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2103.864533] R13: 00007ffe41ae227f R14: 00007f6a11946300 R15: 0000000000022000 [ 2103.943604] warn_alloc_show_mem: 1 callbacks suppressed [ 2103.943608] Mem-Info: [ 2103.951535] active_anon:22512 inactive_anon:32404 isolated_anon:0 [ 2103.951535] active_file:211 inactive_file:183 isolated_file:32 [ 2103.951535] unevictable:0 dirty:7 writeback:0 unstable:0 [ 2103.951535] slab_reclaimable:12536 slab_unreclaimable:113575 [ 2103.951535] mapped:27299 shmem:33545 pagetables:632 bounce:0 [ 2103.951535] free:13977 free_pcp:256 free_cma:0 [ 2103.989316] Node 0 active_anon:89260kB inactive_anon:88164kB active_file:496kB inactive_file:544kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:108732kB dirty:0kB writeback:0kB shmem:92456kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2104.021349] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2104.037006] Node 1 active_anon:788kB inactive_anon:41452kB active_file:120kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:64kB dirty:28kB writeback:0kB shmem:41724kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2104.046101] in:imklog cpuset=/ mems_allowed=0-1 [ 2104.083742] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2104.090906] CPU: 1 PID: 11616 Comm: in:imklog Not tainted 4.14.228-syzkaller #0 [ 2104.115451] lowmem_reserve[]: [ 2104.117512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2104.117517] 0 [ 2104.120611] Call Trace: [ 2104.120628] dump_stack+0x1b2/0x281 [ 2104.120641] dump_header+0x178/0x82f [ 2104.129988] 2717 [ 2104.131757] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2104.134309] 2718 [ 2104.137915] ? ___ratelimit+0x2cd/0x530 [ 2104.141617] 2718 [ 2104.143648] oom_kill_process.cold+0x10/0xb18 [ 2104.148720] 2718 [ 2104.150769] out_of_memory+0xe3e/0x1190 [ 2104.150782] ? oom_killer_disable+0x1c0/0x1c0 [ 2104.150791] ? mutex_trylock+0x152/0x1a0 [ 2104.150801] __alloc_pages_nodemask+0x23e1/0x2720 [ 2104.150821] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2104.156812] alloc_pages_current+0x155/0x260 [ 2104.161281] Node 0 [ 2104.163310] filemap_fault+0xea3/0x1980 [ 2104.167265] DMA32 free:17624kB min:36200kB low:45248kB high:54296kB active_anon:89220kB inactive_anon:88164kB active_file:204kB inactive_file:156kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7008kB pagetables:2516kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 2104.171737] ext4_filemap_fault+0x84/0xb0 [ 2104.171746] __do_fault+0xfa/0x380 [ 2104.175791] lowmem_reserve[]: [ 2104.180612] __handle_mm_fault+0x2497/0x4620 [ 2104.180622] ? vm_insert_page+0x7c0/0x7c0 [ 2104.180632] ? lock_downgrade+0x740/0x740 [ 2104.185446] 0 [ 2104.189861] handle_mm_fault+0x391/0x860 [ 2104.189873] __do_page_fault+0x549/0xad0 [ 2104.192079] 0 [ 2104.196032] ? spurious_fault+0x640/0x640 [ 2104.224296] 0 [ 2104.228409] ? do_page_fault+0x60/0x500 [ 2104.231941] 0 [ 2104.235014] ? page_fault+0x2f/0x50 [ 2104.239409] 0 [ 2104.243518] page_fault+0x45/0x50 [ 2104.243524] RIP: 1fa0:0x1f9f [ 2104.243527] RSP: 0000:000055992c7949d0 EFLAGS: 7f6da4d4cda0 [ 2104.277922] Mem-Info: [ 2104.291657] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2104.292926] syz-executor.1: [ 2104.321105] active_anon:22512 inactive_anon:32404 isolated_anon:0 [ 2104.321105] active_file:41 inactive_file:14 isolated_file:0 [ 2104.321105] unevictable:0 dirty:7 writeback:0 unstable:0 [ 2104.321105] slab_reclaimable:12536 slab_unreclaimable:113575 [ 2104.321105] mapped:26974 shmem:33545 pagetables:632 bounce:0 [ 2104.321105] free:13857 free_pcp:60 free_cma:0 [ 2104.327866] lowmem_reserve[]: [ 2104.361220] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2104.374746] 0 0 0 0 0 [ 2104.374763] Node 1 Normal free:26848kB min:53696kB low:67120kB high:80544kB active_anon:788kB inactive_anon:41452kB active_file:120kB inactive_file:0kB unevictable:0kB writepending:28kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:12kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 2104.374783] lowmem_reserve[]: [ 2104.377257] syz-executor.1 cpuset= [ 2104.412430] Node 0 active_anon:89260kB inactive_anon:88164kB active_file:44kB inactive_file:100kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:107832kB dirty:0kB writeback:0kB shmem:92456kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2104.416180] 0 [ 2104.447404] / mems_allowed=0-1 [ 2104.452603] CPU: 1 PID: 12646 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 2104.456914] 0 [ 2104.460466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2104.460471] Call Trace: [ 2104.460488] dump_stack+0x1b2/0x281 [ 2104.460500] warn_alloc.cold+0x96/0x1cc [ 2104.460510] ? zone_watermark_ok_safe+0x220/0x220 [ 2104.460521] ? usleep_range+0x130/0x130 [ 2104.462299] 0 [ 2104.471634] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2104.471645] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2104.471653] ? run_timer_softirq+0x5a0/0x5a0 [ 2104.471668] __alloc_pages_nodemask+0x2127/0x2720 [ 2104.474246] Node 1 active_anon:788kB inactive_anon:41452kB active_file:120kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:64kB dirty:28kB writeback:0kB shmem:41724kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2104.477989] ? lock_acquire+0x170/0x3f0 [ 2104.481964] Node 0 [ 2104.486775] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2104.490755] 0 [ 2104.492516] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2104.497591] 0 [ 2104.502606] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2104.502626] alloc_pages_current+0x155/0x260 [ 2104.507025] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2104.511941] ion_page_pool_alloc+0x118/0x1b0 [ 2104.511950] ion_system_heap_allocate+0x133/0x8c0 [ 2104.511961] ? _raw_spin_unlock+0x29/0x40 [ 2104.538861] Node 0 [ 2104.542795] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2104.542804] ? ion_system_contig_heap_create+0x130/0x130 [ 2104.542815] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2104.545023] DMA: [ 2104.549847] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2104.549857] ion_alloc+0x27a/0x810 [ 2104.549870] ? ion_dma_buf_release+0x40/0x40 [ 2104.551646] 13*4kB [ 2104.556117] ? __might_fault+0x177/0x1b0 [ 2104.557904] (ME) [ 2104.563337] ion_ioctl+0xea/0x1f0 [ 2104.563346] ? ion_query_heaps+0x360/0x360 [ 2104.563358] ? ion_query_heaps+0x360/0x360 [ 2104.567850] lowmem_reserve[]: [ 2104.593500] do_vfs_ioctl+0x75a/0xff0 [ 2104.593512] ? ioctl_preallocate+0x1a0/0x1a0 [ 2104.593523] ? lock_downgrade+0x740/0x740 [ 2104.598019] 13*8kB [ 2104.602852] ? __fget+0x225/0x360 [ 2104.602860] ? do_vfs_ioctl+0xff0/0xff0 [ 2104.602871] ? security_file_ioctl+0x83/0xb0 [ 2104.606991] (ME) [ 2104.609208] SyS_ioctl+0x7f/0xb0 [ 2104.609216] ? do_vfs_ioctl+0xff0/0xff0 [ 2104.609227] do_syscall_64+0x1d5/0x640 [ 2104.614128] 17*16kB [ 2104.619574] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2104.619581] RIP: 0033:0x466459 [ 2104.619588] RSP: 002b:00007f27c4f25188 EFLAGS: 00000246 [ 2104.624590] 0 [ 2104.626629] ORIG_RAX: 0000000000000010 [ 2104.626636] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2104.631493] (UME) [ 2104.634971] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2104.639373] 2717 [ 2104.641565] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2104.645591] 2718 [ 2104.647623] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2104.647629] R13: 00007ffda0b0ca7f R14: 00007f27c4f25300 R15: 0000000000022000 [ 2104.651075] 9*32kB [ 2104.720025] 2718 [ 2104.724069] (UM) [ 2104.736280] 2718 [ 2104.747348] 18*64kB [ 2104.793981] (UM) 17*128kB (UME) 3*256kB (UE) 2*512kB (UE) 3*1024kB (UME) 1*2048kB (M) 0*4096kB = 10956kB [ 2104.794946] Node 0 [ 2104.805790] Node 0 DMA32: 346*4kB (UME) 51*8kB (ME) 116*16kB (ME) 19*32kB (UME) 210*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17696kB [ 2104.818878] DMA32 free:17624kB min:36200kB low:45248kB high:54296kB active_anon:89220kB inactive_anon:88164kB active_file:64kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:6976kB pagetables:2516kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2104.825134] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2104.876662] Node 1 Normal: 134*4kB (U) 128*8kB (U) 144*16kB (U) 794*32kB (UM) 132*64kB (UM) 275*128kB (U) 1*256kB (M) 1*512kB (M) 54*1024kB (U) 29*2048kB (U) 0*4096kB = 188376kB [ 2104.885437] lowmem_reserve[]: [ 2104.897929] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2104.909886] 0 0 0 0 0 [ 2104.935900] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2104.939211] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2104.991677] lowmem_reserve[]: 0 0 0 0 0 [ 2105.005653] Node 1 Normal free:216976kB min:53696kB low:67120kB high:80544kB active_anon:788kB inactive_anon:41452kB active_file:44kB inactive_file:6480kB unevictable:0kB writepending:12kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:12kB bounce:0kB free_pcp:1272kB local_pcp:620kB free_cma:0kB [ 2105.009186] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2105.061888] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2105.071568] 35256 total pagecache pages [ 2105.075548] 0 pages in swap cache [ 2105.079016] Swap cache stats: add 0, delete 0, find 0/0 [ 2105.083482] lowmem_reserve[]: 0 0 0 0 0 [ 2105.086338] Free swap = 0kB [ 2105.091846] Total swap = 0kB [ 2105.094861] 2097051 pages RAM [ 2105.097953] 0 pages HighMem/MovableOnly [ 2105.101488] Node 0 DMA: 13*4kB (ME) 13*8kB (ME) 17*16kB (UME) 9*32kB (UM) 18*64kB (UM) 17*128kB (UME) 3*256kB (UE) 2*512kB (UE) 3*1024kB (UME) 1*2048kB (M) 0*4096kB = 10956kB [ 2105.103679] 363846 pages reserved [ 2105.128359] 0 pages cma reserved [ 2105.132723] Node 0 DMA32: 346*4kB (UME) 455*8kB (UME) 162*16kB (UME) 108*32kB (UME) 210*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24512kB [ 2105.155331] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2105.174127] Node 1 Normal: 478*4kB (UM) 67*8kB (UM) 211*16kB (UM) 1119*32kB (U) 430*64kB (UM) 560*128kB (UM) 22*256kB (U) 1*512kB (M) 55*1024kB (UM) 27*2048kB (U) 0*4096kB = 258592kB [ 2105.190706] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2105.214635] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2105.223405] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2105.242466] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2105.255479] 35700 total pagecache pages [ 2105.269215] 0 pages in swap cache [ 2105.272672] Swap cache stats: add 0, delete 0, find 0/0 [ 2105.278024] Free swap = 0kB [ 2105.283992] Total swap = 0kB [ 2105.297461] 2097051 pages RAM [ 2105.300720] 0 pages HighMem/MovableOnly [ 2105.304689] 363846 pages reserved [ 2105.308131] 0 pages cma reserved [ 2105.313971] Out of memory (oom_kill_allocating_task): Kill process 11616 (in:imklog) score 0 or sacrifice child [ 2105.336335] Killed process 11614 (rsyslogd) total-vm:254332kB, anon-rss:852kB, file-rss:0kB, shmem-rss:0kB [ 2105.363327] oom_reaper: reaped process 11614 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 06:42:46 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7ffffffd, 0x22}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x1}) 06:42:46 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000080)={0x34, 0x0, &(0x7f0000000040)}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7ffffffd, 0x22}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0x1}) 06:42:46 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x7ffffffd, 0x22}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x1}) 06:42:46 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7ffffffd, 0x22}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_DEBUGREGS(r1, 0x8080aea1, &(0x7f0000000040)) 06:42:46 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) getgid() ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10001, 0x0, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x68}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)={{0xd000, 0x0, 0x4, 0x1, 0x4, 0x3f, 0x1, 0x5, 0xec, 0x5, 0x3f, 0x4}, {0x5000, 0x2, 0xf, 0x24, 0x3, 0xe5, 0x1, 0xf7, 0x5, 0x2, 0x54, 0x5}, {0x2, 0x4, 0x8, 0x20, 0x0, 0x0, 0x5, 0xc1, 0x3, 0xfe, 0xbf, 0x1f}, {0x5000, 0x100000, 0xc, 0x6, 0xbf, 0x40, 0x2, 0x0, 0x0, 0x81, 0x3, 0x7}, {0x1000, 0x4, 0xa, 0x6, 0x7, 0x1, 0x3, 0x3, 0x4e, 0x6, 0xff, 0x9}, {0x115003, 0x5000, 0xc, 0x6, 0x3, 0x80, 0x53, 0x1, 0x1, 0x81, 0x8, 0x1}, {0x10000, 0x0, 0xe, 0x5, 0x3f, 0x20, 0x4, 0x2, 0x81, 0x9, 0xff, 0x4}, {0x10000, 0xf000, 0xc, 0x17, 0x3f, 0x6, 0x9, 0x80, 0xc1, 0x4, 0x4, 0x6}, {0x4, 0x8}, {0x1000, 0x2}, 0x89cc31ef990e837d, 0x0, 0x10000, 0x20000, 0xf, 0x0, 0x9002, [0x0, 0x0, 0x2, 0x2]}) [ 2106.623077] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2106.636640] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2106.661511] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2106.693883] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2106.731288] device bridge_slave_1 left promiscuous mode [ 2106.757494] bridge0: port 2(bridge_slave_1) entered disabled state [ 2106.786338] device bridge_slave_0 left promiscuous mode [ 2106.807753] bridge0: port 1(bridge_slave_0) entered disabled state [ 2106.828106] device veth1_macvtap left promiscuous mode [ 2106.841736] device veth0_macvtap left promiscuous mode [ 2106.856439] device veth1_vlan left promiscuous mode [ 2106.866069] device veth0_vlan left promiscuous mode [ 2107.076660] device hsr_slave_1 left promiscuous mode [ 2107.087941] device hsr_slave_0 left promiscuous mode [ 2107.126561] team0 (unregistering): Port device team_slave_1 removed [ 2107.152121] team0 (unregistering): Port device team_slave_0 removed [ 2107.182837] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2107.208327] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2107.216573] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2107.268615] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2107.268761] syz-executor.2: [ 2107.285419] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2107.315353] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2107.340057] CPU: 1 PID: 12950 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 2107.347953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2107.353481] page allocation failure: order:4 [ 2107.357335] Call Trace: [ 2107.357346] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2107.361757] dump_stack+0x1b2/0x281 [ 2107.361770] warn_alloc.cold+0x96/0x1cc [ 2107.361781] ? zone_watermark_ok_safe+0x220/0x220 [ 2107.368239] bond0 (unregistering): Released all slaves [ 2107.371450] __alloc_pages_nodemask+0x2127/0x2720 [ 2107.371468] ? lock_acquire+0x170/0x3f0 [ 2107.371485] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2107.393725] (null) [ 2107.393996] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2107.397940] syz-executor.2 cpuset= [ 2107.402764] ? __mutex_unlock_slowpath+0x75/0x770 [ 2107.402779] alloc_pages_current+0x155/0x260 [ 2107.402791] ion_page_pool_alloc+0x118/0x1b0 [ 2107.402801] ion_system_heap_allocate+0x133/0x8c0 [ 2107.402810] ? ion_alloc+0x187/0x810 [ 2107.418952] / [ 2107.423102] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2107.427486] mems_allowed=0-1 [ 2107.432304] ? ion_system_contig_heap_create+0x130/0x130 [ 2107.432312] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2107.432326] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2107.461471] ion_alloc+0x204/0x810 [ 2107.465007] ? ion_dma_buf_release+0x40/0x40 [ 2107.469408] ? __might_fault+0x177/0x1b0 [ 2107.473450] ion_ioctl+0xea/0x1f0 [ 2107.476898] ? ion_query_heaps+0x360/0x360 [ 2107.481123] ? ion_query_heaps+0x360/0x360 [ 2107.485351] do_vfs_ioctl+0x75a/0xff0 [ 2107.489143] ? ioctl_preallocate+0x1a0/0x1a0 [ 2107.493528] ? lock_downgrade+0x740/0x740 [ 2107.497667] ? __fget+0x225/0x360 [ 2107.501110] ? do_vfs_ioctl+0xff0/0xff0 [ 2107.505077] ? security_file_ioctl+0x83/0xb0 [ 2107.509473] SyS_ioctl+0x7f/0xb0 [ 2107.512828] ? do_vfs_ioctl+0xff0/0xff0 [ 2107.516793] do_syscall_64+0x1d5/0x640 [ 2107.520675] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2107.525855] RIP: 0033:0x466459 [ 2107.529031] RSP: 002b:00007f27c4f46188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2107.536720] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2107.543979] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2107.551237] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2107.558490] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2107.565746] R13: 00007ffda0b0ca7f R14: 00007f27c4f46300 R15: 0000000000022000 [ 2107.573038] CPU: 0 PID: 12947 Comm: syz-executor.2 Not tainted 4.14.228-syzkaller #0 [ 2107.581013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2107.581270] syz-executor.3 cpuset= [ 2107.590354] Call Trace: [ 2107.590373] dump_stack+0x1b2/0x281 [ 2107.590386] warn_alloc.cold+0x96/0x1cc [ 2107.590398] ? zone_watermark_ok_safe+0x220/0x220 [ 2107.590420] __alloc_pages_nodemask+0x2127/0x2720 [ 2107.590429] ? __schedule+0x893/0x1de0 [ 2107.590443] ? lock_acquire+0x170/0x3f0 [ 2107.601719] syz-executor.1 cpuset= [ 2107.604122] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2107.604141] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2107.609239] / [ 2107.613788] ? __mutex_unlock_slowpath+0x75/0x770 [ 2107.617721] / [ 2107.621604] ? __sanitizer_cov_trace_pc+0x9/0x50 [ 2107.625565] mems_allowed=0-1 [ 2107.629970] alloc_pages_current+0x155/0x260 [ 2107.629984] ion_page_pool_alloc+0x118/0x1b0 [ 2107.629994] ion_system_heap_allocate+0x133/0x8c0 [ 2107.630004] ? ion_alloc+0x187/0x810 [ 2107.630015] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2107.630023] ? ion_system_contig_heap_create+0x130/0x130 [ 2107.630032] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2107.630043] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2107.635849] mems_allowed=0-1 [ 2107.637182] ion_alloc+0x204/0x810 [ 2107.637197] ? ion_dma_buf_release+0x40/0x40 [ 2107.637211] ? __might_fault+0x177/0x1b0 [ 2107.706170] ion_ioctl+0xea/0x1f0 [ 2107.709638] ? ion_query_heaps+0x360/0x360 [ 2107.713856] ? ion_query_heaps+0x360/0x360 [ 2107.718081] do_vfs_ioctl+0x75a/0xff0 [ 2107.721877] ? ioctl_preallocate+0x1a0/0x1a0 [ 2107.726291] ? lock_downgrade+0x740/0x740 [ 2107.730437] ? __fget+0x225/0x360 [ 2107.733878] ? do_vfs_ioctl+0xff0/0xff0 [ 2107.737887] ? security_file_ioctl+0x83/0xb0 [ 2107.742285] SyS_ioctl+0x7f/0xb0 [ 2107.745643] ? do_vfs_ioctl+0xff0/0xff0 [ 2107.749615] do_syscall_64+0x1d5/0x640 [ 2107.753506] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2107.758686] RIP: 0033:0x466459 [ 2107.761879] RSP: 002b:00007fb129331188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2107.769601] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2107.776865] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2107.784119] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2107.791374] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2107.798627] R13: 00007ffd0a29ad5f R14: 00007fb129331300 R15: 0000000000022000 [ 2107.807670] CPU: 1 PID: 12951 Comm: syz-executor.3 Not tainted 4.14.228-syzkaller #0 [ 2107.815562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2107.824912] Call Trace: [ 2107.827506] dump_stack+0x1b2/0x281 [ 2107.831141] warn_alloc.cold+0x96/0x1cc [ 2107.835211] ? zone_watermark_ok_safe+0x220/0x220 [ 2107.840073] __alloc_pages_nodemask+0x2127/0x2720 [ 2107.844918] ? _raw_spin_unlock_irq+0x24/0x80 [ 2107.849414] ? lock_acquire+0x170/0x3f0 [ 2107.853389] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2107.858232] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2107.863695] ? __mutex_unlock_slowpath+0x75/0x770 [ 2107.868536] alloc_pages_current+0x155/0x260 [ 2107.872941] ion_page_pool_alloc+0x118/0x1b0 [ 2107.877342] ion_system_heap_allocate+0x133/0x8c0 [ 2107.882307] ? ion_alloc+0x187/0x810 [ 2107.886018] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2107.891464] ? ion_system_contig_heap_create+0x130/0x130 [ 2107.896910] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2107.901925] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2107.906762] ion_alloc+0x204/0x810 [ 2107.910303] ? ion_dma_buf_release+0x40/0x40 [ 2107.914707] ? __might_fault+0x177/0x1b0 [ 2107.918763] ion_ioctl+0xea/0x1f0 [ 2107.922209] ? ion_query_heaps+0x360/0x360 [ 2107.926439] ? ion_query_heaps+0x360/0x360 [ 2107.930667] do_vfs_ioctl+0x75a/0xff0 [ 2107.935025] ? ioctl_preallocate+0x1a0/0x1a0 [ 2107.939427] ? lock_downgrade+0x740/0x740 [ 2107.943574] ? __fget+0x225/0x360 [ 2107.947020] ? do_vfs_ioctl+0xff0/0xff0 [ 2107.950988] ? security_file_ioctl+0x83/0xb0 [ 2107.955412] SyS_ioctl+0x7f/0xb0 [ 2107.958776] ? do_vfs_ioctl+0xff0/0xff0 [ 2107.962750] do_syscall_64+0x1d5/0x640 [ 2107.966634] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2107.971814] RIP: 0033:0x466459 [ 2107.974992] RSP: 002b:00007f6a11946188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2107.982689] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2107.989945] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2107.997203] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2108.004464] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2108.011724] R13: 00007ffe41ae227f R14: 00007f6a11946300 R15: 0000000000022000 [ 2108.029915] CPU: 1 PID: 12953 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 2108.037805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2108.047148] Call Trace: [ 2108.049736] dump_stack+0x1b2/0x281 [ 2108.053364] warn_alloc.cold+0x96/0x1cc [ 2108.057338] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2108.062349] ? zone_watermark_ok_safe+0x220/0x220 [ 2108.067203] __alloc_pages_nodemask+0x2127/0x2720 [ 2108.072050] ? lock_acquire+0x170/0x3f0 [ 2108.076028] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2108.080883] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2108.086330] ? __mutex_unlock_slowpath+0x75/0x770 [ 2108.091174] alloc_pages_current+0x155/0x260 [ 2108.095583] ion_page_pool_alloc+0x118/0x1b0 [ 2108.099995] ion_system_heap_allocate+0x133/0x8c0 [ 2108.104840] ? ion_alloc+0x187/0x810 [ 2108.108552] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2108.114084] ? ion_system_contig_heap_create+0x130/0x130 [ 2108.119528] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2108.124544] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2108.129383] ion_alloc+0x204/0x810 [ 2108.132917] ? ion_dma_buf_release+0x40/0x40 [ 2108.136135] warn_alloc_show_mem: 1 callbacks suppressed [ 2108.136138] Mem-Info: [ 2108.137317] ? __might_fault+0x177/0x1b0 [ 2108.137330] ion_ioctl+0xea/0x1f0 [ 2108.137340] ? ion_query_heaps+0x360/0x360 [ 2108.150659] active_anon:22547 inactive_anon:32407 isolated_anon:0 [ 2108.150659] active_file:1121 inactive_file:6117 isolated_file:0 [ 2108.150659] unevictable:0 dirty:72 writeback:0 unstable:0 [ 2108.150659] slab_reclaimable:12527 slab_unreclaimable:112239 [ 2108.150659] mapped:57632 shmem:33549 pagetables:751 bounce:0 [ 2108.150659] free:216310 free_pcp:412 free_cma:0 [ 2108.152569] ? ion_query_heaps+0x360/0x360 [ 2108.152580] do_vfs_ioctl+0x75a/0xff0 [ 2108.152591] ? ioctl_preallocate+0x1a0/0x1a0 [ 2108.159157] Node 0 active_anon:89316kB inactive_anon:88176kB active_file:2164kB inactive_file:17852kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:215152kB dirty:228kB writeback:0kB shmem:92472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2108.190547] ? lock_downgrade+0x740/0x740 [ 2108.190562] ? __fget+0x225/0x360 [ 2108.190571] ? do_vfs_ioctl+0xff0/0xff0 [ 2108.190581] ? security_file_ioctl+0x83/0xb0 [ 2108.190590] SyS_ioctl+0x7f/0xb0 [ 2108.227681] Node 1 active_anon:872kB inactive_anon:41452kB active_file:2320kB inactive_file:6616kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:15376kB dirty:60kB writeback:0kB shmem:41724kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2108.231081] ? do_vfs_ioctl+0xff0/0xff0 [ 2108.231094] do_syscall_64+0x1d5/0x640 [ 2108.231108] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2108.231117] RIP: 0033:0x466459 [ 2108.238589] Node 0 [ 2108.238687] RSP: 002b:00007f27c4f25188 EFLAGS: 00000246 [ 2108.247232] DMA free:11420kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2108.250370] ORIG_RAX: 0000000000000010 [ 2108.250377] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2108.250383] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2108.250388] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2108.250393] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2108.250398] R13: 00007ffda0b0ca7f R14: 00007f27c4f25300 R15: 0000000000022000 [ 2108.409022] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2108.414307] Node 0 DMA32 free:599628kB min:36200kB low:45248kB high:54296kB active_anon:89276kB inactive_anon:88176kB active_file:2164kB inactive_file:17852kB unevictable:0kB writepending:228kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7200kB pagetables:2956kB bounce:0kB free_pcp:964kB local_pcp:308kB free_cma:0kB [ 2108.465410] lowmem_reserve[]: 0 0 0 0 0 [ 2108.471502] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2108.500127] lowmem_reserve[]: 0 0 0 0 0 [ 2108.504169] Node 1 Normal free:417992kB min:53696kB low:67120kB high:80544kB active_anon:872kB inactive_anon:41452kB active_file:2320kB inactive_file:6616kB unevictable:0kB writepending:60kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:48kB bounce:0kB free_pcp:728kB local_pcp:108kB free_cma:0kB [ 2108.536147] lowmem_reserve[]: 0 0 0 0 0 [ 2108.540711] Node 0 DMA: 90*4kB (UME) 29*8kB (UME) 12*16kB (UME) 7*32kB (M) 2*64kB (M) 7*128kB (UME) 3*256kB (UE) 1*512kB (E) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 11504kB [ 2108.558948] Node 0 DMA32: 31164*4kB (UE) 19419*8kB (UME) 9630*16kB (UME) 3919*32kB (UME) 601*64kB (UM) 20*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 600520kB [ 2108.575765] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2108.590370] Node 1 Normal: 28422*4kB (U) 10484*8kB (U) 5671*16kB (U) 2920*32kB (U) 976*64kB (U) 73*128kB (U) 28*256kB (U) 9*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 465320kB [ 2108.625067] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2108.645432] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2108.665870] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2108.686563] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2108.706539] 40685 total pagecache pages [ 2108.716158] 0 pages in swap cache [ 2108.724468] Swap cache stats: add 0, delete 0, find 0/0 [ 2108.737080] Free swap = 0kB [ 2108.744716] Total swap = 0kB [ 2108.752772] 2097051 pages RAM [ 2108.763308] 0 pages HighMem/MovableOnly [ 2108.772678] 363846 pages reserved [ 2108.781012] 0 pages cma reserved [ 2109.328811] Bluetooth: hci0 command 0x0409 tx timeout [ 2110.012973] IPVS: ftp: loaded support on port[0] = 21 [ 2110.228306] chnl_net:caif_netlink_parms(): no params data found [ 2110.400835] IPVS: ftp: loaded support on port[0] = 21 [ 2110.513294] bridge0: port 1(bridge_slave_0) entered blocking state [ 2110.520755] bridge0: port 1(bridge_slave_0) entered disabled state [ 2110.538693] device bridge_slave_0 entered promiscuous mode [ 2110.559964] bridge0: port 2(bridge_slave_1) entered blocking state [ 2110.566365] bridge0: port 2(bridge_slave_1) entered disabled state [ 2110.589667] device bridge_slave_1 entered promiscuous mode 06:42:50 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000080)={0x34, 0x0, &(0x7f0000000040)}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7ffffffd, 0x22}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0x1}) [ 2110.670830] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2110.701250] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2110.756635] IPVS: ftp: loaded support on port[0] = 21 [ 2110.782017] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2110.800444] team0: Port device team_slave_0 added [ 2110.817106] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2110.841908] team0: Port device team_slave_1 added [ 2111.049933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2111.056199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2111.103552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2111.225480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2111.235227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2111.338432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2111.408617] Bluetooth: hci0 command 0x041b tx timeout [ 2111.447156] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2111.460492] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2111.544322] chnl_net:caif_netlink_parms(): no params data found [ 2111.676919] device hsr_slave_0 entered promiscuous mode [ 2111.683626] device hsr_slave_1 entered promiscuous mode [ 2111.814972] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2111.824394] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2112.211320] chnl_net:caif_netlink_parms(): no params data found [ 2112.438536] Bluetooth: hci5 command 0x0409 tx timeout [ 2112.443856] Bluetooth: hci4 command 0x0409 tx timeout [ 2112.493089] bridge0: port 1(bridge_slave_0) entered blocking state [ 2112.517757] bridge0: port 1(bridge_slave_0) entered disabled state [ 2112.541795] device bridge_slave_0 entered promiscuous mode [ 2112.639373] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2112.655203] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2112.662374] CPU: 0 PID: 13140 Comm: syz-executor.3 Not tainted 4.14.228-syzkaller #0 [ 2112.670257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2112.679610] Call Trace: [ 2112.682193] dump_stack+0x1b2/0x281 [ 2112.685811] warn_alloc.cold+0x96/0x1cc [ 2112.689781] ? zone_watermark_ok_safe+0x220/0x220 [ 2112.694630] __alloc_pages_nodemask+0x2127/0x2720 [ 2112.699471] ? _raw_spin_unlock_irq+0x24/0x80 [ 2112.703968] ? lock_acquire+0x170/0x3f0 [ 2112.708015] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2112.712838] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2112.718265] ? __mutex_unlock_slowpath+0x75/0x770 [ 2112.723105] alloc_pages_current+0x155/0x260 [ 2112.727494] ion_page_pool_alloc+0x118/0x1b0 [ 2112.731882] ion_system_heap_allocate+0x133/0x8c0 [ 2112.736717] ? ion_alloc+0x187/0x810 [ 2112.740410] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2112.745836] ? ion_system_contig_heap_create+0x130/0x130 [ 2112.751280] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2112.756276] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2112.761116] ion_alloc+0x204/0x810 [ 2112.764639] ? ion_dma_buf_release+0x40/0x40 [ 2112.769029] ? __might_fault+0x177/0x1b0 [ 2112.773070] ion_ioctl+0xea/0x1f0 [ 2112.776504] ? ion_query_heaps+0x360/0x360 [ 2112.780718] ? ion_query_heaps+0x360/0x360 [ 2112.784959] do_vfs_ioctl+0x75a/0xff0 [ 2112.788742] ? ioctl_preallocate+0x1a0/0x1a0 [ 2112.793127] ? lock_downgrade+0x740/0x740 [ 2112.797250] ? __fget+0x225/0x360 [ 2112.800693] ? do_vfs_ioctl+0xff0/0xff0 [ 2112.804648] ? security_file_ioctl+0x83/0xb0 [ 2112.809034] SyS_ioctl+0x7f/0xb0 [ 2112.812390] ? do_vfs_ioctl+0xff0/0xff0 [ 2112.816340] do_syscall_64+0x1d5/0x640 [ 2112.820227] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2112.825408] RIP: 0033:0x466459 [ 2112.828574] RSP: 002b:00007f6a11946188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2112.836277] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2112.843537] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2112.850794] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2112.858040] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2112.865289] R13: 00007ffe41ae227f R14: 00007f6a11946300 R15: 0000000000022000 [ 2112.916320] warn_alloc_show_mem: 3 callbacks suppressed [ 2112.916323] Mem-Info: [ 2112.948796] active_anon:22679 inactive_anon:32413 isolated_anon:0 [ 2112.948796] active_file:449 inactive_file:1105 isolated_file:32 [ 2112.948796] unevictable:0 dirty:7 writeback:0 unstable:0 [ 2112.948796] slab_reclaimable:12521 slab_unreclaimable:114233 [ 2112.948796] mapped:54402 shmem:33557 pagetables:791 bounce:0 [ 2112.948796] free:26512 free_pcp:208 free_cma:0 [ 2113.000958] bridge0: port 2(bridge_slave_1) entered blocking state [ 2113.026422] bridge0: port 2(bridge_slave_1) entered disabled state [ 2113.075814] device bridge_slave_1 entered promiscuous mode [ 2113.085387] Node 0 active_anon:89508kB inactive_anon:88176kB active_file:1528kB inactive_file:1556kB unevictable:0kB isolated(anon):0kB isolated(file):108kB mapped:207004kB dirty:24kB writeback:0kB shmem:92472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2113.132215] Node 1 active_anon:1208kB inactive_anon:41476kB active_file:16kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8204kB dirty:4kB writeback:0kB shmem:41756kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2113.243983] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2113.277064] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2113.285668] Node 0 DMA free:11108kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:124kB inactive_file:48kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2113.322295] bridge0: port 1(bridge_slave_0) entered blocking state [ 2113.336291] bridge0: port 1(bridge_slave_0) entered disabled state [ 2113.358238] device bridge_slave_0 entered promiscuous mode [ 2113.403185] bridge0: port 2(bridge_slave_1) entered blocking state [ 2113.423018] bridge0: port 2(bridge_slave_1) entered disabled state [ 2113.432937] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2113.453844] Node 0 DMA32 free:35796kB min:36200kB low:45248kB high:54296kB active_anon:89468kB inactive_anon:88176kB active_file:76kB inactive_file:392kB unevictable:0kB writepending:24kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7168kB pagetables:3016kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2113.476895] device bridge_slave_1 entered promiscuous mode [ 2113.482928] Bluetooth: hci0 command 0x040f tx timeout [ 2113.595335] lowmem_reserve[]: 0 0 0 0 0 [ 2113.617128] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2113.674797] oom_reaper: reaped process 12953 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2113.740383] syz-executor.5 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2113.748317] lowmem_reserve[]: 0 0 0 0 0 [ 2113.757302] Node 1 Normal free:29332kB min:53696kB low:67120kB high:80544kB active_anon:1208kB inactive_anon:41476kB active_file:28kB inactive_file:0kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:768kB pagetables:148kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 2113.782205] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2113.813696] CPU: 1 PID: 12969 Comm: syz-executor.5 Not tainted 4.14.228-syzkaller #0 [ 2113.821584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2113.830923] Call Trace: [ 2113.832232] lowmem_reserve[]: 0 [ 2113.833501] dump_stack+0x1b2/0x281 [ 2113.833505] 0 [ 2113.836790] dump_header+0x178/0x82f [ 2113.840418] 0 [ 2113.842187] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2113.852606] 0 0 [ 2113.852734] ? ___ratelimit+0x2cd/0x530 [ 2113.852746] oom_kill_process.cold+0x10/0xb18 [ 2113.858677] out_of_memory+0xe3e/0x1190 [ 2113.858689] ? oom_killer_disable+0x1c0/0x1c0 [ 2113.858698] ? mutex_trylock+0x152/0x1a0 [ 2113.863163] Node 0 [ 2113.867270] __alloc_pages_nodemask+0x23e1/0x2720 [ 2113.871769] DMA: [ 2113.875805] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2113.878008] 94*4kB [ 2113.882849] alloc_pages_current+0x155/0x260 [ 2113.882859] filemap_fault+0xea3/0x1980 [ 2113.884906] (UME) [ 2113.889736] ext4_filemap_fault+0x84/0xb0 [ 2113.889746] __do_fault+0xfa/0x380 [ 2113.891956] 14*8kB [ 2113.896363] __handle_mm_fault+0x2497/0x4620 [ 2113.900324] (ME) [ 2113.902441] ? vm_insert_page+0x7c0/0x7c0 [ 2113.906557] 13*16kB [ 2113.910075] ? task_work_run+0xfd/0x190 [ 2113.910092] handle_mm_fault+0x391/0x860 [ 2113.912319] (UME) [ 2113.916703] __do_page_fault+0x549/0xad0 [ 2113.918751] 6*32kB [ 2113.922863] ? spurious_fault+0x640/0x640 [ 2113.925152] (M) [ 2113.929103] ? do_page_fault+0x60/0x500 [ 2113.929110] ? page_fault+0x2f/0x50 [ 2113.929119] page_fault+0x45/0x50 [ 2113.933150] 2*64kB [ 2113.935276] RIP: 14a4370:0x3 [ 2113.939340] (M) [ 2113.941538] RSP: 14a4320:0000000000000000 EFLAGS: 00000000 [ 2113.974316] syz-executor.1: [ 2113.978336] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2113.986957] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2114.015666] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2114.030028] 4*128kB (ME) 3*256kB (UE) 1*512kB (E) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 11000kB [ 2114.035888] CPU: 1 PID: 12950 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 2114.039819] syz-executor.1 cpuset= [ 2114.047618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2114.047623] / [ 2114.051222] Call Trace: [ 2114.060575] Node 0 [ 2114.062258] dump_stack+0x1b2/0x281 [ 2114.064806] DMA32: [ 2114.067027] warn_alloc.cold+0x96/0x1cc [ 2114.070654] 368*4kB [ 2114.072857] ? zone_watermark_ok_safe+0x220/0x220 [ 2114.076798] (UME) [ 2114.079102] ? usleep_range+0x130/0x130 [ 2114.079110] ? try_to_free_pages+0x23f/0x6e0 [ 2114.079121] ? _find_next_bit+0xdb/0x100 [ 2114.084046] mems_allowed=0-1 [ 2114.086170] ? run_timer_softirq+0x5a0/0x5a0 [ 2114.090134] 129*8kB [ 2114.094507] __alloc_pages_nodemask+0x2127/0x2720 [ 2114.108267] (UME) [ 2114.108411] ? lock_acquire+0x170/0x3f0 [ 2114.113218] 140*16kB [ 2114.115351] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2114.126492] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2114.128265] (UME) 31*32kB [ 2114.130986] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2114.130987] (UME) 190*64kB [ 2114.133822] alloc_pages_current+0x155/0x260 [ 2114.146525] ion_page_pool_alloc+0x118/0x1b0 [ 2114.148264] (UM) 1*128kB [ 2114.150910] ion_system_heap_allocate+0x133/0x8c0 [ 2114.150919] ? ion_alloc+0x187/0x810 [ 2114.153734] (M) [ 2114.158556] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2114.158566] ? ion_system_contig_heap_create+0x130/0x130 [ 2114.158577] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2114.178261] 0*256kB [ 2114.180059] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2114.180061] 0*512kB 0*1024kB [ 2114.182371] ion_alloc+0x204/0x810 [ 2114.187182] 0*2048kB [ 2114.190272] ? ion_dma_buf_release+0x40/0x40 [ 2114.190285] ? __might_fault+0x177/0x1b0 [ 2114.204583] ion_ioctl+0xea/0x1f0 [ 2114.208013] ? ion_query_heaps+0x360/0x360 [ 2114.208260] 0*4096kB = 18024kB [ 2114.212229] ? ion_query_heaps+0x360/0x360 [ 2114.212238] do_vfs_ioctl+0x75a/0xff0 [ 2114.215407] Node 0 [ 2114.219624] ? ioctl_preallocate+0x1a0/0x1a0 [ 2114.219632] ? lock_downgrade+0x740/0x740 [ 2114.219645] ? __fget+0x225/0x360 [ 2114.237567] ? do_vfs_ioctl+0xff0/0xff0 [ 2114.238255] Normal: [ 2114.241518] ? security_file_ioctl+0x83/0xb0 [ 2114.241520] 0*4kB 0*8kB [ 2114.243824] SyS_ioctl+0x7f/0xb0 [ 2114.243829] ? do_vfs_ioctl+0xff0/0xff0 [ 2114.243837] do_syscall_64+0x1d5/0x640 [ 2114.243848] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2114.243855] RIP: 0033:0x466459 [ 2114.243859] RSP: 002b:00007f27c4f46188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2114.243866] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2114.243873] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2114.258260] Mem-Info: [ 2114.262076] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2114.262083] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2114.267267] active_anon:22653 inactive_anon:32413 isolated_anon:0 [ 2114.267267] active_file:9 inactive_file:20 isolated_file:0 [ 2114.267267] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2114.267267] slab_reclaimable:12521 slab_unreclaimable:114107 [ 2114.267267] mapped:53124 shmem:33557 pagetables:791 bounce:0 [ 2114.267267] free:13934 free_pcp:101 free_cma:0 [ 2114.267282] Node 0 active_anon:89404kB inactive_anon:88176kB active_file:36kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:204304kB dirty:0kB writeback:0kB shmem:92472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2114.270440] R13: 00007ffda0b0ca7f R14: 00007f27c4f46300 R15: 0000000000022000 [ 2114.384274] Mem-Info: [ 2114.386826] active_anon:22653 inactive_anon:32413 isolated_anon:0 [ 2114.386826] active_file:34 inactive_file:0 isolated_file:0 [ 2114.386826] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2114.386826] slab_reclaimable:12521 slab_unreclaimable:114107 [ 2114.386826] mapped:53124 shmem:33557 pagetables:791 bounce:0 [ 2114.386826] free:13934 free_pcp:101 free_cma:0 [ 2114.388856] 0*16kB [ 2114.423809] CPU: 0 PID: 12953 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 2114.433903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2114.443243] Call Trace: [ 2114.445829] dump_stack+0x1b2/0x281 [ 2114.446263] Node 0 active_anon:89404kB inactive_anon:88176kB active_file:136kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:204304kB dirty:0kB writeback:0kB shmem:92472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2114.449491] warn_alloc.cold+0x96/0x1cc [ 2114.449503] ? zone_watermark_ok_safe+0x220/0x220 [ 2114.449512] ? usleep_range+0x130/0x130 [ 2114.449520] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2114.449532] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2114.500120] ? run_timer_softirq+0x5a0/0x5a0 [ 2114.504561] __alloc_pages_nodemask+0x2127/0x2720 [ 2114.509400] ? lock_acquire+0x170/0x3f0 [ 2114.513368] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2114.518208] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2114.522701] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2114.528152] alloc_pages_current+0x155/0x260 [ 2114.532566] ion_page_pool_alloc+0x118/0x1b0 [ 2114.536975] ion_system_heap_allocate+0x133/0x8c0 [ 2114.541811] ? ion_alloc+0x187/0x810 [ 2114.545518] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2114.550959] ? ion_system_contig_heap_create+0x130/0x130 [ 2114.556398] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2114.561407] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2114.564868] Node 1 