:32160kB active_file:52kB inactive_file:36kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:268kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1439.832018] lowmem_reserve[]: 0 0 0 0 0 [ 1439.836069] Node 0 DMA: 15*4kB (U) 11*8kB (UE) 12*16kB (UE) 4*32kB (UE) 1*64kB (E) 1*128kB (E) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 11156kB [ 1439.851552] Node 0 DMA32: 203*4kB (UME) 298*8kB (ME) 1364*16kB (UME) 6401*32kB (UE) 4*64kB (UM) 1*128kB (M) 0*256kB 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 230748kB [ 1439.866914] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1439.877749] Node 1 Normal: 12581*4kB (UM) 2503*8kB (UM) 2632*16kB (UM) 2211*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 183212kB [ 1439.892022] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1439.901511] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1439.910188] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1439.919143] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1439.929800] 35723 total pagecache pages [ 1439.934006] 0 pages in swap cache [ 1439.938708] Swap cache stats: add 0, delete 0, find 0/0 [ 1439.944225] Free swap = 0kB [ 1439.949438] Total swap = 0kB [ 1439.952579] 2097051 pages RAM [ 1439.955776] 0 pages HighMem/MovableOnly [ 1439.961340] 363849 pages reserved [ 1439.964912] 0 pages cma reserved [ 1440.344872] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1440.361665] systemd-journal cpuset=/ mems_allowed=0-1 [ 1440.366892] CPU: 0 PID: 16590 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 1440.374849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1440.384191] Call Trace: [ 1440.386784] dump_stack+0x1b2/0x281 [ 1440.390408] dump_header+0x178/0x82f [ 1440.394142] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1440.399264] ? ___ratelimit+0x2cd/0x530 [ 1440.403252] oom_kill_process.cold+0x10/0xa40 [ 1440.407749] out_of_memory+0xe3e/0x1190 [ 1440.411723] ? oom_killer_disable+0x1c0/0x1c0 [ 1440.416215] ? mutex_trylock+0x152/0x1a0 [ 1440.420328] __alloc_pages_nodemask+0x23e1/0x2720 [ 1440.425182] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1440.430039] alloc_pages_current+0x155/0x260 [ 1440.434482] filemap_fault+0x11a1/0x1ad0 [ 1440.438552] ext4_filemap_fault+0x84/0xb0 [ 1440.442695] __do_fault+0xfa/0x380 [ 1440.446227] __handle_mm_fault+0x2497/0x4620 [ 1440.450734] ? vm_insert_page+0x7c0/0x7c0 [ 1440.454888] ? mark_held_locks+0xa6/0xf0 [ 1440.458943] handle_mm_fault+0x455/0x9c0 [ 1440.463010] __do_page_fault+0x549/0xad0 [ 1440.467071] ? spurious_fault+0x640/0x640 [ 1440.471218] ? do_page_fault+0x60/0x500 [ 1440.475168] ? page_fault+0x2f/0x50 [ 1440.478878] page_fault+0x45/0x50 [ 1440.482355] RIP: 0001:0xffffffffffffffff [ 1440.486390] RSP: b63dc1e0:00007fff3227fa50 EFLAGS: 7fff3227f860 [ 1441.104056] Mem-Info: [ 1441.128176] active_anon:14666 inactive_anon:31124 isolated_anon:0 [ 1441.128176] active_file:45 inactive_file:11 isolated_file:0 [ 1441.128176] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1441.128176] slab_reclaimable:12537 slab_unreclaimable:125506 [ 1441.128176] mapped:52717 shmem:31516 pagetables:769 bounce:0 [ 1441.128176] free:25016 free_pcp:7 free_cma:0 [ 1441.331930] Node 0 active_anon:58200kB inactive_anon:92336kB active_file:152kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:125716kB dirty:0kB writeback:0kB shmem:93712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1441.493365] Node 1 active_anon:464kB inactive_anon:32160kB active_file:24kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:85152kB dirty:0kB writeback:0kB shmem:32352kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1441.631773] Node 0 DMA free:11060kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1441.753414] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1441.792819] Node 0 DMA32 free:36124kB min:36200kB low:45248kB high:54296kB active_anon:58200kB inactive_anon:92336kB active_file:176kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7456kB pagetables:2808kB bounce:0kB free_pcp:28kB local_pcp:0kB free_cma:0kB [ 1441.940343] lowmem_reserve[]: 0 0 0 0 0 [ 1441.973754] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1442.117525] lowmem_reserve[]: 0 0 0 0 0 [ 1442.121558] Node 1 Normal free:52880kB min:53696kB low:67120kB high:80544kB active_anon:464kB inactive_anon:32160kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:268kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1442.272593] lowmem_reserve[]: 0 0 0 0 0 [ 1442.276635] Node 0 DMA: 1*4kB (U) 6*8kB (UE) 12*16kB (UE) 4*32kB (UE) 1*64kB (E) 1*128kB (E) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 11060kB [ 1442.363389] Node 0 DMA32: 1088*4kB (UME) 535*8kB (UME) 214*16kB (UME) 625*32kB (UME) 42*64kB (UM) 9*128kB (UM) 2*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 36920kB [ 1442.464249] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1442.533629] Node 1 Normal: 20*4kB (UM) 10*8kB (UM) 7*16kB (UM) 1642*32kB (UM) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 52880kB [ 1442.600165] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1442.655156] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1442.700682] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1442.747283] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1442.755883] 31578 total pagecache pages [ 1442.800697] 0 pages in swap cache [ 1442.804184] Swap cache stats: add 0, delete 0, find 0/0 [ 1442.854107] Free swap = 0kB [ 1442.870364] Total swap = 0kB [ 1442.873411] 2097051 pages RAM [ 1442.876694] 0 pages HighMem/MovableOnly [ 1442.924284] 363849 pages reserved [ 1442.944164] 0 pages cma reserved [ 1442.954539] Out of memory (oom_kill_allocating_task): Kill process 16590 (systemd-journal) score 0 or sacrifice child [ 1443.007017] Killed process 16590 (systemd-journal) total-vm:46096kB, anon-rss:468kB, file-rss:0kB, shmem-rss:1816kB [ 1443.072822] oom_reaper: reaped process 16590 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1816kB [ 1443.285905] syz-executor.3 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1443.367724] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1443.372880] CPU: 0 PID: 15473 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1443.380757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1443.390111] Call Trace: [ 1443.392698] dump_stack+0x1b2/0x281 [ 1443.396332] dump_header+0x178/0x82f [ 1443.400097] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1443.405178] ? ___ratelimit+0x2cd/0x530 [ 1443.409136] oom_kill_process.cold+0x10/0xa40 [ 1443.413619] out_of_memory+0xe3e/0x1190 [ 1443.417623] ? oom_killer_disable+0x1c0/0x1c0 [ 1443.422096] ? mutex_trylock+0x152/0x1a0 [ 1443.426135] __alloc_pages_nodemask+0x23e1/0x2720 [ 1443.430963] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1443.435799] alloc_pages_current+0x155/0x260 [ 1443.440275] filemap_fault+0x11a1/0x1ad0 [ 1443.444334] ext4_filemap_fault+0x84/0xb0 [ 1443.448465] __do_fault+0xfa/0x380 [ 1443.452093] __handle_mm_fault+0x2497/0x4620 [ 1443.456499] ? vm_insert_page+0x7c0/0x7c0 [ 1443.460650] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 1443.465048] ? nanosleep_copyout+0x100/0x100 [ 1443.469446] ? mark_held_locks+0xa6/0xf0 [ 1443.473497] ? sync_mm_rss+0xf2/0x160 [ 1443.477278] handle_mm_fault+0x455/0x9c0 [ 1443.481335] __do_page_fault+0x549/0xad0 [ 1443.485464] ? spurious_fault+0x640/0x640 [ 1443.489592] ? do_page_fault+0x60/0x500 [ 1443.493632] ? page_fault+0x2f/0x50 [ 1443.497238] page_fault+0x45/0x50 [ 1443.500672] RIP: 15f202:0xe [ 1443.503582] RSP: 000f:00007ffda15d7f9c EFLAGS: 00000007 [ 1443.513779] Mem-Info: [ 1443.524009] active_anon:14567 inactive_anon:31124 isolated_anon:0 [ 1443.524009] active_file:20 inactive_file:0 isolated_file:0 [ 1443.524009] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1443.524009] slab_reclaimable:12533 slab_unreclaimable:124742 [ 1443.524009] mapped:52242 shmem:31516 pagetables:769 bounce:0 [ 1443.524009] free:24941 free_pcp:40 free_cma:0 [ 1443.571925] Node 0 active_anon:57804kB inactive_anon:92336kB active_file:12kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:125716kB dirty:0kB writeback:0kB shmem:93712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1443.614606] Node 1 active_anon:464kB inactive_anon:32160kB active_file:68kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:83252kB dirty:0kB writeback:0kB shmem:32352kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1443.656705] Node 0 DMA free:11060kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1443.699826] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1443.704911] Node 0 DMA32 free:35824kB min:36200kB low:45248kB high:54296kB active_anon:57804kB inactive_anon:92336kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7456kB pagetables:2808kB bounce:0kB free_pcp:160kB local_pcp:120kB free_cma:0kB [ 1443.750437] lowmem_reserve[]: 0 0 0 0 0 [ 1443.754489] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1443.794850] lowmem_reserve[]: 0 0 0 0 0 [ 1443.805179] Node 1 Normal free:52880kB min:53696kB low:67120kB high:80544kB active_anon:464kB inactive_anon:32160kB active_file:68kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:268kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1443.850391] lowmem_reserve[]: 0 0 0 0 0 [ 1443.854428] Node 0 DMA: 1*4kB (U) 6*8kB (UE) 12*16kB (UE) 4*32kB (UE) 1*64kB (E) 1*128kB (E) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 11060kB [ 1443.884592] Node 0 DMA32: 1040*4kB (ME) 514*8kB (UME) 204*16kB (ME) 593*32kB (UME) 39*64kB (UM) 16*128kB (UM) 2*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 36080kB [ 1443.914487] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1443.931508] Node 1 Normal: 27*4kB (UM) 10*8kB (UM) 7*16kB (UM) 1642*32kB (UM) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 52908kB [ 1443.945773] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1443.989581] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1444.001734] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1444.092757] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1444.141529] 31541 total pagecache pages [ 1444.145547] 0 pages in swap cache [ 1444.174131] Swap cache stats: add 0, delete 0, find 0/0 [ 1444.199202] Free swap = 0kB [ 1444.202244] Total swap = 0kB [ 1444.205256] 2097051 pages RAM [ 1444.262731] 0 pages HighMem/MovableOnly [ 1444.266733] 363849 pages reserved [ 1444.323949] 0 pages cma reserved [ 1444.340689] Out of memory (oom_kill_allocating_task): Kill process 15473 (syz-executor.3) score 0 or sacrifice child [ 1444.401164] Killed process 16636 (syz-executor.3) total-vm:93384kB, anon-rss:160kB, file-rss:34820kB, shmem-rss:0kB [ 1444.442203] oom_reaper: reaped process 16636 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1444.469305] syz-executor.1 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1444.509277] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1444.514433] CPU: 1 PID: 15509 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1444.522326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1444.532042] Call Trace: [ 1444.534626] dump_stack+0x1b2/0x281 [ 1444.538341] dump_header+0x178/0x82f [ 1444.542037] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1444.547119] ? ___ratelimit+0x2cd/0x530 [ 1444.551073] oom_kill_process.cold+0x10/0xa40 [ 1444.555553] out_of_memory+0xe3e/0x1190 [ 1444.559510] ? oom_killer_disable+0x1c0/0x1c0 [ 1444.563985] ? mutex_trylock+0x152/0x1a0 [ 1444.568026] __alloc_pages_nodemask+0x23e1/0x2720 [ 1444.572855] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1444.577690] alloc_pages_current+0x155/0x260 [ 1444.582078] filemap_fault+0x11a1/0x1ad0 [ 1444.586220] ext4_filemap_fault+0x84/0xb0 [ 1444.590360] __do_fault+0xfa/0x380 [ 1444.593882] __handle_mm_fault+0x2497/0x4620 [ 1444.598278] ? vm_insert_page+0x7c0/0x7c0 [ 1444.602434] ? lock_downgrade+0x740/0x740 [ 1444.606567] ? mark_held_locks+0xa6/0xf0 [ 1444.610607] handle_mm_fault+0x455/0x9c0 [ 1444.614655] __do_page_fault+0x549/0xad0 [ 1444.618696] ? spurious_fault+0x640/0x640 [ 1444.622824] ? do_page_fault+0x60/0x500 [ 1444.626786] ? page_fault+0x2f/0x50 [ 1444.630392] page_fault+0x45/0x50 [ 1444.633824] RIP: 1eac814:0x6 [ 1444.636825] RSP: 1eac810:0000000001eac840 EFLAGS: ffffffffffffffbc [ 1444.642093] Mem-Info: [ 1444.650866] active_anon:14526 inactive_anon:31123 isolated_anon:0 [ 1444.650866] active_file:22 inactive_file:0 isolated_file:0 [ 1444.650866] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1444.650866] slab_reclaimable:12530 slab_unreclaimable:124721 [ 1444.650866] mapped:52225 shmem:31516 pagetables:744 bounce:0 [ 1444.650866] free:17795 free_pcp:102 free_cma:0 [ 1444.695454] Node 0 active_anon:57656kB inactive_anon:92336kB active_file:84kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:125712kB dirty:0kB writeback:0kB