active_anon:1208kB inactive_anon:41476kB active_file:0kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8192kB dirty:0kB writeback:0kB shmem:41756kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2114.566235] ion_alloc+0x204/0x810 [ 2114.596716] ? ion_dma_buf_release+0x40/0x40 [ 2114.601131] ? __might_fault+0x177/0x1b0 [ 2114.605187] ion_ioctl+0xea/0x1f0 [ 2114.608631] ? ion_query_heaps+0x360/0x360 [ 2114.612857] ? ion_query_heaps+0x360/0x360 [ 2114.617087] do_vfs_ioctl+0x75a/0xff0 [ 2114.620881] ? ioctl_preallocate+0x1a0/0x1a0 [ 2114.625277] ? lock_downgrade+0x740/0x740 [ 2114.629421] ? __fget+0x225/0x360 [ 2114.632866] ? do_vfs_ioctl+0xff0/0xff0 [ 2114.636831] ? security_file_ioctl+0x83/0xb0 [ 2114.641235] SyS_ioctl+0x7f/0xb0 [ 2114.644587] ? do_vfs_ioctl+0xff0/0xff0 [ 2114.648552] do_syscall_64+0x1d5/0x640 [ 2114.652444] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2114.657647] RIP: 0033:0x466459 [ 2114.660825] RSP: 002b:00007f27c4f25188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2114.668525] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2114.673444] Node 0 [ 2114.675780] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2114.675797] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2114.678000] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2114.718270] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2114.719907] lowmem_reserve[]: [ 2114.725825] R13: 00007ffda0b0ca7f R14: 00007f27c4f25300 R15: 0000000000022000 [ 2114.725831] 0 [ 2114.731060] Bluetooth: hci4 command 0x041b tx timeout [ 2114.753601] 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2114.763824] Node 1 Normal: 86*4kB (ME) 58*8kB (UME) 41*16kB (UME) 19*32kB (ME) 32*64kB (UME) 11*128kB (UME) 11*256kB (UME) 8*512kB (UME) 4*1024kB (UME) 5*2048kB (UE) 0*4096kB = 26776kB [ 2114.766691] 2717 [ 2114.788501] Bluetooth: hci5 command 0x041b tx timeout [ 2114.796401] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2114.811497] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2114.823817] 2718 2718 2718 [ 2114.824712] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2114.826757] Node 0 [ 2114.844144] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2114.855058] DMA32 free:18024kB min:36200kB low:45248kB high:54296kB active_anon:89364kB inactive_anon:88176kB active_file:44kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7168kB pagetables:3016kB bounce:0kB free_pcp:160kB local_pcp:36kB free_cma:0kB [ 2114.857147] 33586 total pagecache pages [ 2114.895319] 0 pages in swap cache [ 2114.898903] Swap cache stats: add 0, delete 0, find 0/0 [ 2114.904452] Free swap = 0kB [ 2114.907462] Total swap = 0kB [ 2114.918079] 2097051 pages RAM [ 2114.924544] 0 pages HighMem/MovableOnly [ 2114.940594] 363846 pages reserved [ 2114.941950] Node 1 active_anon:1208kB inactive_anon:41476kB active_file:24kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8192kB dirty:0kB writeback:0kB shmem:41756kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2114.944042] 0 pages cma reserved [ 2114.976333] lowmem_reserve[]: 0 0 0 0 0 [ 2114.980355] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2115.008633] lowmem_reserve[]: 0 0 0 0 0 [ 2115.012632] Node 1 Normal free:31256kB min:53696kB low:67120kB high:80544kB active_anon:1208kB inactive_anon:41476kB active_file:24kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:608kB pagetables:148kB bounce:0kB free_pcp:244kB local_pcp:120kB free_cma:0kB [ 2115.013604] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2115.128199] lowmem_reserve[]: 0 0 0 0 0 [ 2115.131357] lowmem_reserve[]: [ 2115.132205] Node 0 [ 2115.132207] 0 2717 [ 2115.135289] DMA: [ 2115.137506] 2718 [ 2115.171913] 84*4kB (UME) 14*8kB (ME) 13*16kB (UME) 6*32kB (M) 2*64kB (M) 4*128kB (ME) 3*256kB (UE) 1*512kB (E) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 10960kB [ 2115.194269] 2718 2718 [ 2115.202709] Node 0 DMA32: 7706*4kB (UME) 15017*8kB (UE) 1163*16kB (UE) 277*32kB (UE) 368*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 201984kB [ 2115.202818] Node 0 [ 2115.217428] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2115.217473] Node 1 Normal: 561*4kB (UME) 300*8kB (UME) 136*16kB (UME) 97*32kB (UME) 115*64kB (UME) 19*128kB (UME) 18*256kB (UME) 10*512kB (UME) 4*1024kB (UME) 5*2048kB (UE) 0*4096kB = 43780kB [ 2115.292551] DMA32 free:220856kB min:36200kB low:45248kB high:54296kB active_anon:89364kB inactive_anon:88176kB active_file:1624kB inactive_file:1696kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7168kB pagetables:3016kB bounce:0kB free_pcp:1456kB local_pcp:504kB free_cma:0kB [ 2115.358232] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2115.367086] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2115.391126] lowmem_reserve[]: 0 0 0 0 0 [ 2115.408383] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2115.428181] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2115.451962] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2115.469553] lowmem_reserve[]: 0 0 0 0 0 [ 2115.473954] Node 1 Normal free:43656kB min:53696kB low:67120kB high:80544kB active_anon:1208kB inactive_anon:41476kB active_file:24kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:608kB pagetables:148kB bounce:0kB free_pcp:1392kB local_pcp:656kB free_cma:0kB [ 2115.512413] 34706 total pagecache pages [ 2115.516497] 0 pages in swap cache [ 2115.548179] lowmem_reserve[]: 0 0 0 0 0 [ 2115.552835] Node 0 DMA: 84*4kB (UME) 14*8kB (ME) 13*16kB (UME) 6*32kB (M) 2*64kB (M) 4*128kB (ME) 3*256kB (UE) 1*512kB (E) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 10960kB [ 2115.555777] Swap cache stats: add 0, delete 0, find 0/0 [ 2115.569922] Bluetooth: hci0 command 0x0419 tx timeout [ 2115.578164] Free swap = 0kB [ 2115.581904] Total swap = 0kB [ 2115.588211] 2097051 pages RAM [ 2115.598585] 0 pages HighMem/MovableOnly [ 2115.601691] Node 0 [ 2115.602571] 363846 pages reserved [ 2115.602577] DMA32: [ 2115.604784] 0 pages cma reserved [ 2115.608486] 244*4kB (ME) 10543*8kB (UME) 1394*16kB (UE) 511*32kB (UME) 477*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 154504kB [ 2115.678175] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2115.702058] Node 1 Normal: 780*4kB (UME) 308*8kB (UME) 141*16kB (UME) 98*32kB (UME) 116*64kB (UME) 19*128kB (UME) 18*256kB (UME) 10*512kB (UME) 102*1024kB (UME) 12*2048kB (UE) 0*4096kB = 159584kB [ 2115.725253] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2115.744004] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2115.765735] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2115.810237] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2115.868557] 35655 total pagecache pages [ 2115.874616] 0 pages in swap cache [ 2115.898175] Swap cache stats: add 0, delete 0, find 0/0 [ 2115.903779] Free swap = 0kB [ 2115.913771] Total swap = 0kB [ 2115.929692] 2097051 pages RAM [ 2115.938748] 0 pages HighMem/MovableOnly [ 2115.942731] 363846 pages reserved [ 2115.946172] 0 pages cma reserved [ 2115.968128] Out of memory (oom_kill_allocating_task): Kill process 12969 (syz-executor.5) score 0 or sacrifice child [ 2115.998153] Killed process 12969 (syz-executor.5) total-vm:93120kB, anon-rss:76kB, file-rss:32568kB, shmem-rss:0kB [ 2116.034446] oom_reaper: reaped process 12969 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2116.214086] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2116.243380] team0: Port device team_slave_0 added [ 2116.271579] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2116.284162] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2116.297533] team0: Port device team_slave_1 added [ 2116.396107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2116.407211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2116.418004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2116.473843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2116.501662] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 06:42:56 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000080)={0x34, 0x0, &(0x7f0000000040)}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7ffffffd, 0x22}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0x1}) [ 2116.519339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2116.526148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2116.598064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2116.643756] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2116.667851] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2116.688414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2116.695626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2116.746320] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2116.803844] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2116.826807] 8021q: adding VLAN 0 to HW filter on device team0 [ 2116.838725] Bluetooth: hci4 command 0x040f tx timeout [ 2116.878688] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2116.919145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2116.933540] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2116.967646] bridge0: port 1(bridge_slave_0) entered blocking state [ 2116.974065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2117.029444] device hsr_slave_0 entered promiscuous mode [ 2117.047492] device hsr_slave_1 entered promiscuous mode 06:42:56 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000080)={0x34, 0x0, &(0x7f0000000040)}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7ffffffd, 0x22}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0x1}) [ 2117.075131] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2117.095815] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2117.106846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2117.134632] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2117.171362] bridge0: port 2(bridge_slave_1) entered blocking state [ 2117.177869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2117.222953] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2117.234257] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2117.256049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2117.271860] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2117.287281] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2117.314419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2117.359524] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2117.369340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2117.396937] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2117.439526] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2117.475657] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2117.504242] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2117.521092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2117.541612] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2117.578797] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2117.595111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2117.609635] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2117.622306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2117.629495] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2117.634617] CPU: 1 PID: 12950 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 2117.642499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2117.643576] syz-executor.2 cpuset= [ 2117.651836] Call Trace: [ 2117.651854] dump_stack+0x1b2/0x281 [ 2117.651867] warn_alloc.cold+0x96/0x1cc [ 2117.651877] ? zone_watermark_ok_safe+0x220/0x220 [ 2117.651895] __alloc_pages_nodemask+0x2127/0x2720 [ 2117.675219] ? lock_acquire+0x170/0x3f0 [ 2117.675756] / [ 2117.679190] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2117.685732] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2117.685805] mems_allowed=0-1 [ 2117.691177] ? __mutex_unlock_slowpath+0x75/0x770 [ 2117.691192] alloc_pages_current+0x155/0x260 [ 2117.691205] ion_page_pool_alloc+0x118/0x1b0 [ 2117.691214] ion_system_heap_allocate+0x133/0x8c0 [ 2117.712762] ? _raw_spin_unlock+0x29/0x40 [ 2117.716894] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2117.721828] ? ion_system_contig_heap_create+0x130/0x130 [ 2117.727280] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2117.732289] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2117.737124] ion_alloc+0x27a/0x810 [ 2117.740658] ? ion_dma_buf_release+0x40/0x40 [ 2117.745080] ? __might_fault+0x177/0x1b0 [ 2117.749141] ion_ioctl+0xea/0x1f0 [ 2117.752578] ? ion_query_heaps+0x360/0x360 [ 2117.756818] ? ion_query_heaps+0x360/0x360 [ 2117.761064] do_vfs_ioctl+0x75a/0xff0 [ 2117.764870] ? ioctl_preallocate+0x1a0/0x1a0 [ 2117.769276] ? lock_downgrade+0x740/0x740 [ 2117.773419] ? __fget+0x225/0x360 [ 2117.776860] ? do_vfs_ioctl+0xff0/0xff0 [ 2117.780972] ? security_file_ioctl+0x83/0xb0 [ 2117.785388] SyS_ioctl+0x7f/0xb0 [ 2117.788823] ? do_vfs_ioctl+0xff0/0xff0 [ 2117.792785] do_syscall_64+0x1d5/0x640 [ 2117.796673] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2117.801856] RIP: 0033:0x466459 [ 2117.805036] RSP: 002b:00007f27c4f46188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2117.812731] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2117.819996] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2117.827261] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2117.834514] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2117.841791] R13: 00007ffda0b0ca7f R14: 00007f27c4f46300 R15: 0000000000022000 [ 2117.849077] CPU: 0 PID: 13458 Comm: syz-executor.2 Not tainted 4.14.228-syzkaller #0 [ 2117.856973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2117.866318] Call Trace: [ 2117.868908] dump_stack+0x1b2/0x281 [ 2117.872540] warn_alloc.cold+0x96/0x1cc [ 2117.876513] ? zone_watermark_ok_safe+0x220/0x220 [ 2117.881379] __alloc_pages_nodemask+0x2127/0x2720 [ 2117.883430] warn_alloc_show_mem: 1 callbacks suppressed [ 2117.883433] Mem-Info: [ 2117.886215] ? __schedule+0x893/0x1de0 [ 2117.892811] active_anon:22592 inactive_anon:32409 isolated_anon:0 [ 2117.892811] active_file:1468 inactive_file:5039 isolated_file:16 [ 2117.892811] unevictable:0 dirty:28 writeback:0 unstable:0 [ 2117.892811] slab_reclaimable:12508 slab_unreclaimable:115590 [ 2117.892811] mapped:48877 shmem:33553 pagetables:726 bounce:0 [ 2117.892811] free:154406 free_pcp:29 free_cma:0 [ 2117.893947] ? lock_acquire+0x170/0x3f0 [ 2117.897832] Node 0 active_anon:89444kB inactive_anon:88176kB active_file:5872kB inactive_file:20144kB unevictable:0kB isolated(anon):0kB isolated(file):64kB mapped:187316kB dirty:108kB writeback:0kB shmem:92476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2117.931565] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2117.931580] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2117.931591] ? __mutex_unlock_slowpath+0x75/0x770 [ 2117.931605] alloc_pages_current+0x155/0x260 [ 2117.931616] ion_page_pool_alloc+0x118/0x1b0 [ 2117.931624] ion_system_heap_allocate+0x133/0x8c0 [ 2117.931632] ? ion_alloc+0x187/0x810 [ 2117.931642] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2117.935799] Node 1 active_anon:924kB inactive_anon:41460kB active_file:0kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8192kB dirty:4kB writeback:0kB shmem:41736kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2117.963761] ? ion_system_contig_heap_create+0x130/0x130 [ 2117.963782] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2117.963792] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2117.963802] ion_alloc+0x204/0x810 [ 2117.963815] ? ion_dma_buf_release+0x40/0x40 [ 2117.963827] ? __might_fault+0x177/0x1b0 [ 2117.963837] ion_ioctl+0xea/0x1f0 [ 2117.963844] ? ion_query_heaps+0x360/0x360 [ 2117.963856] ? ion_query_heaps+0x360/0x360 [ 2117.963864] do_vfs_ioctl+0x75a/0xff0 [ 2117.963876] ? ioctl_preallocate+0x1a0/0x1a0 [ 2117.963884] ? lock_downgrade+0x740/0x740 [ 2117.963896] ? __fget+0x225/0x360 [ 2117.963905] ? do_vfs_ioctl+0xff0/0xff0 [ 2117.963916] ? security_file_ioctl+0x83/0xb0 [ 2117.963926] SyS_ioctl+0x7f/0xb0 [ 2117.963932] ? do_vfs_ioctl+0xff0/0xff0 [ 2117.963942] do_syscall_64+0x1d5/0x640 [ 2117.963955] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2117.963974] RIP: 0033:0x466459 [ 2117.963979] RSP: 002b:00007fb129331188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2117.963987] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2117.963991] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2117.963995] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2117.963999] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2117.964004] R13: 00007ffd0a29ad5f R14: 00007fb129331300 R15: 0000000000022000 [ 2118.058599] syz-executor.1: [ 2118.062597] Node 0 [ 2118.065961] syz-executor.3: [ 2118.068664] DMA free:11028kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2118.068667] lowmem_reserve[]: 0 [ 2118.074248] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2118.094967] page allocation failure: order:4 [ 2118.097190] 2717 [ 2118.110619] page allocation failure: order:4 [ 2118.116913] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2118.136107] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2118.151852] 2718 [ 2118.167839] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2118.196887] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2118.215092] (null) [ 2118.247330] 2718 2718 [ 2118.253809] Node 0 DMA32 free:359028kB min:36200kB low:45248kB high:54296kB active_anon:89324kB inactive_anon:88180kB active_file:5896kB inactive_file:20272kB unevictable:0kB writepending:148kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7328kB pagetables:2940kB bounce:0kB free_pcp:852kB local_pcp:160kB free_cma:0kB [ 2118.270260] (null) [ 2118.298750] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2118.299283] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2118.320229] device bridge_slave_1 left promiscuous mode [ 2118.323398] CPU: 0 PID: 12953 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 2118.325751] bridge0: port 2(bridge_slave_1) entered disabled state [ 2118.333464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2118.333468] Call Trace: [ 2118.333482] dump_stack+0x1b2/0x281 [ 2118.333496] warn_alloc.cold+0x96/0x1cc [ 2118.333506] ? zone_watermark_ok_safe+0x220/0x220 [ 2118.333526] __alloc_pages_nodemask+0x2127/0x2720 [ 2118.343380] syz-executor.3 cpuset= [ 2118.349182] ? lock_acquire+0x170/0x3f0 [ 2118.349198] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2118.349214] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2118.349226] ? __mutex_unlock_slowpath+0x75/0x770 [ 2118.361588] / [ 2118.364219] ? alloc_pages_current+0x21c/0x260 [ 2118.374707] mems_allowed=0-1 [ 2118.376651] alloc_pages_current+0x155/0x260 [ 2118.384775] lowmem_reserve[]: [ 2118.386924] ion_page_pool_alloc+0x118/0x1b0 [ 2118.401699] 0 [ 2118.405474] ion_system_heap_allocate+0x133/0x8c0 [ 2118.419531] ? _raw_spin_unlock+0x29/0x40 [ 2118.421171] 0 [ 2118.423669] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2118.423671] 0 0 [ 2118.425456] ? ion_system_contig_heap_create+0x130/0x130 [ 2118.437846] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2118.441475] 0 [ 2118.442860] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2118.442872] ion_alloc+0x27a/0x810 [ 2118.444653] Node 0 [ 2118.449606] ? ion_dma_buf_release+0x40/0x40 [ 2118.449617] ? __might_fault+0x177/0x1b0 [ 2118.449628] ion_ioctl+0xea/0x1f0 [ 2118.449636] ? ion_query_heaps+0x360/0x360 [ 2118.449647] ? ion_query_heaps+0x360/0x360 [ 2118.449657] do_vfs_ioctl+0x75a/0xff0 [ 2118.467895] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2118.471486] ? ioctl_preallocate+0x1a0/0x1a0 [ 2118.475693] lowmem_reserve[]: [ 2118.479474] ? lock_downgrade+0x740/0x740 [ 2118.479487] ? __fget+0x225/0x360 [ 2118.479496] ? do_vfs_ioctl+0xff0/0xff0 [ 2118.479507] ? security_file_ioctl+0x83/0xb0 [ 2118.479517] SyS_ioctl+0x7f/0xb0 [ 2118.479525] ? do_vfs_ioctl+0xff0/0xff0 [ 2118.479537] do_syscall_64+0x1d5/0x640 [ 2118.479551] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2118.479559] RIP: 0033:0x466459 [ 2118.479563] RSP: 002b:00007f27c4f25188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2118.555251] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2118.562509] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2118.569771] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2118.577050] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2118.584303] R13: 00007ffda0b0ca7f R14: 00007f27c4f25300 R15: 0000000000022000 [ 2118.588419] 0 0 0 0 0 [ 2118.596289] device bridge_slave_0 left promiscuous mode [ 2118.604785] CPU: 1 PID: 13471 Comm: syz-executor.3 Not tainted 4.14.228-syzkaller #0 [ 2118.612664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2118.622123] Call Trace: [ 2118.624709] dump_stack+0x1b2/0x281 [ 2118.628416] warn_alloc.cold+0x96/0x1cc [ 2118.632388] ? zone_watermark_ok_safe+0x220/0x220 [ 2118.637234] __alloc_pages_nodemask+0x2127/0x2720 [ 2118.642069] ? finish_task_switch+0x178/0x610 [ 2118.646556] ? switch_mm_irqs_off+0x601/0xeb0 [ 2118.652700] ? lock_acquire+0x170/0x3f0 [ 2118.656671] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2118.661516] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2118.666967] ? __mutex_unlock_slowpath+0x75/0x770 [ 2118.671808] alloc_pages_current+0x155/0x260 [ 2118.676217] ion_page_pool_alloc+0x118/0x1b0 [ 2118.680621] ion_system_heap_allocate+0x133/0x8c0 [ 2118.685459] ? ion_alloc+0x187/0x810 [ 2118.689166] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2118.694603] ? ion_system_contig_heap_create+0x130/0x130 [ 2118.700044] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2118.705073] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2118.709919] ion_alloc+0x204/0x810 [ 2118.713457] ? ion_dma_buf_release+0x40/0x40 [ 2118.717947] ? __might_fault+0x177/0x1b0 [ 2118.722000] ion_ioctl+0xea/0x1f0 [ 2118.725438] ? ion_query_heaps+0x360/0x360 [ 2118.729665] ? ion_query_heaps+0x360/0x360 [ 2118.733976] do_vfs_ioctl+0x75a/0xff0 [ 2118.737777] ? ioctl_preallocate+0x1a0/0x1a0 [ 2118.742180] ? lock_downgrade+0x740/0x740 [ 2118.746339] ? __fget+0x225/0x360 [ 2118.749805] ? do_vfs_ioctl+0xff0/0xff0 [ 2118.753782] ? security_file_ioctl+0x83/0xb0 [ 2118.758180] SyS_ioctl+0x7f/0xb0 [ 2118.761535] ? do_vfs_ioctl+0xff0/0xff0 [ 2118.765500] do_syscall_64+0x1d5/0x640 [ 2118.769384] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2118.774566] RIP: 0033:0x466459 [ 2118.777743] RSP: 002b:00007f6a11946188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2118.785447] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2118.792703] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2118.799960] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2118.807236] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2118.814495] R13: 00007ffe41ae227f R14: 00007f6a11946300 R15: 0000000000022000 [ 2118.828135] Node 1 Normal free:508556kB min:53696kB low:67120kB high:80544kB active_anon:924kB inactive_anon:41460kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:576kB pagetables:48kB bounce:0kB free_pcp:732kB local_pcp:4kB free_cma:0kB [ 2118.830525] bridge0: port 1(bridge_slave_0) entered disabled state [ 2118.860204] lowmem_reserve[]: 0 0 0 0 0 [ 2118.867036] Node 0 DMA: 142*4kB (UME) 25*8kB (UME) 13*16kB (UME) 6*32kB (M) 3*64kB (UM) 4*128kB (ME) 2*256kB (UE) 1*512kB (E) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 11088kB [ 2118.886606] Node 0 DMA32: 11306*4kB (UM) 21135*8kB (UME) 8457*16kB (UME) 3336*32kB (UME) 434*64kB (UM) 72*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 493360kB [ 2118.905459] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2118.916867] Node 1 Normal: 19797*4kB (UM) 7168*8kB (UM) 6260*16kB (UM) 5142*32kB (U) 1580*64kB (U) 153*128kB (U) 28*256kB (U) 13*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 535764kB [ 2118.936881] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2118.937966] Bluetooth: hci4 command 0x0419 tx timeout [ 2118.946439] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2118.964961] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2118.993907] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2119.012179] bond0 (unregistering): Released all slaves [ 2119.023859] 40168 total pagecache pages [ 2119.024893] warn_alloc_show_mem: 1 callbacks suppressed [ 2119.024895] Mem-Info: [ 2119.031514] 0 pages in swap cache [ 2119.040030] active_anon:22587 inactive_anon:32410 isolated_anon:0 [ 2119.040030] active_file:1488 inactive_file:5166 isolated_file:0 [ 2119.040030] unevictable:0 dirty:23 writeback:0 unstable:0 [ 2119.040030] slab_reclaimable:12501 slab_unreclaimable:116176 [ 2119.040030] mapped:57675 shmem:33553 pagetables:791 bounce:0 [ 2119.040030] free:269905 free_pcp:212 free_cma:0 [ 2119.046037] Swap cache stats: add 0, delete 0, find 0/0 [ 2119.091983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2119.103894] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2119.112127] Free swap = 0kB [ 2119.115237] Total swap = 0kB [ 2119.143131] 2097051 pages RAM [ 2119.143846] Node 0 active_anon:89424kB inactive_anon:88180kB active_file:5948kB inactive_file:20656kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:222508kB dirty:88kB writeback:0kB shmem:92476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2119.150262] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2119.180698] 0 pages HighMem/MovableOnly [ 2119.184812] 363846 pages reserved [ 2119.188828] 0 pages cma reserved [ 2119.232893] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2119.255697] Node 1 active_anon:924kB inactive_anon:41460kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8192kB dirty:4kB writeback:0kB shmem:41736kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2119.259399] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2119.354069] Node 0 DMA free:11396kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:4kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2119.366093] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2119.443235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2119.448459] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2119.461055] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2119.465688] Node 0 DMA32 free:464120kB min:36200kB low:45248kB high:54296kB active_anon:89384kB inactive_anon:88180kB active_file:5940kB inactive_file:20656kB unevictable:0kB writepending:84kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7232kB pagetables:3116kB bounce:0kB free_pcp:776kB local_pcp:120kB free_cma:0kB [ 2119.575058] lowmem_reserve[]: 0 0 0 0 0 [ 2119.592080] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2119.593703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2119.695168] lowmem_reserve[]: 0 0 0 0 0 [ 2119.699386] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2119.710120] Node 1 Normal free:626236kB min:53696kB low:67120kB high:80544kB active_anon:924kB inactive_anon:41460kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:48kB bounce:0kB free_pcp:784kB local_pcp:700kB free_cma:0kB [ 2119.732733] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2119.767320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2119.781035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2119.815757] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2119.832207] 8021q: adding VLAN 0 to HW filter on device team0 [ 2119.844456] lowmem_reserve[]: 0 0 0 0 0 [ 2119.857755] Node 0 DMA: 156*4kB (UME) 42*8kB (UME) 21*16kB (UME) 7*32kB (UM) 4*64kB (UM) 4*128kB (ME) 2*256kB (UE) 1*512kB (E) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 11504kB [ 2119.864831] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2119.909538] Node 0 DMA32: 16*4kB (M) 103*8kB (ME) 3301*16kB (UME) 4518*32kB (UME) 932*64kB (UM) 76*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 267656kB [ 2119.937068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2119.954174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2119.968727] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2119.987331] bridge0: port 1(bridge_slave_0) entered blocking state [ 2119.993739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2120.000449] Node 1 Normal: 16244*4kB (UM) 9207*8kB (UM) 7177*16kB (UM) 5970*32kB (U) 2384*64kB (U) 358*128kB (U) 122*256kB (U) 16*512kB (U) 2*1024kB (U) 0*2048kB 0*4096kB = 684376kB [ 2120.040456] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2120.054835] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2120.057705] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2120.081705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2120.098017] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2120.106621] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2120.112610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2120.141962] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2120.154043] bridge0: port 2(bridge_slave_1) entered blocking state [ 2120.160530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2120.177740] 40173 total pagecache pages [ 2120.181735] 0 pages in swap cache [ 2120.185174] Swap cache stats: add 0, delete 0, find 0/0 [ 2120.187570] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2120.206362] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2120.218345] Free swap = 0kB [ 2120.221371] Total swap = 0kB [ 2120.224393] 2097051 pages RAM [ 2120.227485] 0 pages HighMem/MovableOnly [ 2120.237408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2120.254162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2120.261547] 363846 pages reserved [ 2120.264993] 0 pages cma reserved [ 2120.288349] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2120.296554] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2120.347874] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2120.368127] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2120.397728] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2120.419598] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2120.427311] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2120.458787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2120.466677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2120.503154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2120.531098] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2120.561300] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2120.579155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2120.586740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2120.630617] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2120.639197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2120.661010] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2120.670875] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2120.676898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2120.752672] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2120.791396] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2120.803772] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2120.829220] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2120.838359] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2120.850047] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2120.856744] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2120.898502] oom_reaper: reaped process 13458 (syz-executor.2), now anon-rss:0kB, file-rss:4kB, shmem-rss:0kB [ 2120.901754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2120.949506] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2120.990776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2121.002270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2121.017542] oom_reaper: reaped process 13471 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2121.062868] device veth0_vlan entered promiscuous mode [ 2121.072904] device veth1_vlan entered promiscuous mode [ 2121.081549] systemd-rfkill invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2121.108306] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2121.114895] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2121.137148] systemd-rfkill cpuset=/ mems_allowed=0-1 [ 2121.142926] CPU: 0 PID: 13439 Comm: systemd-rfkill Not tainted 4.14.228-syzkaller #0 [ 2121.144498] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2121.150802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2121.150805] Call Trace: [ 2121.150819] dump_stack+0x1b2/0x281 [ 2121.150830] dump_header+0x178/0x82f [ 2121.150840] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2121.150848] ? ___ratelimit+0x2cd/0x530 [ 2121.150857] oom_kill_process.cold+0x10/0xb18 [ 2121.150872] out_of_memory+0xe3e/0x1190 [ 2121.150882] ? oom_killer_disable+0x1c0/0x1c0 [ 2121.150889] ? mutex_trylock+0x152/0x1a0 [ 2121.150899] __alloc_pages_nodemask+0x23e1/0x2720 [ 2121.150917] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2121.150938] alloc_pages_current+0x155/0x260 [ 2121.150948] filemap_fault+0xea3/0x1980 [ 2121.150964] ext4_filemap_fault+0x84/0xb0 [ 2121.150973] __do_fault+0xfa/0x380 [ 2121.150982] __handle_mm_fault+0x2497/0x4620 [ 2121.150992] ? vm_insert_page+0x7c0/0x7c0 [ 2121.150999] ? compat_poll_select_copy_remaining+0x2c0/0x2c0 [ 2121.151007] ? ktime_get_ts64+0x261/0x3a0 [ 2121.151021] handle_mm_fault+0x391/0x860 [ 2121.189643] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2121.190244] __do_page_fault+0x549/0xad0 [ 2121.261581] ? spurious_fault+0x640/0x640 [ 2121.265719] ? do_page_fault+0x60/0x500 [ 2121.269689] ? page_fault+0x2f/0x50 [ 2121.273306] page_fault+0x45/0x50 [ 2121.276747] RIP: d529afb0:0x1 [ 2121.279836] RSP: 293ce040:00007ffed529afb8 EFLAGS: 0000000b [ 2121.307623] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2121.461179] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2121.473111] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2121.484027] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2121.487551] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2121.504534] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2121.506742] CPU: 1 PID: 13458 Comm: syz-executor.2 Not tainted 4.14.228-syzkaller #0 [ 2121.517543] syz-executor.1 cpuset= [ 2121.517593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2121.517599] / [ 2121.521129] Call Trace: [ 2121.530523] syz-executor.3 cpuset= [ 2121.532206] dump_stack+0x1b2/0x281 [ 2121.534754] / [ 2121.538278] warn_alloc.cold+0x96/0x1cc [ 2121.548930] ? zone_watermark_ok_safe+0x220/0x220 [ 2121.553750] ? usleep_range+0x130/0x130 [ 2121.557535] mems_allowed=0-1 [ 2121.557708] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2121.565883] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2121.567557] mems_allowed=0-1 [ 2121.570881] ? run_timer_softirq+0x5a0/0x5a0 [ 2121.578349] __alloc_pages_nodemask+0x2127/0x2720 [ 2121.583179] ? lock_acquire+0x170/0x3f0 [ 2121.587245] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2121.592087] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2121.596566] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2121.602001] alloc_pages_current+0x155/0x260 [ 2121.606392] ion_page_pool_alloc+0x118/0x1b0 [ 2121.610780] ion_system_heap_allocate+0x133/0x8c0 [ 2121.615603] ? ion_alloc+0x187/0x810 [ 2121.619296] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2121.624726] ? ion_system_contig_heap_create+0x130/0x130 [ 2121.630161] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2121.635244] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2121.640066] ion_alloc+0x204/0x810 [ 2121.643592] ? ion_dma_buf_release+0x40/0x40 [ 2121.647984] ? __might_fault+0x177/0x1b0 [ 2121.652026] ion_ioctl+0xea/0x1f0 [ 2121.655460] ? ion_query_heaps+0x360/0x360 [ 2121.659677] ? ion_query_heaps+0x360/0x360 [ 2121.663901] do_vfs_ioctl+0x75a/0xff0 [ 2121.667693] ? ioctl_preallocate+0x1a0/0x1a0 [ 2121.672075] ? lock_downgrade+0x740/0x740 [ 2121.676202] ? __fget+0x225/0x360 [ 2121.679636] ? do_vfs_ioctl+0xff0/0xff0 [ 2121.683591] ? security_file_ioctl+0x83/0xb0 [ 2121.687992] SyS_ioctl+0x7f/0xb0 [ 2121.691335] ? do_vfs_ioctl+0xff0/0xff0 [ 2121.695288] do_syscall_64+0x1d5/0x640 [ 2121.699167] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2121.704446] RIP: 0033:0x466459 [ 2121.707613] RSP: 002b:00007fb129331188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2121.715299] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2121.722641] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2121.729889] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2121.737138] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2121.744406] R13: 00007ffd0a29ad5f R14: 00007fb129331300 R15: 0000000000022000 [ 2121.747517] Mem-Info: [ 2121.756546] active_anon:22575 inactive_anon:32410 isolated_anon:0 [ 2121.756546] active_file:10 inactive_file:6 isolated_file:0 [ 2121.756546] unevictable:0 dirty:5 writeback:0 unstable:0 [ 2121.756546] slab_reclaimable:12501 slab_unreclaimable:116461 [ 2121.756546] mapped:53219 shmem:33553 pagetables:791 bounce:0 [ 2121.756546] free:13967 free_pcp:0 free_cma:0 [ 2121.787190] CPU: 1 PID: 13471 Comm: syz-executor.3 Not tainted 4.14.228-syzkaller #0 [ 2121.797576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2121.806909] Call Trace: [ 2121.809484] dump_stack+0x1b2/0x281 [ 2121.813108] warn_alloc.cold+0x96/0x1cc [ 2121.817063] ? zone_watermark_ok_safe+0x220/0x220 [ 2121.821882] ? usleep_range+0x130/0x130 [ 2121.825832] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2121.830915] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2121.835908] ? run_timer_softirq+0x5a0/0x5a0 [ 2121.840299] __alloc_pages_nodemask+0x2127/0x2720 [ 2121.845137] ? lock_acquire+0x170/0x3f0 [ 2121.849101] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2121.853923] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2121.858402] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2121.863835] alloc_pages_current+0x155/0x260 [ 2121.867514] Node 0 active_anon:89372kB inactive_anon:88180kB active_file:36kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:204684kB dirty:4kB writeback:0kB shmem:92476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2121.868349] ion_page_pool_alloc+0x118/0x1b0 [ 2121.900238] ion_system_heap_allocate+0x133/0x8c0 [ 2121.905078] ? ion_alloc+0x187/0x810 [ 2121.908884] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2121.914314] ? ion_system_contig_heap_create+0x130/0x130 [ 2121.919759] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2121.924754] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2121.929573] ion_alloc+0x204/0x810 [ 2121.933093] ? ion_dma_buf_release+0x40/0x40 [ 2121.937504] ? __might_fault+0x177/0x1b0 [ 2121.941544] ion_ioctl+0xea/0x1f0 [ 2121.944970] ? ion_query_heaps+0x360/0x360 [ 2121.949182] ? ion_query_heaps+0x360/0x360 [ 2121.953397] do_vfs_ioctl+0x75a/0xff0 [ 2121.957174] ? ioctl_preallocate+0x1a0/0x1a0 [ 2121.957512] Node 1 active_anon:928kB inactive_anon:41460kB active_file:4kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8192kB dirty:16kB writeback:0kB shmem:41736kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2121.961572] ? lock_downgrade+0x740/0x740 [ 2121.992652] ? __fget+0x225/0x360 [ 2121.996081] ? do_vfs_ioctl+0xff0/0xff0 [ 2122.000034] ? security_file_ioctl+0x83/0xb0 [ 2122.004443] SyS_ioctl+0x7f/0xb0 [ 2122.007806] ? do_vfs_ioctl+0xff0/0xff0 [ 2122.011755] do_syscall_64+0x1d5/0x640 [ 2122.015621] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2122.020807] RIP: 0033:0x466459 [ 2122.023977] RSP: 002b:00007f6a11946188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2122.031752] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2122.039000] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2122.046247] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2122.047487] Node 0 [ 2122.053502] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2122.053509] R13: 00007ffe41ae227f R14: 00007f6a11946300 R15: 0000000000022000 [ 2122.055757] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:20kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2122.127742] CPU: 0 PID: 12953 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 2122.135646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2122.144988] Call Trace: [ 2122.147567] dump_stack+0x1b2/0x281 [ 2122.151189] warn_alloc.cold+0x96/0x1cc [ 2122.155164] ? zone_watermark_ok_safe+0x220/0x220 [ 2122.159997] ? usleep_range+0x130/0x130 [ 2122.163961] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2122.169054] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2122.174061] ? run_timer_softirq+0x5a0/0x5a0 [ 2122.178471] __alloc_pages_nodemask+0x2127/0x2720 [ 2122.183308] ? lock_acquire+0x170/0x3f0 [ 2122.187275] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2122.192106] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2122.196602] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2122.202054] alloc_pages_current+0x155/0x260 [ 2122.206453] ion_page_pool_alloc+0x118/0x1b0 [ 2122.210850] ion_system_heap_allocate+0x133/0x8c0 [ 2122.215691] ? _raw_spin_unlock+0x29/0x40 [ 2122.219838] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2122.224774] ? ion_system_contig_heap_create+0x130/0x130 [ 2122.230392] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2122.235420] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2122.240274] ion_alloc+0x27a/0x810 [ 2122.243811] ? ion_dma_buf_release+0x40/0x40 [ 2122.245457] warn_alloc_show_mem: 1 callbacks suppressed [ 2122.245460] Mem-Info: [ 2122.248209] ? __might_fault+0x177/0x1b0 [ 2122.248221] ion_ioctl+0xea/0x1f0 [ 2122.248230] ? ion_query_heaps+0x360/0x360 [ 2122.248242] ? ion_query_heaps+0x360/0x360 [ 2122.248253] do_vfs_ioctl+0x75a/0xff0 [ 2122.248265] ? ioctl_preallocate+0x1a0/0x1a0 [ 2122.248274] ? lock_downgrade+0x740/0x740 [ 2122.248287] ? __fget+0x225/0x360 [ 2122.248296] ? do_vfs_ioctl+0xff0/0xff0 [ 2122.267012] active_anon:22582 inactive_anon:32410 isolated_anon:0 [ 2122.267012] active_file:13 