shmem:93712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1444.727077] Node 1 active_anon:448kB inactive_anon:32156kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:83188kB dirty:0kB writeback:0kB shmem:32352kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1444.757147] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1444.757495] Node 0 [ 1444.775378] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1444.785217] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1444.785876] CPU: 0 PID: 16636 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1444.819420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1444.828883] Call Trace: [ 1444.831307] lowmem_reserve[]: 0 2717 [ 1444.831480] dump_stack+0x1b2/0x281 [ 1444.831494] warn_alloc.cold+0x96/0x1cc [ 1444.835191] 2718 [ 1444.838806] ? zone_watermark_ok_safe+0x220/0x220 [ 1444.838815] ? usleep_range+0x130/0x130 [ 1444.838823] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1444.838835] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1444.838844] ? run_timer_softirq+0x5a0/0x5a0 [ 1444.838859] __alloc_pages_nodemask+0x2127/0x2720 [ 1444.838875] ? lock_acquire+0x170/0x3f0 [ 1444.838889] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1444.838905] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1444.838918] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1444.838936] alloc_pages_current+0x155/0x260 [ 1444.857538] 2718 [ 1444.858820] ion_page_pool_alloc+0x118/0x1b0 [ 1444.863811] 2718 [ 1444.868319] ion_system_heap_allocate+0x133/0x8c0 [ 1444.868328] ? ion_alloc+0x187/0x810 [ 1444.868339] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1444.868347] ? ion_system_contig_heap_create+0x130/0x130 [ 1444.868356] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1444.868367] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1444.868378] ion_alloc+0x204/0x810 [ 1444.868391] ? ion_dma_buf_release+0x40/0x40 [ 1444.868402] ? __might_fault+0x177/0x1b0 [ 1444.868413] ion_ioctl+0xea/0x1f0 [ 1444.891941] ? ion_query_heaps+0x360/0x360 [ 1444.896327] Node 0 [ 1444.898375] ? ion_query_heaps+0x360/0x360 [ 1444.898385] do_vfs_ioctl+0x75a/0xff0 [ 1444.898396] ? ioctl_preallocate+0x1a0/0x1a0 [ 1444.898406] ? lock_downgrade+0x740/0x740 [ 1444.898419] ? __fget+0x225/0x360 [ 1444.898427] ? do_vfs_ioctl+0xff0/0xff0 [ 1444.898437] ? security_file_ioctl+0x83/0xb0 [ 1444.898447] SyS_ioctl+0x7f/0xb0 [ 1444.898454] ? do_vfs_ioctl+0xff0/0xff0 [ 1444.898466] do_syscall_64+0x1d5/0x640 [ 1444.898480] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1444.898488] RIP: 0033:0x4665d9 [ 1444.898493] RSP: 002b:00007f6d56c88188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1444.898502] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1444.898507] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1444.898512] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1444.898517] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1444.898522] R13: 00007ffda15d7cdf R14: 00007f6d56c88300 R15: 0000000000022000 [ 1444.917044] warn_alloc_show_mem: 2 callbacks suppressed [ 1444.917047] Mem-Info: [ 1444.929236] DMA32 free:18100kB min:36200kB low:45248kB high:54296kB active_anon:57656kB inactive_anon:92336kB active_file:24kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7424kB pagetables:2716kB bounce:0kB free_pcp:372kB local_pcp:148kB free_cma:0kB [ 1444.940423] active_anon:14526 inactive_anon:31123 isolated_anon:0 [ 1444.940423] active_file:0 inactive_file:10 isolated_file:0 [ 1444.940423] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1444.940423] slab_reclaimable:12530 slab_unreclaimable:124721 [ 1444.940423] mapped:52225 shmem:31516 pagetables:744 bounce:0 [ 1444.940423] free:13951 free_pcp:139 free_cma:0 [ 1444.951283] lowmem_reserve[]: [ 1444.961729] Node 0 active_anon:57656kB inactive_anon:92336kB active_file:24kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:125712kB dirty:0kB writeback:0kB shmem:93712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1444.970393] 0 [ 1444.981476] Node 1 active_anon:448kB inactive_anon:32156kB active_file:0kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:83188kB dirty:0kB writeback:0kB shmem:32352kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1444.985406] 0 [ 1445.004258] Node 0 [ 1445.008917] 0 [ 1445.025558] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1445.034564] 0 [ 1445.039623] lowmem_reserve[]: [ 1445.042146] 0 [ 1445.060996] 0 [ 1445.121014] 2717 [ 1445.140403] Node 0 [ 1445.152031] 2718 [ 1445.195645] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1445.216775] 2718 [ 1445.235259] lowmem_reserve[]: [ 1445.256485] 2718 [ 1445.261700] Node 0 DMA32 free:18132kB min:36200kB low:45248kB high:54296kB active_anon:57656kB inactive_anon:92336kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7424kB pagetables:2716kB bounce:0kB free_pcp:400kB local_pcp:252kB free_cma:0kB [ 1445.271480] 0 [ 1445.302478] lowmem_reserve[]: [ 1445.303522] 0 [ 1445.304329] 0 [ 1445.311579] 0 0 0 [ 1445.314922] 0 0 [ 1445.315520] Node 1 Normal free:26744kB min:53696kB low:67120kB high:80544kB active_anon:448kB inactive_anon:32156kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:260kB bounce:0kB free_pcp:156kB local_pcp:36kB free_cma:0kB [ 1445.321177] 0 0 [ 1445.358664] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1445.359343] lowmem_reserve[]: 0 0 0 0 0 [ 1445.399217] lowmem_reserve[]: 0 0 0 0 0 [ 1445.399521] Node 0 [ 1445.403230] Node 1 [ 1445.403232] DMA: 0*4kB [ 1445.405484] Normal free:26744kB min:53696kB low:67120kB high:80544kB active_anon:448kB inactive_anon:32156kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:260kB bounce:0kB free_pcp:156kB local_pcp:120kB free_cma:0kB [ 1445.413320] 2*8kB (UE) 8*16kB (UE) 4*32kB (UE) 1*64kB (E) 1*128kB (E) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 10960kB [ 1445.452265] lowmem_reserve[]: [ 1445.466885] Node 0 [ 1445.470932] 0 [ 1445.472116] DMA32: [ 1445.473178] 0 [ 1445.474969] 1041*4kB (UME) 518*8kB (UME) 204*16kB (ME) 56*32kB (ME) 31*64kB (UM) 14*128kB (UM) 2*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 18164kB [ 1445.488746] 0 [ 1445.509221] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1445.513917] 0 [ 1445.530504] Node 1 Normal: 18*4kB (M) 10*8kB (UM) 6*16kB (M) 826*32kB (UM) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26744kB [ 1445.535770] 0 [ 1445.554279] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1445.564991] Node 0 DMA: 0*4kB 2*8kB (UE) 8*16kB (UE) 4*32kB (UE) 1*64kB [ 1445.565036] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1445.565038] (E) 1*128kB [ 1445.583132] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1445.590205] (E) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 10960kB [ 1445.606193] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1445.612789] Node 0 DMA32: 1041*4kB (UME) 518*8kB (UME) 204*16kB (ME) 56*32kB (ME) 31*64kB (UM) 14*128kB (UM) 2*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 18164kB [ 1445.616654] 31541 total pagecache pages [ 1445.640291] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1445.645208] 0 pages in swap cache [ 1445.654814] Node 1 Normal: 18*4kB (M) 10*8kB (UM) 6*16kB (M) 826*32kB (UM) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26744kB [ 1445.669959] Swap cache stats: add 0, delete 0, find 0/0 [ 1445.675427] Free swap = 0kB [ 1445.675610] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1445.691992] Total swap = 0kB [ 1445.695021] 2097051 pages RAM [ 1445.695308] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1445.711368] 0 pages HighMem/MovableOnly [ 1445.715377] 363849 pages reserved [ 1445.718691] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1445.722966] 0 pages cma reserved [ 1445.736817] Out of memory (oom_kill_allocating_task): Kill process 15509 (syz-executor.1) score 0 or sacrifice child [ 1445.739574] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1445.756706] Killed process 16632 (syz-executor.1) total-vm:93384kB, anon-rss:160kB, file-rss:34820kB, shmem-rss:0kB [ 1445.789135] 31541 total pagecache pages [ 1445.793149] 0 pages in swap cache [ 1445.796597] Swap cache stats: add 0, delete 0, find 0/0 [ 1445.810884] oom_reaper: reaped process 16632 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1445.823063] Free swap = 0kB [ 1445.826098] Total swap = 0kB [ 1445.831368] 2097051 pages RAM [ 1445.831566] systemd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1445.834491] 0 pages HighMem/MovableOnly [ 1445.834496] 363849 pages reserved [ 1445.856038] 0 pages cma reserved [ 1445.904176] (null), order=0, oom_score_adj=0 [ 1445.927193] systemd cpuset=/ mems_allowed=0-1 [ 1445.942848] CPU: 1 PID: 1 Comm: systemd Not tainted 4.14.232-syzkaller #0 [ 1445.949901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1445.959537] Call Trace: [ 1445.962133] dump_stack+0x1b2/0x281 [ 1445.965768] dump_header+0x178/0x82f [ 1445.969486] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1445.974674] ? ___ratelimit+0x2cd/0x530 [ 1445.978654] oom_kill_process.cold+0x10/0xa40 [ 1445.983160] ? lock_downgrade+0x740/0x740 [ 1445.987317] out_of_memory+0x2dc/0x1190 [ 1445.991297] ? oom_killer_disable+0x1c0/0x1c0 [ 1445.995799] ? mutex_trylock+0x152/0x1a0 [ 1445.999864] __alloc_pages_nodemask+0x23e1/0x2720 [ 1446.004716] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1446.009671] alloc_pages_current+0x155/0x260 [ 1446.014174] filemap_fault+0x11a1/0x1ad0 [ 1446.018246] ext4_filemap_fault+0x84/0xb0 [ 1446.022396] __do_fault+0xfa/0x380 [ 1446.025951] __handle_mm_fault+0x2497/0x4620 [ 1446.030356] ? vm_insert_page+0x7c0/0x7c0 [ 1446.034523] ? mark_held_locks+0xa6/0xf0 [ 1446.038631] handle_mm_fault+0x455/0x9c0 [ 1446.042689] __do_page_fault+0x549/0xad0 [ 1446.046753] ? spurious_fault+0x640/0x640 [ 1446.050986] ? do_page_fault+0x60/0x500 [ 1446.054957] ? page_fault+0x2f/0x50 [ 1446.058584] page_fault+0x45/0x50 [ 1446.062032] RIP: 0001:0xffffffffffffffff [ 1446.066079] RSP: 96cdcf50:00007ffeef432fc0 EFLAGS: 7ffeef432d00 [ 1446.221547] Mem-Info: [ 1446.239907] active_anon:14538 inactive_anon:31123 isolated_anon:0 [ 1446.239907] active_file:176 inactive_file:1619 isolated_file:0 [ 1446.239907] unevictable:0 dirty:30 writeback:0 unstable:0 [ 1446.239907] slab_reclaimable:12528 slab_unreclaimable:124265 [ 1446.239907] mapped:53412 shmem:31516 pagetables:745 bounce:0 [ 1446.239907] free:107107 free_pcp:250 free_cma:0 [ 1446.314723] Node 0 active_anon:57668kB inactive_anon:92336kB active_file:148kB inactive_file:3280kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:127812kB dirty:4kB writeback:0kB shmem:93712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1446.372736] Node 1 active_anon:484kB inactive_anon:32156kB active_file:556kB inactive_file:3596kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:85936kB dirty:116kB writeback:0kB shmem:32352kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1446.427744] Node 0 DMA free:10992kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1446.454366] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1446.477081] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1446.477693] lowmem_reserve[]: 0 [ 1446.482257] CPU: 0 PID: 16636 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1446.482265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1446.485533] 2717 [ 1446.493399] Call Trace: [ 1446.493419] dump_stack+0x1b2/0x281 [ 1446.493432] warn_alloc.cold+0x96/0x1cc [ 1446.493443] ? zone_watermark_ok_safe+0x220/0x220 [ 1446.493464] __alloc_pages_nodemask+0x2127/0x2720 [ 1446.493475] ? _raw_spin_unlock_irq+0x24/0x80 [ 1446.493490] ? lock_acquire+0x170/0x3f0 [ 1446.493505] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1446.493520] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1446.493532] ? __mutex_unlock_slowpath+0x75/0x770 [ 1446.493545] alloc_pages_current+0x155/0x260 [ 1446.493558] ion_page_pool_alloc+0x118/0x1b0 [ 1446.493566] ion_system_heap_allocate+0x133/0x8c0 [ 1446.493577] ? _raw_spin_unlock+0x29/0x40 [ 1446.510674] 2718 [ 1446.511182] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1446.515134] 2718 [ 1446.520156] ? ion_system_contig_heap_create+0x130/0x130 [ 1446.520167] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1446.520177] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1446.520187] ion_alloc+0x27a/0x810 [ 1446.520200] ? ion_dma_buf_release+0x40/0x40 [ 1446.520211] ? __might_fault+0x177/0x1b0 [ 1446.520222] ion_ioctl+0xea/0x1f0 [ 1446.520231] ? ion_query_heaps+0x360/0x360 [ 1446.520243] ? ion_query_heaps+0x360/0x360 [ 1446.520252] do_vfs_ioctl+0x75a/0xff0 [ 1446.520263] ? ioctl_preallocate+0x1a0/0x1a0 [ 1446.530960] 2718 [ 1446.533668] ? lock_downgrade+0x740/0x740 [ 1446.543931] ? __fget+0x225/0x360 [ 1446.553140] Node 0 [ 1446.553579] ? do_vfs_ioctl+0xff0/0xff0 [ 1446.561421] DMA32 free:18156kB