inactive_file:11 isolated_file:0 [ 2122.267012] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2122.267012] slab_reclaimable:12501 slab_unreclaimable:116323 [ 2122.267012] mapped:53190 shmem:33553 pagetables:791 bounce:0 [ 2122.267012] free:14229 free_pcp:33 free_cma:0 [ 2122.267744] ? security_file_ioctl+0x83/0xb0 [ 2122.267755] SyS_ioctl+0x7f/0xb0 [ 2122.267763] ? do_vfs_ioctl+0xff0/0xff0 [ 2122.267778] do_syscall_64+0x1d5/0x640 [ 2122.267792] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2122.267804] RIP: 0033:0x466459 [ 2122.274135] Node 0 active_anon:89416kB inactive_anon:88180kB active_file:48kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:204568kB dirty:0kB writeback:0kB shmem:92476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2122.275795] RSP: 002b:00007f27c4f25188 EFLAGS: 00000246 [ 2122.296705] Node 1 active_anon:912kB inactive_anon:41460kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8192kB dirty:0kB writeback:0kB shmem:41736kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2122.324820] ORIG_RAX: 0000000000000010 [ 2122.324826] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2122.324830] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2122.324834] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2122.324838] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2122.324843] R13: 00007ffda0b0ca7f R14: 00007f27c4f25300 R15: 0000000000022000 [ 2122.338890] CPU: 0 PID: 12950 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 2122.350595] Node 0 [ 2122.376450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2122.376454] Call Trace: [ 2122.376472] dump_stack+0x1b2/0x281 [ 2122.376484] warn_alloc.cold+0x96/0x1cc [ 2122.376495] ? zone_watermark_ok_safe+0x220/0x220 [ 2122.376504] ? usleep_range+0x130/0x130 [ 2122.376512] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2122.376524] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2122.376534] ? run_timer_softirq+0x5a0/0x5a0 [ 2122.376550] __alloc_pages_nodemask+0x2127/0x2720 [ 2122.376571] ? lock_acquire+0x170/0x3f0 [ 2122.376585] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2122.376596] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2122.411616] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2122.412704] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2122.437495] lowmem_reserve[]: [ 2122.441840] alloc_pages_current+0x155/0x260 [ 2122.477490] 0 [ 2122.478630] ion_page_pool_alloc+0x118/0x1b0 [ 2122.483444] 2717 [ 2122.487398] ion_system_heap_allocate+0x133/0x8c0 [ 2122.537468] 2718 [ 2122.545698] ? _raw_spin_unlock+0x29/0x40 [ 2122.577816] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2122.582740] ? ion_system_contig_heap_create+0x130/0x130 [ 2122.588187] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2122.590432] 2718 [ 2122.593190] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2122.593192] 2718 [ 2122.595235] ion_alloc+0x27a/0x810 [ 2122.605647] ? ion_dma_buf_release+0x40/0x40 [ 2122.610058] ? __might_fault+0x177/0x1b0 [ 2122.614112] ion_ioctl+0xea/0x1f0 [ 2122.617468] Node 0 DMA32 free:23148kB min:36200kB low:45248kB high:54296kB active_anon:89376kB inactive_anon:88180kB active_file:48kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7232kB pagetables:3116kB bounce:0kB free_pcp:132kB local_pcp:132kB free_cma:0kB [ 2122.617567] ? ion_query_heaps+0x360/0x360 [ 2122.617579] ? ion_query_heaps+0x360/0x360 [ 2122.654966] do_vfs_ioctl+0x75a/0xff0 [ 2122.658768] ? ioctl_preallocate+0x1a0/0x1a0 [ 2122.663170] ? lock_downgrade+0x740/0x740 [ 2122.667394] ? __fget+0x225/0x360 [ 2122.670843] ? do_vfs_ioctl+0xff0/0xff0 [ 2122.674820] ? security_file_ioctl+0x83/0xb0 [ 2122.679230] SyS_ioctl+0x7f/0xb0 [ 2122.682587] ? do_vfs_ioctl+0xff0/0xff0 [ 2122.686558] do_syscall_64+0x1d5/0x640 [ 2122.690556] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2122.695744] RIP: 0033:0x466459 [ 2122.698934] RSP: 002b:00007f27c4f46188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2122.706647] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2122.713912] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2122.718050] lowmem_reserve[]: [ 2122.721252] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2122.721257] 0 [ 2122.724333] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2122.724339] R13: 00007ffda0b0ca7f R14: 00007f27c4f46300 R15: 0000000000022000 [ 2122.756529] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2122.781086] Node 0 DMA32 free:57280kB min:36200kB low:45248kB high:54296kB active_anon:89376kB inactive_anon:88180kB active_file:248kB inactive_file:3728kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7264kB pagetables:3116kB bounce:0kB free_pcp:992kB local_pcp:184kB free_cma:0kB [ 2122.787695] 0 [ 2122.846406] lowmem_reserve[]: 0 0 0 0 0 [ 2122.884237] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2122.891297] 0 0 0 [ 2122.893464] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2122.907421] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2122.954840] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2122.980663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2122.994186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2123.015030] device veth0_macvtap entered promiscuous mode [ 2123.020682] lowmem_reserve[]: 0 0 0 0 0 [ 2123.024684] Node 1 Normal free:26784kB min:53696kB low:67120kB high:80544kB active_anon:912kB inactive_anon:41460kB active_file:4kB inactive_file:208kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:48kB bounce:0kB free_pcp:140kB local_pcp:136kB free_cma:0kB [ 2123.025923] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2123.077436] lowmem_reserve[]: 0 0 0 0 0 [ 2123.087531] Node 1 Normal free:26784kB min:53696kB low:67120kB high:80544kB active_anon:912kB inactive_anon:41460kB active_file:4kB inactive_file:208kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:48kB bounce:0kB free_pcp:140kB local_pcp:4kB free_cma:0kB [ 2123.150697] device veth1_macvtap entered promiscuous mode [ 2123.157121] lowmem_reserve[]: 0 0 0 0 0 [ 2123.166930] lowmem_reserve[]: 0 0 0 0 0 [ 2123.187394] Node 0 DMA: 19*4kB (UME) 42*8kB (UME) 21*16kB (UME) 7*32kB (UM) 4*64kB (UM) 4*128kB (ME) 2*256kB (UE) 1*512kB (E) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 10956kB [ 2123.187958] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2123.213488] Node 0 DMA: 19*4kB (UME) 42*8kB (UME) 21*16kB (UME) 7*32kB (UM) 4*64kB (UM) 4*128kB (ME) 2*256kB (UE) 1*512kB (E) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 10956kB [ 2123.218316] Node 0 DMA32: 5827*4kB (UEH) 9554*8kB (UMEH) 3766*16kB (UMEH) 1115*32kB (UEH) 47*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 198684kB [ 2123.247411] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2123.258320] Node 0 DMA32: 5827*4kB (UEH) 9548*8kB (UMEH) 3766*16kB (UMEH) 1115*32kB (UEH) 47*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 198636kB [ 2123.268139] Node 1 Normal: 4394*4kB (UM) 2610*8kB (U) 1233*16kB (U) 0*32kB 2*64kB (M) 1*128kB (U) 64*256kB (U) 18*512kB (U) 50*1024kB (UM) 0*2048kB 0*4096kB = 135240kB [ 2123.307397] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2123.319934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2123.333469] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2123.343526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2123.353288] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2123.363089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2123.370085] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2123.373442] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2123.392786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2123.402395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2123.410122] Node 1 Normal: 4394*4kB (UM) 2610*8kB (U) 1233*16kB (U) 0*32kB 1093*64kB (UM) 1*128kB (U) 64*256kB (U) 18*512kB (U) 165*1024kB (UM) 49*2048kB (U) 3*4096kB (U) = 435464kB [ 2123.412779] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2123.437903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2123.448234] 35723 total pagecache pages [ 2123.452213] 0 pages in swap cache [ 2123.455645] Swap cache stats: add 0, delete 0, find 0/0 [ 2123.462100] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2123.462819] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2123.478884] Free swap = 0kB [ 2123.481901] Total swap = 0kB [ 2123.484910] 2097051 pages RAM [ 2123.489403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2123.496406] 0 pages HighMem/MovableOnly [ 2123.496412] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2123.496419] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2123.503300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2123.528730] 363846 pages reserved [ 2123.532181] 0 pages cma reserved [ 2123.535545] Out of memory (oom_kill_allocating_task): Kill process 13439 (systemd-rfkill) score 0 or sacrifice child [ 2123.547373] Killed process 13439 (systemd-rfkill) total-vm:37800kB, anon-rss:376kB, file-rss:0kB, shmem-rss:0kB [ 2123.557610] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2123.557916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2123.566425] 35723 total pagecache pages [ 2123.577898] oom_reaper: reaped process 13439 (systemd-rfkill), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2123.606606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2123.616897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2123.634203] 0 pages in swap cache [ 2123.649948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2123.661017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2123.667368] Swap cache stats: add 0, delete 0, find 0/0 [ 2123.681016] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2123.688402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2123.695360] Free swap = 0kB [ 2123.702033] Total swap = 0kB [ 2123.705186] 2097051 pages RAM [ 2123.717437] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2123.720264] 0 pages HighMem/MovableOnly [ 2123.730565] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2123.742137] 363846 pages reserved [ 2123.747496] warn_alloc_show_mem: 2 callbacks suppressed [ 2123.747498] Mem-Info: [ 2123.748752] 0 pages cma reserved [ 2123.781578] active_anon:22682 inactive_anon:32410 isolated_anon:0 [ 2123.781578] active_file:688 inactive_file:2086 isolated_file:0 [ 2123.781578] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2123.781578] slab_reclaimable:12501 slab_unreclaimable:117614 [ 2123.781578] mapped:55115 shmem:33553 pagetables:791 bounce:0 [ 2123.781578] free:128806 free_pcp:642 free_cma:0 [ 2123.817522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2123.825439] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2123.838312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2123.859391] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2123.902749] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2123.910677] Node 0 active_anon:89516kB inactive_anon:88184kB active_file:3372kB inactive_file:7844kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211844kB dirty:16kB writeback:0kB shmem:92484kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2123.946948] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2123.955755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2123.991488] Node 1 active_anon:908kB inactive_anon:41460kB active_file:104kB inactive_file:168kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8416kB dirty:4kB writeback:0kB shmem:41736kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2124.028779] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2124.085162] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2124.106383] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2124.113849] Node 0 DMA32 free:199600kB min:36200kB low:45248kB high:54296kB active_anon:89576kB inactive_anon:88184kB active_file:3364kB inactive_file:9244kB unevictable:0kB writepending:16kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7232kB pagetables:2880kB bounce:0kB free_pcp:1404kB local_pcp:620kB free_cma:0kB [ 2124.151813] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2124.161402] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2124.174275] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2124.185961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2124.200483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2124.211987] lowmem_reserve[]: 0 0 0 0 0 [ 2124.216202] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2124.250626] device veth0_vlan entered promiscuous mode 06:43:03 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000080)={0x34, 0x0, &(0x7f0000000040)}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7ffffffd, 0x22}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0x1}) [ 2124.258790] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2124.266153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2124.284951] device veth1_vlan entered promiscuous mode [ 2124.318118] lowmem_reserve[]: 0 0 0 0 0 [ 2124.322161] Node 1 Normal free:268508kB min:53696kB low:67120kB high:80544kB active_anon:908kB inactive_anon:41460kB active_file:104kB inactive_file:168kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:48kB bounce:0kB free_pcp:1460kB local_pcp:728kB free_cma:0kB [ 2124.358934] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2124.373839] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2124.381156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2124.393198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2124.403670] device veth0_macvtap entered promiscuous mode [ 2124.418206] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2124.424778] lowmem_reserve[]: 0 0 0 0 0 [ 2124.435057] Node 0 DMA: 33*4kB (UME) 42*8kB (UME) 21*16kB (UME) 7*32kB (UM) 4*64kB (UM) 4*128kB (ME) 2*256kB (UE) 1*512kB (E) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 11012kB [ 2124.458884] device veth1_macvtap entered promiscuous mode [ 2124.471998] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2124.485722] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2124.496789] Node 0 DMA32: 6336*4kB (UMEH) 10020*8kB (UMEH) 3970*16kB (UEH) 1164*32kB (UEH) 6*64kB (H) 3*128kB (H) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 207040kB [ 2124.520070] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2124.530985] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2124.546032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2124.561436] Node 1 Normal: 4748*4kB (UM) 4815*8kB (UM) 3910*16kB (U) 2558*32kB (U) 1*64kB (U) 17*128kB (U) 6*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 205704kB [ 2124.576672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2124.589804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2124.601324] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2124.612847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2124.623428] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2124.634547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2124.646062] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2124.656914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2124.669489] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2124.678777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2124.692909] 37316 total pagecache pages [ 2124.696890] 0 pages in swap cache [ 2124.701708] Swap cache stats: add 0, delete 0, find 0/0 [ 2124.707083] Free swap = 0kB [ 2124.713051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2124.723162] Total swap = 0kB [ 2124.726270] 2097051 pages RAM [ 2124.742635] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2124.752749] 0 pages HighMem/MovableOnly [ 2124.756734] 363846 pages reserved [ 2124.763508] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2124.773469] 0 pages cma reserved [ 2124.777915] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2124.790600] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2124.813535] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2124.841295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2124.870518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2124.885914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2124.932123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2124.970478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2125.011300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2125.044167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2125.081143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2125.118333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 06:43:04 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x8, 0x38}) [ 2125.142436] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2125.164122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2125.183118] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2125.193386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2125.556512] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2125.575690] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2125.583333] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2125.608160] CPU: 1 PID: 13564 Comm: syz-executor.3 Not tainted 4.14.228-syzkaller #0 [ 2125.616057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2125.625416] Call Trace: [ 2125.628009] dump_stack+0x1b2/0x281 [ 2125.631637] warn_alloc.cold+0x96/0x1cc [ 2125.635608] ? zone_watermark_ok_safe+0x220/0x220 [ 2125.640461] __alloc_pages_nodemask+0x2127/0x2720 [ 2125.645297] ? ___preempt_schedule+0x16/0x18 [ 2125.649703] ? lock_acquire+0x170/0x3f0 [ 2125.653695] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2125.658542] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2125.664097] ? __mutex_unlock_slowpath+0x75/0x770 [ 2125.668940] ? policy_node+0x8/0x110 [ 2125.672663] alloc_pages_current+0x155/0x260 [ 2125.677080] ion_page_pool_alloc+0x118/0x1b0 [ 2125.681482] ion_system_heap_allocate+0x133/0x8c0 [ 2125.686321] ? ion_alloc+0x187/0x810 [ 2125.690118] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2125.695686] ? ion_system_contig_heap_create+0x130/0x130 [ 2125.701128] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2125.706139] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2125.710973] ion_alloc+0x204/0x810 [ 2125.714602] ? ion_dma_buf_release+0x40/0x40 [ 2125.719015] ? __might_fault+0x177/0x1b0 [ 2125.723071] ion_ioctl+0xea/0x1f0 [ 2125.726523] ? ion_query_heaps+0x360/0x360 [ 2125.730748] ? ion_query_heaps+0x360/0x360 [ 2125.734973] do_vfs_ioctl+0x75a/0xff0 [ 2125.738750] ? ioctl_preallocate+0x1a0/0x1a0 [ 2125.743136] ? lock_downgrade+0x740/0x740 [ 2125.747269] ? __fget+0x225/0x360 [ 2125.750697] ? do_vfs_ioctl+0xff0/0xff0 [ 2125.754644] ? security_file_ioctl+0x83/0xb0 [ 2125.759029] SyS_ioctl+0x7f/0xb0 [ 2125.762370] ? do_vfs_ioctl+0xff0/0xff0 [ 2125.766346] do_syscall_64+0x1d5/0x640 [ 2125.770228] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2125.775407] RIP: 0033:0x466459 [ 2125.778575] RSP: 002b:00007f6a11946188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2125.786271] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2125.793521] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2125.800768] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2125.808017] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2125.815264] R13: 00007ffe41ae227f R14: 00007f6a11946300 R15: 0000000000022000 [ 2125.826593] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2125.831840] CPU: 1 PID: 13458 Comm: syz-executor.2 Not tainted 4.14.228-syzkaller #0 [ 2125.839710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2125.849164] Call Trace: [ 2125.851746] dump_stack+0x1b2/0x281 [ 2125.855459] warn_alloc.cold+0x96/0x1cc [ 2125.859438] ? zone_watermark_ok_safe+0x220/0x220 [ 2125.864380] __alloc_pages_nodemask+0x2127/0x2720 [ 2125.869224] ? io_schedule_timeout+0x140/0x140 [ 2125.873801] ? lock_acquire+0x170/0x3f0 [ 2125.877774] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2125.882626] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2125.888071] ? __mutex_unlock_slowpath+0x75/0x770 [ 2125.892906] alloc_pages_current+0x155/0x260 [ 2125.897308] ion_page_pool_alloc+0x118/0x1b0 [ 2125.901708] ion_system_heap_allocate+0x133/0x8c0 [ 2125.906537] ? _raw_spin_unlock+0x29/0x40 [ 2125.910671] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2125.915588] ? ion_system_contig_heap_create+0x130/0x130 [ 2125.921027] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2125.926032] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2125.930863] ion_alloc+0x27a/0x810 [ 2125.934399] ? ion_dma_buf_release+0x40/0x40 [ 2125.938808] ? __might_fault+0x177/0x1b0 [ 2125.942861] ion_ioctl+0xea/0x1f0 [ 2125.946301] ? ion_query_heaps+0x360/0x360 [ 2125.950528] ? ion_query_heaps+0x360/0x360 [ 2125.954752] do_vfs_ioctl+0x75a/0xff0 [ 2125.958553] ? ioctl_preallocate+0x1a0/0x1a0 [ 2125.962956] ? lock_downgrade+0x740/0x740 [ 2125.967103] ? __fget+0x225/0x360 [ 2125.970548] ? do_vfs_ioctl+0xff0/0xff0 [ 2125.974513] ? security_file_ioctl+0x83/0xb0 [ 2125.978914] SyS_ioctl+0x7f/0xb0 [ 2125.982273] ? do_vfs_ioctl+0xff0/0xff0 [ 2125.986238] do_syscall_64+0x1d5/0x640 [ 2125.990123] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2125.995310] RIP: 0033:0x466459 [ 2125.998485] RSP: 002b:00007fb129331188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2126.006184] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2126.013442] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2126.020702] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2126.027960] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2126.035230] R13: 00007ffd0a29ad5f R14: 00007fb129331300 R15: 0000000000022000 [ 2126.043725] Mem-Info: [ 2126.046317] active_anon:22647 inactive_anon:32410 isolated_anon:0 [ 2126.046317] active_file:1076 inactive_file:3155 isolated_file:0 [ 2126.046317] unevictable:0 dirty:28 writeback:0 unstable:0 [ 2126.046317] slab_reclaimable:12516 slab_unreclaimable:116565 [ 2126.046317] mapped:56112 shmem:33555 pagetables:772 bounce:0 [ 2126.046317] free:321783 free_pcp:331 free_cma:0 [ 2126.080226] Node 0 active_anon:89640kB inactive_anon:88180kB active_file:4284kB inactive_file:12508kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216020kB dirty:120kB writeback:0kB shmem:92484kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2126.094325] syz-executor.4: [ 2126.108812] Node 1 active_anon:896kB inactive_anon:41460kB active_file:104kB inactive_file:168kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8416kB dirty:4kB writeback:0kB shmem:41736kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2126.139902] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2126.144754] Node 0 DMA free:11136kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2126.176676] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2126.201643] CPU: 0 PID: 13575 Comm: syz-executor.4 Not tainted 4.14.228-syzkaller #0 [ 2126.209523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2126.215171] lowmem_reserve[]: [ 2126.218864] Call Trace: [ 2126.218883] dump_stack+0x1b2/0x281 [ 2126.218896] warn_alloc.cold+0x96/0x1cc [ 2126.218908] ? zone_watermark_ok_safe+0x220/0x220 [ 2126.218932] __alloc_pages_nodemask+0x2127/0x2720 [ 2126.218942] ? _raw_spin_unlock_irq+0x24/0x80 [ 2126.218956] ? lock_acquire+0x170/0x3f0 [ 2126.228004] 0 [ 2126.228212] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2126.236490] 2717 [ 2126.236983] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2126.249720] 2718 [ 2126.250235] ? __mutex_unlock_slowpath+0x75/0x770 [ 2126.254205] 2718 [ 2126.256834] alloc_pages_current+0x155/0x260 [ 2126.256847] ion_page_pool_alloc+0x118/0x1b0 [ 2126.267320] 2718 [ 2126.271353] ion_system_heap_allocate+0x133/0x8c0 [ 2126.271362] ? ion_alloc+0x187/0x810 [ 2126.282194] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2126.282204] ? ion_system_contig_heap_create+0x130/0x130 [ 2126.286403] Node 0 [ 2126.289156] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2126.289168] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2126.289178] ion_alloc+0x204/0x810 [ 2126.289190] ? ion_dma_buf_release+0x40/0x40 [ 2126.289201] ? __might_fault+0x177/0x1b0 [ 2126.296145] DMA32 free:786200kB min:36200kB low:45248kB high:54296kB active_anon:89600kB inactive_anon:88180kB active_file:5476kB inactive_file:11116kB unevictable:0kB writepending:268kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7200kB pagetables:3032kB bounce:0kB free_pcp:464kB local_pcp:172kB free_cma:0kB [ 2126.298320] ion_ioctl+0xea/0x1f0 [ 2126.298329] ? ion_query_heaps+0x360/0x360 [ 2126.298341] ? ion_query_heaps+0x360/0x360 [ 2126.298351] do_vfs_ioctl+0x75a/0xff0 [ 2126.298363] ? ioctl_preallocate+0x1a0/0x1a0 [ 2126.298371] ? lock_downgrade+0x740/0x740 [ 2126.298384] ? __fget+0x225/0x360 [ 2126.298392] ? do_vfs_ioctl+0xff0/0xff0 [ 2126.298404] ? security_file_ioctl+0x83/0xb0 [ 2126.319848] lowmem_reserve[]: [ 2126.323961] SyS_ioctl+0x7f/0xb0 [ 2126.323970] ? do_vfs_ioctl+0xff0/0xff0 [ 2126.328048] 0 [ 2126.357053] do_syscall_64+0x1d5/0x640 [ 2126.357068] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2126.357076] RIP: 0033:0x466459 [ 2126.357080] RSP: 002b:00007f2dce80f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2126.357089] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2126.357112] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2126.357117] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2126.357122] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2126.357127] R13: 00007ffdf01d7adf R14: 00007f2dce80f300 R15: 0000000000022000 [ 2126.505101] 0 0 0 0 [ 2126.516470] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2126.550583] lowmem_reserve[]: 0 0 0 0 0 [ 2126.563707] Node 1 Normal free:434296kB min:53696kB low:67120kB high:80544kB active_anon:896kB inactive_anon:41460kB active_file:104kB inactive_file:168kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:48kB bounce:0kB free_pcp:624kB local_pcp:0kB free_cma:0kB [ 2126.637690] lowmem_reserve[]: 0 0 0 0 0 [ 2126.646111] Node 0 DMA: 128*4kB (UME) 42*8kB (UME) 21*16kB (UME) 7*32kB (UM) 2*64kB (M) 5*128kB (UME) 1*256kB (E) 1*512kB (E) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 11136kB [ 2126.683550] Node 0 DMA32: 55*4kB (UMEH) 101*8kB (UMEH) 13255*16kB (UMEH) 5795*32kB (UEH) 66*64kB (UMH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 402772kB [ 2126.707112] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2126.726120] Node 1 Normal: 16530*4kB (UM) 9493*8kB (U) 7429*16kB (UM) 4921*32kB (UM) 187*64kB (U) 31*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 434336kB [ 2126.774352] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2126.785451] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2126.806532] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2126.820579] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2126.843347] 37879 total pagecache pages [ 2126.856339] 0 pages in swap cache [ 2126.864095] Swap cache stats: add 0, delete 0, find 0/0 [ 2126.879983] Free swap = 0kB [ 2126.886309] Total swap = 0kB [ 2126.892697] 2097051 pages RAM [ 2126.902139] 0 pages HighMem/MovableOnly [ 2126.918186] 363846 pages reserved [ 2126.923880] 0 pages cma reserved [ 2127.444657] oom_reaper: reaped process 13575 (syz-executor.4), now anon-rss:0kB, file-rss:4kB, shmem-rss:0kB [ 2127.485507] syz-executor.3 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2127.502073] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2127.511860] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2127.532677] CPU: 1 PID: 12607 Comm: syz-executor.3 Not tainted 4.14.228-syzkaller #0 [ 2127.534426] syz-executor.2 cpuset= [ 2127.540629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2127.540632] Call Trace: [ 2127.540647] dump_stack+0x1b2/0x281 [ 2127.540658] dump_header+0x178/0x82f [ 2127.540669] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2127.544184] / [ 2127.553514] ? ___ratelimit+0x2cd/0x530 [ 2127.556086] mems_allowed=0-1 [ 2127.559674] oom_kill_process.cold+0x10/0xb18 [ 2127.559691] out_of_memory+0xe3e/0x1190 [ 2127.585560] ? oom_killer_disable+0x1c0/0x1c0 [ 2127.590040] ? mutex_trylock+0x152/0x1a0 [ 2127.594076] __alloc_pages_nodemask+0x23e1/0x2720 [ 2127.598904] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2127.603742] alloc_pages_current+0x155/0x260 [ 2127.608127] filemap_fault+0xea3/0x1980 [ 2127.612088] ext4_filemap_fault+0x84/0xb0 [ 2127.616213] __do_fault+0xfa/0x380 [ 2127.619734] __handle_mm_fault+0x2497/0x4620 [ 2127.624212] ? vm_insert_page+0x7c0/0x7c0 [ 2127.628337] ? nanosleep_copyout+0x100/0x100 [ 2127.632848] handle_mm_fault+0x391/0x860 [ 2127.636894] __do_page_fault+0x549/0xad0 [ 2127.640959] ? spurious_fault+0x640/0x640 [ 2127.645078] ? do_page_fault+0x60/0x500 [ 2127.649027] ? page_fault+0x2f/0x50 [ 2127.652913] page_fault+0x45/0x50 [ 2127.656342] RIP: 206dbd:0x5 [ 2127.659247] RSP: 000f:00007ffe41ae253c EFLAGS: 00000000 [ 2127.659265] CPU: 0 PID: 13458 Comm: syz-executor.2 Not tainted 4.14.228-syzkaller #0 [ 2127.672515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2127.681463] Mem-Info: [ 2127.681858] Call Trace: [ 2127.684282] active_anon:22647 inactive_anon:32410 isolated_anon:0 [ 2127.684282] active_file:38 inactive_file:14 isolated_file:0 [ 2127.684282] unevictable:0 dirty:5 writeback:0 unstable:0 [ 2127.684282] slab_reclaimable:12525 slab_unreclaimable:116210 [ 2127.684282] mapped:53286 shmem:33555 pagetables:771 bounce:0 [ 2127.684282] free:13824 free_pcp:4 free_cma:0 [ 2127.686848] dump_stack+0x1b2/0x281 [ 2127.723486] warn_alloc.cold+0x96/0x1cc [ 2127.727163] Node 0 active_anon:89704kB inactive_anon:88180kB active_file:140kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:204928kB dirty:16kB writeback:0kB shmem:92484kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2127.727443] ? zone_watermark_ok_safe+0x220/0x220 [ 2127.760036] ? usleep_range+0x130/0x130 [ 2127.762969] Node 1 active_anon:884kB inactive_anon:41460kB active_file:12kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8216kB dirty:4kB writeback:0kB shmem:41736kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2127.763998] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2127.796143] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2127.798806] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2127.801153] ? run_timer_softirq+0x5a0/0x5a0 [ 2127.801170] __alloc_pages_nodemask+0x2127/0x2720 [ 2127.835192] lowmem_reserve[]: 0 2717 [ 2127.836656] ? lock_acquire+0x170/0x3f0 [ 2127.836661] 2718 [ 2127.840358] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2127.840368] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2127.840383] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2127.840401] alloc_pages_current+0x155/0x260 [ 2127.844424] 2718 [ 2127.846467] ion_page_pool_alloc+0x118/0x1b0 [ 2127.859257] 2718 [ 2127.861277] ion_system_heap_allocate+0x133/0x8c0 [ 2127.867701] ? _raw_spin_unlock+0x29/0x40 [ 2127.867710] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2127.867719] ? ion_system_contig_heap_create+0x130/0x130 [ 2127.867729] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2127.867742] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2127.867753] ion_alloc+0x27a/0x810 [ 2127.867766] ? ion_dma_buf_release+0x40/0x40 [ 2127.867785] ? __might_fault+0x177/0x1b0 [ 2127.879433] Node 0 [ 2127.883165] ion_ioctl+0xea/0x1f0 [ 2127.892543] DMA32 free:18336kB min:36200kB low:45248kB high:54296kB active_anon:89668kB inactive_anon:88180kB active_file:140kB inactive_file:484kB unevictable:0kB writepending:316kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7200kB pagetables:3036kB bounce:0kB free_pcp:16kB local_pcp:0kB free_cma:0kB [ 2127.893494] ? ion_query_heaps+0x360/0x360 [ 2127.901938] lowmem_reserve[]: [ 2127.903305] ? ion_query_heaps+0x360/0x360 [ 2127.906811] 0 [ 2127.911194] do_vfs_ioctl+0x75a/0xff0 [ 2127.911205] ? ioctl_preallocate+0x1a0/0x1a0 [ 2127.911214] ? lock_downgrade+0x740/0x740 [ 2127.911227] ? __fget+0x225/0x360 [ 2127.911236] ? do_vfs_ioctl+0xff0/0xff0 [ 2127.911247] ? security_file_ioctl+0x83/0xb0 [ 2127.911256] SyS_ioctl+0x7f/0xb0 [ 2127.911263] ? do_vfs_ioctl+0xff0/0xff0 [ 2127.911273] do_syscall_64+0x1d5/0x640 [ 2127.922996] 0 [ 2127.949341] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2127.949349] RIP: 0033:0x466459 [ 2127.949353] RSP: 002b:00007fb129331188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2127.949363] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2127.949368] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2127.949373] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2127.949377] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2127.949382] R13: 00007ffd0a29ad5f R14: 00007fb129331300 R15: 0000000000022000 [ 2127.955826] syz-executor.4: [ 2127.958600] 0 [ 2127.967996] page allocation failure: order:0 [ 2127.974039] 0 [ 2127.975045] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2127.980234] 0 [ 2127.992613] warn_alloc_show_mem: 2 callbacks suppressed [ 2127.992616] Mem-Info: [ 2128.003214] active_anon:22627 inactive_anon:32410 isolated_anon:0 [ 2128.003214] active_file:12 inactive_file:14 isolated_file:0 [ 2128.003214] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2128.003214] slab_reclaimable:12525 slab_unreclaimable:116233 [ 2128.003214] mapped:53251 shmem:33555 pagetables:771 bounce:0 [ 2128.003214] free:14077 free_pcp:4 free_cma:0 [ 2128.005127] Node 0 [ 2128.014730] (null) [ 2128.020313] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2128.026591] Node 0 active_anon:89628kB inactive_anon:88180kB active_file:44kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:204812kB dirty:0kB writeback:0kB shmem:92484kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2128.031677] lowmem_reserve[]: [ 2128.047992] syz-executor.4 cpuset= [ 2128.056817] 0 [ 2128.067262] Node 1 active_anon:880kB inactive_anon:41460kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8192kB dirty:0kB writeback:0kB shmem:41736kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2128.075258] 0 [ 2128.087586] / [ 2128.120694] 0 [ 2128.153008] Node 0 [ 2128.174430] 0 [ 2128.178703] DMA free:10948kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2128.218076] 0 [ 2128.242500] mems_allowed=0-1 [ 2128.247423] CPU: 0 PID: 13575 Comm: syz-executor.4 Not tainted 4.14.228-syzkaller #0 [ 2128.255285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2128.255291] Call Trace: [ 2128.267208] dump_stack+0x1b2/0x281 [ 2128.270836] warn_alloc.cold+0x96/0x1cc [ 2128.274799] ? zone_watermark_ok_safe+0x220/0x220 [ 2128.279609] Node 1 [ 2128.279631] ? usleep_range+0x130/0x130 [ 2128.279642] Normal free:26804kB min:53696kB low:67120kB high:80544kB active_anon:880kB inactive_anon:41460kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2128.279646] lowmem_reserve[]: [ 2128.281868] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2128.286020] 0 [ 2128.313408] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2128.313418] ? run_timer_softirq+0x5a0/0x5a0 [ 2128.313435] __alloc_pages_nodemask+0x2127/0x2720 [ 2128.313458] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2128.313469] ? migrate_swap_stop+0x880/0x880 [ 2128.313476] ? lock_acquire+0x170/0x3f0 [ 2128.313499] alloc_pages_current+0x155/0x260 [ 2128.313511] ion_page_pool_alloc+0x118/0x1b0 [ 2128.313521] ion_system_heap_allocate+0x133/0x8c0 [ 2128.313531] ? ion_alloc+0x187/0x810 [ 2128.313540] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2128.313547] ? ion_system_contig_heap_create+0x130/0x130 [ 2128.313556] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2128.313567] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2128.329726] 0 [ 2128.332928] ion_alloc+0x204/0x810 [ 2128.350484] 0 [ 2128.351021] ? ion_dma_buf_release+0x40/0x40 [ 2128.355393] 0 [ 2128.359795] ? __might_fault+0x177/0x1b0 [ 2128.359808] ion_ioctl+0xea/0x1f0 [ 2128.359817] ? ion_query_heaps+0x360/0x360 [ 2128.359828] ? ion_query_heaps+0x360/0x360 [ 2128.359837] do_vfs_ioctl+0x75a/0xff0 [ 2128.359846] ? ioctl_preallocate+0x1a0/0x1a0 [ 2128.359855] ? lock_downgrade+0x740/0x740 [ 2128.359867] ? __fget+0x225/0x360 [ 2128.359875] ? do_vfs_ioctl+0xff0/0xff0 [ 2128.359887] ? security_file_ioctl+0x83/0xb0 [ 2128.359897] SyS_ioctl+0x7f/0xb0 [ 2128.359903] ? do_vfs_ioctl+0xff0/0xff0 [ 2128.359914] do_syscall_64+0x1d5/0x640 [ 2128.359927] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2128.359935] RIP: 0033:0x466459 [ 2128.359939] RSP: 002b:00007f2dce80f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2128.359949] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2128.359954] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2128.359959] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2128.359963] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2128.359968] R13: 00007ffdf01d7adf R14: 00007f2dce80f300 R15: 0000000000022000 [ 2128.362460] lowmem_reserve[]: [ 2128.379428] 0 [ 2128.381420] 0 [ 2128.389433] 2717 2718 2718 2718 [ 2128.389450] Node 0 DMA32 free:18556kB min:36200kB low:45248kB high:54296kB active_anon:89588kB inactive_anon:88180kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7200kB pagetables:3036kB bounce:0kB free_pcp:16kB local_pcp:16kB free_cma:0kB [ 2128.389470] lowmem_reserve[]: 0 0 0 0 0 [ 2128.389489] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2128.389507] lowmem_reserve[]: 0 0 0 0 0 [ 2128.389523] Node 1 Normal free:26804kB min:53696kB low:67120kB high:80544kB active_anon:880kB inactive_anon:41460kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2128.389550] lowmem_reserve[]: 0 0 0 0 0 [ 2128.389574] Node 0 DMA: 79*4kB (UME) 41*8kB (UME) 20*16kB (UME) 8*32kB [ 2128.404447] Node 0 [ 2128.408902] (UM) [ 2128.414065] DMA: [ 2128.414786] 2*64kB [ 2128.431934] 79*4kB [ 2128.435907] (M) [ 2128.445962] (UME) [ 2128.447558] 5*128kB [ 2128.456159] 41*8kB [ 2128.461701] (UME) [ 2128.475628] (UME) [ 2128.486860] 1*256kB [ 2128.546878] 20*16kB [ 2128.712007] (E) 1*512kB (E) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 10948kB [ 2128.746860] Node 0 DMA32: 557*4kB (UME) 163*8kB (UME) 169*16kB (UME) 296*32kB (UME) 361*64kB (UME) 18*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 41116kB [ 2128.776921] (UME) 8*32kB (UM) 2*64kB (M) 5*128kB (UME) 1*256kB (E) 1*512kB (E) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 10948kB [ 2128.789100] Node 0 DMA32: 557*4kB (UME) 125*8kB (UME) 165*16kB (UME) 237*32kB (UME) 746*64kB (UME) 28*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 64780kB [ 2128.796861] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB [ 2128.804126] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2128.820072] 0*2048kB [ 2128.827736] Node 1 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 21*32kB (U) 5459*64kB (UM) 574*128kB (UM) 137*256kB (U) 49*512kB (U) 42*1024kB (U) 4*2048kB (U) 1*4096kB (U) = 539004kB [ 2128.827811] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2128.827848] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2128.827853] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2128.827859] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2128.827862] 34802 total pagecache pages [ 2128.827871] 0 pages in swap cache [ 2128.836849] 0*4096kB [ 2128.866838] Swap cache stats: add 0, delete 0, find 0/0 [ 2128.901774] = 0kB [ 2128.903947] Node 1 Normal: 1*4kB (M) 24*8kB (UM) 1*16kB (M) 21*32kB (U) 5459*64kB (UM) 574*128kB (UM) 137*256kB (U) 49*512kB (U) 42*1024kB (U) 4*2048kB (U) 1*4096kB (U) = 539188kB [ 2128.925970] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2128.935712] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2128.948688] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2128.960304] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2128.970495] Free swap = 0kB [ 2128.972041] 35037 total pagecache pages [ 2128.973510] Total swap = 0kB [ 2128.973517] 2097051 pages RAM [ 2128.973520] 0 pages HighMem/MovableOnly [ 2128.973523] 363846 pages reserved [ 2128.973526] 0 pages cma reserved [ 2128.973533] Out of memory (oom_kill_allocating_task): Kill process 12607 (syz-executor.3) score 0 or sacrifice child [ 2128.973559] Killed process 13564 (syz-executor.3) total-vm:93384kB, anon-rss:156kB, file-rss:34820kB, shmem-rss:0kB [ 2128.983664] oom_reaper: reaped process 13564 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2128.996387] 0 pages in swap cache [ 2129.030000] Swap cache stats: add 0, delete 0, find 0/0 [ 2129.035414] Free swap = 0kB [ 2129.038604] Total swap = 0kB [ 2129.041619] 2097051 pages RAM [ 2129.044777] 0 pages HighMem/MovableOnly [ 2129.056883] 363846 pages reserved [ 2129.060416] 0 pages cma reserved [ 2129.457055] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2129.480336] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2129.485554] CPU: 0 PID: 13575 Comm: syz-executor.4 Not tainted 4.14.228-syzkaller #0 [ 2129.493419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2129.502842] Call Trace: [ 2129.505415] dump_stack+0x1b2/0x281 [ 2129.509048] warn_alloc.cold+0x96/0x1cc [ 2129.513200] ? zone_watermark_ok_safe+0x220/0x220 [ 2129.518030] __alloc_pages_nodemask+0x2127/0x2720 [ 2129.522851] ? _raw_spin_unlock_irq+0x24/0x80 [ 2129.527325] ? lock_acquire+0x170/0x3f0 [ 2129.531279] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2129.536100] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2129.541527] ? __mutex_unlock_slowpath+0x75/0x770 [ 2129.546356] ? alloc_pages_current+0x16/0x260 [ 2129.550828] alloc_pages_current+0x155/0x260 [ 2129.555212] ion_page_pool_alloc+0x118/0x1b0 [ 2129.559691] ion_system_heap_allocate+0x133/0x8c0 [ 2129.564515] ? _raw_spin_unlock+0x29/0x40 [ 2129.568639] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2129.573645] ? ion_system_contig_heap_create+0x130/0x130 [ 