min:36200kB low:45248kB high:54296kB active_anon:57668kB inactive_anon:92336kB active_file:68kB inactive_file:0kB unevictable:0kB writepending:4kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7424kB pagetables:2716kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1446.562796] ? security_file_ioctl+0x83/0xb0 [ 1446.574484] lowmem_reserve[]: [ 1446.575925] SyS_ioctl+0x7f/0xb0 [ 1446.585142] 0 [ 1446.586365] ? do_vfs_ioctl+0xff0/0xff0 [ 1446.600856] 0 [ 1446.603148] do_syscall_64+0x1d5/0x640 [ 1446.606571] 0 [ 1446.610792] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1446.610800] RIP: 0033:0x4665d9 [ 1446.610805] RSP: 002b:00007f6d56c88188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1446.610814] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1446.610819] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1446.610823] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1446.610828] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1446.610837] R13: 00007ffda15d7cdf R14: 00007f6d56c88300 R15: 0000000000022000 [ 1446.655209] Mem-Info: [ 1446.674749] 0 [ 1446.678225] syz-executor.1: [ 1446.678357] 0 [ 1446.680136] page allocation failure: order:0 [ 1446.685984] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1446.697118] Node 0 [ 1446.705926] active_anon:14538 inactive_anon:31123 isolated_anon:0 [ 1446.705926] active_file:43 inactive_file:0 isolated_file:0 [ 1446.705926] unevictable:0 dirty:30 writeback:0 unstable:0 [ 1446.705926] slab_reclaimable:12528 slab_unreclaimable:124291 [ 1446.705926] mapped:52262 shmem:31516 pagetables:745 bounce:0 [ 1446.705926] free:13728 free_pcp:60 free_cma:0 [ 1446.713458] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1446.715260] Node 0 active_anon:57668kB inactive_anon:92336kB active_file:20kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:125712kB dirty:4kB writeback:0kB shmem:93712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1446.724883] lowmem_reserve[]: [ 1446.733482] Node 1 active_anon:484kB inactive_anon:32156kB active_file:152kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:83336kB dirty:116kB writeback:0kB shmem:32352kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1446.756296] 0 [ 1446.761117] Node 0 [ 1446.779190] (null) [ 1446.807817] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1446.830902] 0 [ 1446.871007] lowmem_reserve[]: [ 1446.890408] syz-executor.1 cpuset= [ 1446.905038] 0 [ 1446.922235] 0 [ 1446.932292] 2717 2718 2718 2718 [ 1446.936078] 0 0 [ 1446.940456] Node 0 [ 1446.941709] Node 1 [ 1446.941722] DMA32 free:17800kB min:36200kB low:45248kB high:54296kB active_anon:57680kB inactive_anon:92336kB active_file:32kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7424kB pagetables:2760kB bounce:0kB free_pcp:136kB local_pcp:120kB free_cma:0kB [ 1446.941727] lowmem_reserve[]: [ 1446.943951] Normal free:26496kB min:53696kB low:67120kB high:80544kB active_anon:528kB inactive_anon:32156kB active_file:60kB inactive_file:72kB unevictable:0kB writepending:104kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:280kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1446.946163] 0 0 [ 1446.981910] / [ 1447.009894] 0 0 0 [ 1447.013761] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1447.032316] mems_allowed=0-1 [ 1447.043479] lowmem_reserve[]: 0 0 0 0 0 [ 1447.049743] Node 1 Normal free:26496kB min:53696kB low:67120kB high:80544kB active_anon:528kB inactive_anon:32156kB active_file:80kB inactive_file:48kB unevictable:0kB writepending:104kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:280kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1447.050631] lowmem_reserve[]: [ 1447.084996] CPU: 1 PID: 16632 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1447.087088] lowmem_reserve[]: [ 1447.088119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1447.096096] 0 [ 1447.099212] Call Trace: [ 1447.099233] dump_stack+0x1b2/0x281 [ 1447.099247] warn_alloc.cold+0x96/0x1cc [ 1447.099257] ? zone_watermark_ok_safe+0x220/0x220 [ 1447.099269] ? usleep_range+0x130/0x130 [ 1447.109090] 0 [ 1447.110871] ? try_to_free_pages+0x23f/0x6e0 [ 1447.113429] 0 [ 1447.117130] ? _find_next_bit+0xdb/0x100 [ 1447.117140] ? run_timer_softirq+0x5a0/0x5a0 [ 1447.117157] __alloc_pages_nodemask+0x2127/0x2720 [ 1447.121105] 0 [ 1447.125939] ? lock_acquire+0x170/0x3f0 [ 1447.129941] 0 [ 1447.131730] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1447.137890] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1447.137905] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1447.137928] alloc_pages_current+0x155/0x260 [ 1447.141956] Node 0 [ 1447.146365] ion_page_pool_alloc+0x118/0x1b0 [ 1447.151199] DMA: [ 1447.152975] ion_system_heap_allocate+0x133/0x8c0 [ 1447.156939] 1*4kB [ 1447.158713] ? ion_alloc+0x187/0x810 [ 1447.163531] (U) [ 1447.168110] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1447.168119] ? ion_system_contig_heap_create+0x130/0x130 [ 1447.168130] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1447.173552] 2*8kB [ 1447.177957] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1447.177968] ion_alloc+0x204/0x810 [ 1447.177981] ? ion_dma_buf_release+0x40/0x40 [ 1447.180209] (UE) [ 1447.184688] ? __might_fault+0x177/0x1b0 [ 1447.186736] 2*16kB [ 1447.191579] ion_ioctl+0xea/0x1f0 [ 1447.191587] ? ion_query_heaps+0x360/0x360 [ 1447.191599] ? ion_query_heaps+0x360/0x360 [ 1447.193810] (UE) [ 1447.197525] do_vfs_ioctl+0x75a/0xff0 [ 1447.197537] ? ioctl_preallocate+0x1a0/0x1a0 [ 1447.199516] 3*32kB [ 1447.204951] ? lock_downgrade+0x740/0x740 [ 1447.204964] ? __fget+0x225/0x360 [ 1447.210418] (UE) [ 1447.215402] ? do_vfs_ioctl+0xff0/0xff0 [ 1447.217549] 1*64kB [ 1447.222447] ? security_file_ioctl+0x83/0xb0 [ 1447.225959] (E) [ 1447.230353] SyS_ioctl+0x7f/0xb0 [ 1447.230360] ? do_vfs_ioctl+0xff0/0xff0 [ 1447.230373] do_syscall_64+0x1d5/0x640 [ 1447.232427] 2*128kB [ 1447.236476] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1447.238697] (UE) [ 1447.242117] RIP: 0033:0x4665d9 [ 1447.246324] 1*256kB [ 1447.250534] RSP: 002b:00007f088674a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1447.250545] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1447.250550] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1447.250557] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1447.252600] (E) [ 1447.256377] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1447.256385] R13: 