2129.579071] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2129.584061] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2129.588879] ion_alloc+0x27a/0x810 [ 2129.592398] ? ion_dma_buf_release+0x40/0x40 [ 2129.596810] ? __might_fault+0x177/0x1b0 [ 2129.600848] ion_ioctl+0xea/0x1f0 [ 2129.604277] ? ion_query_heaps+0x360/0x360 [ 2129.608506] ? ion_query_heaps+0x360/0x360 [ 2129.612714] do_vfs_ioctl+0x75a/0xff0 [ 2129.616490] ? ioctl_preallocate+0x1a0/0x1a0 [ 2129.620873] ? lock_downgrade+0x740/0x740 [ 2129.625000] ? __fget+0x225/0x360 [ 2129.628440] ? do_vfs_ioctl+0xff0/0xff0 [ 2129.632388] ? security_file_ioctl+0x83/0xb0 [ 2129.636788] SyS_ioctl+0x7f/0xb0 [ 2129.640131] ? do_vfs_ioctl+0xff0/0xff0 [ 2129.644080] do_syscall_64+0x1d5/0x640 [ 2129.647946] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2129.653122] RIP: 0033:0x466459 [ 2129.656286] RSP: 002b:00007f2dce80f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2129.663970] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2129.671231] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2129.678480] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2129.685725] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2129.692967] R13: 00007ffdf01d7adf R14: 00007f2dce80f300 R15: 0000000000022000 [ 2129.717422] warn_alloc_show_mem: 1 callbacks suppressed [ 2129.717425] Mem-Info: [ 2129.735120] active_anon:22503 inactive_anon:32410 isolated_anon:0 [ 2129.735120] active_file:1093 inactive_file:1947 isolated_file:0 [ 2129.735120] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2129.735120] slab_reclaimable:12525 slab_unreclaimable:118126 [ 2129.735120] mapped:55082 shmem:33555 pagetables:734 bounce:0 [ 2129.735120] free:41181 free_pcp:309 free_cma:0 [ 2129.772312] Node 0 active_anon:89128kB inactive_anon:88180kB active_file:1948kB inactive_file:3604kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:207496kB dirty:0kB writeback:0kB shmem:92484kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2129.804339] Node 1 active_anon:884kB inactive_anon:41460kB active_file:2424kB inactive_file:4184kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:12832kB dirty:0kB writeback:0kB shmem:41736kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2129.835927] Node 0 DMA free:11000kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:4kB inactive_file:76kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2129.866065] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2129.871768] Node 0 DMA32 free:60564kB min:36200kB low:45248kB high:54296kB active_anon:89088kB inactive_anon:88180kB active_file:1836kB inactive_file:3536kB unevictable:0kB writepending:152kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7136kB pagetables:2888kB bounce:0kB free_pcp:552kB local_pcp:84kB free_cma:0kB [ 2129.904654] lowmem_reserve[]: 0 0 0 0 0 [ 2129.909343] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2129.939718] lowmem_reserve[]: 0 0 0 0 0 [ 2129.943733] Node 1 Normal free:94264kB min:53696kB low:67120kB high:80544kB active_anon:884kB inactive_anon:41460kB active_file:2540kB inactive_file:4172kB unevictable:0kB writepending:16kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:48kB bounce:0kB free_pcp:696kB local_pcp:696kB free_cma:0kB [ 2129.973950] lowmem_reserve[]: 0 0 0 0 0 [ 2129.978567] Node 0 DMA: 105*4kB (UE) 36*8kB (UME) 20*16kB (UME) 8*32kB (UM) 2*64kB (M) 5*128kB (UME) 1*256kB (E) 1*512kB (E) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 11012kB [ 2129.995125] Node 0 DMA32: 3623*4kB (U) 162*8kB (UE) 296*16kB (UE) 1291*32kB (UE) 2*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 61964kB [ 2130.009498] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2130.020668] Node 1 Normal: 4016*4kB (UM) 935*8kB (UM) 472*16kB (UM) 1972*32kB (UM) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 94264kB [ 2130.035218] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2130.045159] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2130.054232] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2130.063537] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2130.072633] 36659 total pagecache pages [ 2130.076613] 0 pages in swap cache [ 2130.080887] Swap cache stats: add 0, delete 0, find 0/0 [ 2130.086334] Free swap = 0kB [ 2130.090180] Total swap = 0kB [ 2130.093204] 2097051 pages RAM [ 2130.097512] 0 pages HighMem/MovableOnly [ 2130.101488] 363846 pages reserved [ 2130.104932] 0 pages cma reserved 06:43:10 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7ffffffd, 0x22}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="080025bd7000fbdbbe250e00b2f73aab913900c8e8689c00010000000500a900010000000800ec8e927450f05393cb9440de35fa69265559841959fd96de5ca0ee8a44bcd70a5d5f1cd652f18b8f0ac9726ab05fb94993544920d6cff3d536445d9d9efda308728bfe867d49529c81959f2791864be3c252bda08a6d6909fffc7d2602685ae3bd75e0397c177e8b"], 0x2c}, 0x1, 0x0, 0x0, 0x18004}, 0x10) 06:43:10 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7ffffffd, 0x22}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @empty, @broadcast}, &(0x7f0000000080)=0xc) 06:43:10 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000080)={0x34, 0x0, &(0x7f0000000040)}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7ffffffd, 0x22}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0x1}) 06:43:10 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7ffffffd, 0x22}) 06:43:10 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x7ffffffd, 0x22}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x1}) 06:43:10 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x1}) [ 2131.164267] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2131.164817] syz-executor.2: [ 2131.204116] syz-executor.1 cpuset= [ 2131.205608] syz-executor.3: [ 2131.212991] page allocation failure: order:4 [ 2131.214067] / [ 2131.216090] page allocation failure: order:4 [ 2131.229915] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2131.234046] mems_allowed=0-1 [ 2131.236519] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2131.254647] (null) [ 2131.259163] CPU: 1 PID: 13609 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 2131.268710] (null) [ 2131.271801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2131.271805] Call Trace: [ 2131.271822] dump_stack+0x1b2/0x281 [ 2131.271836] warn_alloc.cold+0x96/0x1cc [ 2131.276138] syz-executor.2 cpuset= [ 2131.283318] ? zone_watermark_ok_safe+0x220/0x220 [ 2131.283341] __alloc_pages_nodemask+0x2127/0x2720 [ 2131.283351] ? io_schedule_timeout+0x140/0x140 [ 2131.283367] ? lock_acquire+0x170/0x3f0 [ 2131.289853] syz-executor.3 cpuset= [ 2131.293536] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2131.293553] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2131.297908] / [ 2131.301905] ? __mutex_unlock_slowpath+0x75/0x770 [ 2131.309225] / [ 2131.311292] ? retint_kernel+0x2d/0x2d [ 2131.315289] mems_allowed=0-1 [ 2131.318775] alloc_pages_current+0x155/0x260 [ 2131.318788] ion_page_pool_alloc+0x118/0x1b0 [ 2131.318804] ion_system_heap_allocate+0x133/0x8c0 [ 2131.323647] mems_allowed=0-1 [ 2131.329161] ? ion_alloc+0x187/0x810 [ 2131.329171] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2131.329180] ? ion_system_contig_heap_create+0x130/0x130 [ 2131.329190] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2131.329200] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2131.329210] ion_alloc+0x204/0x810 [ 2131.388900] ? ion_dma_buf_release+0x40/0x40 [ 2131.393305] ? __might_fault+0x177/0x1b0 [ 2131.397369] ion_ioctl+0xea/0x1f0 [ 2131.400802] ? ion_query_heaps+0x360/0x360 [ 2131.405035] ? ion_query_heaps+0x360/0x360 [ 2131.409267] do_vfs_ioctl+0x75a/0xff0 [ 2131.413050] ? ioctl_preallocate+0x1a0/0x1a0 [ 2131.417436] ? lock_downgrade+0x740/0x740 [ 2131.421563] ? __fget+0x225/0x360 [ 2131.424996] ? do_vfs_ioctl+0xff0/0xff0 [ 2131.428964] ? security_file_ioctl+0x83/0xb0 [ 2131.433352] SyS_ioctl+0x7f/0xb0 [ 2131.436693] ? do_vfs_ioctl+0xff0/0xff0 [ 2131.440648] do_syscall_64+0x1d5/0x640 [ 2131.444522] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2131.449788] RIP: 0033:0x466459 [ 2131.452960] RSP: 002b:00007f27c4f46188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2131.460675] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2131.467930] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2131.475183] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2131.482432] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2131.489680] R13: 00007ffda0b0ca7f R14: 00007f27c4f46300 R15: 0000000000022000 [ 2131.496980] CPU: 0 PID: 13610 Comm: syz-executor.2 Not tainted 4.14.228-syzkaller #0 [ 2131.504870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2131.514209] Call Trace: [ 2131.516812] dump_stack+0x1b2/0x281 [ 2131.520438] warn_alloc.cold+0x96/0x1cc [ 2131.524516] ? zone_watermark_ok_safe+0x220/0x220 [ 2131.529388] __alloc_pages_nodemask+0x2127/0x2720 [ 2131.534231] ? lock_acquire+0x170/0x3f0 [ 2131.538204] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2131.543046] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2131.548495] ? __mutex_unlock_slowpath+0x75/0x770 [ 2131.553339] alloc_pages_current+0x155/0x260 [ 2131.557748] ion_page_pool_alloc+0x118/0x1b0 [ 2131.562162] ion_system_heap_allocate+0x133/0x8c0 [ 2131.567015] ? ion_alloc+0x187/0x810 [ 2131.570727] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2131.576176] ? ion_system_contig_heap_create+0x130/0x130 [ 2131.581622] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2131.586642] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2131.591481] ion_alloc+0x204/0x810 [ 2131.595022] ? ion_dma_buf_release+0x40/0x40 [ 2131.599428] ? __might_fault+0x177/0x1b0 [ 2131.603486] ion_ioctl+0xea/0x1f0 [ 2131.606935] ? ion_query_heaps+0x360/0x360 [ 2131.611168] ? ion_query_heaps+0x360/0x360 [ 2131.615416] do_vfs_ioctl+0x75a/0xff0 [ 2131.619215] ? ioctl_preallocate+0x1a0/0x1a0 [ 2131.623701] ? lock_downgrade+0x740/0x740 [ 2131.627864] ? __fget+0x225/0x360 [ 2131.631311] ? do_vfs_ioctl+0xff0/0xff0 [ 2131.635284] ? security_file_ioctl+0x83/0xb0 [ 2131.639695] SyS_ioctl+0x7f/0xb0 [ 2131.643056] ? do_vfs_ioctl+0xff0/0xff0 [ 2131.647020] do_syscall_64+0x1d5/0x640 [ 2131.650904] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2131.656085] RIP: 0033:0x466459 [ 2131.659265] RSP: 002b:00007fb129331188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2131.666985] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2131.674248] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2131.681509] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2131.688770] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2131.696125] R13: 00007ffd0a29ad5f R14: 00007fb129331300 R15: 0000000000022000 [ 2131.770103] CPU: 0 PID: 13602 Comm: syz-executor.3 Not tainted 4.14.228-syzkaller #0 [ 2131.778017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2131.787369] Call Trace: [ 2131.789962] dump_stack+0x1b2/0x281 [ 2131.793591] warn_alloc.cold+0x96/0x1cc [ 2131.797653] ? zone_watermark_ok_safe+0x220/0x220 [ 2131.802509] __alloc_pages_nodemask+0x2127/0x2720 [ 2131.807349] ? _raw_spin_unlock_irq+0x24/0x80 [ 2131.811844] ? lock_acquire+0x170/0x3f0 [ 2131.815817] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2131.820664] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2131.826110] ? __mutex_unlock_slowpath+0x75/0x770 [ 2131.830965] alloc_pages_current+0x155/0x260 [ 2131.835354] ion_page_pool_alloc+0x118/0x1b0 [ 2131.839742] ion_system_heap_allocate+0x133/0x8c0 [ 2131.844565] ? ion_alloc+0x187/0x810 [ 2131.848258] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2131.853721] ? ion_system_contig_heap_create+0x130/0x130 [ 2131.859150] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2131.864160] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2131.868980] ion_alloc+0x204/0x810 [ 2131.872502] ? ion_dma_buf_release+0x40/0x40 [ 2131.876891] ? __might_fault+0x177/0x1b0 [ 2131.880930] ion_ioctl+0xea/0x1f0 [ 2131.884362] ? ion_query_heaps+0x360/0x360 [ 2131.888578] ? ion_query_heaps+0x360/0x360 [ 2131.892789] do_vfs_ioctl+0x75a/0xff0 [ 2131.896620] ? ioctl_preallocate+0x1a0/0x1a0 [ 2131.901004] ? lock_downgrade+0x740/0x740 [ 2131.905136] ? __fget+0x225/0x360 [ 2131.908568] ? do_vfs_ioctl+0xff0/0xff0 [ 2131.912520] ? security_file_ioctl+0x83/0xb0 [ 2131.916907] SyS_ioctl+0x7f/0xb0 [ 2131.920251] ? do_vfs_ioctl+0xff0/0xff0 [ 2131.924203] do_syscall_64+0x1d5/0x640 [ 2131.928073] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2131.933251] RIP: 0033:0x466459 [ 2131.936418] RSP: 002b:00007f6a11946188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2131.944101] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2131.951363] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2131.958611] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2131.965858] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2131.973106] R13: 00007ffe41ae227f R14: 00007f6a11946300 R15: 0000000000022000 [ 2132.229455] Mem-Info: [ 2132.263650] active_anon:22685 inactive_anon:32409 isolated_anon:0 [ 2132.263650] active_file:1639 inactive_file:4989 isolated_file:0 [ 2132.263650] unevictable:0 dirty:54 writeback:0 unstable:0 [ 2132.263650] slab_reclaimable:12516 slab_unreclaimable:117917 [ 2132.263650] mapped:49064 shmem:33554 pagetables:785 bounce:0 [ 2132.263650] free:293637 free_pcp:347 free_cma:0 [ 2132.430323] Node 0 active_anon:89860kB inactive_anon:88176kB active_file:2984kB inactive_file:16816kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:182928kB dirty:184kB writeback:0kB shmem:92480kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2132.531488] Node 1 active_anon:880kB inactive_anon:41460kB active_file:3572kB inactive_file:3140kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:13328kB dirty:32kB writeback:0kB shmem:41736kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2132.624153] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2132.624266] syz-executor.1: [ 2132.645736] Node 0 DMA free:11112kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:16kB inactive_file:64kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2132.661179] syz-executor.4 cpuset= [ 2132.686279] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2132.715747] / mems_allowed=0-1 [ 2132.721681] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2132.726653] CPU: 1 PID: 13604 Comm: syz-executor.4 Not tainted 4.14.228-syzkaller #0 [ 2132.734666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2132.739143] lowmem_reserve[]: [ 2132.744009] Call Trace: [ 2132.744026] dump_stack+0x1b2/0x281 [ 2132.744039] warn_alloc.cold+0x96/0x1cc [ 2132.757261] ? zone_watermark_ok_safe+0x220/0x220 [ 2132.762114] __alloc_pages_nodemask+0x2127/0x2720 [ 2132.765359] 0 [ 2132.766953] ? lock_acquire+0x170/0x3f0 [ 2132.766967] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2132.766983] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2132.773156] 2717 [ 2132.777548] ? __mutex_unlock_slowpath+0x75/0x770 [ 2132.777563] alloc_pages_current+0x155/0x260 [ 2132.777576] ion_page_pool_alloc+0x118/0x1b0 [ 2132.777586] ion_system_heap_allocate+0x133/0x8c0 [ 2132.794754] 2718 [ 2132.798664] ? ion_alloc+0x187/0x810 [ 2132.798675] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2132.798685] ? ion_system_contig_heap_create+0x130/0x130 [ 2132.798696] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2132.814538] 2718 [ 2132.814718] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2132.831057] 2718 [ 2132.831985] ion_alloc+0x204/0x810 [ 2132.831998] ? ion_dma_buf_release+0x40/0x40 [ 2132.841970] ? __might_fault+0x177/0x1b0 [ 2132.842413] Node 0 [ 2132.846017] ion_ioctl+0xea/0x1f0 [ 2132.846026] ? ion_query_heaps+0x360/0x360 [ 2132.846039] ? ion_query_heaps+0x360/0x360 [ 2132.860250] do_vfs_ioctl+0x75a/0xff0 [ 2132.861359] DMA32 free:259088kB min:36200kB low:45248kB high:54296kB active_anon:89420kB inactive_anon:88176kB active_file:3376kB inactive_file:15652kB unevictable:0kB writepending:184kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7296kB pagetables:3092kB bounce:0kB free_pcp:240kB local_pcp:92kB free_cma:0kB [ 2132.864038] ? ioctl_preallocate+0x1a0/0x1a0 [ 2132.864047] ? lock_downgrade+0x740/0x740 [ 2132.864060] ? __fget+0x225/0x360 [ 2132.904966] ? do_vfs_ioctl+0xff0/0xff0 [ 2132.908943] ? security_file_ioctl+0x83/0xb0 [ 2132.913334] SyS_ioctl+0x7f/0xb0 [ 2132.916782] ? do_vfs_ioctl+0xff0/0xff0 [ 2132.920835] do_syscall_64+0x1d5/0x640 [ 2132.924718] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2132.929895] RIP: 0033:0x466459 [ 2132.933071] RSP: 002b:00007f2dce80f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2132.940773] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2132.948029] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2132.955279] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2132.961014] lowmem_reserve[]: [ 2132.962546] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2132.962551] R13: 00007ffdf01d7adf R14: 00007f2dce80f300 R15: 0000000000022000 [ 2132.992732] CPU: 0 PID: 13614 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 2133.000621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2133.009966] Call Trace: [ 2133.012551] dump_stack+0x1b2/0x281 [ 2133.016186] warn_alloc.cold+0x96/0x1cc [ 2133.020156] ? zone_watermark_ok_safe+0x220/0x220 [ 2133.025032] __alloc_pages_nodemask+0x2127/0x2720 [ 2133.029982] ? __schedule+0x893/0x1de0 [ 2133.033875] ? lock_acquire+0x170/0x3f0 [ 2133.037872] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2133.042736] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2133.048206] ? __mutex_unlock_slowpath+0x75/0x770 [ 2133.053046] alloc_pages_current+0x155/0x260 [ 2133.057451] ion_page_pool_alloc+0x118/0x1b0 [ 2133.061856] ion_system_heap_allocate+0x133/0x8c0 [ 2133.066702] ? ion_alloc+0x187/0x810 [ 2133.070408] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2133.075853] ? ion_system_contig_heap_create+0x130/0x130 [ 2133.081301] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2133.086315] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2133.091155] ion_alloc+0x204/0x810 [ 2133.094697] ? ion_dma_buf_release+0x40/0x40 [ 2133.099099] ? __might_fault+0x177/0x1b0 [ 2133.103152] ion_ioctl+0xea/0x1f0 [ 2133.106601] ? ion_query_heaps+0x360/0x360 [ 2133.110837] ? ion_query_heaps+0x360/0x360 [ 2133.115067] do_vfs_ioctl+0x75a/0xff0 [ 2133.118864] ? ioctl_preallocate+0x1a0/0x1a0 [ 2133.123270] ? lock_downgrade+0x740/0x740 [ 2133.127416] ? __fget+0x225/0x360 [ 2133.130868] ? do_vfs_ioctl+0xff0/0xff0 [ 2133.134836] ? security_file_ioctl+0x83/0xb0 [ 2133.139239] SyS_ioctl+0x7f/0xb0 [ 2133.142597] ? do_vfs_ioctl+0xff0/0xff0 [ 2133.146611] do_syscall_64+0x1d5/0x640 [ 2133.150497] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2133.155683] RIP: 0033:0x466459 [ 2133.158867] RSP: 002b:00007f27c4f25188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2133.166571] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2133.173834] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2133.181099] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2133.188471] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2133.195730] R13: 00007ffda0b0ca7f R14: 00007f27c4f25300 R15: 0000000000022000 [ 2133.240263] 0 0 0 0 0 [ 2133.251245] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2133.291389] lowmem_reserve[]: 0 0 0 0 0 [ 2133.306973] Node 1 Normal free:532468kB min:53696kB low:67120kB high:80544kB active_anon:840kB inactive_anon:41460kB active_file:3668kB inactive_file:3068kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:48kB bounce:0kB free_pcp:712kB local_pcp:0kB free_cma:0kB [ 2133.362681] lowmem_reserve[]: 0 0 0 0 0 [ 2133.373625] Node 0 DMA: 146*4kB (UE) 36*8kB (UME) 20*16kB (UME) 8*32kB (UM) 3*64kB (UM) 4*128kB (ME) 1*256kB (E) 1*512kB (E) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 11112kB [ 2133.407919] Node 0 DMA32: 81*4kB (UME) 134*8kB (UME) 142*16kB (UME) 2764*32kB (UME) 583*64kB (U) 16*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 131476kB [ 2133.434555] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2133.445459] Node 1 Normal: 16264*4kB (U) 9258*8kB (U) 7131*16kB (U) 5934*32kB (UM) 1167*64kB (U) 109*128kB (U) 4*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 532768kB [ 2133.469146] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2133.493513] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2133.504720] warn_alloc_show_mem: 2 callbacks suppressed [ 2133.504723] Mem-Info: [ 2133.512806] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2133.528256] active_anon:22647 inactive_anon:32410 isolated_anon:0 [ 2133.528256] active_file:1904 inactive_file:4781 isolated_file:0 [ 2133.528256] unevictable:0 dirty:7 writeback:0 unstable:0 [ 2133.528256] slab_reclaimable:12516 slab_unreclaimable:118449 [ 2133.528256] mapped:49126 shmem:33553 pagetables:775 bounce:0 [ 2133.528256] free:168243 free_pcp:357 free_cma:0 [ 2133.530990] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2133.648176] Node 0 active_anon:89748kB inactive_anon:88180kB active_file:3948kB inactive_file:16356kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:203784kB dirty:24kB writeback:0kB shmem:92476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2133.650692] 40281 total pagecache pages [ 2133.690525] Node 1 active_anon:840kB inactive_anon:41460kB active_file:3668kB inactive_file:3068kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:13420kB dirty:4kB writeback:0kB shmem:41736kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2133.733188] 0 pages in swap cache [ 2133.736775] Swap cache stats: add 0, delete 0, find 0/0 [ 2133.741594] Node 0 DMA free:11112kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:16kB inactive_file:64kB unevictable:0kB writepending:4kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2133.760740] Free swap = 0kB [ 2133.776948] Total swap = 0kB [ 2133.796128] 2097051 pages RAM [ 2133.800414] lowmem_reserve[]: 0 2717 2718 [ 2133.802660] 0 pages HighMem/MovableOnly [ 2133.805719] 2718 2718 [ 2133.820086] Node 0 DMA32 free:44800kB min:36200kB low:45248kB high:54296kB active_anon:89708kB inactive_anon:88180kB active_file:3932kB inactive_file:16292kB unevictable:0kB writepending:20kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7264kB pagetables:3052kB bounce:0kB free_pcp:336kB local_pcp:184kB free_cma:0kB [ 2133.821157] 363846 pages reserved [ 2133.855289] lowmem_reserve[]: 0 0 0 0 0 [ 2133.873238] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2133.911941] 0 pages cma reserved [ 2133.928778] lowmem_reserve[]: 0 0 0 0 0 [ 2133.954454] Node 1 Normal free:284148kB min:53696kB low:67120kB high:80544kB active_anon:852kB inactive_anon:41460kB active_file:3672kB inactive_file:3064kB unevictable:0kB writepending:20kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:132kB bounce:0kB free_pcp:392kB local_pcp:180kB free_cma:0kB [ 2133.988122] lowmem_reserve[]: 0 0 0 0 0 [ 2134.003331] Node 0 DMA: 146*4kB (UE) 36*8kB (UME) 20*16kB (UME) 8*32kB (UM) 3*64kB (UM) 4*128kB (ME) 1*256kB (E) 1*512kB (E) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 11112kB [ 2134.033019] Node 0 DMA32: 16*4kB (E) 80*8kB (UE) 132*16kB (ME) 72*32kB (UME) 586*64kB (UM) 14*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 44416kB [ 2134.051437] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2134.084909] Node 1 Normal: 0*4kB 2*8kB (UM) 1*16kB (U) 1764*32kB (UM) 1167*64kB (U) 109*128kB (U) 3*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 145888kB [ 2134.126345] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2134.135194] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2134.220191] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2134.282942] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2134.304954] 34487 total pagecache pages [ 2134.308990] 0 pages in swap cache [ 2134.312431] Swap cache stats: add 0, delete 0, find 0/0 [ 2134.345369] Free swap = 0kB [ 2134.348444] Total swap = 0kB [ 2134.351466] 2097051 pages RAM [ 2134.354556] 0 pages HighMem/MovableOnly [ 2134.360870] 363846 pages reserved [ 2134.364493] 0 pages cma reserved [ 2134.474826] oom_reaper: reaped process 13609 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2134.548144] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2134.564544] systemd-journal cpuset=/ mems_allowed=0-1 [ 2134.566301] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2134.569780] CPU: 0 PID: 11447 Comm: systemd-journal Not tainted 4.14.228-syzkaller #0 [ 2134.581605] syz-executor.1: [ 2134.589476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2134.589480] Call Trace: [ 2134.589494] dump_stack+0x1b2/0x281 [ 2134.589506] dump_header+0x178/0x82f [ 2134.592499] syz-executor.1: [ 2134.601826] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2134.601835] ? ___ratelimit+0x2cd/0x530 [ 2134.601844] oom_kill_process.cold+0x10/0xb18 [ 2134.601861] out_of_memory+0xe3e/0x1190 [ 2134.601872] ? oom_killer_disable+0x1c0/0x1c0 [ 2134.601879] ? mutex_trylock+0x152/0x1a0 [ 2134.601890] __alloc_pages_nodemask+0x23e1/0x2720 [ 2134.601909] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2134.601932] alloc_pages_current+0x155/0x260 [ 2134.601940] filemap_fault+0xea3/0x1980 [ 2134.601958] ext4_filemap_fault+0x84/0xb0 [ 2134.601967] __do_fault+0xfa/0x380 [ 2134.601977] __handle_mm_fault+0x2497/0x4620 [ 2134.601986] ? ep_poll+0x1ab/0xa50 [ 2134.601993] ? vm_insert_page+0x7c0/0x7c0 [ 2134.602012] handle_mm_fault+0x391/0x860 [ 2134.604656] syz-executor.4: [ 2134.608264] __do_page_fault+0x549/0xad0 [ 2134.608276] ? spurious_fault+0x640/0x640 [ 2134.614938] page allocation failure: order:0 [ 2134.614959] ? do_page_fault+0x60/0x500 [ 2134.620085] page allocation failure: order:0 [ 2134.624001] ? page_fault+0x2f/0x50 [ 2134.631832] page allocation failure: order:0 [ 2134.632436] page_fault+0x45/0x50 [ 2134.649673] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2134.650602] RIP: 0001:0xffffffffffffffff [ 2134.654982] (null) [ 2134.658928] RSP: 8e5f51e0:00007fff6ebf8750 EFLAGS: 7fff6ebf8560 [ 2134.662235] Mem-Info: [ 2134.663098] syz-executor.2 cpuset= [ 2134.666648] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2134.666656] syz-executor.1 cpuset= [ 2134.674103] / [ 2134.754787] / [ 2134.760032] active_anon:22691 inactive_anon:32410 isolated_anon:0 [ 2134.760032] active_file:0 inactive_file:36 isolated_file:0 [ 2134.760032] unevictable:0 dirty:29 writeback:0 unstable:0 [ 2134.760032] slab_reclaimable:12515 slab_unreclaimable:118494 [ 2134.760032] mapped:53377 shmem:33553 pagetables:819 bounce:0 [ 2134.760032] free:13797 free_pcp:72 free_cma:0 [ 2134.771680] syz-executor.1 cpuset= [ 2134.803197] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2134.804637] / [ 2134.806759] (null) [ 2134.813877] mems_allowed=0-1 [ 2134.815523] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2134.825921] CPU: 0 PID: 13604 Comm: syz-executor.4 Not tainted 4.14.228-syzkaller #0 [ 2134.833783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2134.843115] Call Trace: [ 2134.845698] dump_stack+0x1b2/0x281 [ 2134.849328] warn_alloc.cold+0x96/0x1cc [ 2134.853295] ? zone_watermark_ok_safe+0x220/0x220 [ 2134.858130] ? usleep_range+0x130/0x130 [ 2134.862095] ? try_to_free_pages+0x23f/0x6e0 [ 2134.866490] ? _find_next_bit+0xdb/0x100 [ 2134.870549] ? run_timer_softirq+0x5a0/0x5a0 [ 2134.874971] __alloc_pages_nodemask+0x2127/0x2720 [ 2134.879806] ? lock_acquire+0x170/0x3f0 [ 2134.883778] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2134.888700] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2134.893288] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2134.898740] alloc_pages_current+0x155/0x260 [ 2134.903141] ion_page_pool_alloc+0x118/0x1b0 [ 2134.907539] ion_system_heap_allocate+0x133/0x8c0 [ 2134.912374] ? ion_alloc+0x187/0x810 [ 2134.916086] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2134.921519] ? ion_system_contig_heap_create+0x130/0x130 [ 2134.926958] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2134.931966] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2134.936801] ion_alloc+0x204/0x810 [ 2134.940336] ? ion_dma_buf_release+0x40/0x40 [ 2134.944733] ? __might_fault+0x177/0x1b0 [ 2134.948790] ion_ioctl+0xea/0x1f0 [ 2134.952235] ? ion_query_heaps+0x360/0x360 [ 2134.956464] ? ion_query_heaps+0x360/0x360 [ 2134.960697] do_vfs_ioctl+0x75a/0xff0 [ 2134.964517] ? ioctl_preallocate+0x1a0/0x1a0 [ 2134.968916] ? lock_downgrade+0x740/0x740 [ 2134.973057] ? __fget+0x225/0x360 [ 2134.976502] ? do_vfs_ioctl+0xff0/0xff0 [ 2134.980489] ? security_file_ioctl+0x83/0xb0 [ 2134.984899] SyS_ioctl+0x7f/0xb0 [ 2134.988253] ? do_vfs_ioctl+0xff0/0xff0 [ 2134.992220] do_syscall_64+0x1d5/0x640 [ 2134.996097] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2135.001268] RIP: 0033:0x466459 [ 2135.004442] RSP: 002b:00007f2dce80f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2135.012132] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2135.019479] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2135.026737] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2135.034002] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2135.041259] R13: 00007ffdf01d7adf R14: 00007f2dce80f300 R15: 0000000000022000 [ 2135.049607] Node 0 active_anon:89852kB inactive_anon:88180kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:204416kB dirty:0kB writeback:0kB shmem:92476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2135.055526] CPU: 1 PID: 13614 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 2135.077227] Node 1 active_anon:884kB inactive_anon:41460kB active_file:8kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8836kB dirty:0kB writeback:0kB shmem:41736kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2135.085147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2135.114184] mems_allowed=0-1 [ 2135.123552] Call Trace: [ 2135.123570] dump_stack+0x1b2/0x281 [ 2135.123583] warn_alloc.cold+0x96/0x1cc [ 2135.136203] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2135.136789] ? zone_watermark_ok_safe+0x220/0x220 [ 2135.136801] ? usleep_range+0x130/0x130 [ 2135.171728] ? try_to_free_pages+0x23f/0x6e0 [ 2135.176110] ? _find_next_bit+0xdb/0x100 [ 2135.180149] ? run_timer_softirq+0x5a0/0x5a0 [ 2135.184541] __alloc_pages_nodemask+0x2127/0x2720 [ 2135.186193] lowmem_reserve[]: 0 2717 [ 2135.189452] ? lock_acquire+0x170/0x3f0 [ 2135.189466] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2135.193142] 2718 [ 2135.197092] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2135.197106] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2135.197115] ? lock_release+0x441/0x870 [ 2135.216190] 2718 2718 [ 2135.217894] ? policy_node+0x35/0x110 [ 2135.220395] alloc_pages_current+0x155/0x260 [ 2135.224164] Node 0 [ 2135.228552] ion_page_pool_alloc+0x118/0x1b0 [ 2135.228561] ion_system_heap_allocate+0x133/0x8c0 [ 2135.228570] ? ion_alloc+0x187/0x810 [ 2135.243656] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2135.246204] DMA32 free:17464kB min:36200kB low:45248kB high:54296kB active_anon:89812kB inactive_anon:88180kB active_file:32kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7264kB pagetables:3144kB bounce:0kB free_pcp:184kB local_pcp:8kB free_cma:0kB [ 2135.249086] ? ion_system_contig_heap_create+0x130/0x130 [ 2135.282609] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2135.287607] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2135.292433] ion_alloc+0x204/0x810 [ 2135.295954] ? ion_dma_buf_release+0x40/0x40 [ 2135.300346] ? __might_fault+0x177/0x1b0 [ 2135.304392] ion_ioctl+0xea/0x1f0 [ 2135.306214] lowmem_reserve[]: 0 [ 2135.307943] ? ion_query_heaps+0x360/0x360 [ 2135.307954] ? ion_query_heaps+0x360/0x360 [ 2135.311208] 0 [ 2135.315419] do_vfs_ioctl+0x75a/0xff0 [ 2135.325315] ? ioctl_preallocate+0x1a0/0x1a0 [ 2135.329702] ? lock_downgrade+0x740/0x740 [ 2135.333830] ? __fget+0x225/0x360 [ 2135.336183] 0 0 [ 2135.337261] ? do_vfs_ioctl+0xff0/0xff0 [ 2135.337272] ? security_file_ioctl+0x83/0xb0 [ 2135.339219] 0 [ 2135.343174] SyS_ioctl+0x7f/0xb0 [ 2135.352685] ? do_vfs_ioctl+0xff0/0xff0 [ 2135.356640] do_syscall_64+0x1d5/0x640 [ 2135.356642] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2135.360527] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2135.391340] RIP: 0033:0x466459 [ 2135.394509] RSP: 002b:00007f27c4f25188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2135.402218] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2135.409552] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2135.416178] lowmem_reserve[]: [ 2135.416801] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2135.416808] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2135.419889] 0 [ 2135.427136] R13: 00007ffda0b0ca7f R14: 00007f27c4f25300 R15: 0000000000022000 [ 2135.444885] CPU: 0 PID: 13609 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 2135.452772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2135.462116] Call Trace: [ 2135.464718] dump_stack+0x1b2/0x281 [ 2135.468359] warn_alloc.cold+0x96/0x1cc [ 2135.469677] mems_allowed=0-1 [ 2135.472320] ? zone_watermark_ok_safe+0x220/0x220 [ 2135.480226] ? usleep_range+0x130/0x130 [ 2135.484191] ? try_to_free_pages+0x23f/0x6e0 [ 2135.488590] ? _find_next_bit+0xdb/0x100 [ 2135.492645] ? run_timer_softirq+0x5a0/0x5a0 [ 2135.497058] __alloc_pages_nodemask+0x2127/0x2720 [ 2135.501896] ? lock_acquire+0x170/0x3f0 [ 2135.505882] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2135.510710] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2135.515207] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2135.520665] alloc_pages_current+0x155/0x260 [ 2135.525063] ion_page_pool_alloc+0x118/0x1b0 [ 2135.529458] ion_system_heap_allocate+0x133/0x8c0 [ 2135.534292] ? ion_alloc+0x187/0x810 [ 2135.538000] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2135.543442] ? ion_system_contig_heap_create+0x130/0x130 [ 2135.548992] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2135.553996] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2135.558826] ion_alloc+0x204/0x810 [ 2135.562362] ? ion_dma_buf_release+0x40/0x40 [ 2135.566764] ? __might_fault+0x177/0x1b0 [ 2135.570820] ion_ioctl+0xea/0x1f0 [ 2135.574258] ? ion_query_heaps+0x360/0x360 [ 2135.578482] ? ion_query_heaps+0x360/0x360 [ 2135.582795] do_vfs_ioctl+0x75a/0xff0 [ 2135.586599] ? ioctl_preallocate+0x1a0/0x1a0 [ 2135.590999] ? lock_downgrade+0x740/0x740 [ 2135.595133] ? __fget+0x225/0x360 [ 2135.598572] ? do_vfs_ioctl+0xff0/0xff0 [ 2135.602623] ? security_file_ioctl+0x83/0xb0 [ 2135.607033] SyS_ioctl+0x7f/0xb0 [ 2135.610389] ? do_vfs_ioctl+0xff0/0xff0 [ 2135.614347] do_syscall_64+0x1d5/0x640 [ 2135.618226] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2135.623408] RIP: 0033:0x466459 [ 2135.626585] RSP: 002b:00007f27c4f46188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2135.634285] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2135.641538] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2135.648800] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2135.656160] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2135.663420] R13: 00007ffda0b0ca7f R14: 00007f27c4f46300 R15: 0000000000022000 [ 2135.673385] CPU: 1 PID: 13610 Comm: syz-executor.2 Not tainted 4.14.228-syzkaller #0 [ 2135.673448] warn_alloc_show_mem: 1 callbacks suppressed [ 2135.673451] Mem-Info: [ 2135.681367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2135.681371] Call Trace: [ 2135.681387] dump_stack+0x1b2/0x281 [ 2135.681416] warn_alloc.cold+0x96/0x1cc [ 2135.681428] ? zone_watermark_ok_safe+0x220/0x220 [ 2135.686932] active_anon:22684 inactive_anon:32410 isolated_anon:0 [ 2135.686932] active_file:10 inactive_file:11 isolated_file:0 [ 2135.686932] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2135.686932] slab_reclaimable:12515 slab_unreclaimable:118397 [ 2135.686932] mapped:53313 shmem:33553 pagetables:819 bounce:0 [ 2135.686932] free:13686 free_pcp:88 free_cma:0 [ 2135.689277] ? usleep_range+0x130/0x130 [ 2135.698670] 0 [ 2135.701183] ? try_to_free_pages+0x23f/0x6e0 [ 2135.704778] 0 [ 2135.708731] ? _find_next_bit+0xdb/0x100 [ 2135.708742] ? run_timer_softirq+0x5a0/0x5a0 [ 2135.708758] __alloc_pages_nodemask+0x2127/0x2720 [ 2135.713606] Node 0 active_anon:89852kB inactive_anon:88180kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:204416kB dirty:0kB writeback:0kB shmem:92476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2135.746726] ? lock_acquire+0x170/0x3f0 [ 2135.746744] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2135.750693] 0 [ 2135.752475] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2135.756872] 0 [ 2135.758644] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2135.767150] alloc_pages_current+0x155/0x260 [ 2135.767161] ion_page_pool_alloc+0x118/0x1b0 [ 2135.771973] Node 1 [ 2135.799533] ion_system_heap_allocate+0x133/0x8c0 [ 2135.799542] ? ion_alloc+0x187/0x810 [ 2135.799554] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2135.803529] Node 1 active_anon:884kB inactive_anon:41460kB active_file:8kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8836kB dirty:0kB writeback:0kB shmem:41736kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2135.808333] ? ion_system_contig_heap_create+0x130/0x130 [ 2135.808342] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2135.808353] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2135.810130] Node 0 [ 2135.814601] ion_alloc+0x204/0x810 [ 2135.816398] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2135.821811] ? ion_dma_buf_release+0x40/0x40 [ 2135.826287] lowmem_reserve[]: [ 2135.830664] ? __might_fault+0x177/0x1b0 [ 2135.832953] 0 [ 2135.837776] ion_ioctl+0xea/0x1f0 [ 2135.837790] ? ion_query_heaps+0x360/0x360 [ 2135.837802] ? ion_query_heaps+0x360/0x360 [ 2135.841512] Normal free:26308kB min:53696kB low:67120kB high:80544kB active_anon:884kB inactive_anon:41460kB active_file:8kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:132kB bounce:0kB free_pcp:168kB local_pcp:48kB free_cma:0kB [ 2135.846930] do_vfs_ioctl+0x75a/0xff0 [ 2135.846941] ? ioctl_preallocate+0x1a0/0x1a0 [ 2135.846951] ? lock_downgrade+0x740/0x740 [ 2135.873826] 2717 [ 2135.879246] ? __fget+0x225/0x360 [ 2135.879258] ? do_vfs_ioctl+0xff0/0xff0 [ 2135.884246] 2718 [ 2135.889066] ? security_file_ioctl+0x83/0xb0 [ 2135.889079] SyS_ioctl+0x7f/0xb0 [ 2135.889088] ? do_vfs_ioctl+0xff0/0xff0 [ 2135.891298] 2718 [ 2135.894830] do_syscall_64+0x1d5/0x640 [ 2135.920501] lowmem_reserve[]: [ 2135.924876] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2135.927965] 0 [ 2135.931990] RIP: 0033:0x466459 [ 2135.933760] 0 [ 2135.937186] RSP: 002b:00007fb129331188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2135.937196] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2135.937201] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2135.937207] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2135.941414] 0 [ 2135.945622] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2135.973468] 2718 [ 2135.977223] R13: 00007ffd0a29ad5f R14: 00007fb129331300 R15: 0000000000022000 [ 2136.082147] 0 0 [ 2136.084832] Node 0 DMA: 101*4kB (UME) 41*8kB (UME) 20*16kB (UME) 8*32kB (UM) 3*64kB (UM) 4*128kB (ME) 1*256kB (E) 1*512kB (E) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 10972kB [ 2136.104390] Node 0 DMA32: 478*4kB (UME) 117*8kB (UME) 168*16kB (UME) 37*32kB (UME) 173*64kB (UM) 13*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19456kB [ 2136.126642] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2136.159151] Node 1 Normal: 2*4kB (UM) 0*8kB 1*16kB (U) 2*32kB (UM) 1793*64kB (UM) 259*128kB (UM) 35*256kB (UM) 13*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 163608kB [ 2136.178700] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2136.205866] IPVS: ftp: loaded support on port[0] = 21 [ 2136.214218] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2136.254826] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2136.288995] Node 0 DMA32 free:24700kB min:36200kB low:45248kB high:54296kB active_anon:89712kB inactive_anon:88180kB active_file:28kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7264kB pagetables:3144kB bounce:0kB free_pcp:828kB local_pcp:136kB free_cma:0kB [ 2136.337390] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2136.345986] 35283 total pagecache pages [ 2136.370013] 0 pages in swap cache [ 2136.373511] Swap cache stats: add 0, delete 0, find 0/0 [ 2136.447850] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2136.448267] Free swap = 0kB [ 2136.460407] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2136.474184] lowmem_reserve[]: 0 0 0 0 0 [ 2136.497283] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2136.541673] Total swap = 0kB [ 2136.544727] 2097051 pages RAM [ 2136.548839] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2136.553967] CPU: 1 PID: 13614 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 2136.556324] 0 pages HighMem/MovableOnly [ 2136.561837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2136.565790] 363846 pages reserved [ 2136.575118] Call Trace: [ 2136.575135] dump_stack+0x1b2/0x281 [ 2136.575148] warn_alloc.cold+0x96/0x1cc [ 2136.575160] ? zone_watermark_ok_safe+0x220/0x220 [ 2136.593676] __alloc_pages_nodemask+0x2127/0x2720 [ 2136.598514] ? lock_acquire+0x170/0x3f0 [ 2136.602485] ? lock_acquire+0x170/0x3f0 [ 2136.606456] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2136.611315] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2136.616762] ? __mutex_unlock_slowpath+0x75/0x770 [ 2136.621600] alloc_pages_current+0x155/0x260 [ 2136.625957] lowmem_reserve[]: [ 2136.626190] ion_page_pool_alloc+0x118/0x1b0 [ 2136.626198] ion_system_heap_allocate+0x133/0x8c0 [ 2136.626208] ? _raw_spin_unlock+0x29/0x40 [ 2136.629292] 0 [ 2136.633677] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2136.646062] 0 pages cma reserved [ 2136.649310] ? ion_system_contig_heap_create+0x130/0x130 [ 2136.652654] Out of memory (oom_kill_allocating_task): Kill process 11447 (systemd-journal) score 0 or sacrifice child [ 2136.658078] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2136.658088] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2136.658098] ion_alloc+0x27a/0x810 [ 2136.658113] ? ion_dma_buf_release+0x40/0x40 [ 2136.686059] 0 0 0 [ 2136.686561] ? __might_fault+0x177/0x1b0 [ 2136.686572] ion_ioctl+0xea/0x1f0 [ 2136.688696] 0 [ 2136.692742] ? ion_query_heaps+0x360/0x360 [ 2136.702210] ? ion_query_heaps+0x360/0x360 [ 2136.706439] do_vfs_ioctl+0x75a/0xff0 [ 2136.710328] ? ioctl_preallocate+0x1a0/0x1a0 [ 2136.714726] ? lock_downgrade+0x740/0x740 [ 2136.714732] Node 1 [ 2136.718862] ? __fget+0x225/0x360 [ 2136.718871] ? do_vfs_ioctl+0xff0/0xff0 [ 2136.718881] ? security_file_ioctl+0x83/0xb0 [ 2136.718891] SyS_ioctl+0x7f/0xb0 [ 2136.718898] ? do_vfs_ioctl+0xff0/0xff0 [ 2136.718909] do_syscall_64+0x1d5/0x640 [ 2136.718924] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2136.718944] RIP: 0033:0x466459 [ 2136.718950] RSP: 002b:00007f27c4f25188 EFLAGS: 00000246 [ 2136.743418] Normal free:30824kB min:53696kB low:67120kB high:80544kB active_anon:1084kB inactive_anon:41460kB active_file:104kB inactive_file:388kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:640kB pagetables:280kB bounce:0kB free_pcp:1440kB local_pcp:728kB free_cma:0kB [ 2136.744196] ORIG_RAX: 0000000000000010 [ 2136.744202] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2136.744207] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2136.744211] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2136.744215] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2136.744220] R13: 00007ffda0b0ca7f R14: 00007f27c4f25300 R15: 0000000000022000 [ 2136.749015] syz-executor.2 cpuset= [ 2136.763337] Killed process 11447 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:0kB, shmem-rss:4352kB [ 2136.826066] / [ 2136.836325] lowmem_reserve[]: [ 2136.851445] mems_allowed=0-1 [ 2136.856269] 0 0 0 0 0 [ 2136.858104] CPU: 1 PID: 13610 Comm: syz-executor.2 Not tainted 4.14.228-syzkaller #0 [ 2136.868154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2136.876177] Node 0 [ 2136.877495] Call Trace: [ 2136.877501] DMA: [ 2136.879722] dump_stack+0x1b2/0x281 [ 2136.882275] 101*4kB [ 2136.884322] warn_alloc.cold+0x96/0x1cc [ 2136.894196] ? zone_watermark_ok_safe+0x220/0x220 [ 2136.899050] __alloc_pages_nodemask+0x2127/0x2720 [ 2136.903880] ? _raw_spin_unlock_irq+0x5a/0x80 [ 2136.908370] ? finish_task_switch+0x178/0x610 [ 2136.909001] (UME) [ 2136.912852] ? finish_task_switch+0x14d/0x610 [ 2136.912864] ? check_preemption_disabled+0x35/0x240 [ 2136.912879] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2136.912896] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2136.912908] ? __mutex_unlock_slowpath+0x75/0x770 [ 2136.912917] ? alloc_pages_current+0x135/0x260 [ 2136.912928] alloc_pages_current+0x155/0x260 [ 2136.915426] 41*8kB [ 2136.919555] ion_page_pool_alloc+0x118/0x1b0 [ 2136.919565] ion_system_heap_allocate+0x133/0x8c0 [ 2136.919576] ? _raw_spin_unlock+0x29/0x40 [ 2136.919583] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2136.919592] ? ion_system_contig_heap_create+0x130/0x130 [ 2136.919602] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2136.919612] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2136.919623] ion_alloc+0x27a/0x810 [ 2136.919634] ? ion_dma_buf_release+0x40/0x40 [ 2136.919646] ? __might_fault+0x177/0x1b0 [ 2136.936623] (UME) [ 2136.939718] ion_ioctl+0xea/0x1f0 [ 2136.939728] ? ion_query_heaps+0x360/0x360 [ 2136.939739] ? ion_query_heaps+0x360/0x360 [ 2136.939749] do_vfs_ioctl+0x75a/0xff0 [ 2136.939761] ? ioctl_preallocate+0x1a0/0x1a0 [ 2136.939772] ? lock_downgrade+0x740/0x740 [ 2136.957155] 20*16kB [ 2136.960344] ? __fget+0x225/0x360 [ 2136.964581] (UME) [ 2136.969486] ? do_vfs_ioctl+0xff0/0xff0 [ 2136.969496] ? security_file_ioctl+0x83/0xb0 [ 2136.969506] SyS_ioctl+0x7f/0xb0 [ 2137.006026] 8*32kB [ 2137.006466] ? do_vfs_ioctl+0xff0/0xff0 [ 2137.010669] (UM) [ 2137.014451] do_syscall_64+0x1d5/0x640 [ 2137.030084] 3*64kB [ 2137.038381] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2137.038389] RIP: 0033:0x466459 [ 2137.038393] RSP: 002b:00007fb129331188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2137.038403] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2137.038407] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2137.038414] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2137.066230] (UM) [ 2137.069704] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2137.069709] R13: 00007ffd0a29ad5f R14: 00007fb129331300 R15: 0000000000022000 [ 2137.130239] oom_reaper: reaped process 13604 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2137.150260] oom_reaper: reaped process 13610 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2137.160374] warn_alloc_show_mem: 3 callbacks suppressed [ 2137.160377] Mem-Info: [ 2137.168686] active_anon:22556 inactive_anon:32412 isolated_anon:0 [ 2137.168686] active_file:179 inactive_file:1331 isolated_file:0 [ 2137.168686] unevictable:0 dirty:7 writeback:0 unstable:0 [ 2137.168686] slab_reclaimable:12514 slab_unreclaimable:118493 [ 2137.168686] mapped:53162 shmem:33557 pagetables:794 bounce:0 [ 2137.168686] free:51739 free_pcp:719 free_cma:0 [ 2137.209778] Node 0 active_anon:89156kB inactive_anon:88176kB active_file:680kB inactive_file:6292kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:204612kB dirty:24kB writeback:0kB shmem:92476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2137.238249] Node 1 active_anon:1068kB inactive_anon:41472kB active_file:36kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8836kB dirty:4kB writeback:0kB shmem:41752kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2137.267438] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2137.297632] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2137.319884] Node 0 DMA32 free:178596kB min:36200kB low:45248kB high:54296kB active_anon:89416kB inactive_anon:88176kB active_file:876kB inactive_file:8492kB unevictable:0kB writepending:24kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7488kB pagetables:3048kB bounce:0kB free_pcp:144kB local_pcp:128kB free_cma:0kB [ 2137.352477] lowmem_reserve[]: 0 0 0 0 0 [ 2137.366027] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2137.384171] chnl_net:caif_netlink_parms(): no params data found [ 2137.426058] lowmem_reserve[]: 0 0 0 0 0 [ 2137.428986] 4*128kB (ME) 1*256kB (E) 1*512kB (E) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 10972kB [ 2137.430123] Node 1 Normal free:63428kB min:53696kB low:67120kB high:80544kB active_anon:1068kB inactive_anon:41472kB active_file:36kB inactive_file:32kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:128kB bounce:0kB free_pcp:1340kB local_pcp:716kB free_cma:0kB [ 2137.441748] Node 0 [ 2137.477368] syz-executor.1: [ 2137.478679] lowmem_reserve[]: 0 0 0 0 0 [ 2137.496167] Node 0 DMA: 101*4kB (UME) 41*8kB (UME) 20*16kB (UME) 8*32kB (UM) 3*64kB (UM) 4*128kB (ME) 1*256kB (E) 1*512kB (E) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 10972kB [ 2137.504514] page allocation failure: order:4 [ 2137.526256] Node 0 [ 2137.529936] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2137.530673] DMA32: 195*4kB (E) 220*8kB (UE) 3846*16kB (UE) 1000*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB [ 2137.536490] (null) [ 2137.556139] 0*2048kB 0*4096kB = 96076kB [ 2137.560137] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2137.570945] Node 1 Normal: 6196*4kB (UM) 941*8kB (UM) 167*16kB (UM) 750*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 58984kB [ 2137.600250] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2137.606250] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2137.616886] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2137.622004] CPU: 0 PID: 13609 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 2137.629968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2137.639322] Call Trace: [ 2137.641912] dump_stack+0x1b2/0x281 [ 2137.645534] warn_alloc.cold+0x96/0x1cc [ 2137.645990] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2137.649499] ? zone_watermark_ok_safe+0x220/0x220 [ 2137.662899] __alloc_pages_nodemask+0x2127/0x2720 [ 2137.667750] ? lock_acquire+0x170/0x3f0 [ 2137.671728] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2137.676572] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2137.682015] ? __mutex_unlock_slowpath+0x75/0x770 [ 2137.686854] alloc_pages_current+0x155/0x260 [ 2137.691253] ion_page_pool_alloc+0x118/0x1b0 [ 2137.695653] ion_system_heap_allocate+0x133/0x8c0 [ 2137.699310] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2137.700496] ? _raw_spin_unlock+0x29/0x40 [ 2137.713439] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2137.718359] ? ion_system_contig_heap_create+0x130/0x130 [ 2137.723807] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2137.728821] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2137.733655] ion_alloc+0x27a/0x810 [ 2137.737202] ? ion_dma_buf_release+0x40/0x40 [ 2137.741605] ? __might_fault+0x177/0x1b0 [ 2137.744828] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2137.745656] ion_ioctl+0xea/0x1f0 [ 2137.757737] ? ion_query_heaps+0x360/0x360 [ 2137.761966] ? ion_query_heaps+0x360/0x360 [ 2137.762907] 33792 total pagecache pages [ 2137.766190] do_vfs_ioctl+0x75a/0xff0 [ 2137.766201] ? ioctl_preallocate+0x1a0/0x1a0 [ 2137.766209] ? lock_downgrade+0x740/0x740 [ 2137.766222] ? __fget+0x225/0x360 [ 2137.770196] 0 pages in swap cache [ 2137.773965] ? do_vfs_ioctl+0xff0/0xff0 [ 2137.793330] ? security_file_ioctl+0x83/0xb0 [ 2137.797734] SyS_ioctl+0x7f/0xb0 [ 2137.801091] ? do_vfs_ioctl+0xff0/0xff0 [ 2137.805064] do_syscall_64+0x1d5/0x640 [ 2137.808952] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2137.814130] RIP: 0033:0x466459 [ 2137.817306] RSP: 002b:00007f27c4f46188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2137.819431] DMA32: [ 2137.824996] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2137.825003] 339*4kB [ 2137.827209] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2137.827214] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2137.827219] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2137.827224] R13: 00007ffda0b0ca7f R14: 00007f27c4f46300 R15: 0000000000022000 [ 2137.831563] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 2137.841601] Swap cache stats: add 0, delete 0, find 0/0 [ 2137.852124] (null) [ 2137.867118] (UME) [ 2137.882804] , order=0, oom_score_adj=0 [ 2137.892754] in:imklog cpuset=/ mems_allowed=0-1 [ 2137.901448] CPU: 0 PID: 12944 Comm: in:imklog Not tainted 4.14.228-syzkaller #0 [ 2137.902749] Free swap = 0kB [ 2137.908885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2137.908889] Call Trace: [ 2137.908905] dump_stack+0x1b2/0x281 [ 2137.908917] dump_header+0x178/0x82f [ 2137.908928] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2137.908937] ? ___ratelimit+0x2cd/0x530 [ 2137.908947] oom_kill_process.cold+0x10/0xb18 [ 2137.908965] out_of_memory+0xe3e/0x1190 [ 2137.908977] ? oom_killer_disable+0x1c0/0x1c0 [ 2137.908983] ? mutex_trylock+0x152/0x1a0 [ 2137.908993] __alloc_pages_nodemask+0x23e1/0x2720 [ 2137.909010] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2137.935466] 99*8kB [ 2137.936303] alloc_pages_current+0x155/0x260 [ 2137.936317] filemap_fault+0xea3/0x1980 [ 2137.936347] ext4_filemap_fault+0x84/0xb0 [ 2137.936361] __do_fault+0xfa/0x380 [ 2137.936370] __handle_mm_fault+0x2497/0x4620 [ 2137.945701] (UME) [ 2137.948747] ? vm_insert_page+0x7c0/0x7c0 [ 2137.948757] ? lock_downgrade+0x740/0x740 [ 2137.948777] handle_mm_fault+0x391/0x860 [ 2137.948788] __do_page_fault+0x549/0xad0 [ 2137.948799] ? spurious_fault+0x640/0x640 [ 2137.964921] 148*16kB [ 2137.966963] ? do_page_fault+0x60/0x500 [ 2137.966971] ? page_fault+0x2f/0x50 [ 2137.966978] page_fault+0x45/0x50 [ 2137.966984] RIP: 1fa0:0x1f9f [ 2137.966990] RSP: 0000:00005574625aa9d0 EFLAGS: 7fb8705cfda0 [ 2137.969780] Total swap = 0kB [ 2137.977573] Mem-Info: [ 2137.977590] active_anon:22533 inactive_anon:32412 isolated_anon:0 [ 2137.977590] active_file:18 inactive_file:13 isolated_file:0 [ 2137.977590] unevictable:0 dirty:0 writeback:11 unstable:0 [ 2137.977590] slab_reclaimable:12514 slab_unreclaimable:118585 [ 2137.977590] mapped:52226 shmem:33557 pagetables:794 bounce:0 [ 2137.977590] free:13958 free_pcp:60 free_cma:0 [ 2137.977604] Node 0 active_anon:89068kB inactive_anon:88176kB active_file:32kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:200068kB dirty:0kB writeback:36kB shmem:92476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2137.977617] Node 1 active_anon:1064kB inactive_anon:41472kB active_file:40kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8836kB dirty:0kB writeback:8kB shmem:41752kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2137.977621] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:4kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2137.977636] lowmem_reserve[]: 0 [ 2138.001184] 2097051 pages RAM [ 2138.007377] (UME) [ 2138.025358] 0 pages HighMem/MovableOnly [ 2138.027768] 2717 [ 2138.035798] 363846 pages reserved [ 2138.037917] 402*32kB (UME) 11*64kB [ 2138.052601] 0 pages cma reserved [ 2138.075332] 2718 [ 2138.135959] syz-executor.2: [ 2138.157005] (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18084kB [ 2138.194258] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2138.203381] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2138.205018] Bluetooth: hci5 command 0x0409 tx timeout [ 2138.222645] warn_alloc_show_mem: 1 callbacks suppressed [ 2138.222648] Mem-Info: [ 2138.230439] active_anon:22533 inactive_anon:32412 isolated_anon:0 [ 2138.230439] active_file:18 inactive_file:13 isolated_file:0 [ 2138.230439] unevictable:0 dirty:0 writeback:11 unstable:0 [ 2138.230439] slab_reclaimable:12514 slab_unreclaimable:118585 [ 2138.230439] mapped:52226 shmem:33557 pagetables:794 bounce:0 [ 2138.230439] free:13958 free_pcp:60 free_cma:0 [ 2138.231011] Node 1 [ 2138.267142] 2718 2718 [ 2138.271855] Node 0 DMA32 free:19452kB min:36200kB low:45248kB high:54296kB active_anon:89028kB inactive_anon:88176kB active_file:32kB inactive_file:72kB unevictable:0kB writepending:28kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7296kB pagetables:3048kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 2138.272661] syz-executor.1: [ 2138.300793] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2138.308973] CPU: 1 PID: 13610 Comm: syz-executor.2 Not tainted 4.14.228-syzkaller #0 [ 2138.311715] Node 0 active_anon:89068kB inactive_anon:88176kB active_file:32kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:200068kB dirty:0kB writeback:36kB shmem:92476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2138.316841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2138.316845] Call Trace: [ 2138.316863] dump_stack+0x1b2/0x281 [ 2138.316876] warn_alloc.cold+0x96/0x1cc [ 2138.344582] lowmem_reserve[]: [ 2138.353897] ? fib_triestat_seq_show+0xb80/0xd70 [ 2138.353909] ? zone_watermark_ok_safe+0x220/0x220 [ 2138.353918] ? usleep_range+0x130/0x130 [ 2138.353929] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2138.356509] 0 [ 2138.360104] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2138.364045] 0 [ 2138.367131] ? run_timer_softirq+0x5a0/0x5a0 [ 2138.367148] __alloc_pages_nodemask+0x2127/0x2720 [ 2138.371896] Node 1 active_anon:1064kB inactive_anon:41472kB active_file:40kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8836kB dirty:0kB writeback:8kB shmem:41752kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2138.376701] ? lock_acquire+0x170/0x3f0 [ 2138.376717] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2138.380660] Node 0 [ 2138.385742] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2138.387534] 0 [ 2138.392517] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2138.394285] 0 [ 2138.398680] alloc_pages_current+0x155/0x260 [ 2138.398692] ion_page_pool_alloc+0x118/0x1b0 [ 2138.403521] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:4kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2138.430562] ion_system_heap_allocate+0x133/0x8c0 [ 2138.430573] ? _raw_spin_unlock+0x29/0x40 [ 2138.430581] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2138.430591] ? ion_system_contig_heap_create+0x130/0x130 [ 2138.434545] 0 [ 2138.439360] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2138.439371] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2138.439380] ion_alloc+0x27a/0x810 [ 2138.446085] ? ion_dma_buf_release+0x40/0x40 [ 2138.446098] ? __might_fault+0x177/0x1b0 [ 2138.447887] Node 0 [ 2138.453310] ion_ioctl+0xea/0x1f0 [ 2138.455091] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2138.459468] ? ion_query_heaps+0x360/0x360 [ 2138.459480] ? ion_query_heaps+0x360/0x360 [ 2138.459489] do_vfs_ioctl+0x75a/0xff0 [ 2138.463872] lowmem_reserve[]: [ 2138.489435] ? ioctl_preallocate+0x1a0/0x1a0 [ 2138.489443] ? lock_downgrade+0x740/0x740 [ 2138.489456] ? __fget+0x225/0x360 [ 2138.494269] lowmem_reserve[]: [ 2138.498395] ? do_vfs_ioctl+0xff0/0xff0 [ 2138.498405] ? security_file_ioctl+0x83/0xb0 [ 2138.498415] SyS_ioctl+0x7f/0xb0 [ 2138.503314] 0 [ 2138.508741] ? do_vfs_ioctl+0xff0/0xff0 [ 2138.508753] do_syscall_64+0x1d5/0x640 [ 2138.508768] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2138.510655] 0 [ 2138.515654] RIP: 0033:0x466459 [ 2138.520518] 0 [ 2138.524000] RSP: 002b:00007fb129331188 EFLAGS: 00000246 [ 2138.528403] 0 [ 2138.532420] ORIG_RAX: 0000000000000010 [ 2138.534646] 0 [ 2138.538072] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2138.538078] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2138.538082] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2138.538087] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2138.538096] R13: 00007ffd0a29ad5f R14: 00007fb129331300 R15: 0000000000022000 [ 2138.563019] 2717 [ 2138.568268] page allocation failure: order:0 [ 2138.572516] 2718 [ 2138.575316] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2138.593389] Normal: [ 2138.593565] (null) [ 2138.611591] 2718 [ 2138.614953] syz-executor.1 cpuset= [ 2138.628798] 11*4kB [ 2138.632370] / [ 2138.634178] (UM) [ 2138.638156] mems_allowed=0-1 [ 2138.638172] CPU: 1 PID: 13614 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 2138.638178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2138.638183] Call Trace: [ 2138.648850] 2718 [ 2138.654561] dump_stack+0x1b2/0x281 [ 2138.661831] 7*8kB [ 2138.669061] warn_alloc.cold+0x96/0x1cc [ 2138.669076] ? zone_watermark_ok_safe+0x220/0x220 [ 2138.676336] 0 [ 2138.678363] ? usleep_range+0x130/0x130 [ 2138.684778] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2138.684791] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2138.694172] ? run_timer_softirq+0x5a0/0x5a0 [ 2138.696309] Node 0 [ 2138.698345] __alloc_pages_nodemask+0x2127/0x2720 [ 2138.701861] DMA32 free:19452kB min:36200kB low:45248kB high:54296kB active_anon:89028kB inactive_anon:88176kB active_file:32kB inactive_file:72kB unevictable:0kB writepending:28kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7296kB pagetables:3048kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 2138.704071] ? lock_acquire+0x170/0x3f0 [ 2138.705751] lowmem_reserve[]: [ 2138.707804] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2138.707815] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2138.710894] (UM) [ 2138.718757] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2138.718775] alloc_pages_current+0x155/0x260 [ 2138.728117] Node 1 [ 2138.730673] ion_page_pool_alloc+0x118/0x1b0 [ 2138.732718] Normal free:26800kB min:53696kB low:67120kB high:80544kB active_anon:1064kB inactive_anon:41472kB active_file:40kB inactive_file:28kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:128kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 2138.736317] ion_system_heap_allocate+0x133/0x8c0 [ 2138.736328] ? _raw_spin_unlock+0x29/0x40 [ 2138.736337] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2138.738461] 0 [ 2138.742411] ? ion_system_contig_heap_create+0x130/0x130 [ 2138.747238] 167*16kB [ 2138.749005] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2138.749015] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2138.752973] (UM) [ 2138.758067] ion_alloc+0x27a/0x810 [ 2138.758081] ? ion_dma_buf_release+0x40/0x40 [ 2138.763088] lowmem_reserve[]: [ 2138.767474] ? __might_fault+0x177/0x1b0 [ 2138.767487] ion_ioctl+0xea/0x1f0 [ 2138.769699] 0 [ 2138.774529] ? ion_query_heaps+0x360/0x360 [ 2138.802709] 0 [ 2138.806652] ? ion_query_heaps+0x360/0x360 [ 2138.806663] do_vfs_ioctl+0x75a/0xff0 [ 2138.809756] 0 [ 2138.814579] ? ioctl_preallocate+0x1a0/0x1a0 [ 2138.819059] 750*32kB [ 2138.821085] ? lock_downgrade+0x740/0x740 [ 2138.826520] 0 [ 2138.830895] ? __fget+0x225/0x360 [ 2138.833109] 0 [ 2138.837494] ? do_vfs_ioctl+0xff0/0xff0 [ 2138.837504] ? security_file_ioctl+0x83/0xb0 [ 2138.837514] SyS_ioctl+0x7f/0xb0 [ 2138.865433] (U) [ 2138.870243] ? do_vfs_ioctl+0xff0/0xff0 [ 2138.870254] do_syscall_64+0x1d5/0x640 [ 2138.870268] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2138.874390] 0*64kB [ 2138.879295] RIP: 0033:0x466459 [ 2138.879300] RSP: 002b:00007f27c4f25188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2138.881088] 0 [ 2138.886509] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2138.886515] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2138.886520] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2138.886528] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 2138.888917] 0*128kB [ 2138.893904] R13: 00007ffda0b0ca7f R14: 00007f27c4f25300 R15: 0000000000022000 [ 2138.977672] 0 [ 2138.997184] 0 [ 2138.997192] Node 0 DMA: 101*4kB (UME) 41*8kB (UME) 20*16kB (UME) 8*32kB (UM) 3*64kB (UM) 4*128kB (ME) 1*256kB (E) 1*512kB (E) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 10972kB [ 2139.062378] 0 [ 2139.064733] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2139.067784] Node 0 [ 2139.095830] 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26772kB [ 2139.105173] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2139.119724] DMA32: 380*4kB (ME) 275*8kB (UME) 149*16kB (ME) 393*32kB (UME) 291*64kB (UM) 3*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 37688kB [ 2139.134140] lowmem_reserve[]: 0 0 0 0 0 [ 2139.138596] Node 1 Normal free:157240kB min:53696kB low:67120kB high:80544kB active_anon:1064kB inactive_anon:41472kB active_file:416kB inactive_file:4212kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:128kB bounce:0kB free_pcp:224kB local_pcp:156kB free_cma:0kB [ 2139.144319] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2139.185834] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2139.194418] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2139.208826] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2139.209761] lowmem_reserve[]: 0 0 0 0 0 [ 2139.237747] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 0*16kB 1*32kB (U) 2383*64kB (UM) 111*128kB [ 2139.239929] Node 0 [ 2139.239936] (UM) [ 2139.251341] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2139.262307] DMA: 101*4kB (UME) 41*8kB (UME) 20*16kB (UME) 8*32kB (UM) 4*64kB (UM) 4*128kB (ME) 1*256kB (E) 1*512kB (E) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 11036kB [ 2139.275825] 9*256kB (U) 0*512kB 40*1024kB (U) 0*2048kB 0*4096kB = 210032kB [ 2139.281565] systemd[1]: Stopped Journal Service. [ 2139.284488] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2139.298335] 34958 total pagecache pages [ 2139.302447] 0 pages in swap cache [ 2139.306006] Swap cache stats: add 0, delete 0, find 0/0 [ 2139.311371] Free swap = 0kB [ 2139.314377] Total swap = 0kB [ 2139.324382] systemd[1]: Starting Journal Service... [ 2139.329471] Node 0 DMA32: 349*4kB (ME) 222*8kB (UME) 149*16kB (ME) 394*32kB (UME) 294*64kB (UM) 3*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 37364kB [ 2139.335844] 2097051 pages RAM [ 2139.347761] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2139.365828] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2139.368755] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2139.381769] 0 pages HighMem/MovableOnly [ 2139.395842] 363846 pages reserved [ 2139.399328] 0 pages cma reserved [ 2139.411661] Node 1 Normal: 1*4kB (M) 1*8kB (U) 0*16kB 1*32kB (U) 3407*64kB (UM) 356*128kB (U) 21*256kB (UM) 1*512kB (M) 56*1024kB (U) 1*2048kB (U) 0*4096kB = 328940kB [ 2139.415930] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2139.449522] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2139.475827] 35328 total pagecache pages [ 2139.475832] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2139.475839] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2139.479903] 0 pages in swap cache [ 2139.501066] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2139.529582] 35402 total pagecache pages [ 2139.533580] 0 pages in swap cache [ 2139.549525] Swap cache stats: add 0, delete 0, find 0/0 [ 2139.554914] Free swap = 0kB [ 2139.558650] Swap cache stats: add 0, delete 0, find 0/0 [ 2139.566481] Total swap = 0kB [ 2139.569512] 2097051 pages RAM [ 2139.572604] 0 pages HighMem/MovableOnly [ 2139.585854] 363846 pages reserved [ 2139.589324] 0 pages cma reserved [ 2139.609662] Free swap = 0kB [ 2139.612779] Total swap = 0kB [ 2139.630526] bridge0: port 1(bridge_slave_0) entered blocking state [ 2139.656411] 2097051 pages RAM [ 2139.659540] 0 pages HighMem/MovableOnly [ 2139.663504] 363846 pages reserved [ 2139.686014] bridge0: port 1(bridge_slave_0) entered disabled state [ 2139.693395] device bridge_slave_0 entered promiscuous mode [ 2139.705789] 0 pages cma reserved [ 2139.709296] Out of memory (oom_kill_allocating_task): Kill process 12944 (in:imklog) score 0 or sacrifice child [ 2139.738222] bridge0: port 2(bridge_slave_1) entered blocking state [ 2139.744651] bridge0: port 2(bridge_slave_1) entered disabled state [ 2139.751058] Killed process 12942 (rsyslogd) total-vm:254332kB, anon-rss:796kB, file-rss:0kB, shmem-rss:0kB [ 2139.776899] oom_reaper: reaped process 12942 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2139.786665] device bridge_slave_1 entered promiscuous mode [ 2139.827869] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 2139.879056] kworker/u4:8 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 [ 2139.932487] kworker/u4:8 cpuset=/ mems_allowed=0-1 [ 2139.961140] CPU: 0 PID: 13762 Comm: kworker/u4:8 Not tainted 4.14.228-syzkaller #0 [ 2139.968879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2139.978230] Call Trace: [ 2139.980814] dump_stack+0x1b2/0x281 [ 2139.984434] dump_header+0x178/0x82f [ 2139.988139] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2139.993234] ? ___ratelimit+0x2cd/0x530 [ 2139.997215] oom_kill_process.cold+0x10/0xb18 [ 2140.001703] ? lock_downgrade+0x740/0x740 [ 2140.005858] out_of_memory+0x2dc/0x1190 [ 2140.009832] ? oom_killer_disable+0x1c0/0x1c0 [ 2140.014409] ? mutex_trylock+0x152/0x1a0 [ 2140.018469] __alloc_pages_nodemask+0x23e1/0x2720 [ 2140.023318] ? do_execveat_common+0x9a9/0x1f30 [ 2140.027889] ? call_usermodehelper_exec_async+0x2ed/0x510 [ 2140.033415] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2140.038239] ? fs_reclaim_release+0xd0/0x110 [ 2140.042625] alloc_pages_current+0x155/0x260 [ 2140.047011] __get_free_pages+0xb/0x40 [ 2140.050874] pgd_alloc+0x20/0x2b0 [ 2140.054304] mm_init+0x578/0x960 [ 2140.057649] mm_alloc+0xa2/0xc0 [ 2140.060904] do_execveat_common+0x9a9/0x1f30 [ 2140.065290] ? copy_strings_kernel+0x110/0x110 [ 2140.069852] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2140.075278] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2140.080273] do_execve+0x33/0x50 [ 2140.083615] call_usermodehelper_exec_async+0x2ed/0x510 [ 2140.088953] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 2140.094378] ret_from_fork+0x24/0x30 [ 2140.113116] Mem-Info: [ 2140.115548] active_anon:22300 inactive_anon:32412 isolated_anon:0 [ 2140.115548] active_file:29 inactive_file:16 isolated_file:0 [ 2140.115548] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2140.115548] slab_reclaimable:12526 slab_unreclaimable:117934 [ 2140.115548] mapped:52263 shmem:33557 pagetables:736 bounce:0 [ 2140.115548] free:14177 free_pcp:0 free_cma:0 [ 2140.119528] syz-executor.4: [ 2140.161219] Node 0 active_anon:88020kB inactive_anon:88176kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:200064kB dirty:0kB writeback:0kB shmem:92476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2140.190127] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2140.201911] Node 1 active_anon:1180kB inactive_anon:41472kB active_file:112kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8988kB dirty:0kB writeback:0kB shmem:41752kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2140.202833] syz-executor.4 cpuset= [ 2140.233229] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2140.240593] Node 0 [ 2140.252639] / [ 2140.254353] DMA free:10944kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2140.254867] mems_allowed=0-1 [ 2140.256577] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2140.256599] Node 0 [ 2140.285615] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2140.301017] Bluetooth: hci5 command 0x041b tx timeout [ 2140.301644] CPU: 1 PID: 13609 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 2140.306388] DMA32 free:17932kB min:36200kB low:45248kB high:54296kB active_anon:87980kB inactive_anon:88176kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7104kB pagetables:2824kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2140.314150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2140.314157] Call Trace: [ 2140.342036] lowmem_reserve[]: [ 2140.351349] dump_stack+0x1b2/0x281 [ 2140.351362] warn_alloc.cold+0x96/0x1cc [ 2140.351374] ? zone_watermark_ok_safe+0x220/0x220 [ 2140.353933] 0 [ 2140.357022] ? usleep_range+0x130/0x130 [ 2140.357031] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2140.357043] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2140.360645] 0 [ 2140.364602] ? run_timer_softirq+0x5a0/0x5a0 [ 2140.369441] 0 [ 2140.371217] __alloc_pages_nodemask+0x2127/0x2720 [ 2140.375154] 0 0 [ 2140.380258] ? lock_acquire+0x170/0x3f0 [ 2140.380273] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2140.380285] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2140.387065] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2140.387085] alloc_pages_current+0x155/0x260 [ 2140.391462] Node 0 [ 2140.393247] ion_page_pool_alloc+0x118/0x1b0 [ 2140.398172] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2140.400104] ion_system_heap_allocate+0x133/0x8c0 [ 2140.404081] lowmem_reserve[]: [ 2140.408920] ? _raw_spin_unlock+0x29/0x40 [ 2140.408931] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2140.408939] ? ion_system_contig_heap_create+0x130/0x130 [ 2140.408951] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2140.413422] 0 [ 2140.418854] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2140.418865] ion_alloc+0x27a/0x810 [ 2140.418878] ? ion_dma_buf_release+0x40/0x40 [ 2140.423253] 0 [ 2140.425474] ? __might_fault+0x177/0x1b0 [ 2140.429867] 0 [ 2140.454746] ion_ioctl+0xea/0x1f0 [ 2140.454754] ? ion_query_heaps+0x360/0x360 [ 2140.454765] ? ion_query_heaps+0x360/0x360 [ 2140.459592] 0 [ 2140.462671] do_vfs_ioctl+0x75a/0xff0 [ 2140.466802] 0 [ 2140.471699] ? ioctl_preallocate+0x1a0/0x1a0 [ 2140.482116] ? lock_downgrade+0x740/0x740 [ 2140.483888] Node 1 [ 2140.488710] ? __fget+0x225/0x360 [ 2140.488719] ? do_vfs_ioctl+0xff0/0xff0 [ 2140.488730] ? security_file_ioctl+0x83/0xb0 [ 2140.492252] Normal free:26784kB min:53696kB low:67120kB high:80544kB active_anon:1180kB inactive_anon:41472kB active_file:56kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:576kB pagetables:120kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2140.496639] SyS_ioctl+0x7f/0xb0 [ 2140.496647] ? do_vfs_ioctl+0xff0/0xff0 [ 2140.496657] do_syscall_64+0x1d5/0x640 [ 2140.498426] lowmem_reserve[]: [ 2140.502468] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2140.504237] 0 [ 2140.507765] RIP: 0033:0x466459 [ 2140.507770] RSP: 002b:00007f27c4f46188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2140.507782] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2140.507788] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2140.512082] 0 [ 2140.516296] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2140.516301] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2140.516306] R13: 00007ffda0b0ca7f R14: 00007f27c4f46300 R15: 0000000000022000 [ 2140.520776] CPU: 1 PID: 13604 Comm: syz-executor.4 Not tainted 4.14.228-syzkaller #0 [ 2140.524077] 0 [ 2140.528071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2140.528076] Call Trace: [ 2140.528091] dump_stack+0x1b2/0x281 [ 2140.528104] warn_alloc.cold+0x96/0x1cc [ 2140.528115] ? zone_watermark_ok_safe+0x220/0x220 [ 2140.528139] __alloc_pages_nodemask+0x2127/0x2720 [ 2140.528149] ? io_schedule_timeout+0x140/0x140 [ 2140.528164] ? lock_acquire+0x170/0x3f0 [ 2140.528177] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2140.528192] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2140.528204] ? __mutex_unlock_slowpath+0x75/0x770 [ 2140.528217] alloc_pages_current+0x155/0x260 [ 2140.528229] ion_page_pool_alloc+0x118/0x1b0 [ 2140.528239] ion_system_heap_allocate+0x133/0x8c0 [ 2140.528248] ? _raw_spin_unlock+0x29/0x40 [ 2140.528256] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2140.528264] ? ion_system_contig_heap_create+0x130/0x130 [ 2140.528274] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2140.528284] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2140.528294] ion_alloc+0x27a/0x810 [ 2140.528307] ? ion_dma_buf_release+0x40/0x40 [ 2140.528319] ? __might_fault+0x177/0x1b0 [ 2140.528330] ion_ioctl+0xea/0x1f0 [ 2140.528338] ? ion_query_heaps+0x360/0x360 [ 2140.528348] ? ion_query_heaps+0x360/0x360 [ 2140.528357] do_vfs_ioctl+0x75a/0xff0 [ 2140.528366] ? ioctl_preallocate+0x1a0/0x1a0 [ 2140.528373] ? lock_downgrade+0x740/0x740 [ 2140.528384] ? __fget+0x225/0x360 [ 2140.528392] ? do_vfs_ioctl+0xff0/0xff0 [ 2140.528402] ? security_file_ioctl+0x83/0xb0 [ 2140.528411] SyS_ioctl+0x7f/0xb0 [ 2140.528417] ? do_vfs_ioctl+0xff0/0xff0 [ 2140.528426] do_syscall_64+0x1d5/0x640 [ 2140.528440] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2140.528448] RIP: 0033:0x466459 [ 2140.528453] RSP: 002b:00007f2dce80f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2140.528463] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2140.528468] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2140.528473] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2140.528478] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2140.528483] R13: 00007ffdf01d7adf R14: 00007f2dce80f300 R15: 0000000000022000 [ 2140.528567] warn_alloc_show_mem: 2 callbacks suppressed [ 2140.528570] Mem-Info: [ 2140.528590] active_anon:22300 inactive_anon:32412 isolated_anon:0 [ 2140.528590] active_file:29 inactive_file:0 isolated_file:0 [ 2140.528590] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2140.528590] slab_reclaimable:12526 slab_unreclaimable:117934 [ 2140.528590] mapped:52263 shmem:33557 pagetables:736 bounce:0 [ 2140.528590] free:13915 free_pcp:0 free_cma:0 [ 2140.528604] Node 0 active_anon:88020kB inactive_anon:88176kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:200064kB dirty:0kB writeback:0kB shmem:92476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2140.528617] Node 1 active_anon:1180kB inactive_anon:41472kB active_file:112kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8988kB dirty:0kB writeback:0kB shmem:41752kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2140.528621] Node 0 DMA free:10944kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2140.528638] lowmem_reserve[]: [ 2140.543677] 0 [ 2140.550240] 0 [ 2140.585059] 0 [ 2140.589339] 2717 [ 2140.596027] 2718 2718 2718 [ 2140.596041] Node 0 DMA32 free:17932kB min:36200kB low:45248kB high:54296kB active_anon:87980kB inactive_anon:88176kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7104kB pagetables:2824kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2140.596062] lowmem_reserve[]: 0 0 0 0 0 [ 2140.609047] Node 0 [ 2140.627337] DMA: [ 2140.631313] Node 0 [ 2140.648074] 80*4kB [ 2140.656409] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2140.674327] (UME) [ 2140.682469] lowmem_reserve[]: [ 2140.686181] 40*8kB [ 2140.691439] 0 [ 2140.695353] (UME) [ 2140.703574] 0 [ 2140.721592] 20*16kB [ 2140.727226] 0 [ 2140.735865] (UME) [ 2140.739227] 0 [ 2140.743666] 8*32kB [ 2140.750193] 0 [ 2140.762509] (UM) [ 2140.768283] 4*64kB [ 2140.774878] Node 1 [ 2140.786484] (UM) [ 2140.791601] Normal free:26784kB min:53696kB low:67120kB high:80544kB active_anon:1180kB inactive_anon:41472kB active_file:56kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:576kB pagetables:120kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2140.792174] 4*128kB [ 2140.796589] lowmem_reserve[]: 0 0 0 0 0 [ 2140.796611] Node 0 DMA: 80*4kB (UME) 40*8kB (UME) 20*16kB (UME) 8*32kB (UM) 4*64kB (UM) [ 2140.810105] (ME) [ 2140.816168] 4*128kB [ 2140.823836] 1*256kB [ 2140.824248] (ME) [ 2140.834919] (E) [ 2140.885670] 1*256kB [ 2140.948461] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2141.062135] (E) 1*512kB (E) 2*1024kB (ME) 3*2048kB [ 2141.155102] 1*512kB (E) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 10944kB [ 2141.177353] Node 0 DMA32: 331*4kB (UME) 136*8kB (UME) 150*16kB (UME) 27*32kB (ME) 365*64kB (UM) 12*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 30572kB [ 2141.192872] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2141.203664] Node 1 Normal: 2*4kB (UM) 28*8kB (M) 39*16kB (UM) 19*32kB (UM) 352*64kB (UM) 16*128kB (UM) 14*256kB (UM) 22*512kB (UM) 4*1024kB (UM) 4*2048kB (U) 0*4096kB = 53176kB [ 2141.219861] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2141.223300] (UM) [ 2141.229473] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2141.232604] 0*4096kB [ 2141.240441] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2141.240667] = 10944kB [ 2141.243415] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2141.255634] Node 0 DMA32: 329*4kB (UME) 136*8kB (UME) 150*16kB (UME) 27*32kB (ME) 365*64kB [ 2141.263089] 33857 total pagecache pages [ 2141.263134] (UM) [ 2141.272026] 0 pages in swap cache [ 2141.279467] 12*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 30564kB [ 2141.284892] Swap cache stats: add 0, delete 0, find 0/0 [ 2141.301069] Free swap = 0kB [ 2141.304082] Total swap = 0kB [ 2141.315628] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2141.319591] 2097051 pages RAM [ 2141.339590] 0 pages HighMem/MovableOnly [ 2141.343566] 363846 pages reserved [ 2141.348725] Node 1 Normal: 28*4kB (UM) 13*8kB (UM) 22*16kB (UM) 15*32kB (UM) 364*64kB (UM) 23*128kB (UM) 14*256kB (UM) 22*512kB (UM) 4*1024kB (UM) 4*2048kB (U) 0*4096kB = 54424kB [ 2141.355762] 0 pages cma reserved [ 2141.382364] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2141.384318] Out of memory: Kill process 13601 (syz-executor.3) score 1004 or sacrifice child [ 2141.391921] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2141.404035] Killed process 13602 (syz-executor.3) total-vm:93384kB, anon-rss:160kB, file-rss:34820kB, shmem-rss:0kB [ 2141.445627] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2141.454656] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2141.487583] 33631 total pagecache pages [ 2141.491569] 0 pages in swap cache [ 2141.495006] Swap cache stats: add 0, delete 0, find 0/0 [ 2141.522007] Free swap = 0kB [ 2141.525048] Total swap = 0kB [ 2141.528108] 2097051 pages RAM [ 2141.531202] 0 pages HighMem/MovableOnly [ 2141.535163] 363846 pages reserved [ 2141.548142] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2141.570890] 0 pages cma reserved [ 2141.576498] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2141.581273] CPU: 0 PID: 7966 Comm: syz-fuzzer Not tainted 4.14.228-syzkaller #0 [ 2141.588704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2141.598044] Call Trace: [ 2141.600625] dump_stack+0x1b2/0x281 [ 2141.604242] dump_header+0x178/0x82f [ 2141.607945] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2141.613041] ? ___ratelimit+0x2cd/0x530 [ 2141.617008] oom_kill_process.cold+0x10/0xb18 [ 2141.621532] out_of_memory+0xe3e/0x1190 [ 2141.625589] ? oom_killer_disable+0x1c0/0x1c0 [ 2141.630102] ? mutex_trylock+0x152/0x1a0 [ 2141.634160] __alloc_pages_nodemask+0x23e1/0x2720 [ 2141.635767] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2141.639009] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2141.639014] (null) [ 2141.650280] alloc_pages_current+0x155/0x260 [ 2141.650305] filemap_fault+0xea3/0x1980 [ 2141.663800] syz-executor.4 cpuset= [ 2141.665825] ext4_filemap_fault+0x84/0xb0 [ 2141.665835] __do_fault+0xfa/0x380 [ 2141.665844] __handle_mm_fault+0x2497/0x4620 [ 2141.665854] ? vm_insert_page+0x7c0/0x7c0 [ 2141.669369] / [ 2141.673493] ? free_object+0xe4/0x240 [ 2141.685584] mems_allowed=0-1 [ 2141.687231] handle_mm_fault+0x391/0x860 [ 2141.698115] __do_page_fault+0x549/0xad0 [ 2141.702180] ? spurious_fault+0x640/0x640 [ 2141.706326] ? do_page_fault+0x60/0x500 [ 2141.710277] ? page_fault+0x2f/0x50 [ 2141.713877] page_fault+0x45/0x50 [ 2141.717323] RIP: 0000:0x940aec [ 2141.720585] RSP: 2e000:000000c00003dfa0 EFLAGS: 0043b6a0 [ 2141.731978] CPU: 1 PID: 13604 Comm: syz-executor.4 Not tainted 4.14.228-syzkaller #0 [ 2141.745306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2141.745569] Mem-Info: [ 2141.754646] Call Trace: [ 2141.757068] active_anon:22300 inactive_anon:32412 isolated_anon:0 [ 2141.757068] active_file:28 inactive_file:4 isolated_file:0 [ 2141.757068] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2141.757068] slab_reclaimable:12531 slab_unreclaimable:117824 [ 