00007fff2a06071f R14: 00007f088674a300 R15: 0000000000022000 [ 1447.260792] 2*512kB [ 1447.270362] 0 [ 1447.284919] (UE) [ 1447.285558] 0 [ 1447.294837] 1*1024kB [ 1447.299132] 0 [ 1447.307705] (E) [ 1447.309908] 0 [ 1447.312189] 2*2048kB [ 1447.322022] 0 [ 1447.339691] (ME) [ 1447.363961] 1*4096kB [ 1447.365985] Node 0 [ 1447.366550] (U) [ 1447.368983] DMA: 1*4kB (U) 2*8kB (UE) 2*16kB (UE) 3*32kB (UE) 1*64kB (E) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 10964kB [ 1447.369061] Node 0 [ 1447.378104] = 10964kB [ 1447.379830] DMA32: [ 1447.381012] Node 0 [ 1447.383464] 1008*4kB [ 1447.398506] DMA32: [ 1447.405991] (ME) 505*8kB (ME) 200*16kB (ME) 52*32kB (ME) 32*64kB (UME) 14*128kB (UM) 2*256kB (M) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 17800kB [ 1447.421145] 1008*4kB [ 1447.433118] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1447.433172] Node 1 Normal: 34*4kB (UME) 21*8kB (UME) 17*16kB (UME) [ 1447.444799] (ME) [ 1447.448494] 10*32kB (UME) 8*64kB (ME) 6*128kB (UME) 5*256kB (UM) 43*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 26496kB [ 1447.465734] 505*8kB (ME) 200*16kB (ME) [ 1447.465757] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1447.465766] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1447.483255] 52*32kB [ 1447.489762] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1447.494745] (ME) [ 1447.500953] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1447.500959] 31578 total pagecache pages [ 1447.500969] 0 pages in swap cache [ 1447.500973] Swap cache stats: add 0, delete 0, find 0/0 [ 1447.500979] Free swap = 0kB [ 1447.508769] 32*64kB [ 1447.513690] Total swap = 0kB [ 1447.515651] (UME) [ 1447.519140] 2097051 pages RAM [ 1447.519144] 0 pages HighMem/MovableOnly [ 1447.519147] 363849 pages reserved [ 1447.519150] 0 pages cma reserved [ 1447.519157] Out of memory: Kill process 16647 (syz-executor.5) score 1004 or sacrifice child [ 1447.519178] Killed process 16650 (syz-executor.5) total-vm:93516kB, anon-rss:164kB, file-rss:34820kB, shmem-rss:0kB [ 1447.547642] syz-executor.5: [ 1447.549367] 14*128kB (UM) 2*256kB (M) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 17800kB [ 1447.549401] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1447.549450] Node 1 Normal: 7*4kB (E) 4*8kB [ 1447.586842] page allocation failure: order:0 [ 1447.591976] (E) 15*16kB (ME) 9*32kB (ME) 9*64kB (UME) 5*128kB (ME) 5*256kB (UM) 43*512kB (UM) 41*1024kB (UM) 0*2048kB 0*4096kB = 67084kB [ 1447.604969] oom_reaper: reaped process 16650 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1447.629463] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1447.632877] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1447.659145] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1447.678453] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1447.683624] CPU: 1 PID: 16650 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1447.686848] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1447.691862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1447.706819] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1447.710158] Call Trace: [ 1447.722470] dump_stack+0x1b2/0x281 [ 1447.726116] warn_alloc.cold+0x96/0x1cc [ 1447.730111] ? zone_watermark_ok_safe+0x220/0x220 [ 1447.734983] ? usleep_range+0x130/0x130 [ 1447.736823] 32614 total pagecache pages [ 1447.738967] ? try_to_free_pages+0x23f/0x6e0 [ 1447.742930] 0 pages in swap cache [ 1447.747323] ? _find_next_bit+0xdb/0x100 [ 1447.747334] ? run_timer_softirq+0x5a0/0x5a0 [ 1447.747352] __alloc_pages_nodemask+0x2127/0x2720 [ 1447.751921] Swap cache stats: add 0, delete 0, find 0/0 [ 1447.754844] ? lock_acquire+0x170/0x3f0 [ 1447.759247] Free swap = 0kB [ 1447.764142] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1447.769503] Total swap = 0kB [ 1447.773463] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1447.776469] 2097051 pages RAM [ 1447.781299] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1447.781318] alloc_pages_current+0x155/0x260 [ 1447.784307] 0 pages HighMem/MovableOnly [ 1447.788791] ion_page_pool_alloc+0x118/0x1b0 [ 1447.788800] ion_system_heap_allocate+0x133/0x8c0 [ 1447.788809] ? ion_alloc+0x187/0x810 [ 1447.791891] 363849 pages reserved [ 1447.797322] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1447.797343] ? ion_system_contig_heap_create+0x130/0x130 [ 1447.797355] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1447.801739] 0 pages cma reserved [ 1447.805698] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1447.846165] ion_alloc+0x204/0x810 [ 1447.849715] ? ion_dma_buf_release+0x40/0x40 [ 1447.854128] ? __might_fault+0x177/0x1b0 [ 1447.858196] ion_ioctl+0xea/0x1f0 [ 1447.861927] ? ion_query_heaps+0x360/0x360 [ 1447.866178] ? ion_query_heaps+0x360/0x360 [ 1447.870414] do_vfs_ioctl+0x75a/0xff0 [ 1447.874215] ? ioctl_preallocate+0x1a0/0x1a0 [ 1447.878625] ? lock_downgrade+0x740/0x740 [ 1447.882778] ? __fget+0x225/0x360 [ 1447.886315] ? do_vfs_ioctl+0xff0/0xff0 [ 1447.890385] ? security_file_ioctl+0x83/0xb0 [ 1447.894916] SyS_ioctl+0x7f/0xb0 [ 1447.898288] ? do_vfs_ioctl+0xff0/0xff0 [ 1447.902279] do_syscall_64+0x1d5/0x640 [ 1447.906185] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1447.911379] RIP: 0033:0x4665d9 [ 1447.914570] RSP: 002b:00007f7465981188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1447.922292] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1447.930622] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1447.937903] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1447.945171] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1447.952633] R13: 00007ffc7a8155ff R14: 00007f7465981300 R15: 0000000000022000 [ 1448.044473] warn_alloc_show_mem: 1 callbacks suppressed [ 1448.044476] Mem-Info: [ 1448.052491] active_anon:14540 inactive_anon:31123 isolated_anon:0 [ 1448.052491] active_file:170 inactive_file:163 isolated_file:0 [ 1448.052491] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1448.052491] slab_reclaimable:12535 slab_unreclaimable:124328 [ 1448.052491] mapped:52550 shmem:31516 pagetables:764 bounce:0 [ 1448.052491] free:21936 free_pcp:380 free_cma:0 [ 1448.086154] Node 0 active_anon:57576kB inactive_anon:92336kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:125712kB dirty:0kB writeback:0kB shmem:93712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1448.108101] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1448.114690] Node 1 active_anon:584kB inactive_anon:32156kB active_file:64kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:83288kB dirty:0kB writeback:0kB shmem:32352kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1448.141638] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1448.153284] Node 0 [ 1448.159801] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1448.162131] CPU: 0 PID: 16632 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1448.179906] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1448.182407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1448.211621] syz-executor.3: [ 1448.217599] Call Trace: [ 1448.217620] dump_stack+0x1b2/0x281 [ 1448.217633] warn_alloc.cold+0x96/0x1cc [ 1448.217649] ? zone_watermark_ok_safe+0x220/0x220 [ 1448.220677] in:imklog cpuset= [ 1448.223236] __alloc_pages_nodemask+0x2127/0x2720 [ 1448.230351] page allocation failure: order:0 [ 1448.230792] ? lock_acquire+0x170/0x3f0 [ 1448.235660] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1448.238757] ? lock_acquire+0x170/0x3f0 [ 1448.238772] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1448.238789] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1448.238801] ? __mutex_unlock_slowpath+0x75/0x770 [ 1448.238813] alloc_pages_current+0x155/0x260 [ 1448.238826] ion_page_pool_alloc+0x118/0x1b0 [ 1448.244201] / [ 1448.248109] ion_system_heap_allocate+0x133/0x8c0 [ 1448.255694] (null) [ 1448.259153] ? _raw_spin_unlock+0x29/0x40 [ 1448.259163] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1448.259182] ? ion_system_contig_heap_create+0x130/0x130 [ 1448.259190] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1448.259203] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1448.263174] mems_allowed=0-1 [ 1448.267983] ion_alloc+0x27a/0x810 [ 1448.267996] ? ion_dma_buf_release+0x40/0x40 [ 1448.268008] ? __might_fault+0x177/0x1b0 [ 1448.268018] ion_ioctl+0xea/0x1f0 [ 1448.268027] ? ion_query_heaps+0x360/0x360 [ 1448.268037] ? ion_query_heaps+0x360/0x360 [ 1448.268048] do_vfs_ioctl+0x75a/0xff0 [ 1448.276381] syz-executor.3 cpuset= [ 1448.278415] ? ioctl_preallocate+0x1a0/0x1a0 [ 1448.278426] ? lock_downgrade+0x740/0x740 [ 1448.278441] ? __fget+0x225/0x360 [ 1448.282850] / [ 1448.287247] ? do_vfs_ioctl+0xff0/0xff0 [ 1448.291485] lowmem_reserve[]: [ 1448.293879] ? security_file_ioctl+0x83/0xb0 [ 1448.296019] 0 [ 1448.300155] SyS_ioctl+0x7f/0xb0 [ 1448.300162] ? do_vfs_ioctl+0xff0/0xff0 [ 1448.300174] do_syscall_64+0x1d5/0x640 [ 1448.300187] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1448.300196] RIP: 0033:0x4665d9 [ 1448.330251] mems_allowed=0-1 [ 1448.332513] RSP: 002b:00007f088674a188 EFLAGS: 00000246 [ 1448.336828] 2717 [ 1448.340008] ORIG_RAX: 0000000000000010 [ 1448.344234] 2718 [ 1448.348457] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1448.348462] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1448.348467] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1448.348472] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1448.348478] R13: 00007fff2a06071f R14: 00007f088674a300 R15: 0000000000022000 [ 1448.431426] CPU: 0 PID: 16636 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1448.463603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1448.472964] Call Trace: [ 1448.475566] dump_stack+0x1b2/0x281 [ 1448.479180] warn_alloc.cold+0x96/0x1cc [ 1448.483147] ? zone_watermark_ok_safe+0x220/0x220 [ 1448.487971] ? usleep_range+0x130/0x130 [ 1448.491931] ? try_to_free_pages+0x23f/0x6e0 [ 1448.496323] ? _find_next_bit+0xdb/0x100 [ 1448.500404] ? run_timer_softirq+0x5a0/0x5a0 [ 1448.504800] __alloc_pages_nodemask+0x2127/0x2720 [ 1448.509724] ? lock_acquire+0x170/0x3f0 [ 1448.513688] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1448.518628] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1448.523110] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1448.528910] ? alloc_pages_current+0xe3/0x260 [ 1448.533390] alloc_pages_current+0x155/0x260 [ 1448.536747] 2718 2718 [ 1448.537790] ion_page_pool_alloc+0x118/0x1b0 [ 1448.537799] ion_system_heap_allocate+0x133/0x8c0 [ 1448.544898] ? _raw_spin_unlock+0x29/0x40 [ 1448.553857] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1448.557277] Node 0 DMA32 free:18024kB min:36200kB low:45248kB high:54296kB active_anon:57576kB inactive_anon:92336kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7424kB pagetables:2760kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1448.558792] ? ion_system_contig_heap_create+0x130/0x130 [ 1448.558805] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1448.598779] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1448.603610] ion_alloc+0x27a/0x810 [ 1448.607147] ? ion_dma_buf_release+0x40/0x40 [ 1448.611650] ? __might_fault+0x177/0x1b0 [ 1448.615695] ion_ioctl+0xea/0x1f0 [ 1448.619133] ? ion_query_heaps+0x360/0x360 [ 1448.623351] ? ion_query_heaps+0x360/0x360 [ 1448.627575] do_vfs_ioctl+0x75a/0xff0 [ 1448.628559] lowmem_reserve[]: 0 [ 1448.631382] ? ioctl_preallocate+0x1a0/0x1a0 [ 1448.631392] ? lock_downgrade+0x740/0x740 [ 1448.634657] 0 [ 1448.639137] ? __fget+0x225/0x360 [ 1448.639145] ? do_vfs_ioctl+0xff0/0xff0 [ 1448.639157] ? security_file_ioctl+0x83/0xb0 [ 1448.639166] SyS_ioctl+0x7f/0xb0 [ 1448.639175] ? do_vfs_ioctl+0xff0/0xff0 [ 1448.656941] 0 [ 1448.657076] do_syscall_64+0x1d5/0x640 [ 1448.660418] 0 [ 1448.664395] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1448.666173] 0 [ 1448.670042] RIP: 0033:0x4665d9 [ 1448.670046] RSP: 002b:00007f6d56c88188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1448.670055] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1448.670060] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1448.670065] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1448.670069] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1448.670074] R13: 00007ffda15d7cdf R14: 00007f6d56c88300 R15: 0000000000022000 [ 1448.707047] syz-executor.1: [ 1448.712843] CPU: 1 PID: 16621 Comm: in:imklog Not tainted 4.14.232-syzkaller #0 [ 1448.736962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1448.746311] Call Trace: [ 1448.746749] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1448.748897] dump_stack+0x1b2/0x281 [ 1448.748909] dump_header+0x178/0x82f [ 1448.766096] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1448.771473] ? ___ratelimit+0x2cd/0x530 [ 1448.775453] oom_kill_process.cold+0x10/0xa40 [ 