2141.757068] mapped:52256 shmem:33557 pagetables:736 bounce:0 [ 2141.757068] free:14081 free_pcp:66 free_cma:0 [ 2141.759630] dump_stack+0x1b2/0x281 [ 2141.792684] Node 0 active_anon:88020kB inactive_anon:88176kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:200064kB dirty:0kB writeback:0kB shmem:92476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2141.796271] warn_alloc.cold+0x96/0x1cc [ 2141.796285] ? zone_watermark_ok_safe+0x220/0x220 [ 2141.823875] Node 1 active_anon:1180kB inactive_anon:41472kB active_file:108kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8960kB dirty:0kB writeback:0kB shmem:41752kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2141.827800] ? usleep_range+0x130/0x130 [ 2141.827808] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2141.827835] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2141.832641] Node 0 [ 2141.859766] ? run_timer_softirq+0x5a0/0x5a0 [ 2141.859781] __alloc_pages_nodemask+0x2127/0x2720 [ 2141.859794] ? lock_acquire+0x170/0x3f0 [ 2141.859809] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2141.866795] DMA free:10944kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2141.868850] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2141.873959] lowmem_reserve[]: [ 2141.876182] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2141.876201] alloc_pages_current+0x155/0x260 [ 2141.881276] 0 [ 2141.885414] ion_page_pool_alloc+0x118/0x1b0 [ 2141.889369] 2717 [ 2141.894194] ion_system_heap_allocate+0x133/0x8c0 [ 2141.920060] 2718 [ 2141.924521] ? _raw_spin_unlock+0x29/0x40 [ 2141.927606] 2718 [ 2141.933024] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2141.937413] 2718 [ 2141.939184] ? ion_system_contig_heap_create+0x130/0x130 [ 2141.945623] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2141.945633] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2141.945643] ion_alloc+0x27a/0x810 [ 2141.950455] Node 0 [ 2141.952496] ? ion_dma_buf_release+0x40/0x40 [ 2141.956640] DMA32 free:18532kB min:36200kB low:45248kB high:54296kB active_anon:87980kB inactive_anon:88176kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7104kB pagetables:2824kB bounce:0kB free_pcp:140kB local_pcp:140kB free_cma:0kB [ 2141.958657] ? __might_fault+0x177/0x1b0 [ 2141.963563] lowmem_reserve[]: [ 2141.965608] ion_ioctl+0xea/0x1f0 [ 2141.965616] ? ion_query_heaps+0x360/0x360 [ 2141.965628] ? ion_query_heaps+0x360/0x360 [ 2141.971048] 0 [ 2141.976042] do_vfs_ioctl+0x75a/0xff0 [ 2141.976052] ? ioctl_preallocate+0x1a0/0x1a0 [ 2141.976062] ? lock_downgrade+0x740/0x740 [ 2141.980874] 0 [ 2141.984394] ? __fget+0x225/0x360 [ 2141.986612] 0 [ 2141.990986] ? do_vfs_ioctl+0xff0/0xff0 [ 2142.019107] 0 [ 2142.023132] ? security_file_ioctl+0x83/0xb0 [ 2142.026249] 0 [ 2142.029668] SyS_ioctl+0x7f/0xb0 [ 2142.038083] ? do_vfs_ioctl+0xff0/0xff0 [ 2142.038094] do_syscall_64+0x1d5/0x640 [ 2142.038108] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2142.039880] Node 0 [ 2142.043654] RIP: 0033:0x466459 [ 2142.048083] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2142.052179] RSP: 002b:00007f2dce80f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2142.053974] lowmem_reserve[]: [ 2142.057403] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2142.057408] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2142.057413] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2142.057418] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2142.057425] R13: 00007ffdf01d7adf R14: 00007f2dce80f300 R15: 0000000000022000 [ 2142.059201] 0 [ 2142.110416] warn_alloc_show_mem: 1 callbacks suppressed [ 2142.110418] Mem-Info: [ 2142.171111] 0 [ 2142.174987] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2142.184032] 0 [ 2142.193482] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2142.195908] 0 0 [ 2142.200499] CPU: 1 PID: 13602 Comm: syz-executor.3 Not tainted 4.14.228-syzkaller #0 [ 2142.203515] Node 1 [ 2142.210216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2142.210219] Call Trace: [ 2142.210235] dump_stack+0x1b2/0x281 [ 2142.210249] warn_alloc.cold+0x96/0x1cc [ 2142.210259] ? si4713_probe+0x650/0x1110 [ 2142.210270] ? zone_watermark_ok_safe+0x220/0x220 [ 2142.210280] ? usleep_range+0x130/0x130 [ 2142.210288] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2142.210301] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2142.210310] ? run_timer_softirq+0x5a0/0x5a0 [ 2142.210327] __alloc_pages_nodemask+0x2127/0x2720 [ 2142.221428] Normal free:26772kB min:53696kB low:67120kB high:80544kB active_anon:1180kB inactive_anon:41472kB active_file:60kB inactive_file:60kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:576kB pagetables:120kB bounce:0kB free_pcp:244kB local_pcp:120kB free_cma:0kB [ 2142.221908] ? lock_acquire+0x170/0x3f0 [ 2142.224463] lowmem_reserve[]: [ 2142.228090] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2142.228099] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2142.228115] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2142.232054] 0 [ 2142.236097] ? alloc_pages_current+0x135/0x260 [ 2142.236110] alloc_pages_current+0x155/0x260 [ 2142.240922] 0 [ 2142.244882] ion_page_pool_alloc+0x118/0x1b0 [ 2142.244890] ion_system_heap_allocate+0x133/0x8c0 [ 2142.244898] ? ion_alloc+0x187/0x810 [ 2142.244908] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2142.244915] ? ion_system_contig_heap_create+0x130/0x130 [ 2142.244924] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2142.244935] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2142.250113] 0 [ 2142.255006] ion_alloc+0x204/0x810 [ 2142.259397] 0 [ 2142.264297] ? ion_dma_buf_release+0x40/0x40 [ 2142.292382] 0 [ 2142.296319] ? __might_fault+0x177/0x1b0 [ 2142.296331] ion_ioctl+0xea/0x1f0 [ 2142.304237] ? ion_query_heaps+0x360/0x360 [ 2142.308717] Node 0 [ 2142.314133] ? ion_query_heaps+0x360/0x360 [ 2142.315931] DMA: [ 2142.320480] do_vfs_ioctl+0x75a/0xff0 [ 2142.324853] 80*4kB [ 2142.326634] ? ioctl_preallocate+0x1a0/0x1a0 [ 2142.326642] ? lock_downgrade+0x740/0x740 [ 2142.326654] ? __fget+0x225/0x360 [ 2142.331035] (UME) [ 2142.335858] ? do_vfs_ioctl+0xff0/0xff0 [ 2142.335870] ? security_file_ioctl+0x83/0xb0 [ 2142.335882] SyS_ioctl+0x7f/0xb0 [ 2142.339569] 40*8kB [ 2142.345008] ? do_vfs_ioctl+0xff0/0xff0 [ 2142.350440] (UME) [ 2142.355434] do_syscall_64+0x1d5/0x640 [ 2142.360261] 20*16kB [ 2142.362036] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2142.365563] (UME) [ 2142.367332] RIP: 0033:0x466459 [ 2142.371708] 8*32kB [ 2142.373482] RSP: 002b:00007f6a11946188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2142.377536] (UM) [ 2142.380952] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2142.385167] 4*64kB [ 2142.387375] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2142.387380] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2142.387384] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2142.387388] R13: 00007ffe41ae227f R14: 00007f6a11946300 R15: 0000000000022000 [ 2142.389612] active_anon:22300 inactive_anon:32412 isolated_anon:0 [ 2142.389612] active_file:16 inactive_file:16 isolated_file:0 [ 2142.389612] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2142.389612] slab_reclaimable:12537 slab_unreclaimable:117829 [ 2142.389612] mapped:52225 shmem:33557 pagetables:736 bounce:0 [ 2142.389612] free:13954 free_pcp:127 free_cma:0 [ 2142.391629] (UM) [ 2142.393654] Node 0 active_anon:88020kB inactive_anon:88176kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:200064kB dirty:0kB writeback:0kB shmem:92476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2142.412201] Bluetooth: hci5 command 0x040f tx timeout [ 2142.415460] Node 1 active_anon:1180kB inactive_anon:41472kB active_file:60kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8836kB dirty:0kB writeback:0kB shmem:41752kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2142.427302] 4*128kB [ 2142.429623] Node 0 [ 2142.431797] (ME) [ 2142.434033] DMA free:10944kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2142.449814] 1*256kB [ 2142.452445] lowmem_reserve[]: [ 2142.452982] (E) 1*512kB [ 2142.460802] 0 2717 2718 2718 2718 [ 2142.460820] Node 0 DMA32 free:18100kB min:36200kB low:45248kB high:54296kB active_anon:87980kB inactive_anon:88176kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7104kB pagetables:2824kB bounce:0kB free_pcp:272kB local_pcp:120kB free_cma:0kB [ 2142.460840] lowmem_reserve[]: 0 0 0 0 0 [ 2142.460860] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2142.460878] lowmem_reserve[]: [ 2142.472768] (E) [ 2142.481409] 0 [ 2142.500113] 2*1024kB [ 2142.503289] 0 [ 2142.543375] (ME) [ 2142.572246] 0 [ 2142.599067] 3*2048kB [ 2142.612208] 0 [ 2142.634167] (UM) [ 2142.643761] 0 [ 2142.674611] 0*4096kB [ 2142.730609] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2142.740613] Node 1 Normal free:62100kB min:53696kB low:67120kB high:80544kB active_anon:1180kB inactive_anon:41472kB active_file:60kB inactive_file:60kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:576kB pagetables:120kB bounce:0kB free_pcp:364kB local_pcp:124kB free_cma:0kB [ 2142.815783] lowmem_reserve[]: 0 0 0 0 0 [ 2142.816955] systemd[1]: rsyslog.service: Unit entered failed state. [ 2142.819907] Node 0 DMA: 80*4kB (UME) 40*8kB (UME) 20*16kB (UME) 8*32kB (UM) 4*64kB (UM) 4*128kB (ME) 1*256kB (E) 1*512kB (E) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 10944kB [ 2142.836074] = 10944kB [ 2142.842778] Node 0 DMA32: 2930*4kB (UME) 127*8kB (UME) 150*16kB (UME) 27*32kB (ME) 720*64kB (UM) 77*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 71936kB [ 2142.850401] Node 0 [ 2142.859950] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2142.885743] systemd[1]: rsyslog.service: Failed with result 'signal'. [ 2142.886053] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2142.893085] systemd[1]: systemd-journald.service: Main process exited, code=exited, status=127/n/a [ 2142.903348] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 2*16kB (UM) 0*32kB 2587*64kB (UM) 94*128kB (UM) 28*256kB (U) 24*512kB (U) 11*1024kB (UM) 5*2048kB (U) 0*4096kB = 218612kB [ 2142.925472] DMA32: 12652*4kB (UME) 503*8kB (UME) 156*16kB (UME) 32*32kB (UME) 717*64kB (UM) 77*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 113896kB [ 2142.955535] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2142.959583] team0: Port device team_slave_0 added [ 2142.964467] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2142.970175] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2142.985612] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2143.011362] systemd[1]: Failed to start Journal Service. [ 2143.011892] team0: Port device team_slave_1 added [ 2143.029150] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 2*16kB (UM) 0*32kB 2587*64kB (UM) 94*128kB (UM) 28*256kB (U) 24*512kB (U) 11*1024kB (UM) 5*2048kB (U) 0*4096kB = 218612kB [ 2143.056434] systemd[1]: systemd-journald.service: Unit entered failed state. [ 2143.064059] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2143.086013] systemd[1]: systemd-journald.service: Failed with result 'exit-code'. [ 2143.088410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2143.093967] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2143.099879] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2143.099885] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2143.099890] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2143.099895] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2143.099899] 35291 total pagecache pages [ 2143.099908] 0 pages in swap cache [ 2143.099912] Swap cache stats: add 0, delete 0, find 0/0 [ 2143.099915] Free swap = 0kB [ 2143.099918] Total swap = 0kB [ 2143.099924] 2097051 pages RAM [ 2143.099927] 0 pages HighMem/MovableOnly [ 2143.099929] 363846 pages reserved [ 2143.099933] 0 pages cma reserved [ 2143.099939] Out of memory (oom_kill_allocating_task): Kill process 7966 (syz-fuzzer) score 0 or sacrifice child [ 2143.099996] Killed process 13621 (syz-executor.5) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 2143.109351] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2143.121944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2143.155442] 35291 total pagecache pages [ 2143.225435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2143.252382] oom_reaper: reaped process 13602 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2143.272328] systemd[1]: rsyslog.service: Service hold-off time over, scheduling restart. [ 2143.305782] systemd[1]: Stopped System Logging Service. [ 2143.321967] systemd[1]: Starting System Logging Service... [ 2143.415522] 0 pages in swap cache [ 2143.420758] Swap cache stats: add 0, delete 0, find 0/0 [ 2143.470897] Free swap = 0kB [ 2143.473926] Total swap = 0kB [ 2143.479440] 2097051 pages RAM [ 2143.482543] 0 pages HighMem/MovableOnly [ 2143.505439] 363846 pages reserved [ 2143.508895] 0 pages cma reserved [ 2143.614329] systemd-journald[13782]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 2146.465608] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2146.473028] device bridge_slave_1 left promiscuous mode [ 2146.478609] bridge0: port 2(bridge_slave_1) entered disabled state [ 2146.485736] device bridge_slave_0 left promiscuous mode [ 2146.491175] bridge0: port 1(bridge_slave_0) entered disabled state [ 2146.503929] team0 (unregistering): Port device team_slave_1 removed [ 2146.512714] team0 (unregistering): Port device team_slave_0 removed [ 2146.521310] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2146.530799] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2146.554012] bond0 (unregistering): Released all slaves [ 2147.116398] IPVS: ftp: loaded support on port[0] = 21 [ 2147.212205] chnl_net:caif_netlink_parms(): no params data found [ 2147.299910] bridge0: port 1(bridge_slave_0) entered blocking state [ 2147.306760] bridge0: port 1(bridge_slave_0) entered disabled state [ 2147.313587] device bridge_slave_0 entered promiscuous mode [ 2147.320641] bridge0: port 2(bridge_slave_1) entered blocking state [ 2147.327277] bridge0: port 2(bridge_slave_1) entered disabled state [ 2147.334129] device bridge_slave_1 entered promiscuous mode [ 2147.353351] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2147.362162] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2147.382275] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2147.389357] team0: Port device team_slave_0 added [ 2147.394691] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2147.401986] team0: Port device team_slave_1 added [ 2147.419395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2147.425894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2147.451152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2147.461988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2147.468300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2147.494658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2147.505571] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2147.512913] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2147.535488] device hsr_slave_0 entered promiscuous mode [ 2147.541055] device hsr_slave_1 entered promiscuous mode [ 2147.547154] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2147.554152] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2147.621237] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2147.651025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2147.659304] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2147.667686] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2147.673773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2147.681938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2147.691138] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2147.697976] 8021q: adding VLAN 0 to HW filter on device team0 [ 2147.706147] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2147.713234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2147.721537] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2147.729560] bridge0: port 1(bridge_slave_0) entered blocking state [ 2147.735945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2147.745249] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2147.753780] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2147.763836] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2147.771094] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2147.778822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2147.786624] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2147.794149] bridge0: port 2(bridge_slave_1) entered blocking state [ 2147.800549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2147.807523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2147.815228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2147.825113] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2147.832249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2147.840364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2147.848361] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2147.860332] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2147.867273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2147.875382] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2147.884657] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2147.891794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2147.899821] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2147.909644] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2147.916818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2147.924239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2147.933774] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2147.941965] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2147.953538] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2147.961657] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2147.967950] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2147.974606] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2147.987724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2148.038349] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2148.049286] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2148.057149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2148.064868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2148.088928] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2148.096669] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2148.103167] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2148.112459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2148.121259] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2148.128242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2148.137385] device veth0_vlan entered promiscuous mode [ 2148.146105] device veth1_vlan entered promiscuous mode [ 2148.151932] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2148.160494] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2148.171645] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2148.182075] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2148.189604] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2148.197502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2148.206605] device veth0_macvtap entered promiscuous mode [ 2148.212537] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2148.221204] device veth1_macvtap entered promiscuous mode [ 2148.229612] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2148.239762] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2148.248470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2148.258784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2148.269039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2148.279074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2148.288326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2148.298100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2148.307233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2148.316982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2148.326205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2148.335998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2148.346015] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2148.352905] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2148.360858] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2148.368603] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2148.376859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2148.386839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2148.396726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2148.405893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2148.415896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2148.425587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2148.435370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2148.444456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2148.454187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2148.463411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2148.473136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2148.483077] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2148.490069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2148.497208] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2148.505508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 06:43:28 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x1}) 06:43:28 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000001200)='/dev/dri/card#\x00', 0x200, 0x2b6ee52c4bf910e8) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000001240)={0x0, 0x0, r1}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x4000, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x10001, 0x0, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x20200, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x101], 0x3, 0x800}) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r5, 0x9000aea4, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff}) openat$ion(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ion\x00', 0xa00, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000000c0)={0xeed, 0x3}) 06:43:28 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7ffffffd, 0x22}) 06:43:28 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xfffd, 0x2, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r2, 0x8931, &(0x7f0000001640)={'veth1_virt_wifi\x00', @ifru_names}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000000)={'erspan0\x00', @ifru_names}) 06:43:28 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x41a202, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7ffffffd, 0x22}) 06:43:28 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7ffffffd, 0x22}) 06:43:28 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10001, 0x2, 0x0, 0xffffffffffffffff}) r2 = msgget$private(0x0, 0x0) msgctl$IPC_RMID(r2, 0x0) msgctl$MSG_STAT(r2, 0xb, &(0x7f0000000140)=""/138) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, 0x0) 06:43:28 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000080)={0x34, 0x0, &(0x7f0000000040)}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7ffffffd, 0x22}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0x1}) 06:43:28 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7ffffff9, 0x22, 0x0, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) ioctl$sock_ifreq(r2, 0x8931, &(0x7f0000001640)={'veth1_virt_wifi\x00', @ifru_names}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000140)={0x0, 0x0, "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", "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"}) r5 = socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000001140)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000001340)={r4, r6, "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", "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"}) 06:43:28 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x39ceb1d99bd6d57c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xc, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect={0x81}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001bc0)={'gre0\x00'}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10001, 0x2, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, 0x0) 06:43:28 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x1}) 06:43:28 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x0, 0x22}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x1}) [ 2149.154916] Bluetooth: hci5 command 0x0409 tx timeout [ 2149.493734] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2149.524203] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2149.532845] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2149.545742] CPU: 1 PID: 14058 Comm: syz-executor.4 Not tainted 4.14.228-syzkaller #0 [ 2149.553627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2149.563060] Call Trace: [ 2149.565663] dump_stack+0x1b2/0x281 [ 2149.569291] warn_alloc.cold+0x96/0x1cc [ 2149.573307] ? zone_watermark_ok_safe+0x220/0x220 [ 2149.578159] __alloc_pages_nodemask+0x2127/0x2720 [ 2149.583015] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2149.587915] ? migrate_swap_stop+0x880/0x880 [ 2149.592521] ? lock_acquire+0x170/0x3f0 [ 2149.594707] syz-executor.3: [ 2149.596489] ? wake_up_q+0x82/0xd0 [ 2149.596503] ? __mutex_unlock_slowpath+0x261/0x770 [ 2149.596517] alloc_pages_current+0x155/0x260 [ 2149.596530] ion_page_pool_alloc+0x118/0x1b0 [ 2149.596538] ion_system_heap_allocate+0x133/0x8c0 [ 2149.596546] ? ion_alloc+0x187/0x810 [ 2149.596555] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2149.596564] ? ion_system_contig_heap_create+0x130/0x130 [ 2149.596574] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2149.596584] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2149.596593] ion_alloc+0x204/0x810 [ 2149.596604] ? ion_dma_buf_release+0x40/0x40 [ 2149.596616] ? __might_fault+0x177/0x1b0 [ 2149.596625] ion_ioctl+0xea/0x1f0 [ 2149.596634] ? ion_query_heaps+0x360/0x360 [ 2149.596644] ? ion_query_heaps+0x360/0x360 [ 2149.596654] do_vfs_ioctl+0x75a/0xff0 [ 2149.596663] ? ioctl_preallocate+0x1a0/0x1a0 [ 2149.596670] ? lock_downgrade+0x740/0x740 [ 2149.596681] ? __fget+0x225/0x360 [ 2149.596689] ? do_vfs_ioctl+0xff0/0xff0 [ 2149.596717] ? security_file_ioctl+0x83/0xb0 [ 2149.596727] SyS_ioctl+0x7f/0xb0 [ 2149.610895] page allocation failure: order:4 [ 2149.612632] ? do_vfs_ioctl+0xff0/0xff0 [ 2149.612643] do_syscall_64+0x1d5/0x640 [ 2149.612655] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2149.642719] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2149.646297] RIP: 0033:0x466459 [ 2149.646303] RSP: 002b:00007f2dce80f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2149.646313] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2149.646318] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2149.646322] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2149.646327] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2149.646332] R13: 00007ffdf01d7adf R14: 00007f2dce80f300 R15: 0000000000022000 [ 2149.673212] syz-executor.1 cpuset= [ 2149.769068] (null) [ 2149.778944] / mems_allowed=0-1 [ 2149.782198] warn_alloc_show_mem: 1 callbacks suppressed [ 2149.782200] Mem-Info: [ 2149.791351] CPU: 1 PID: 14057 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0 [ 2149.799242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2149.804859] syz-executor.3 cpuset= [ 2149.808589] Call Trace: [ 2149.808607] dump_stack+0x1b2/0x281 [ 2149.808621] warn_alloc.cold+0x96/0x1cc [ 2149.822301] ? zone_watermark_ok_safe+0x220/0x220 [ 2149.823037] / [ 2149.827145] __alloc_pages_nodemask+0x2127/0x2720 [ 2149.833677] ? lock_acquire+0x170/0x3f0 [ 2149.837764] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2149.839339] mems_allowed=0-1 [ 2149.842605] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2149.842617] ? __mutex_unlock_slowpath+0x75/0x770 [ 2149.842630] alloc_pages_current+0x155/0x260 [ 2149.842641] ion_page_pool_alloc+0x118/0x1b0 [ 2149.864762] ion_system_heap_allocate+0x133/0x8c0 [ 2149.869618] ? ion_alloc+0x187/0x810 [ 2149.873435] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2149.878879] ? ion_system_contig_heap_create+0x130/0x130 [ 2149.884324] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2149.889332] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2149.894260] ion_alloc+0x204/0x810 [ 2149.897819] ? ion_dma_buf_release+0x40/0x40 [ 2149.902235] ? __might_fault+0x177/0x1b0 [ 2149.906289] ion_ioctl+0xea/0x1f0 [ 2149.909731] ? ion_query_heaps+0x360/0x360 [ 2149.913956] ? ion_query_heaps+0x360/0x360 [ 2149.918178] do_vfs_ioctl+0x75a/0xff0 [ 2149.921980] ? ioctl_preallocate+0x1a0/0x1a0 [ 2149.926380] ? lock_downgrade+0x740/0x740 [ 2149.930519] ? __fget+0x225/0x360 [ 2149.933964] ? do_vfs_ioctl+0xff0/0xff0 [ 2149.937943] ? security_file_ioctl+0x83/0xb0 [ 2149.938505] syz-executor.2: [ 2149.942336] SyS_ioctl+0x7f/0xb0 [ 2149.942343] ? do_vfs_ioctl+0xff0/0xff0 [ 2149.942353] do_syscall_64+0x1d5/0x640 [ 2149.942364] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2149.961696] RIP: 0033:0x466459 [ 2149.964290] page allocation failure: order:4 [ 2149.964872] RSP: 002b:00007f27c4f46188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2149.964882] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2149.964887] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2149.964891] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2149.964896] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2149.964900] R13: 00007ffda0b0ca7f R14: 00007f27c4f46300 R15: 0000000000022000 [ 2149.973924] active_anon:22854 inactive_anon:34445 isolated_anon:0 [ 2149.973924] active_file:2113 inactive_file:5426 isolated_file:0 [ 2149.973924] unevictable:0 dirty:124 writeback:0 unstable:0 [ 2149.973924] slab_reclaimable:12638 slab_unreclaimable:121697 [ 2149.973924] mapped:57731 shmem:35605 pagetables:819 bounce:0 [ 2149.973924] free:360258 free_pcp:212 free_cma:0 [ 2149.981928] CPU: 0 PID: 14055 Comm: syz-executor.3 Not tainted 4.14.228-syzkaller #0 [ 2149.996436] Node 0 active_anon:90628kB inactive_anon:96320kB active_file:4408kB inactive_file:19368kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216868kB dirty:464kB writeback:0kB shmem:100684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2149.998931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2149.998935] Call Trace: [ 2149.998949] dump_stack+0x1b2/0x281 [ 2149.998962] warn_alloc.cold+0x96/0x1cc [ 2150.009466] Node 1 active_anon:788kB inactive_anon:41460kB active_file:4044kB inactive_file:2336kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:14056kB dirty:32kB writeback:0kB shmem:41736kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2150.013489] ? zone_watermark_ok_safe+0x220/0x220 [ 2150.013512] __alloc_pages_nodemask+0x2127/0x2720 [ 2150.048473] Node 0 [ 2150.055270] ? __schedule+0x893/0x1de0 [ 2150.055286] ? lock_acquire+0x170/0x3f0 [ 2150.055301] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2150.055316] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2150.085094] DMA free:11120kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2150.092929] ? __mutex_unlock_slowpath+0x75/0x770 [ 2150.092944] alloc_pages_current+0x155/0x260 [ 2150.095537] lowmem_reserve[]: [ 2150.099543] ion_page_pool_alloc+0x118/0x1b0 [ 2150.099556] ion_system_heap_allocate+0x133/0x8c0 [ 2150.103521] 0 [ 2150.131032] ? ion_alloc+0x187/0x810 [ 2150.131042] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2150.131051] ? ion_system_contig_heap_create+0x130/0x130 [ 2150.131060] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2150.131073] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2150.140511] 2717 [ 2150.140716] ion_alloc+0x204/0x810 [ 2150.142961] 2718 [ 2150.146799] ? ion_dma_buf_release+0x40/0x40 [ 2150.146811] ? __might_fault+0x177/0x1b0 [ 2150.146822] ion_ioctl+0xea/0x1f0 [ 2150.146832] ? ion_query_heaps+0x360/0x360 [ 2150.153158] 2718 [ 2150.155604] ? ion_query_heaps+0x360/0x360 [ 2150.155615] do_vfs_ioctl+0x75a/0xff0 [ 2150.155627] ? ioctl_preallocate+0x1a0/0x1a0 [ 2150.155638] ? lock_downgrade+0x740/0x740 [ 2150.162585] 2718 [ 2150.186645] ? __fget+0x225/0x360 [ 2150.186654] ? do_vfs_ioctl+0xff0/0xff0 [ 2150.186664] ? security_file_ioctl+0x83/0xb0 [ 2150.186673] SyS_ioctl+0x7f/0xb0 [ 2150.195878] ? do_vfs_ioctl+0xff0/0xff0 [ 2150.195890] do_syscall_64+0x1d5/0x640 [ 2150.195905] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2150.195914] RIP: 0033:0x466459 [ 2150.202462] Node 0 [ 2150.203382] RSP: 002b:00007f6a11946188 EFLAGS: 00000246 [ 2150.214762] DMA32 free:944436kB min:36200kB low:45248kB high:54296kB active_anon:90588kB inactive_anon:96320kB active_file:4408kB inactive_file:19368kB unevictable:0kB writepending:464kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7264kB pagetables:3240kB bounce:0kB free_pcp:180kB local_pcp:64kB free_cma:0kB [ 2150.219097] ORIG_RAX: 0000000000000010 [ 2150.219103] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2150.219108] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2150.219115] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2150.234759] lowmem_reserve[]: [ 2150.236520] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2150.236526] R13: 00007ffe41ae227f R14: 00007f6a11946300 R15: 0000000000022000 [ 2150.267201] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2150.270554] 0 [ 2150.278977] (null) [ 2150.289751] 0 [ 2150.298063] syz-executor.2 cpuset= [ 2150.310600] 0 [ 2150.324769] / [ 2150.392860] 0 [ 2150.423652] mems_allowed=0-1 [ 2150.442614] CPU: 0 PID: 14053 Comm: syz-executor.2 Not tainted 4.14.228-syzkaller #0 [ 2150.450515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2150.455890] 0 [ 2150.459855] Call Trace: [ 2150.459874] dump_stack+0x1b2/0x281 [ 2150.459888] warn_alloc.cold+0x96/0x1cc [ 2150.471816] ? zone_watermark_ok_safe+0x220/0x220 [ 2150.476660] __alloc_pages_nodemask+0x2127/0x2720 [ 2150.476669] ? __schedule+0x893/0x1de0 [ 2150.476685] ? lock_acquire+0x170/0x3f0 [ 2150.489367] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2150.491501] Node 0 [ 2150.494207] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2150.494219] ? __mutex_unlock_slowpath+0x75/0x770 [ 2150.506787] alloc_pages_current+0x155/0x260 [ 2150.508303] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2150.511213] ion_page_pool_alloc+0x118/0x1b0 [ 2150.511231] ion_system_heap_allocate+0x133/0x8c0 [ 2150.511243] ? ion_alloc+0x187/0x810 [ 2150.549068] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2150.554511] ? ion_system_contig_heap_create+0x130/0x130 [ 2150.559954] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2150.564978] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2150.569830] ion_alloc+0x204/0x810 [ 2150.573367] ? ion_dma_buf_release+0x40/0x40 [ 2150.577775] ? __might_fault+0x177/0x1b0 [ 2150.581841] ion_ioctl+0xea/0x1f0 [ 2150.585299] ? ion_query_heaps+0x360/0x360 [ 2150.589614] ? ion_query_heaps+0x360/0x360 [ 2150.592838] lowmem_reserve[]: 0 [ 2150.593840] do_vfs_ioctl+0x75a/0xff0 [ 2150.593851] ? ioctl_preallocate+0x1a0/0x1a0 [ 2150.605281] ? lock_downgrade+0x740/0x740 [ 2150.609423] ? __fget+0x225/0x360 [ 2150.610965] 0 [ 2150.612865] ? do_vfs_ioctl+0xff0/0xff0 [ 2150.612875] ? security_file_ioctl+0x83/0xb0 [ 2150.612884] SyS_ioctl+0x7f/0xb0 [ 2150.621206] 0 [ 2150.623001] ? do_vfs_ioctl+0xff0/0xff0 [ 2150.623013] do_syscall_64+0x1d5/0x640 [ 2150.635959] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2150.639033] 0 [ 2150.641134] RIP: 0033:0x466459 [ 2150.641138] RSP: 002b:00007fb129331188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2150.649214] 0 [ 2150.653886] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2150.653892] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2150.653896] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2150.653903] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2150.670221] R13: 00007ffd0a29ad5f R14: 00007fb129331300 R15: 0000000000022000 [ 2150.693786] Node 1 Normal free:579124kB min:53696kB low:67120kB high:80544kB active_anon:788kB inactive_anon:41460kB active_file:4044kB inactive_file:2336kB unevictable:0kB writepending:32kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:36kB bounce:0kB free_pcp:1292kB local_pcp:624kB free_cma:0kB [ 2150.725208] lowmem_reserve[]: 0 0 0 0 0 [ 2150.730495] Node 0 DMA: 405*4kB (UME) 43*8kB (UME) 20*16kB (UME) 9*32kB (UM) 3*64kB (UM) 5*128kB (UME) 2*256kB (UE) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 12108kB [ 2150.778834] Node 0 DMA32: 30278*4kB (UME) 28606*8kB (UME) 21081*16kB (UME) 8518*32kB (UME) 203*64kB (U) 34*128kB (U) 4*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 978200kB [ 2150.811076] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2150.822628] Node 1 Normal: 15333*4kB (U) 9673*8kB (U) 7668*16kB (U) 6654*32kB (U) 1263*64kB (U) 116*128kB (U) 16*256kB (U) 8*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 579228kB [ 2150.862982] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2150.881965] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2150.893648] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2150.919060] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2150.937606] 43101 total pagecache pages [ 2150.941629] 0 pages in swap cache [ 2150.945936] Swap cache stats: add 0, delete 0, find 0/0 [ 2150.951342] Free swap = 0kB [ 2150.954381] Total swap = 0kB [ 2150.958517] 2097051 pages RAM [ 2150.961665] 0 pages HighMem/MovableOnly [ 2150.966480] 363846 pages reserved [ 2150.969975] 0 pages cma reserved [ 2151.234689] Bluetooth: hci5 command 0x041b tx timeout [ 2152.031146] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2152.103876] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2152.125994] CPU: 1 PID: 7966 Comm: syz-fuzzer Not tainted 4.14.228-syzkaller #0 [ 2152.133453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2152.142792] Call Trace: [ 2152.145372] dump_stack+0x1b2/0x281 [ 2152.148991] dump_header+0x178/0x82f [ 2152.152687] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2152.157777] ? ___ratelimit+0x2cd/0x530 [ 2152.161744] oom_kill_process.cold+0x10/0xb18 [ 2152.166234] out_of_memory+0xe3e/0x1190 [ 2152.170187] ? oom_killer_disable+0x1c0/0x1c0 [ 2152.174659] ? mutex_trylock+0x152/0x1a0 [ 2152.178697] __alloc_pages_nodemask+0x23e1/0x2720 [ 2152.183520] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2152.188435] alloc_pages_current+0x155/0x260 [ 2152.192817] filemap_fault+0xea3/0x1980 [ 2152.196769] ext4_filemap_fault+0x84/0xb0 [ 2152.200892] __do_fault+0xfa/0x380 [ 2152.204410] __handle_mm_fault+0x2497/0x4620 [ 2152.208795] ? vm_insert_page+0x7c0/0x7c0 [ 2152.212917] ? free_object+0xe4/0x240 [ 2152.216698] handle_mm_fault+0x391/0x860 [ 2152.220769] __do_page_fault+0x549/0xad0 [ 2152.224808] ? spurious_fault+0x640/0x640 [ 2152.228931] ? do_page_fault+0x60/0x500 [ 2152.232892] ? page_fault+0x2f/0x50 [ 2152.236498] page_fault+0x45/0x50 [ 2152.239926] RIP: 0000:0x940aec [ 2152.243092] RSP: 4e20:000000c00003df28 EFLAGS: 0043b6a0 [ 2152.248161] Mem-Info: [ 2152.256665] active_anon:22912 inactive_anon:34445 isolated_anon:0 [ 2152.256665] active_file:22 inactive_file:0 isolated_file:0 [ 2152.256665] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2152.256665] slab_reclaimable:12638 slab_unreclaimable:121329 [ 2152.256665] mapped:52724 shmem:35605 pagetables:819 bounce:0 [ 2152.256665] free:25058 free_pcp:0 free_cma:0 [ 2152.291883] Node 0 active_anon:90860kB inactive_anon:96320kB active_file:64kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:202692kB dirty:0kB writeback:0kB shmem:100684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2152.330711] Node 1 active_anon:788kB inactive_anon:41460kB active_file:16kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8192kB dirty:0kB writeback:0kB shmem:41736kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2152.362314] Node 0 DMA free:11072kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2152.401833] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2152.409453] Node 0 DMA32 free:36056kB min:36200kB low:45248kB high:54296kB active_anon:90820kB inactive_anon:96320kB active_file:48kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7264kB pagetables:3240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2152.441908] lowmem_reserve[]: 0 0 0 0 0 [ 2152.452318] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2152.482398] lowmem_reserve[]: 0 0 0 0 0 [ 2152.488777] Node 1 Normal free:53536kB min:53696kB low:67120kB high:80544kB active_anon:788kB inactive_anon:41460kB active_file:20kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:36kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2152.526785] lowmem_reserve[]: 0 0 0 0 0 [ 2152.530784] Node 0 DMA: 146*4kB (UME) 43*8kB (UME) 20*16kB (UME) 9*32kB (UM) 3*64kB (UM) 5*128kB (UME) 2*256kB (UE) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11072kB [ 2152.550817] Node 0 DMA32: 348*4kB (UME) 157*8kB (UME) 196*16kB (ME) 170*32kB (UME) 266*64kB (UM) 47*128kB (UM) 7*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36056kB [ 2152.572584] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2152.587057] Node 1 Normal: 36*4kB (UM) 8*8kB (UM) 13*16kB (UM) 6*32kB (UM) 403*64kB (UM) 124*128kB (UM) 20*256kB (UM) 10*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 53536kB [ 2152.611764] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2152.620725] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2152.635350] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2152.644179] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2152.652901] 35629 total pagecache pages [ 2152.659568] 0 pages in swap cache [ 2152.663008] Swap cache stats: add 0, delete 0, find 0/0 [ 2152.668499] Free swap = 0kB [ 2152.671505] Total swap = 0kB [ 2152.676681] 2097051 pages RAM [ 2152.679793] 0 pages HighMem/MovableOnly [ 2152.683746] 363846 pages reserved [ 2152.687205] 0 pages cma reserved [ 2152.690562] Out of memory (oom_kill_allocating_task): Kill process 7966 (syz-fuzzer) score 0 or sacrifice child [ 2152.702152] Killed process 13797 (syz-executor.5) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 2152.721036] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2152.740302] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2152.745306] CPU: 1 PID: 7966 Comm: syz-fuzzer Not tainted 4.14.228-syzkaller #0 [ 2152.752742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2152.762169] Call Trace: [ 2152.764747] dump_stack+0x1b2/0x281 [ 2152.768386] dump_header+0x178/0x82f [ 2152.772092] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2152.777181] ? ___ratelimit+0x2cd/0x530 [ 2152.781135] oom_kill_process.cold+0x10/0xb18 [ 2152.785621] out_of_memory+0xe3e/0x1190 [ 2152.789589] ? oom_killer_disable+0x1c0/0x1c0 [ 2152.794085] ? mutex_trylock+0x152/0x1a0 [ 2152.798129] __alloc_pages_nodemask+0x23e1/0x2720 [ 2152.802953] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2152.807792] alloc_pages_current+0x155/0x260 [ 2152.812204] filemap_fault+0xea3/0x1980 [ 2152.816173] ext4_filemap_fault+0x84/0xb0 [ 2152.820298] __do_fault+0xfa/0x380 [ 2152.823815] __handle_mm_fault+0x2497/0x4620 [ 2152.828208] ? vm_insert_page+0x7c0/0x7c0 [ 2152.832344] ? free_object+0xe4/0x240 [ 2152.836137] handle_mm_fault+0x391/0x860 [ 2152.840178] __do_page_fault+0x549/0xad0 [ 2152.844217] ? spurious_fault+0x640/0x640 [ 2152.848351] ? do_page_fault+0x60/0x500 [ 2152.852322] ? page_fault+0x2f/0x50 [ 2152.855932] page_fault+0x45/0x50 [ 2152.859362] RIP: 0000:0x940aec [ 2152.862527] RSP: 4e20:000000c00003df28 EFLAGS: 0043b6a0 [ 2152.874544] Mem-Info: [ 2152.882304] active_anon:22912 inactive_anon:34445 isolated_anon:0 [ 2152.882304] active_file:12 inactive_file:12 isolated_file:0 [ 2152.882304] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2152.882304] slab_reclaimable:12638 slab_unreclaimable:121180 [ 2152.882304] mapped:52717 shmem:35605 pagetables:819 bounce:0 [ 2152.882304] free:13939 free_pcp:73 free_cma:0 [ 2152.924432] Node 0 active_anon:90860kB inactive_anon:96320kB active_file:52kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:202676kB dirty:0kB writeback:0kB shmem:100684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2152.956501] Node 1 active_anon:788kB inactive_anon:41460kB active_file:4kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8192kB dirty:0kB writeback:0kB shmem:41736kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2152.985542] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2153.000152] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2153.013877] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2153.041590] Node 0 DMA32 free:18256kB min:36200kB low:45248kB high:54296kB active_anon:90820kB inactive_anon:96320kB active_file:44kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7264kB pagetables:3240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2153.042702] syz-executor.2 cpuset= [ 2153.076338] lowmem_reserve[]: 0 0 0 0 0 [ 2153.083863] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2153.087120] / [ 2153.115787] lowmem_reserve[]: 0 0 0 0 0 [ 2153.121476] Node 1 Normal free:26852kB min:53696kB low:67120kB high:80544kB active_anon:788kB inactive_anon:41460kB active_file:0kB inactive_file:52kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:36kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2153.122846] mems_allowed=0-1 [ 2153.155984] lowmem_reserve[]: 0 0 0 0 0 [ 2153.159977] Node 0 DMA: 119*4kB (UME) 43*8kB (UME) 21*16kB (UME) 9*32kB (UM) 3*64kB (UM) 5*128kB (UME) 2*256kB (UE) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10980kB [ 2153.166333] CPU: 0 PID: 14053 Comm: syz-executor.2 Not tainted 4.14.228-syzkaller #0 [ 2153.181330] Node 0 [ 2153.183802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2153.183808] DMA32: [ 2153.186016] Call Trace: [ 2153.186032] dump_stack+0x1b2/0x281 [ 2153.186046] warn_alloc.cold+0x96/0x1cc [ 2153.186058] ? zone_watermark_ok_safe+0x220/0x220 [ 2153.186067] ? usleep_range+0x130/0x130 [ 2153.186077] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2153.200698] 369*4kB [ 2153.203924] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2153.207899] (UME) [ 2153.212690] ? run_timer_softirq+0x5a0/0x5a0 [ 2153.221898] 163*8kB [ 2153.224027] __alloc_pages_nodemask+0x2127/0x2720 [ 2153.229030] (UME) [ 2153.231145] ? lock_acquire+0x170/0x3f0 [ 2153.241852] 196*16kB [ 2153.242677] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2153.244833] (ME) [ 2153.248757] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2153.251136] 46*32kB [ 2153.255962] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2153.255982] alloc_pages_current+0x155/0x260 [ 2153.255994] ion_page_pool_alloc+0x118/0x1b0 [ 2153.256003] ion_system_heap_allocate+0x133/0x8c0 [ 2153.256012] ? ion_alloc+0x187/0x810 [ 2153.256023] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2153.263424] (ME) [ 2153.264849] ? ion_system_contig_heap_create+0x130/0x130 [ 2153.264859] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2153.264870] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2153.264883] ion_alloc+0x204/0x810 [ 2153.270303] 45*64kB [ 2153.274694] ? ion_dma_buf_release+0x40/0x40 [ 2153.274707] ? __might_fault+0x177/0x1b0 [ 2153.274718] ion_ioctl+0xea/0x1f0 [ 2153.274727] ? ion_query_heaps+0x360/0x360 [ 2153.274754] ? ion_query_heaps+0x360/0x360 [ 2153.274764] do_vfs_ioctl+0x75a/0xff0 [ 2153.274776] ? ioctl_preallocate+0x1a0/0x1a0 [ 2153.284270] (UM) [ 2153.287789] ? lock_downgrade+0x740/0x740 [ 2153.287803] ? __fget+0x225/0x360 [ 2153.287813] ? do_vfs_ioctl+0xff0/0xff0 [ 2153.287840] ? security_file_ioctl+0x83/0xb0 [ 2153.287850] SyS_ioctl+0x7f/0xb0 [ 2153.287861] ? do_vfs_ioctl+0xff0/0xff0 [ 2153.293314] 49*128kB [ 2153.295341] do_syscall_64+0x1d5/0x640 [ 2153.295356] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2153.295364] RIP: 0033:0x466459 [ 2153.295369] RSP: 002b:00007fb129331188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2153.295379] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2153.295384] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2153.295389] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2153.295394] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2153.295399] R13: 00007ffd0a29ad5f R14: 00007fb129331300 R15: 0000000000022000 [ 2153.308038] warn_alloc_show_mem: 3 callbacks suppressed [ 2153.308041] Mem-Info: [ 2153.320032] (UM) [ 2153.321074] Bluetooth: hci5 command 0x040f tx timeout [ 2153.326999] 7*256kB [ 2153.337458] active_anon:22912 inactive_anon:34445 isolated_anon:0 [ 2153.337458] active_file:7 inactive_file:17 isolated_file:0 [ 2153.337458] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2153.337458] slab_reclaimable:12637 slab_unreclaimable:121167 [ 2153.337458] mapped:52717 shmem:35605 pagetables:819 bounce:0 [ 2153.337458] free:14020 free_pcp:0 free_cma:0 [ 2153.350178] (UM) [ 2153.358865] Node 0 active_anon:90860kB inactive_anon:96320kB active_file:44kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:202676kB dirty:0kB writeback:0kB shmem:100684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2153.361014] 0*512kB [ 2153.363828] Node 1 active_anon:788kB inactive_anon:41460kB active_file:0kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8192kB dirty:0kB writeback:0kB shmem:41736kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2153.371102] 0*1024kB [ 2153.379789] Node 0 [ 2153.382759] 0*2048kB [ 2153.395051] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2153.406870] 0*4096kB [ 2153.422413] lowmem_reserve[]: [ 2153.424061] = 18332kB [ 2153.435623] 0 [ 2153.442328] Node 0 [ 2153.453777] 2717 [ 2153.490867] Normal: [ 2153.523983] 2718 [ 2153.549049] 0*4kB [ 2153.583157] 2718 [ 2153.588597] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2153.596811] 2718 [ 2153.608696] Node 1 Normal: 34*4kB (UM) 8*8kB (UM) 11*16kB (M) 4*32kB (M) 6*64kB (M) 115*128kB (UM) 20*256kB (UM) 10*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 26872kB [ 2153.630256] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2153.639752] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2153.640710] Node 0 [ 2153.652543] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2153.660247] DMA32 free:18256kB min:36200kB low:45248kB high:54296kB active_anon:90820kB inactive_anon:96320kB active_file:44kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7232kB pagetables:3240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2153.663736] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2153.702495] lowmem_reserve[]: 0 0 0 0 0 [ 2153.707682] 35629 total pagecache pages [ 2153.711655] 0 pages in swap cache [ 2153.714855] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2153.719079] Swap cache stats: add 0, delete 0, find 0/0 [ 2153.751995] lowmem_reserve[]: 0 0 0 0 0 [ 2153.753963] Free swap = 0kB [ 2153.757939] Node 1 [ 2153.759152] Total swap = 0kB [ 2153.759171] Normal free:26852kB min:53696kB low:67120kB high:80544kB active_anon:788kB inactive_anon:41460kB active_file:84kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:36kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2153.761369] 2097051 pages RAM [ 2153.773106] lowmem_reserve[]: [ 2153.799997] 0 pages HighMem/MovableOnly [ 2153.806543] 0 0 0 0 0 [ 2153.808972] 363846 pages reserved [ 2153.809554] Node 0 [ 2153.812980] 0 pages cma reserved [ 2153.812986] DMA: [ 2153.820831] Out of memory (oom_kill_allocating_task): Kill process 7966 (syz-fuzzer) score 0 or sacrifice child [ 2153.829698] 119*4kB (UME) 43*8kB (UME) 21*16kB (UME) 9*32kB (UM) 3*64kB (UM) 5*128kB (UME) 2*256kB (UE) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10980kB [ 2153.840378] Killed process 11872 (syz-executor.2) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 2153.859169] Node 0 DMA32: 369*4kB (UME) 163*8kB (UME) 196*16kB (ME) 47*32kB (UME) 45*64kB (UM) 49*128kB (UM) 7*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18364kB [ 2153.883498] oom_reaper: reaped process 14053 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2153.896971] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2153.907733] Node 1 Normal: 34*4kB (UM) 8*8kB (UM) 11*16kB (M) 4*32kB (M) 6*64kB (M) 115*128kB (UM) 20*256kB (UM) 10*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 26872kB [ 2153.933369] oom_reaper: reaped process 11872 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2153.943404] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2153.954543] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2153.963121] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2153.990793] oom_reaper: reaped process 14058 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2154.000817] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2154.009468] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2154.023395] 35629 total pagecache pages [ 2154.026285] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2154.027406] 0 pages in swap cache [ 2154.045481] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2154.050597] CPU: 0 PID: 14058 Comm: syz-executor.4 Not tainted 4.14.228-syzkaller #0 [ 2154.058461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2154.067793] Call Trace: [ 2154.070362] dump_stack+0x1b2/0x281 [ 2154.073970] warn_alloc.cold+0x96/0x1cc [ 2154.078035] ? zone_watermark_ok_safe+0x220/0x220 [ 2154.082854] ? usleep_range+0x130/0x130 [ 2154.086804] ? try_to_free_pages+0x23f/0x6e0 [ 2154.091188] ? _find_next_bit+0xdb/0x100 [ 2154.095228] ? run_timer_softirq+0x5a0/0x5a0 [ 2154.099619] __alloc_pages_nodemask+0x2127/0x2720 [ 2154.104445] ? lock_acquire+0x170/0x3f0 [ 2154.108400] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2154.113232] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2154.117742] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2154.123178] alloc_pages_current+0x155/0x260 [ 2154.127565] ion_page_pool_alloc+0x118/0x1b0 [ 2154.131968] ion_system_heap_allocate+0x133/0x8c0 [ 2154.136786] ? ion_alloc+0x187/0x810 [ 2154.140496] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2154.146009] ? ion_system_contig_heap_create+0x130/0x130 [ 2154.151432] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2154.156423] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2154.161271] ion_alloc+0x204/0x810 [ 2154.164789] ? ion_dma_buf_release+0x40/0x40 [ 2154.169173] ? __might_fault+0x177/0x1b0 [ 2154.173207] ion_ioctl+0xea/0x1f0 [ 2154.176640] ? ion_query_heaps+0x360/0x360 [ 2154.180853] ? ion_query_heaps+0x360/0x360 [ 2154.185067] do_vfs_ioctl+0x75a/0xff0 [ 2154.188848] ? ioctl_preallocate+0x1a0/0x1a0 [ 2154.193231] ? lock_downgrade+0x740/0x740 [ 2154.197360] ? __fget+0x225/0x360 [ 2154.200791] ? do_vfs_ioctl+0xff0/0xff0 [ 2154.204741] ? security_file_ioctl+0x83/0xb0 [ 2154.209124] SyS_ioctl+0x7f/0xb0 [ 2154.212465] ? do_vfs_ioctl+0xff0/0xff0 [ 2154.216416] do_syscall_64+0x1d5/0x640 [ 2154.220284] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2154.225455] RIP: 0033:0x466459 [ 2154.228635] RSP: 002b:00007f2dce80f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2154.236407] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2154.243655] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2154.250901] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2154.258159] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2154.265406] R13: 00007ffdf01d7adf R14: 00007f2dce80f300 R15: 0000000000022000 [ 2154.274559] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2154.279335] CPU: 1 PID: 7966 Comm: syz-fuzzer Not tainted 4.14.228-syzkaller #0 [ 2154.285200] Swap cache stats: add 0, delete 0, find 0/0 [ 2154.286764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2154.292104] Free swap = 0kB [ 2154.301426] Call Trace: [ 2154.301442] dump_stack+0x1b2/0x281 [ 2154.301452] dump_header+0x178/0x82f [ 2154.301463] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2154.309118] Total swap = 0kB [ 2154.310624] ? ___ratelimit+0x2cd/0x530 [ 2154.314307] 2097051 pages RAM [ 2154.319387] oom_kill_process.cold+0x10/0xb18 [ 2154.319404] out_of_memory+0xe3e/0x1190 [ 2154.319417] ? oom_killer_disable+0x1c0/0x1c0 [ 2154.322406] 0 pages HighMem/MovableOnly [ 2154.326353] ? mutex_trylock+0x152/0x1a0 [ 2154.326365] __alloc_pages_nodemask+0x23e1/0x2720 [ 2154.326384] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2154.329453] 363846 pages reserved [ 2154.333949] alloc_pages_current+0x155/0x260 [ 2154.337917] 0 pages cma reserved [ 2154.342460] filemap_fault+0xea3/0x1980 [ 2154.375244] ext4_filemap_fault+0x84/0xb0 [ 2154.379381] __do_fault+0xfa/0x380 [ 2154.382909] __handle_mm_fault+0x2497/0x4620 [ 2154.387309] ? vm_insert_page+0x7c0/0x7c0 [ 2154.391440] ? free_object+0xe4/0x240 [ 2154.395341] handle_mm_fault+0x391/0x860 [ 2154.399404] __do_page_fault+0x549/0xad0 [ 2154.403454] ? spurious_fault+0x640/0x640 [ 2154.407592] ? do_page_fault+0x60/0x500 [ 2154.411548] ? page_fault+0x2f/0x50 [ 2154.415160] page_fault+0x45/0x50 [ 2154.418598] RIP: 0000:0x940aec [ 2154.421778] RSP: 4e20:000000c00003df28 EFLAGS: 0043b6a0 [ 2154.434730] Mem-Info: [ 2154.442988] active_anon:22800 inactive_anon:34445 isolated_anon:0 [ 2154.442988] active_file:5 inactive_file:44 isolated_file:0 [ 2154.442988] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2154.442988] slab_reclaimable:12627 slab_unreclaimable:121149 [ 2154.442988] mapped:35317 shmem:35605 pagetables:760 bounce:0 [ 2154.442988] free:33575 free_pcp:306 free_cma:0 [ 2154.515028] Node 0 active_anon:90416kB inactive_anon:96320kB active_file:0kB inactive_file:568kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:133276kB dirty:0kB writeback:0kB shmem:100684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2154.564457] Node 1 active_anon:784kB inactive_anon:41460kB active_file:28kB inactive_file:2008kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:9392kB dirty:0kB writeback:0kB shmem:41736kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2154.694923] Mem-Info: [ 2154.704337] Node 0 DMA free:11000kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2154.707508] active_anon:22800 inactive_anon:34445 isolated_anon:0 [ 2154.707508] active_file:5 inactive_file:1419 isolated_file:0 [ 2154.707508] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2154.707508] slab_reclaimable:12627 slab_unreclaimable:121149 [ 2154.707508] mapped:36192 shmem:35605 pagetables:723 bounce:0 [ 2154.707508] free:81417 free_pcp:362 free_cma:0 [ 2154.821709] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2154.854868] Node 0 DMA32 free:44288kB min:36200kB low:45248kB high:54296kB active_anon:89964kB inactive_anon:96320kB active_file:400kB inactive_file:2692kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7168kB pagetables:2880kB bounce:0kB free_pcp:1364kB local_pcp:656kB free_cma:0kB [ 2154.974388] Node 0 active_anon:90036kB inactive_anon:96320kB active_file:2020kB inactive_file:920kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:135516kB dirty:0kB writeback:0kB shmem:100684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2155.067314] lowmem_reserve[]: 0 0 0 0 0 [ 2155.080973] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2155.139901] lowmem_reserve[]: 0 0 0 0 0 [ 2155.143916] Node 1 Normal free:28184kB min:53696kB low:67120kB high:80544kB active_anon:1112kB inactive_anon:41460kB active_file:0kB inactive_file:568kB unevictable:0kB writepending:124kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:640kB pagetables:284kB bounce:0kB free_pcp:56kB local_pcp:8kB free_cma:0kB [ 2155.144321] Node 1 active_anon:1112kB inactive_anon:41460kB active_file:72kB inactive_file:108kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8256kB dirty:124kB writeback:0kB shmem:41736kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2155.175054] lowmem_reserve[]: 0 0 0 0 0 [ 2155.212720] Node 0 DMA: 128*4kB (UME) 44*8kB (UME) 21*16kB (UME) 9*32kB (UM) 3*64kB (UM) 5*128kB (UME) 2*256kB (UE) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11024kB [ 2155.216111] Node 0 DMA free:11016kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2155.281846] Node 0 DMA32: 6861*4kB (UME) 227*8kB (UME) 193*16kB (UME) 121*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36220kB [ 2155.296543] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2155.297665] lowmem_reserve[]: [ 2155.307287] Node 1 Normal: 109*4kB (UM) 112*8kB (UME) 103*16kB (UM) 42*32kB (UM) 11*64kB (UME) 81*128kB (UM) 37*256kB (UM) 5*512kB (UME) 0*1024kB 0*2048kB 0*4096kB = 27428kB [ 2155.311407] 0 [ 2155.326306] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2155.329672] 2717 [ 2155.337614] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2155.337620] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2155.337625] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2155.337629] 35627 total pagecache pages [ 2155.337638] 0 pages in swap cache [ 2155.337642] Swap cache stats: add 0, delete 0, find 0/0 [ 2155.337645] Free swap = 0kB [ 2155.337648] Total swap = 0kB [ 2155.337654] 2097051 pages RAM [ 2155.337657] 0 pages HighMem/MovableOnly [ 2155.337660] 363846 pages reserved [ 2155.337663] 0 pages cma reserved [ 2155.337669] Out of memory (oom_kill_allocating_task): Kill process 7966 (syz-fuzzer) score 0 or sacrifice child [ 2155.337727] Killed process 12939 (syz-executor.4) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 2155.372805] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 2155.395473] syz-executor.2: [ 2155.404363] (null) [ 2155.430800] page allocation failure: order:4 [ 2155.458208] 2718 2718 2718 [ 2155.474406] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2155.482029] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2155.497306] Node 0 DMA32 free:35608kB min:36200kB low:45248kB high:54296kB active_anon:89896kB inactive_anon:96320kB active_file:316kB inactive_file:472kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7168kB pagetables:2796kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2155.540796] CPU: 0 PID: 14053 Comm: syz-executor.2 Not tainted 4.14.228-syzkaller #0 [ 2155.548678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2155.555058] , order=0, oom_score_adj=0 [ 2155.558106] Call Trace: [ 2155.562061] syz-fuzzer cpuset= [ 2155.564651] dump_stack+0x1b2/0x281 [ 2155.564665] warn_alloc.cold+0x96/0x1cc [ 2155.564676] ? zone_watermark_ok_safe+0x220/0x220 [ 2155.564699] __alloc_pages_nodemask+0x2127/0x2720 [ 2155.585104] ? io_schedule_timeout+0x140/0x140 [ 2155.589686] ? lock_acquire+0x170/0x3f0 [ 2155.593676] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2155.598517] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2155.603959] ? __mutex_unlock_slowpath+0x75/0x770 [ 2155.608801] alloc_pages_current+0x155/0x260 [ 2155.611086] / mems_allowed=0-1 [ 2155.613200] ion_page_pool_alloc+0x118/0x1b0 [ 2155.613209] ion_system_heap_allocate+0x133/0x8c0 [ 2155.625593] ? _raw_spin_unlock+0x29/0x40 [ 2155.629730] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2155.634667] ? ion_system_contig_heap_create+0x130/0x130 [ 2155.640106] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2155.645111] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2155.650029] ion_alloc+0x27a/0x810 [ 2155.653560] ? ion_dma_buf_release+0x40/0x40 [ 2155.657963] ? __might_fault+0x177/0x1b0 [ 2155.662012] ion_ioctl+0xea/0x1f0 [ 2155.665460] ? ion_query_heaps+0x360/0x360 [ 2155.669674] ? ion_query_heaps+0x360/0x360 [ 2155.673898] do_vfs_ioctl+0x75a/0xff0 [ 2155.677687] ? ioctl_preallocate+0x1a0/0x1a0 [ 2155.682083] ? lock_downgrade+0x740/0x740 [ 2155.686398] ? __fget+0x225/0x360 [ 2155.689840] ? do_vfs_ioctl+0xff0/0xff0 [ 2155.693806] ? security_file_ioctl+0x83/0xb0 [ 2155.698206] SyS_ioctl+0x7f/0xb0 [ 2155.701561] ? do_vfs_ioctl+0xff0/0xff0 [ 2155.705533] do_syscall_64+0x1d5/0x640 [ 2155.709414] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2155.714609] RIP: 0033:0x466459 [ 2155.717798] RSP: 002b:00007fb129331188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2155.725496] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2155.732747] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2155.740002] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2155.747798] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2155.755073] R13: 00007ffd0a29ad5f R14: 00007fb129331300 R15: 0000000000022000 [ 2155.762333] CPU: 1 PID: 3624 Comm: syz-fuzzer Not tainted 4.14.228-syzkaller #0 [ 2155.769778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2155.779119] Call Trace: [ 2155.781705] dump_stack+0x1b2/0x281 [ 2155.785327] dump_header+0x178/0x82f [ 2155.789030] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2155.794120] ? ___ratelimit+0x2cd/0x530 [ 2155.798087] oom_kill_process.cold+0x10/0xb18 [ 2155.802583] out_of_memory+0xe3e/0x1190 [ 2155.806551] ? oom_killer_disable+0x1c0/0x1c0 [ 2155.811046] ? mutex_trylock+0x152/0x1a0 [ 2155.815100] __alloc_pages_nodemask+0x23e1/0x2720 [ 2155.819947] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2155.824794] alloc_pages_current+0x155/0x260 [ 2155.829193] filemap_fault+0xea3/0x1980 [ 2155.833166] ext4_filemap_fault+0x84/0xb0 [ 2155.837305] __do_fault+0xfa/0x380 [ 2155.838199] lowmem_reserve[]: 0 [ 2155.840831] __handle_mm_fault+0x2497/0x4620 [ 2155.840841] ? vm_insert_page+0x7c0/0x7c0 [ 2155.844104] 0 [ 2155.848490] ? __might_fault+0x177/0x1b0 [ 2155.848507] handle_mm_fault+0x391/0x860 [ 2155.848517] __do_page_fault+0x549/0xad0 [ 2155.848528] ? spurious_fault+0x640/0x640 [ 2155.852646] 0 [ 2155.854423] ? do_page_fault+0x60/0x500 [ 2155.854431] ? page_fault+0x2f/0x50 [ 2155.854439] page_fault+0x45/0x50 [ 2155.858472] 0 [ 2155.862509] RIP: 46a900:0x9408cf [ 2155.866560] 0 [ 2155.870669] RSP: 46a780:000000c002b619e0 EFLAGS: 00000003 [ 2155.892370] Mem-Info: [ 2155.900664] active_anon:22709 inactive_anon:34444 isolated_anon:0 [ 2155.900664] active_file:45 inactive_file:0 isolated_file:0 [ 2155.900664] unevictable:0 dirty:2 writeback:9 unstable:0 [ 2155.900664] slab_reclaimable:12642 slab_unreclaimable:120575 [ 2155.900664] mapped:26642 shmem:35604 pagetables:681 bounce:0 [ 2155.900664] free:18503 free_pcp:0 free_cma:0 [ 2155.930598] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2155.937922] Node 0 active_anon:89724kB inactive_anon:96308kB active_file:56kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:106452kB dirty:0kB writeback:0kB shmem:100668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2155.966444] lowmem_reserve[]: [ 2155.987191] Node 1 active_anon:1028kB inactive_anon:41460kB active_file:16kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):8kB mapped:0kB dirty:0kB writeback:0kB shmem:41736kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2155.990607] 0 [ 2156.017103] Node 0 DMA free:11024kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2156.017119] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2156.017136] Node 0 DMA32 free:36140kB min:36200kB low:45248kB high:54296kB active_anon:89684kB inactive_anon:96308kB active_file:56kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7104kB pagetables:2672kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2156.017152] lowmem_reserve[]: 0 0 0 0 0 [ 2156.017169] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2156.017183] lowmem_reserve[]: 0 0 0 0 0 [ 2156.017200] Node 1 Normal free:27080kB min:53696kB low:67120kB high:80544kB active_anon:1028kB inactive_anon:41460kB active_file:16kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2156.017215] lowmem_reserve[]: 0 [ 2156.020804] 0 [ 2156.045326] 0 0 0 0 [ 2156.045341] Node 0 DMA: 128*4kB (UME) 44*8kB (UME) 21*16kB [ 2156.055600] 0 [ 2156.079635] (UME) [ 2156.096134] 0 [ 2156.108526] Mem-Info: [ 2156.118890] 0 [ 2156.140641] 9*32kB [ 2156.153715] (UM) [ 2156.156118] Node 1 [ 2156.157658] 3*64kB [ 2156.161153] Normal free:27080kB min:53696kB low:67120kB high:80544kB active_anon:1028kB inactive_anon:41460kB active_file:16kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2156.161828] (UM) [ 2156.163629] lowmem_reserve[]: [ 2156.165921] active_anon:22688 inactive_anon:34442 isolated_anon:0 [ 2156.165921] active_file:18 inactive_file:14 isolated_file:2 [ 2156.165921] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2156.165921] slab_reclaimable:12647 slab_unreclaimable:120535 [ 2156.165921] mapped:26613 shmem:35601 pagetables:669 bounce:0 [ 2156.165921] free:18561 free_pcp:0 free_cma:0 [ 2156.172052] 0 [ 2156.172377] Node 0 active_anon:89724kB inactive_anon:96308kB active_file:56kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:106452kB dirty:0kB writeback:0kB shmem:100668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2156.214721] 5*128kB [ 2156.246005] Node 1 active_anon:1028kB inactive_anon:41460kB active_file:16kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):8kB mapped:0kB dirty:0kB writeback:0kB shmem:41736kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2156.272931] 0 [ 2156.297068] Node 0 DMA free:11024kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2156.300530] 0 [ 2156.325143] lowmem_reserve[]: [ 2156.326901] 0 [ 2156.326944] 0 [ 2156.330171] 0 [ 2156.331908] 2717 [ 2156.335493] (UME) 2*256kB (UE) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11024kB [ 2156.335530] Node 0 DMA32: 6475*4kB (UME) 350*8kB (UME) 197*16kB (UME) 132*32kB (UME) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36140kB [ 2156.335595] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB [ 2156.345448] Node 0 [ 2156.354641] 2718 [ 2156.363342] DMA: [ 2156.368988] 0*2048kB 0*4096kB = 0kB [ 2156.368997] Node 1 Normal: 116*4kB (UM) 117*8kB (UME) 109*16kB (UM) 42*32kB (UM) 9*64kB (ME) 76*128kB (UM) 38*256kB (UM) 5*512kB (UME) 0*1024kB 0*2048kB 0*4096kB = 27080kB [ 2156.369072] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2156.369077] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2156.369081] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2156.369086] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2156.369089] 35635 total pagecache pages [ 2156.369098] 0 pages in swap cache [ 2156.369102] Swap cache stats: add 0, delete 0, find 0/0 [ 2156.369105] Free swap = 0kB [ 2156.369108] Total swap = 0kB [ 2156.369114] 2097051 pages RAM [ 2156.369116] 0 pages HighMem/MovableOnly [ 2156.369119] 363846 pages reserved [ 2156.369122] 0 pages cma reserved [ 2156.369128] Out of memory (oom_kill_allocating_task): Kill process 3624 (syz-fuzzer) score 0 or sacrifice child [ 2156.369183] Killed process 12966 (syz-executor.0) total-vm:84924kB, anon-rss:60kB, file-rss:0kB, shmem-rss:0kB [ 2156.377558] oom_reaper: reaped process 12966 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2156.390357] 128*4kB [ 2156.395970] 2718 [ 2156.407937] (UME) [ 2156.412057] 2718 [ 2156.455397] 44*8kB [ 2156.462155] (UME) [ 2156.472387] Node 0 DMA32 free:36016kB min:36200kB low:45248kB high:54296kB active_anon:89684kB inactive_anon:96308kB active_file:56kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7072kB pagetables:2524kB bounce:0kB free_pcp:288kB local_pcp:48kB free_cma:0kB [ 2156.472406] lowmem_reserve[]: 0 0 0 0 0 [ 2156.472424] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2156.472440] lowmem_reserve[]: 0 0 0 0 0 [ 2156.472456] Node 1 Normal free:27080kB min:53696kB low:67120kB high:80544kB active_anon:1028kB inactive_anon:41460kB active_file:16kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:4kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 2156.472472] lowmem_reserve[]: 0 0 0 0 0 [ 2156.472489] Node 0 DMA: 128*4kB (UME) 44*8kB (UME) 21*16kB (UME) 9*32kB (UM) 3*64kB (UM) 5*128kB (UME) 2*256kB (UE) 2*512kB (UE) 3*1024kB [ 2156.534488] 21*16kB (UME) 9*32kB (UM) 3*64kB (UM) 5*128kB (UME) 2*256kB (UE) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11024kB [ 2156.534540] Node 0 DMA32: 7246*4kB (UME) 375*8kB (UME) 226*16kB (UME) 190*32kB (UME) 1*64kB [ 2156.539484] (UME) [ 2156.583358] (M) [ 2156.596647] 2*2048kB [ 2156.601887] 0*128kB [ 2156.612941] (UM) 0*4096kB = 11024kB [ 2156.612952] Node 0 DMA32: 7002*4kB (UME) 431*8kB (UME) 262*16kB (UME) 190*32kB (UME) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 41792kB [ 2156.613005] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2156.613045] Node 1 Normal: 117*4kB (UM) 117*8kB (UME) 109*16kB (UM) 42*32kB (UM) 9*64kB (ME) 76*128kB (UM) 38*256kB (UM) 5*512kB (UME) 0*1024kB 0*2048kB 0*4096kB = 27084kB [ 2156.613113] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2156.613118] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2156.613124] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2156.613130] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2156.613133] 35635 total pagecache pages [ 2156.613143] 0 pages in swap cache [ 2156.634681] 0*256kB [ 2156.636494] Swap cache stats: add 0, delete 0, find 0/0 [ 2156.636498] Free swap = 0kB [ 2156.636501] Total swap = 0kB [ 2156.636508] 2097051 pages RAM [ 2156.636511] 0 pages HighMem/MovableOnly [ 2156.636514] 363846 pages reserved [ 2156.636519] 0 pages cma reserved [ 2156.639930] 0*512kB [ 2156.654785] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask= [ 2156.683352] 0*1024kB [ 2156.700538] (null) [ 2156.726208] 0*2048kB [ 2156.729119] , order=1, oom_score_adj=0 [ 2156.731166] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2156.732322] systemd-journal cpuset= [ 2156.737750] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2156.743796] / [ 2156.746870] 0*4096kB [ 2156.750837] mems_allowed=0-1 [ 2156.756313] = 41744kB [ 2156.761842] CPU: 1 PID: 13782 Comm: systemd-journal Not tainted 4.14.228-syzkaller #0 [ 2156.769382] Node 0 [ 2156.771673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2156.773796] Normal: [ 2156.776192] Call Trace: [ 2156.776207] dump_stack+0x1b2/0x281 [ 2156.776223] dump_header+0x178/0x82f [ 2156.776233] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2156.776243] ? ___ratelimit+0x2cd/0x530 [ 2156.776253] oom_kill_process.cold+0x10/0xb18 [ 2156.776271] out_of_memory+0xe3e/0x1190 [ 2156.776284] ? oom_killer_disable+0x1c0/0x1c0 [ 2156.776292] ? mutex_trylock+0x152/0x1a0 [ 2156.776303] __alloc_pages_nodemask+0x23e1/0x2720 [ 2156.776323] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2156.776344] ? cache_grow_begin+0x41/0x630 [ 2156.780281] 0*4kB [ 2156.786935] cache_grow_begin+0x91/0x630 [ 2156.786944] ? cache_grow_begin+0x91/0x630 [ 2156.786953] fallback_alloc+0x207/0x2c0 [ 2156.790553] 0*8kB [ 2156.796953] kmem_cache_alloc+0x1e5/0x3c0 [ 2156.796963] getname_flags+0xc8/0x550 [ 2156.796973] user_path_at_empty+0x2a/0x50 [ 2156.798664] 0*16kB [ 2156.801050] SyS_faccessat+0x21b/0x680 [ 2156.804153] 0*32kB [ 2156.806642] ? SyS_fallocate+0x80/0x80 [ 2156.814612] 0*64kB [ 2156.816817] ? do_syscall_64+0x4c/0x640 [ 2156.826331] 0*128kB [ 2156.828636] ? SyS_faccessat+0x680/0x680 [ 2156.831190] 0*256kB [ 2156.834815] do_syscall_64+0x1d5/0x640 [ 2156.834826] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2156.834835] RIP: 0033:0x7faa6b2789c7 [ 2156.838521] 0*512kB [ 2156.843593] RSP: 002b:00007ffe1f83dfc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 2156.847651] 0*1024kB [ 2156.852106] RAX: ffffffffffffffda RBX: 00007ffe1f840ee0 RCX: 00007faa6b2789c7 [ 2156.856134] 0*2048kB [ 2156.860675] RDX: 00007faa6bce9a00 RSI: 0000000000000000 RDI: 00005605407779a3 [ 2156.860681] RBP: 00007ffe1f83e000 R08: 0000000000000000 R09: 0000000000000000 [ 2156.864816] 0*4096kB [ 2156.869614] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 2156.869620] R13: 0000000000000000 R14: 00007ffe1f840ee0 R15: 00007ffe1f83e4f0 [ 2156.874460] = 0kB [ 2156.891695] Mem-Info: [ 2156.894737] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2156.896082] active_anon:22651 inactive_anon:34442 isolated_anon:0 [ 2156.896082] active_file:14 inactive_file:2 isolated_file:2 [ 2156.896082] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2156.896082] slab_reclaimable:12647 slab_unreclaimable:120395 [ 2156.896082] mapped:17913 shmem:35601 pagetables:632 bounce:0 [ 2156.896082] free:13762 free_pcp:64 free_cma:0 [ 2156.899565] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2156.903338] Node 0 active_anon:89576kB inactive_anon:96308kB active_file:44kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:71652kB dirty:0kB writeback:0kB shmem:100668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2156.934136] Node 1 [ 2156.934727] Node 1 active_anon:1024kB inactive_anon:41460kB active_file:12kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:41736kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2156.938503] Normal: [ 2156.943763] Node 0 [ 2156.951278] device bridge_slave_1 left promiscuous mode [ 2156.962669] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2156.968802] 42*4kB [ 2156.969624] lowmem_reserve[]: [ 2156.982176] bridge0: port 2(bridge_slave_1) entered disabled state [ 2156.985886] 0 [ 2156.987016] (UM) [ 2156.993892] 2717 [ 2157.006887] 67*8kB [ 2157.027966] 2718 [ 2157.068039] (UME) [ 2157.091911] device bridge_slave_0 left promiscuous mode [ 2157.129534] 108*16kB (UM) 45*32kB (UM) 9*64kB (ME) 76*128kB (UM) 38*256kB (UM) 5*512kB (UME) 0*1024kB 0*2048kB 0*4096kB = 26464kB [ 2157.223596] bridge0: port 1(bridge_slave_0) entered disabled state [ 2157.229528] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2157.238586] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2157.258491] 2718 2718 [ 2157.260995] Node 0 DMA32 free:18056kB min:36200kB low:45248kB high:54296kB active_anon:89536kB inactive_anon:96308kB active_file:56kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7072kB pagetables:2492kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2157.268358] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2157.296740] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2157.310302] device veth1_macvtap left promiscuous mode [ 2157.318697] CPU: 0 PID: 14053 Comm: syz-executor.2 Not tainted 4.14.228-syzkaller #0 [ 2157.319441] device veth0_macvtap left promiscuous mode [ 2157.326572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2157.326575] Call Trace: [ 2157.326592] dump_stack+0x1b2/0x281 [ 2157.326605] warn_alloc.cold+0x96/0x1cc [ 2157.338653] device veth1_vlan left promiscuous mode [ 2157.341203] ? zone_watermark_ok_safe+0x220/0x220 [ 2157.343908] device veth0_vlan left promiscuous mode [ 2157.347490] ? usleep_range+0x130/0x130 [ 2157.347500] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2157.347511] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2157.347521] ? run_timer_softirq+0x5a0/0x5a0 [ 2157.353108] lowmem_reserve[]: [ 2157.356471] __alloc_pages_nodemask+0x2127/0x2720 [ 2157.356486] ? lock_acquire+0x170/0x3f0 [ 2157.356502] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2157.356510] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2157.356525] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2157.367325] 0 [ 2157.370384] ? alloc_pages_current+0x37/0x260 [ 2157.377882] 0 [ 2157.380459] alloc_pages_current+0x155/0x260 [ 2157.388086] 0 [ 2157.392772] ion_page_pool_alloc+0x118/0x1b0 [ 2157.400122] 0 [ 2157.401561] ion_system_heap_allocate+0x133/0x8c0 [ 2157.409467] 0 [ 2157.411572] ? _raw_spin_unlock+0x29/0x40 [ 2157.417948] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2157.417957] ? ion_system_contig_heap_create+0x130/0x130 [ 2157.417968] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2157.417979] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2157.417990] ion_alloc+0x27a/0x810 [ 2157.418003] ? ion_dma_buf_release+0x40/0x40 [ 2157.423246] Node 0 [ 2157.424209] ? __might_fault+0x177/0x1b0 [ 2157.424220] ion_ioctl+0xea/0x1f0 [ 2157.424229] ? ion_query_heaps+0x360/0x360 [ 2157.424241] ? ion_query_heaps+0x360/0x360 [ 2157.424250] do_vfs_ioctl+0x75a/0xff0 [ 2157.424263] ? ioctl_preallocate+0x1a0/0x1a0 [ 2157.429429] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2157.430453] ? lock_downgrade+0x740/0x740 [ 2157.432225] lowmem_reserve[]: [ 2157.437144] ? __fget+0x225/0x360 [ 2157.437153] ? do_vfs_ioctl+0xff0/0xff0 [ 2157.437163] ? security_file_ioctl+0x83/0xb0 [ 2157.437172] SyS_ioctl+0x7f/0xb0 [ 2157.437179] ? do_vfs_ioctl+0xff0/0xff0 [ 2157.437189] do_syscall_64+0x1d5/0x640 [ 2157.437203] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2157.442308] 0 [ 2157.443105] RIP: 0033:0x466459 [ 2157.451421] 0 [ 2157.453532] RSP: 002b:00007fb129331188 EFLAGS: 00000246 [ 2157.461718] 0 [ 2157.463358] ORIG_RAX: 0000000000000010 [ 2157.470301] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2157.471262] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2157.473494] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2157.477541] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2157.477546] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2157.477551] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2157.477555] R13: 00007ffd0a29ad5f R14: 00007fb129331300 R15: 0000000000022000 [ 2157.501186] Mem-Info: [ 2157.533193] 0 [ 2157.542330] active_anon:22650 inactive_anon:34442 isolated_anon:0 [ 2157.542330] active_file:17 inactive_file:17 isolated_file:0 [ 2157.542330] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2157.542330] slab_reclaimable:12647 slab_unreclaimable:120358 [ 2157.542330] mapped:17909 shmem:35601 pagetables:624 bounce:0 [ 2157.542330] free:13840 free_pcp:33 free_cma:0 [ 2157.557271] 0 [ 2157.577664] Node 0 active_anon:89576kB inactive_anon:96308kB active_file:56kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:71636kB dirty:0kB writeback:0kB shmem:100668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2157.616194] Node 1 active_anon:1024kB inactive_anon:41460kB active_file:12kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:41736kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2157.634072] 35635 total pagecache pages [ 2157.651640] Node 0 [ 2157.679583] Node 1 [ 2157.712262] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2157.736359] 0 pages in swap cache [ 2157.776878] Normal free:26336kB min:53696kB low:67120kB high:80544kB active_anon:1024kB inactive_anon:41460kB active_file:12kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2157.781154] lowmem_reserve[]: [ 2157.818201] Swap cache stats: add 0, delete 0, find 0/0 [ 2157.822240] 0 [ 2157.832561] Free swap = 0kB [ 2157.835946] 2717 2718 2718 2718 [ 2157.840817] Node 0 DMA32 free:18056kB min:36200kB low:45248kB high:54296kB active_anon:89536kB inactive_anon:96308kB active_file:56kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7072kB pagetables:2492kB bounce:0kB free_pcp:132kB local_pcp:0kB free_cma:0kB [ 2157.842736] Total swap = 0kB [ 2157.884742] lowmem_reserve[]: 0 0 0 0 0 [ 2157.888741] Node 0 DMA: 114*4kB (UME) 44*8kB (UME) 21*16kB (UME) 9*32kB (UM) 3*64kB (UM) 5*128kB (UME) 2*256kB (UE) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10968kB [ 2157.892711] lowmem_reserve[]: [ 2157.917043] 2097051 pages RAM [ 2157.923254] 0 pages HighMem/MovableOnly [ 2157.924134] 0 0 0 0 0 [ 2157.929737] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2157.937416] Node 0 [ 2157.967255] 363846 pages reserved [ 2157.972936] 0 pages cma reserved [ 2157.978104] lowmem_reserve[]: 0 0 0 0 0 [ 2157.982103] Node 1 Normal free:26584kB min:53696kB low:67120kB high:80544kB active_anon:1024kB inactive_anon:41460kB active_file:8kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2158.010844] DMA32: 913*4kB (UME) 571*8kB (UME) 271*16kB (UME) 193*32kB (UME) 3*64kB (UM) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19180kB [ 2158.023449] lowmem_reserve[]: 0 0 0 0 0 [ 2158.037981] Node 0 DMA: 114*4kB (UME) 44*8kB (UME) 21*16kB (UME) 9*32kB (UM) 3*64kB (UM) 5*128kB (UME) 2*256kB (UE) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10968kB [ 2158.074025] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2158.083895] Node 0 DMA32: 913*4kB (UME) 571*8kB (UME) 271*16kB (UME) 193*32kB (UME) 3*64kB (UM) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19180kB [ 2158.114196] Node 1 Normal: 0*4kB 1*8kB (E) 1*16kB (M) 2*32kB (UM) 1*64kB (E) 2*128kB (UM) 12*256kB (UM) 4*512kB (UME) 121*1024kB (U) 17*2048kB (U) 0*4096kB = 164248kB [ 2158.154041] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2158.184070] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2158.187081] Node 0 [ 2158.202138] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2158.213349] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2158.220940] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2158.261952] Node 1 Normal: 11*4kB (UME) 4*8kB (UME) 5*16kB (UM) 4*32kB (U) 542*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (U) 153*1024kB (U) 19*2048kB (U) 0*4096kB = 232092kB [ 2158.265638] 38743 total pagecache pages [ 2158.279607] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2158.313989] 0 pages in swap cache [ 2158.314506] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2158.317454] Swap cache stats: add 0, delete 0, find 0/0 [ 2158.337692] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2158.358080] Free swap = 0kB [ 2158.361120] Total swap = 0kB [ 2158.362565] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2158.379227] 39002 total pagecache pages [ 2158.383981] 2097051 pages RAM [ 2158.387546] 0 pages HighMem/MovableOnly [ 2158.391524] 363846 pages reserved [ 2158.404038] 0 pages in swap cache [ 2158.408134] Swap cache stats: add 0, delete 0, find 0/0 [ 2158.413502] Free swap = 0kB [ 2158.423983] 0 pages cma reserved [ 2158.427378] Out of memory (oom_kill_allocating_task): Kill process 13782 (systemd-journal) score 0 or sacrifice child [ 2158.434260] Total swap = 0kB [ 2158.441572] 2097051 pages RAM [ 2158.454000] 0 pages HighMem/MovableOnly [ 2158.457340] Killed process 13782 (systemd-journal) total-vm:46096kB, anon-rss:476kB, file-rss:0kB, shmem-rss:1972kB [ 2158.457973] 363846 pages reserved [ 2158.482999] oom_reaper: reaped process 13782 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1972kB [ 2158.513382] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2158.521280] 0 pages cma reserved [ 2158.577472] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2158.636564] systemd[1]: Stopped Journal Service. [ 2158.677716] systemd[1]: Starting Journal Service... [ 2158.760938] device hsr_slave_1 left promiscuous mode [ 2158.783732] device hsr_slave_0 left promiscuous mode [ 2158.849337] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2158.892187] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2158.902166] CPU: 0 PID: 7977 Comm: syz-fuzzer Not tainted 4.14.228-syzkaller #0 [ 2158.909616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2158.918966] Call Trace: [ 2158.921544] dump_stack+0x1b2/0x281 [ 2158.925171] dump_header+0x178/0x82f [ 2158.928878] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2158.933968] ? ___ratelimit+0x2cd/0x530 [ 2158.937942] oom_kill_process.cold+0x10/0xb18 [ 2158.942436] out_of_memory+0xe3e/0x1190 [ 2158.946402] ? oom_killer_disable+0x1c0/0x1c0 [ 2158.950907] ? mutex_trylock+0x152/0x1a0 [ 2158.954960] __alloc_pages_nodemask+0x23e1/0x2720 [ 2158.959806] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2158.964661] alloc_pages_current+0x155/0x260 [ 2158.969066] filemap_fault+0xea3/0x1980 [ 2158.973044] ext4_filemap_fault+0x84/0xb0 [ 2158.977184] __do_fault+0xfa/0x380 [ 2158.980717] __handle_mm_fault+0x2497/0x4620 [ 2158.985121] ? vm_insert_page+0x7c0/0x7c0 [ 2158.989272] handle_mm_fault+0x391/0x860 [ 2158.993329] __do_page_fault+0x549/0xad0 [ 2158.997386] ? spurious_fault+0x640/0x640 [ 2159.001524] ? do_page_fault+0x60/0x500 [ 2159.005486] ? page_fault+0x2f/0x50 [ 2159.009105] page_fault+0x45/0x50 [ 2159.012545] RIP: b8300:0x4 [ 2159.015377] RSP: 02bb:000000c000521e40 EFLAGS: 00000003 [ 2159.015977] team0 (unregistering): Port device team_slave_1 removed [ 2159.054485] team0 (unregistering): Port device team_slave_0 removed [ 2159.067919] Mem-Info: [ 2159.070712] active_anon:22564 inactive_anon:34438 isolated_anon:0 [ 2159.070712] active_file:64 inactive_file:893 isolated_file:2 [ 2159.070712] unevictable:0 dirty:5 writeback:0 unstable:0 [ 2159.070712] slab_reclaimable:12714 slab_unreclaimable:119700 [ 2159.070712] mapped:18033 shmem:35597 pagetables:573 bounce:0 [ 2159.070712] free:131445 free_pcp:186 free_cma:0 [ 2159.104286] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2159.111483] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2159.117549] Node 0 active_anon:89156kB inactive_anon:96304kB active_file:208kB inactive_file:3484kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:72044kB dirty:16kB writeback:0kB shmem:100668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2159.148892] Node 1 active_anon:1100kB inactive_anon:41448kB active_file:48kB inactive_file:88kB unevictable:0kB isolated(anon):0kB isolated(file):8kB mapped:88kB dirty:4kB writeback:0kB shmem:41720kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2159.176740] Node 0 DMA free:11104kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2159.204291] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2159.210367] Node 0 DMA32 free:45012kB min:36200kB low:45248kB high:54296kB active_anon:89216kB inactive_anon:96304kB active_file:1424kB inactive_file:1628kB unevictable:0kB writepending:0kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:6976kB pagetables:2156kB bounce:0kB free_pcp:868kB local_pcp:248kB free_cma:0kB [ 2159.240907] lowmem_reserve[]: 0 0 0 0 0 [ 2159.246054] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2159.247842] bond0 (unregistering): Released all slaves [ 2159.306730] lowmem_reserve[]: 0 0 0 0 0 [ 2159.320393] Node 1 Normal free:486684kB min:53696kB low:67120kB high:80544kB active_anon:1300kB inactive_anon:41448kB active_file:992kB inactive_file:1340kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:576kB pagetables:136kB bounce:0kB free_pcp:820kB local_pcp:624kB free_cma:0kB [ 2159.350597] lowmem_reserve[]: 0 0 0 0 0 [ 2159.356298] Node 0 DMA: 106*4kB (UME) 44*8kB (UME) 21*16kB (UME) 9*32kB (UM) 4*64kB (UM) 6*128kB (UME) 2*256kB (UE) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11128kB [ 2159.373070] Node 0 DMA32: 3413*4kB (UME) 315*8kB (UME) 204*16kB (UME) 58*32kB (UME) 324*64kB (UE) 28*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 45612kB [ 2159.389452] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2159.402343] Node 1 Normal: 1*4kB (U) 53*8kB (UE) 23*16kB (U) 16*32kB (UME) 3355*64kB (UM) 293*128kB (UM) 70*256kB (UM) 4*512kB (ME) 146*1024kB (UM) 34*2048kB (U) 0*4096kB = 492636kB [ 2159.442535] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2159.452397] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2159.461065] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2159.470757] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2159.479424] 37219 total pagecache pages [ 2159.483556] 0 pages in swap cache [ 2159.497492] Swap cache stats: add 0, delete 0, find 0/0 [ 2159.532990] Free swap = 0kB [ 2159.552024] Total swap = 0kB [ 2159.559096] 2097051 pages RAM [ 2159.562676] 0 pages HighMem/MovableOnly [ 2159.568188] systemd-journald[14091]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 2159.594500] 363846 pages reserved [ 2159.598002] 0 pages cma reserved [ 2159.601356] Out of memory (oom_kill_allocating_task): Kill process 7977 (syz-fuzzer) score 0 or sacrifice child [ 2159.611855] Killed process 9255 (syz-executor.1) total-vm:84924kB, anon-rss:60kB, file-rss:0kB, shmem-rss:0kB [ 2159.627703] oom_reaper: reaped process 9255 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 06:43:39 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000080)={0x34, 0x0, &(0x7f0000000040)}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7ffffffd, 0x22}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0x1}) 06:43:39 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10001, 0x2, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, 0x0) [ 2160.231422] systemd[1]: Started Journal Service. 06:43:40 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x0, 0x22}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x1}) 06:43:40 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7ffffffd, 0x22}) 06:43:40 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7ffffffd, 0x22}) 06:43:40 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x4a0441, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7ffffffd, 0x22}) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='xen_mc_entry\x00'}, 0x10) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000140)={0x0, 0x5c17a90e, 0x0, [0xf5, 0x20, 0x8, 0x5, 0x9], [0x1000, 0x5, 0x7, 0x5a, 0x3, 0x4, 0x0, 0x8, 0xfffffffffffffffd, 0x3, 0x6, 0x8, 0x5, 0x9, 0x9, 0x9, 0x80, 0x2, 0x7fffffff, 0x1, 0x9, 0x0, 0x2, 0x3, 0x7, 0x8, 0x5, 0x3, 0x8, 0x101, 0x6, 0xffffffffffffff68, 0x0, 0x0, 0xffffffffffffff00, 0x1ff, 0x8, 0x8e8, 0x7fffffff, 0x3f, 0x3, 0x7, 0x0, 0x1, 0xf7, 0x4, 0x1, 0x400, 0x6, 0x2c, 0x7fff, 0x7, 0x8f3d, 0x3, 0x7, 0x964, 0x2, 0x0, 0x5, 0x80000001, 0x3f, 0x3, 0x7, 0x200, 0x4, 0x7ff, 0xa50, 0x3, 0x6, 0x2, 0xfa6, 0x800, 0x49f, 0x353, 0x7, 0x10001, 0x5, 0x9b40, 0x4, 0xfff, 0x7f, 0x400, 0x6, 0x100, 0x3ff, 0x1f, 0x5, 0x6, 0x7, 0x80000000, 0xe9cd, 0x5, 0x3, 0x0, 0xffffffffffffff1e, 0x3, 0x7, 0x975, 0x20, 0x200, 0x94, 0x2, 0x3c, 0x4, 0x3, 0x401, 0x9, 0x5, 0x40, 0x7fffffff, 0xfffffffffffff99d, 0x7, 0x1, 0x9, 0xd3f6, 0x2, 0x80, 0xe3, 0x8, 0x4]}) [ 2160.885202] syz-executor.4 (12940) used greatest stack depth: 23864 bytes left 06:43:41 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7ffffff9, 0x22, 0x0, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) ioctl$sock_ifreq(r2, 0x8931, &(0x7f0000001640)={'veth1_virt_wifi\x00', @ifru_names}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000140)={0x0, 0x0, "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", "f40c0989ad67ef7dc2ba318a50f71a97ce04db791ab467e58b6275a3d86997503c9ec20ef73f2cf16a05a5e5f8c9fd5170bf3ec85e6c7468c09108adaaf8833566f02aedddee4aaca40712be1129d2ed61bb56861c42a8e98ebd8a93a808f464f1edd506f30afe4bedebcf15fb7dc4cd851d3272c7dff18e5852af182f1d5d6bb50917c7d34661bf650cd3864aa319bbc5e06200fd32dea736bbb292326444664e7da575c9731bfcce836667d07a80be68817ad70c061908509620bffe3fa64ee75ec5c067e4c42df68e74c840d2f7d30efe349763932254f2e043bbe6394a13d2be462b33a47f24b5c38114ef5bc4cd95a9c2edd56f372e4674ab8b098b1e8e39553c5cabdf33e7f71a1d7819fb8bb11e87ab4c2edeab34a2bb2ad26abf8978276654e700f07e0c1d92a5206fc3fbce968ba33031be37ca8403d0961fad57854b4fdf24505e16f0a5c4ae76fc34c64292da2348f92a00a6a28fbef54a5e1e4aaa69c074d0109d3dcefd66e8066a613c128cb6744257ca2757b3e06b2b1149e7f7aa6f4d767380f786a0df07b2cb6310b8221ddfd038f382067ebd902853b34f06f302f4dce89f9a9b4273f9555f30254c2fea185842fb83c149258704c84e5f81597f248590659b6f708647bf8318189dc5ddc177b41d2987b2a804a959b3a64449eddb90dffcd3dff5a1232d3d0f77d3fe19635a64cf1707ff9a7a5fe0887026b0b25513f78df9acf08d70d26dda8ef522fea074dfc8de67370f6577d6862cd998ba9eab141546c2df97601d9512766d0e7994f05d0d542cc17e19ad8d39f0a298ed6bb498549d41e781e821574eb4099b0194d64b336ae8f8056bb9f236ba4e9b64d1afe9a7c260d31a0eed65f6ed4f86e2da2837f529a043a13f519dbb9ddad59aaeb46f48342dfd98d9352963b9a73573ceb9ebdb41898f4e8aff3601ca01e20ffbcd1be5978a183dcfb9fa40150a5d791e3785d22d5725d61b024ac321132135dd23578de86f905e2104c995d47cb4cc4603771fbeed1e88b6651defcd22b58db108d87383365b38f2a7c3147986a749eb0e6e87338e9187d48871a45ef47873e2d775619e9a6e666bf4df9ff1f2a087bf5c2dffde90ccb08baf79bcc1ecbbe36584380dbe6cdb0050376eaa942b0d2f1d32ce680826059b7e9a68a9e535b339ac396f82c217aed66e74715bce9a6586c2dbebc79b12ed738b7440e5880946f7ad7409332a8506701f6645a45542fae892af5b1e4a7e8aa584cd77dd1e53a36de2cba74413bc456410024d6c51297d05cc6ceb39cc37fd93b7878caeaf09865ac32dd0db810537054bbfc67893a4252b0926cec28726480e882ed845eb7ecad24a2fd4c2a12bbe0ddd866386d6aec9957834ed7ee49b4ffc89334eb08d7eec0143ba846fa55ecd263b81c82da7ef3f955eeafc5b7901f3eb61455b121b6c899c26d4ae082275018bdd33b897f08dde91cc24d2f923e7c0f56b33433f214a71c50c50c2c96f4f17146f0ec8915987ca7c5a19a262947015dfa9aaeb15efde19e9c0fd2fa247fdc729c8bbaadf7ce34e179411088689c1b228354efde2817f4cbb9aba69e5738b9f5d46f84ecedaab08e66c8c3de79a62956be7f6ed717deefc9994a6c5a1e02a16ebc31ae0ed4a2ccd385d40d8fb70d53a5e119e3c3d0fe916e9b965c0887bb4b9e6b40ed540b84b0b1b300f603ac4790ba3bf3ef581c72f08f6daf3ce91225b4156fbed25c6947160a5fa8224fe63e5cdfd5f7a410060ab49774ae77c21ace1342831b3970858c2f2bbbb2e96c5f834ad57257183922f89ff3b6379cf93e5923fc3a55c86701c79e6a7d3aba6db60474c1d8d27f6daaa12c3bcb424b2bb68b445e1fa34c917bcd517b8c8846f80b78ed7cd798cfe95b40f147b85338d2698f0a907876dbf649c962804f82e846230d9849bb1396008d4f55731ee0a73a621f8281e1d15eeefd422060c17c8ba4876403c2a0dc0b40fbb968e6d6ba599fb547663e5a356a0829d8b1e19cb620fcdc7e6c594862bc4c522fd667a71cdc29a131eaba8d383f90bd77470d9c4a52c5c9a6828445af5f45e4afe42b8903a428bc0caea2a0904e24bc3c2179aa63612180fad01c52473ca431938de4370a1c638baa949de00ace7922adeb016e435214959aa75ecb0bd614611df1db5e88b0a18ca2f3af816ecea163754b40961313b56ba2ea1c7f17da271eee74b31d6a86e48071e5529a3f0aecc8874a83bf0a1a39756b8b0cf1548e55696a8d65a724cf315df84b4134f42baa585f4a47265818e07288cdb0a4de37fdbd125334ed8a637a7d8326561cf69d15096b3872455c103978ee2ee935161540f3945e7135cd9912a978d54ac39d5520e968613e9870e072e6c69560d8f8f6c8f60b675de16fb0457ca8f0f8e50300b40a97014fa8c7a534c5bc546e0f7d0657b8a24300a942d8a9fe73ac66e3da8c4ce0952e5af45cd21dded5536d220f7766039bf5bac416bd7f2432699c4e00560146fe7703b84499d360df5075b7c3ceaf67c41c76a7ba5be9cfe12902afb86fe1a921cfa4ec448c6cf91d5d2fa370c6db1463f4b8ffc2fc25eb2fb849db4164337e34f8d46b3fba6d12dd41bb5a4e4f10f78d2ebf2226dc34f798be1e182ac513e19886392880912eb498cdbda84d2d5ea2f852f07ec3415749a674f8067d4539c55b7cd06fa7f8297ee2450f289c5437b63596f3b48087c6c4bd4c4e8c81b7810e450fdb097cb5948b86e5bce39376b061eab01981c1434a01e1671de7a4ff3092688bb6e0d9b5d35314e2ac0c8b039df3601a103040021754584e363f6e6bf3a9e913147d24f7501e02464d42ff1b8806598bf5155dfc97653513bda29c07913ec57d9270e51389fd809ba20f0a4cb8212d561e10847e3b055b89edbdf7647c26bed1b8b0fa80159052657eb1fefe44918d5d48b8807d386997cffdcfe195730735edaf1c50e48d20cb3c1a9107e595d6fc193fee87933617a76b31b628b771bed28e8d02844b71cf9ee77919fe4f3621d373e4c1d9321dc1a8485f2c66ee90c3fe48e9038288bd0a23b2e40fe09464284a0e9a3ae68c78ab5444ef3e23792cbef0b945fddeb9fd325fba3d931ae720fb9bbab70fd8ae038cd6d81aa11f3dcf0fac21d671aab1c5c2cfa21bfc1fa2ac42e59d794144442366896b0fa299901cf92bd25f7c50897af57331735c44bf5f98086a48d2063790c8e35d09da981004f067881475f5c0e35e0aa5ecb699550d9ca6236ef2213a9022ee8970a50fbe574f227d0ee5b5c943f759b9996ab45f2d1e79bf7afb99a48e993cc959493e4beee9bfe841a58aae5c1dcd04e20d3757a91f0cf0a1c5d9d018bf8a677a1af7092c944dffd174785b0405782d22f584c82f45cb5926475e6e0b52e8a1872189dfe857e17850394e462b3b2ed7ebcfe33202f4c8a738bc0fb863dcc27d9e2574240299211e79c9e553af45fd1f9f2d8d4460a9edbfdb7cda03b185f07dd268582ec8c981d4d34790f752ac5a947067ce6de0b7629ca0a9c301fb6c37b7b889315967f7cfb60d11497dc315bb88839bf6d14642802f96eff4175e2831b1ce0513d5bda4a7d363c597aac317be90409d515871efa07109e5b93fd2c4b5188d81a5d9e776285d0438b8049da5159a85fbb89db1b75942ad5ee7cd1d9c359ff907c6b7f906218e3c9fe2f9b280df8a0c4864c6423865b4fd9f92120381217aa77e14d8966e9c9f7186e953cda94b2c668467af2a59ea6c1065f2b3505f9f55db1a69f0fede27741a20c7640e6db85753762fce7175a53a30e0b686bfc2fb1ca7dd65664948d267c399a08cd93f08ed0ea60b0a0afeb2610cf16d2b7b46b12ed5b7d50f0343386ab25fb84bc3506d6997c0a79e409c3d6696bc79bec90af4a9b0d7566f31def05ba03322700c1f2f2bc7a91da571b20659f0f39db219275a9ac6b7052390470bd62d75a9f159bde27f54e8ec34d1595f5ee34c73ab3799efd9415fdb20681e1186f2b4977f029276d1149d24421cdd1391ae588cdb6b2710153d2f8bd586ed99b8cefdd852c290ddb8fc4db7265ff1707a6042d773c2a5ddd964a45869b6b9b08a2af36075700e370e2140d312753c920b81a2c17986ac22cbd16642befe5cc6e941d63f36baba1938c09f69871f789d927fa3c555fd4b3711a091c20eb8315df6dfbb9f02a47cc7ed29ef250e754649743d9d69c94c63968307f5af379e58fe83e5754c6120e373d4146a800454ce9c6ea200cdc39ebc01e49b11a09ff632149dafd50294e9e7e2d06994095953fa863917afeb965cde8cbd413bcd203ea2d07023d6573d080646f9c8540b75dd7df6d742f7795b774a2bb4e7bd17b4fe632e32a68443d657823e60411fcdcbe7cabab220b5b682eb3a4a2f5a55e69c49ec9310b2e7c65fe116afa3b133f0d228170d3098b315368b04529bce102374cb07d4e44ff7ed9a9b81461e76b60cda59573aca7fe423334a3526b49fd71aca989d99963439a75f2eac36b8b799f3f47657af644839935cc2f05a12308757529d40f6ca2262ad87e6ccd5435a056814372df65b9661dda283c5f77f5b3eb7bb7d11d5bb0b16f13772979ffd076fa4d98188b50ef9d838acc0c0495eee8e5b8ed27c42a69f7964dc315713656acae01205ab6c458e566bb267d5049abdcf0a42a2366259d2c83cc4c565bb9b535c45d81ef103dd7180f1c283c9351cb1ad530eb915d8a9370b434cbbd4b3c3859f4b68413bc9b4ff10330ce14c2bef37977f0faae8265ae54335c2a20a5601c877fb685e4046841440a9ef774bb1766ac657811923ed2aa642a46ef47d83a784ba4504ce2a66b820b3a325348b5a877e51d664f86ade2d7f076325c5b1063b51c4193797ac3f37eec11512863ec173d8436f8ae210006e62208c65ed90b9465fe7bdb7440dbb670cf9d6603db4a639f7b27f1ecdf7a8214f06e75da0cad428c03e513cf80f1d676ddc8087d3955371534a1e9336587206d5290ee356d9f919ee48057af7700ec25a64df52176878b3f72cc9984363923c011d59002f2fc22e89d2dd7f98ebbaaff74c8179285bf8b3910293e4211d84e952cdf222b5f79d497731a1b7dd45848ab9f4dee1f8bdc95ed5262f319a65d96999f1b51ce4d41c958340f0d30a21113e0ad0d992912ec7a74d95983a0b2ec06a6a6b8db1f5be3579ca663c250f000b30222f9e2bb910226b549c6f4367ec6d0d4c6489faa762ebaba73c1dce3fa32d0ed3259a4e601fe05091486053242acce21fb511063925d272a7d91597a1ef40a9217757176a303c7766835c78bf28e1fb5efa9471e173d32cfff48cc875f8b21805724a2182d77f73ffdaf8e9ca81a551a1053baf241a5e0b0b574e84eae5bcba307875d1e3a0fc29a145aaa2bbfe4"}) r5 = socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000001140)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000001340)={r4, r6, "d5d319e4a916ea6b5b6f8740410b849001335ec257ce61c7eb18b6ac2f30f468bd7d2c084241ffc14041ed110490c132419b54824dcf6bb57c005a41cf1f96eca648d93a3097c8af3f647959ef84cba2af3836da72b1f0c31fb6c3e017b2adae7171d64f54ad7b9324b657c4a006cd3b7fa9ff4b08f31a15c2d7f717b36d3521333164bb8a6560e024218e83c58c621a8c88ca0bea36aaed132b9949841ea9c3d38ff6a2ebb8f19f6ebd5e64b84edd7b121bb881aa315e112bef21fc8fd4c0b517ed65975335416212f78a81fe29912d1381912909609b98412b627b1edf59e364e7ae220a4fb442edaccde63629cf74c115efcfea07755473b0b581a7ac5269", "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"}) [ 2162.776521] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2162.783363] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2162.795561] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2162.802363] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2162.817219] device bridge_slave_1 left promiscuous mode 06:43:42 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x39ceb1d99bd6d57c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xc, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect={0x81}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001bc0)={'gre0\x00'}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10001, 0x2, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, 0x0) 06:43:42 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7ffffffd, 0x22}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @empty, @broadcast}, &(0x7f0000000080)=0xc) [ 2162.822876] bridge0: port 2(bridge_slave_1) entered disabled state [ 2162.835356] device bridge_slave_0 left promiscuous mode [ 2162.840917] bridge0: port 1(bridge_slave_0) entered disabled state [ 2162.854053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2162.860753] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2162.869997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2162.877382] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2162.897197] device bridge_slave_1 left promiscuous mode [ 2162.902827] bridge0: port 2(bridge_slave_1) entered disabled state [ 2162.910623] device bridge_slave_0 left promiscuous mode [ 2162.920730] bridge0: port 1(bridge_slave_0) entered disabled state [ 2162.931539] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2162.941145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2162.949712] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2162.959090] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2162.967130] device bridge_slave_1 left promiscuous mode [ 2162.972865] bridge0: port 2(bridge_slave_1) entered disabled state [ 2162.984959] device bridge_slave_0 left promiscuous mode [ 2162.990543] bridge0: port 1(bridge_slave_0) entered disabled state [ 2163.003309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2163.010257] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2163.020759] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2163.027763] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2163.038393] device bridge_slave_1 left promiscuous mode [ 2163.044462] bridge0: port 2(bridge_slave_1) entered disabled state [ 2163.051804] device bridge_slave_0 left promiscuous mode [ 2163.060757] bridge0: port 1(bridge_slave_0) entered disabled state [ 2163.074450] device veth1_macvtap left promiscuous mode [ 2163.079837] device veth0_macvtap left promiscuous mode [ 2163.088633] device veth1_vlan left promiscuous mode [ 2163.094135] device veth0_vlan left promiscuous mode [ 2163.099610] device veth1_macvtap left promiscuous mode [ 2163.107839] device veth0_macvtap left promiscuous mode [ 2163.113245] device veth1_vlan left promiscuous mode [ 2163.118827] device veth0_vlan left promiscuous mode [ 2163.127426] device veth1_macvtap left promiscuous mode [ 2163.132806] device veth0_macvtap left promiscuous mode [ 2163.138410] device veth1_vlan left promiscuous mode [ 2163.146788] device veth0_vlan left promiscuous mode [ 2163.152325] device veth1_macvtap left promiscuous mode [ 2163.161211] device veth0_macvtap left promiscuous mode [ 2163.170713] device veth1_vlan left promiscuous mode [ 2163.182617] device veth0_vlan left promiscuous mode [ 2163.799809] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2163.811812] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2163.817452] CPU: 1 PID: 14136 Comm: syz-executor.3 Not tainted 4.14.228-syzkaller #0 [ 2163.817475] device hsr_slave_1 left promiscuous mode [ 2163.825316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2163.825320] Call Trace: [ 2163.825335] dump_stack+0x1b2/0x281 [ 2163.825346] warn_alloc.cold+0x96/0x1cc [ 2163.825355] ? zone_watermark_ok_safe+0x220/0x220 [ 2163.825375] __alloc_pages_nodemask+0x2127/0x2720 [ 2163.825389] ? lock_acquire+0x170/0x3f0 [ 2163.825401] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2163.825417] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2163.825429] ? __mutex_unlock_slowpath+0x75/0x770 [ 2163.825440] alloc_pages_current+0x155/0x260 [ 2163.825451] ion_page_pool_alloc+0x118/0x1b0 [ 2163.825460] ion_system_heap_allocate+0x133/0x8c0 [ 2163.825468] ? ion_alloc+0x187/0x810 [ 2163.825477] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2163.825485] ? ion_system_contig_heap_create+0x130/0x130 [ 2163.825494] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2163.825503] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2163.825512] ion_alloc+0x204/0x810 [ 2163.825524] ? ion_dma_buf_release+0x40/0x40 [ 2163.825536] ? __might_fault+0x177/0x1b0 [ 2163.825546] ion_ioctl+0xea/0x1f0 [ 2163.825555] ? ion_query_heaps+0x360/0x360 [ 2163.825566] ? ion_query_heaps+0x360/0x360 [ 2163.825575] do_vfs_ioctl+0x75a/0xff0 [ 2163.825586] ? ioctl_preallocate+0x1a0/0x1a0 [ 2163.825592] ? lock_downgrade+0x740/0x740 [ 2163.825605] ? __fget+0x225/0x360 [ 2163.825613] ? do_vfs_ioctl+0xff0/0xff0 [ 2163.825622] ? security_file_ioctl+0x83/0xb0 [ 2163.825648] SyS_ioctl+0x7f/0xb0 [ 2163.825655] ? do_vfs_ioctl+0xff0/0xff0 [ 2163.825666] do_syscall_64+0x1d5/0x640 [ 2163.825680] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2163.825687] RIP: 0033:0x466459 [ 2163.825692] RSP: 002b:00007f6a11946188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2163.825701] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2163.825706] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2163.825711] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2163.825716] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2163.825721] R13: 00007ffe41ae227f R14: 00007f6a11946300 R15: 0000000000022000 [ 2163.826235] Mem-Info: [ 2163.986000] device hsr_slave_0 left promiscuous mode [ 2163.986866] active_anon:22528 inactive_anon:36476 isolated_anon:0 [ 2163.986866] active_file:1423 inactive_file:5466 isolated_file:0 [ 2163.986866] unevictable:0 dirty:6 writeback:0 unstable:0 [ 2163.986866] slab_reclaimable:12698 slab_unreclaimable:119300 [ 2163.986866] mapped:57118 shmem:37653 pagetables:734 bounce:0 [ 2163.986866] free:398449 free_pcp:59 free_cma:0 [ 2164.024854] team0 (unregistering): Port device team_slave_1 removed [ 2164.031063] Node 0 active_anon:89096kB inactive_anon:104468kB active_file:5688kB inactive_file:21860kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:228468kB dirty:24kB writeback:0kB shmem:108908kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2164.072640] team0 (unregistering): Port device team_slave_0 removed [ 2164.078786] Node 1 active_anon:1016kB inactive_anon:41436kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:0kB writeback:0kB shmem:41704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2164.140175] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2164.148711] Node 0 DMA free:11124kB min:204kB low:252kB high:300kB active_anon:68kB inactive_anon:0kB active_file:24kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2164.175235] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2164.180418] Node 0 DMA32 free:562012kB min:36200kB low:45248kB high:54296kB active_anon:89028kB inactive_anon:104468kB active_file:5664kB inactive_file:21860kB unevictable:0kB writepending:24kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7200kB pagetables:2892kB bounce:0kB free_pcp:744kB local_pcp:112kB free_cma:0kB [ 2164.181031] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2164.210206] lowmem_reserve[]: 0 0 0 0 0 [ 2164.221344] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2164.247407] lowmem_reserve[]: 0 0 0 0 0 [ 2164.251458] Node 1 Normal free:1275100kB min:53696kB low:67120kB high:80544kB active_anon:1016kB inactive_anon:41436kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:576kB pagetables:36kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 2164.280026] lowmem_reserve[]: 0 0 0 0 0 [ 2164.284496] Node 0 DMA: 323*4kB (UME) 57*8kB (UME) 24*16kB (UME) 11*32kB (UM) 3*64kB (UM) 4*128kB (ME) 1*256kB (E) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11124kB [ 2164.287360] bond0 (unregistering): Released all slaves [ 2164.300478] Node 0 DMA32: 301*4kB (UME) 19834*8kB (UME) 14936*16kB (UME) 5113*32kB (UE) 6*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 562852kB [ 2164.320655] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2164.331570] Node 1 Normal: 16631*4kB (UM) 9462*8kB (UM) 5205*16kB (UM) 4790*32kB (U) 5125*64kB (U) 3178*128kB (U) 631*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 1275100kB [ 2164.347539] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2164.356547] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2164.365310] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2164.374331] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2164.382946] 44209 total pagecache pages [ 2164.387091] 0 pages in swap cache [ 2164.390689] Swap cache stats: add 0, delete 0, find 0/0 [ 2164.396096] device hsr_slave_1 left promiscuous mode [ 2164.401341] Free swap = 0kB [ 2164.404489] Total swap = 0kB [ 2164.407542] 2097051 pages RAM [ 2164.410687] device hsr_slave_0 left promiscuous mode [ 2164.410766] 0 pages HighMem/MovableOnly [ 2164.419902] 363846 pages reserved [ 2164.423483] 0 pages cma reserved [ 2164.437399] team0 (unregistering): Port device team_slave_1 removed [ 2164.447757] team0 (unregistering): Port device team_slave_0 removed [ 2164.461063] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2164.473131] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2164.523322] bond0 (unregistering): Released all slaves [ 2164.578565] device hsr_slave_1 left promiscuous mode [ 2164.599246] device hsr_slave_0 left promiscuous mode [ 2164.626507] team0 (unregistering): Port device team_slave_1 removed [ 2164.647228] team0 (unregistering): Port device team_slave_0 removed [ 2164.660414] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2164.672412] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2164.711016] bond0 (unregistering): Released all slaves 06:43:44 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000080)={0x34, 0x0, &(0x7f0000000040)}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7ffffffd, 0x22}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0x1}) [ 2164.762432] device hsr_slave_1 left promiscuous mode [ 2164.770419] device hsr_slave_0 left promiscuous mode [ 2164.789670] team0 (unregistering): Port device team_slave_1 removed [ 2164.804846] team0 (unregistering): Port device team_slave_0 removed [ 2164.818445] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2164.829418] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2164.869274] bond0 (unregistering): Released all slaves [ 2165.553293] Bluetooth: hci0 command 0x0409 tx timeout [ 2165.553307] Bluetooth: hci3 command 0x0409 tx timeout [ 2165.558640] Bluetooth: hci4 command 0x0409 tx timeout [ 2165.569219] Bluetooth: hci2 command 0x0409 tx timeout [ 2165.583906] Bluetooth: hci5 command 0x0409 tx timeout [ 2165.997906] IPVS: ftp: loaded support on port[0] = 21 [ 2166.088690] IPVS: ftp: loaded support on port[0] = 21 06:43:45 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000080)={0x34, 0x0, &(0x7f0000000040)}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7ffffffd, 0x22}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0x1}) [ 2166.230387] chnl_net:caif_netlink_parms(): no params data found [ 2166.263833] IPVS: ftp: loaded support on port[0] = 21 [ 2166.400084] chnl_net:caif_netlink_parms(): no params data found [ 2166.476732] IPVS: ftp: loaded support on port[0] = 21 [ 2166.603056] chnl_net:caif_netlink_parms(): no params data found [ 2166.619607] syz-executor.0: page allocation failure: order:5, mode:0x1084020(GFP_ATOMIC|__GFP_COMP), nodemask=(null) [ 2166.630297] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2166.635733] CPU: 1 PID: 14130 Comm: syz-executor.0 Not tainted 4.14.228-syzkaller #0 [ 2166.643602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2166.652945] Call Trace: [ 2166.655533] dump_stack+0x1b2/0x281 [ 2166.659170] warn_alloc.cold+0x96/0x1cc [ 2166.663144] ? zone_watermark_ok_safe+0x220/0x220 [ 2166.667978] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2166.673434] ? wake_all_kswapds+0x175/0x360 [ 2166.677783] __alloc_pages_nodemask+0x2127/0x2720 [ 2166.682649] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2166.687753] ? __alloc_pages_nodemask+0x1a6e/0x2720 [ 2166.692770] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2166.697614] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2166.702465] ? cache_alloc_refill+0x2fa/0x350 [ 2166.706980] ? ____cache_alloc_node+0x156/0x1d0 [ 2166.711642] cache_grow_begin+0x91/0x630 [ 2166.715705] ? cache_grow_begin+0x91/0x630 [ 2166.720042] fallback_alloc+0x207/0x2c0 [ 2166.724015] __kmalloc+0x213/0x400 [ 2166.727546] ? batadv_hash_new+0xaa/0x270 [ 2166.731688] batadv_hash_new+0xaa/0x270 [ 2166.735665] ? batadv_v_ogm_packet_recv+0xac0/0xac0 [ 2166.740698] batadv_originator_init+0x57/0x2a0 [ 2166.745280] batadv_mesh_init+0x460/0x630 [ 2166.749420] batadv_softif_init_late+0xa26/0xc90 [ 2166.754195] ? batadv_get_strings+0x40/0x40 [ 2166.758519] ? dev_valid_name+0x1a0/0x1a0 [ 2166.762669] ? batadv_get_strings+0x40/0x40 [ 2166.767078] register_netdevice+0x291/0xe40 [ 2166.771392] ? netdev_change_features+0xa0/0xa0 [ 2166.776084] ? rtnl_create_link+0x129/0x890 [ 2166.780411] rtnl_newlink+0x14ff/0x1860 [ 2166.784382] ? rtnl_newlink+0x43d/0x1860 [ 2166.788433] ? __lock_acquire+0x5fc/0x3f20 [ 2166.792842] ? trace_hardirqs_on+0x10/0x10 [ 2166.797185] ? rtnl_dellink+0x6a0/0x6a0 [ 2166.801162] ? trace_hardirqs_on+0x10/0x10 [ 2166.805397] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 2166.811276] ? deref_stack_reg+0x124/0x1a0 [ 2166.815547] ? lock_acquire+0x170/0x3f0 [ 2166.819522] ? lock_downgrade+0x740/0x740 [ 2166.823672] ? rtnl_dellink+0x6a0/0x6a0 [ 2166.827636] rtnetlink_rcv_msg+0x3be/0xb10 [ 2166.831866] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 2166.836362] ? __netlink_lookup+0x345/0x5d0 [ 2166.840690] netlink_rcv_skb+0x125/0x390 [ 2166.844745] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 2166.849232] ? netlink_ack+0x9a0/0x9a0 [ 2166.853117] netlink_unicast+0x437/0x610 [ 2166.857172] ? netlink_sendskb+0xd0/0xd0 [ 2166.861233] ? __check_object_size+0x179/0x230 [ 2166.865816] netlink_sendmsg+0x62e/0xb80 [ 2166.869899] ? nlmsg_notify+0x170/0x170 [ 2166.873885] ? security_socket_sendmsg+0x83/0xb0 [ 2166.878721] ? nlmsg_notify+0x170/0x170 [ 2166.882685] sock_sendmsg+0xb5/0x100 [ 2166.886396] SyS_sendto+0x1c7/0x2c0 [ 2166.890027] ? SyS_getpeername+0x220/0x220 [ 2166.894288] ? sock_poll+0x220/0x220 [ 2166.898001] ? SyS_socket+0x12f/0x1b0 [ 2166.901790] ? move_addr_to_kernel+0x60/0x60 [ 2166.906196] ? do_syscall_64+0x4c/0x640 [ 2166.910172] ? SyS_getpeername+0x220/0x220 [ 2166.914662] do_syscall_64+0x1d5/0x640 [ 2166.918547] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2166.923729] RIP: 0033:0x4193ec [ 2166.926929] RSP: 002b:00007fff54225480 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 2166.934631] RAX: ffffffffffffffda RBX: 00000000014a4320 RCX: 00000000004193ec [ 2166.941890] RDX: 000000000000003c RSI: 00000000014a4370 RDI: 0000000000000003 [ 2166.949159] RBP: 0000000000000000 R08: 00007fff542254d4 R09: 000000000000000c [ 2166.956421] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2166.963687] R13: 00000000014a4370 R14: 0000000000000003 R15: 0000000000000000 [ 2166.970968] Mem-Info: [ 2166.973384] active_anon:22563 inactive_anon:36476 isolated_anon:0 [ 2166.973384] active_file:1581 inactive_file:5425 isolated_file:0 [ 2166.973384] unevictable:0 dirty:30 writeback:0 unstable:0 [ 2166.973384] slab_reclaimable:12679 slab_unreclaimable:113921 [ 2166.973384] mapped:57174 shmem:37653 pagetables:734 bounce:0 [ 2166.973384] free:293350 free_pcp:288 free_cma:0 [ 2167.007166] Node 0 active_anon:89236kB inactive_anon:104468kB active_file:6320kB inactive_file:21696kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:228692kB dirty:120kB writeback:0kB shmem:108908kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2167.035475] Node 1 active_anon:1016kB inactive_anon:41436kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:0kB writeback:0kB shmem:41704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2167.062018] Node 0 DMA free:11044kB min:204kB low:252kB high:300kB active_anon:68kB inactive_anon:0kB active_file:24kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2167.088406] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2167.093441] Node 0 DMA32 free:636568kB min:36200kB low:45248kB high:54296kB active_anon:89168kB inactive_anon:104468kB active_file:6296kB inactive_file:21696kB unevictable:0kB writepending:120kB present:3129332kB managed:2788136kB mlocked:0kB kernel_stack:7296kB pagetables:2892kB bounce:0kB free_pcp:836kB local_pcp:552kB free_cma:0kB [ 2167.123109] lowmem_reserve[]: 0 0 0 0 0 [ 2167.127101] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2167.152618] lowmem_reserve[]: 0 0 0 0 0 [ 2167.156612] Node 1 Normal free:683484kB min:53696kB low:67120kB high:80544kB active_anon:1016kB inactive_anon:41436kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:36kB bounce:0kB free_pcp:316kB local_pcp:0kB free_cma:0kB [ 2167.184989] lowmem_reserve[]: 0 0 0 0 0 [ 2167.188980] Node 0 DMA: 335*4kB (UME) 57*8kB (UME) 24*16kB (UME) 11*32kB (UM) 9*64kB (UMH) 7*128kB (UMEH) 3*256kB (EH) 3*512kB (EH) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 12452kB [ 2167.205085] Node 0 DMA32: 724*4kB (U) 20510*8kB (UE) 15132*16kB (UE) 5260*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 577408kB [ 2167.218919] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2167.229623] Node 1 Normal: 16631*4kB (UM) 9456*8kB (UM) 5208*16kB (UM) 4795*32kB (U) 2091*64kB (U) 339*128kB (U) 630*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 717436kB [ 2167.245201] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2167.254035] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2167.262600] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2167.271424] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2167.279992] 44260 total pagecache pages [ 2167.283962] 0 pages in swap cache [ 2167.287401] Swap cache stats: add 0, delete 0, find 0/0 [ 2167.292748] Free swap = 0kB [ 2167.295760] Total swap = 0kB [ 2167.298999] 2097051 pages RAM [ 2167.302113] 0 pages HighMem/MovableOnly [ 2167.306080] 363846 pages reserved [ 2167.309520] 0 pages cma reserved [ 2167.379789] ODEBUG: assert_init not available (active state 0) object type: timer_list hint: (null) [ 2167.390065] ------------[ cut here ]------------ [ 2167.394834] WARNING: CPU: 1 PID: 14130 at lib/debugobjects.c:287 debug_print_object.cold+0xa7/0xdb [ 2167.403948] Kernel panic - not syncing: panic_on_warn set ... [ 2167.403948] [ 2167.411318] CPU: 1 PID: 14130 Comm: syz-executor.0 Not tainted 4.14.228-syzkaller #0 [ 2167.419180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2167.428522] Call Trace: [ 2167.431103] dump_stack+0x1b2/0x281 [ 2167.434723] panic+0x1f9/0x42d [ 2167.437909] ? add_taint.cold+0x16/0x16 [ 2167.441883] ? debug_print_object.cold+0xa7/0xdb [ 2167.446641] ? debug_print_object.cold+0xa7/0xdb [ 2167.451389] __warn.cold+0x20/0x44 [ 2167.454924] ? ist_end_non_atomic+0x10/0x10 [ 2167.459237] ? debug_print_object.cold+0xa7/0xdb [ 2167.464012] report_bug+0x208/0x250 [ 2167.467632] do_error_trap+0x195/0x2d0 [ 2167.471521] ? math_error+0x2d0/0x2d0 [ 2167.475386] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2167.480833] invalid_op+0x1b/0x40 [ 2167.484284] RIP: 0010:debug_print_object.cold+0xa7/0xdb [ 2167.489641] RSP: 0018:ffff888069637248 EFLAGS: 00010086 [ 2167.495005] RAX: 0000000000000061 RBX: 0000000000000005 RCX: 0000000000000000 [ 2167.502374] RDX: 0000000000000000 RSI: ffffffff878bbbc0 RDI: ffffed100d2c6e3f [ 2167.509656] RBP: ffffffff878b6e80 R08: 0000000000000061 R09: 0000000000000001 [ 2167.516934] R10: 0000000000000000 R11: ffff88807e40e200 R12: 0000000000000000 [ 2167.524196] R13: 0000000000000000 R14: ffff88805be9dfb0 R15: 1ffff1100d2c6e52 [ 2167.531505] ? debug_print_object.cold+0xa7/0xdb [ 2167.536269] debug_object_assert_init+0x1d3/0x2d0 [ 2167.541107] ? debug_object_active_state+0x330/0x330 [ 2167.546205] ? rtnl_newlink+0x14ff/0x1860 [ 2167.550344] ? rtnetlink_rcv_msg+0x3be/0xb10 [ 2167.554745] ? netlink_rcv_skb+0x125/0x390 [ 2167.558974] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2167.564334] del_timer+0x5d/0xe0 [ 2167.567694] ? process_timeout+0x20/0x20 [ 2167.571762] try_to_grab_pending+0x243/0x610 [ 2167.576168] __cancel_work_timer+0x90/0x460 [ 2167.580491] ? work_on_cpu_safe+0x70/0x70 [ 2167.584645] ? batadv_tvlv_handler_get+0x1db/0x2b0 [ 2167.589602] batadv_nc_mesh_free+0x41/0x120 [ 2167.593920] batadv_mesh_free+0x70/0x150 [ 2167.597974] batadv_mesh_init+0x561/0x630 [ 2167.602118] batadv_softif_init_late+0xa26/0xc90 [ 2167.606996] ? batadv_get_strings+0x40/0x40 [ 2167.611311] ? dev_valid_name+0x1a0/0x1a0 [ 2167.615454] ? batadv_get_strings+0x40/0x40 [ 2167.619777] register_netdevice+0x291/0xe40 [ 2167.624097] ? netdev_change_features+0xa0/0xa0 [ 2167.628760] ? rtnl_create_link+0x129/0x890 [ 2167.633077] rtnl_newlink+0x14ff/0x1860 [ 2167.637043] ? rtnl_newlink+0x43d/0x1860 [ 2167.641099] ? __lock_acquire+0x5fc/0x3f20 [ 2167.645333] ? trace_hardirqs_on+0x10/0x10 [ 2167.649559] ? rtnl_dellink+0x6a0/0x6a0 [ 2167.653528] ? trace_hardirqs_on+0x10/0x10 [ 2167.657771] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 2167.663654] ? deref_stack_reg+0x124/0x1a0 [ 2167.667922] ? lock_acquire+0x170/0x3f0 [ 2167.671893] ? lock_downgrade+0x740/0x740 [ 2167.676037] ? rtnl_dellink+0x6a0/0x6a0 [ 2167.680005] rtnetlink_rcv_msg+0x3be/0xb10 [ 2167.684235] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 2167.688721] ? __netlink_lookup+0x345/0x5d0 [ 2167.693042] netlink_rcv_skb+0x125/0x390 [ 2167.697095] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 2167.701582] ? netlink_ack+0x9a0/0x9a0 [ 2167.705470] netlink_unicast+0x437/0x610 [ 2167.709527] ? netlink_sendskb+0xd0/0xd0 [ 2167.713600] ? __check_object_size+0x179/0x230 [ 2167.718198] netlink_sendmsg+0x62e/0xb80 [ 2167.722258] ? nlmsg_notify+0x170/0x170 [ 2167.726230] ? security_socket_sendmsg+0x83/0xb0 [ 2167.730981] ? nlmsg_notify+0x170/0x170 [ 2167.734950] sock_sendmsg+0xb5/0x100 [ 2167.738658] SyS_sendto+0x1c7/0x2c0 [ 2167.742283] ? SyS_getpeername+0x220/0x220 [ 2167.746519] ? sock_poll+0x220/0x220 [ 2167.750229] ? SyS_socket+0x12f/0x1b0 [ 2167.754027] ? move_addr_to_kernel+0x60/0x60 [ 2167.758433] ? do_syscall_64+0x4c/0x640 [ 2167.762402] ? SyS_getpeername+0x220/0x220 [ 2167.766631] do_syscall_64+0x1d5/0x640 [ 2167.770515] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2167.775798] RIP: 0033:0x4193ec [ 2167.778978] RSP: 002b:00007fff54225480 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 2167.786790] RAX: ffffffffffffffda RBX: 00000000014a4320 RCX: 00000000004193ec [ 2167.794049] RDX: 000000000000003c RSI: 00000000014a4370 RDI: 0000000000000003 [ 2167.801310] RBP: 0000000000000000 R08: 00007fff542254d4 R09: 000000000000000c [ 2167.808581] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2167.815840] R13: 00000000014a4370 R14: 0000000000000003 R15: 0000000000000000 [ 2167.824203] Kernel Offset: disabled [ 2167.827823] Rebooting in 86400 seconds..