1448.776750] (null) [ 1448.779952] out_of_memory+0xe3e/0x1190 [ 1448.782085] syz-executor.1 cpuset=/ [ 1448.786061] ? oom_killer_disable+0x1c0/0x1c0 [ 1448.786071] ? mutex_trylock+0x152/0x1a0 [ 1448.798217] __alloc_pages_nodemask+0x23e1/0x2720 [ 1448.803076] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1448.807934] alloc_pages_current+0x155/0x260 [ 1448.812362] filemap_fault+0x11a1/0x1ad0 [ 1448.814043] mems_allowed=0-1 [ 1448.816434] ext4_filemap_fault+0x84/0xb0 [ 1448.823904] __do_fault+0xfa/0x380 [ 1448.827462] __handle_mm_fault+0x2497/0x4620 [ 1448.831943] ? vm_insert_page+0x7c0/0x7c0 [ 1448.836091] ? lock_downgrade+0x740/0x740 [ 1448.840264] ? mark_held_locks+0xa6/0xf0 [ 1448.844330] handle_mm_fault+0x455/0x9c0 [ 1448.848389] __do_page_fault+0x549/0xad0 [ 1448.852575] ? spurious_fault+0x640/0x640 [ 1448.856735] ? do_page_fault+0x60/0x500 [ 1448.860709] ? page_fault+0x2f/0x50 [ 1448.864338] page_fault+0x45/0x50 [ 1448.867786] RIP: 1fa0:0x1f9f [ 1448.871219] RSP: 0000:0000561f0488e9d0 EFLAGS: 7f1677a1eda0 [ 1448.871240] CPU: 0 PID: 16632 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1448.876955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1448.876959] Call Trace: [ 1448.876976] dump_stack+0x1b2/0x281 [ 1448.876989] warn_alloc.cold+0x96/0x1cc [ 1448.877001] ? zone_watermark_ok_safe+0x220/0x220 [ 1448.877010] ? usleep_range+0x130/0x130 [ 1448.877018] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1448.877029] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1448.877039] ? run_timer_softirq+0x5a0/0x5a0 [ 1448.877053] __alloc_pages_nodemask+0x2127/0x2720 [ 1448.877067] ? lock_acquire+0x170/0x3f0 [ 1448.877082] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1448.877092] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1448.877107] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1448.877125] alloc_pages_current+0x155/0x260 [ 1448.877137] ion_page_pool_alloc+0x118/0x1b0 [ 1448.885501] Node 0 [ 1448.894449] ion_system_heap_allocate+0x133/0x8c0 [ 1448.894462] ? _raw_spin_unlock+0x29/0x40 [ 1448.894469] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1448.894477] ? ion_system_contig_heap_create+0x130/0x130 [ 1448.894486] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1448.894496] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1448.894510] ion_alloc+0x27a/0x810 [ 1448.894522] ? ion_dma_buf_release+0x40/0x40 [ 1448.894533] ? __might_fault+0x177/0x1b0 [ 1448.894543] ion_ioctl+0xea/0x1f0 [ 1448.894552] ? ion_query_heaps+0x360/0x360 [ 1448.894563] ? ion_query_heaps+0x360/0x360 [ 1448.894571] do_vfs_ioctl+0x75a/0xff0 [ 1448.894581] ? ioctl_preallocate+0x1a0/0x1a0 [ 1448.894589] ? lock_downgrade+0x740/0x740 [ 1448.894601] ? __fget+0x225/0x360 [ 1448.897954] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1448.901052] ? do_vfs_ioctl+0xff0/0xff0 [ 1448.901064] ? security_file_ioctl+0x83/0xb0 [ 1448.901073] SyS_ioctl+0x7f/0xb0 [ 1448.901080] ? do_vfs_ioctl+0xff0/0xff0 [ 1448.901090] do_syscall_64+0x1d5/0x640 [ 1448.901105] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1448.901113] RIP: 0033:0x4665d9 [ 1448.901117] RSP: 002b:00007f088674a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1448.905413] lowmem_reserve[]: [ 1448.909931] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1448.909936] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1448.909941] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1448.909945] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1448.909949] R13: 00007fff2a06071f R14: 00007f088674a300 R15: 0000000000022000 [ 1449.140027] 0 0 0 0 0 [ 1449.142653] Node 1 Normal free:808092kB min:53696kB low:67120kB high:80544kB active_anon:684kB inactive_anon:32156kB active_file:36kB inactive_file:3476kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:300kB bounce:0kB free_pcp:176kB local_pcp:0kB free_cma:0kB [ 1449.171924] lowmem_reserve[]: 0 0 0 0 0 [ 1449.176020] Node 0 DMA: 0*4kB 1*8kB (E) 1*16kB (E) 2*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 10968kB [ 1449.186715] Mem-Info: [ 1449.191122] Node 0 DMA32: 579*4kB (UME) 504*8kB (UME) 200*16kB (UME) 53*32kB (ME) 2615*64kB (UME) 48*128kB (UM) 65*256kB (UM) 7*512kB (U) 10*1024kB (U) 0*2048kB 0*4096kB = 215212kB [ 1449.193838] active_anon:14565 inactive_anon:31123 isolated_anon:0 [ 1449.193838] active_file:61 inactive_file:1245 isolated_file:0 [ 1449.193838] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1449.193838] slab_reclaimable:12533 slab_unreclaimable:124325 [ 1449.193838] mapped:53015 shmem:31516 pagetables:765 bounce:0 [ 1449.193838] free:292827 free_pcp:117 free_cma:0 [ 1449.210053] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1449.254560] Node 1 Normal: 3*4kB (E) 4*8kB (E) 7*16kB (UE) 4*32kB (E) 7662*64kB (UME) 836*128kB (UE) 165*256kB (UME) 46*512kB (UM) 247*1024kB (U) 22*2048kB (U) 2*4096kB (U) = 969628kB [ 1449.271842] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1449.280858] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1449.289676] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1449.300011] Node 0 active_anon:57576kB inactive_anon:92336kB active_file:208kB inactive_file:2004kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:126512kB dirty:0kB writeback:0kB shmem:93712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1449.328158] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1449.336785] 32949 total pagecache pages [ 1449.340780] 0 pages in swap cache [ 1449.344315] Swap cache stats: add 0, delete 0, find 0/0 [ 1449.349785] Free swap = 0kB [ 1449.352796] Total swap = 0kB [ 1449.355826] 2097051 pages RAM [ 1449.357031] Node 1 active_anon:484kB inactive_anon:32156kB active_file:36kB inactive_file:3476kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:83648kB dirty:0kB writeback:0kB shmem:32352kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1449.359078] 0 pages HighMem/MovableOnly [ 1449.390649] 363849 pages reserved [ 1449.394097] 0 pages cma reserved [ 1449.430526] Node 0 DMA free:12376kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1449.496880] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1449.501932] Node 0 DMA32 free:392080kB min:36200kB low:45248kB high:54296kB active_anon:57476kB inactive_anon:92336kB active_file:208kB inactive_file:2004kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7424kB pagetables:2760kB bounce:0kB free_pcp:564kB local_pcp:28kB free_cma:0kB [ 1449.566296] lowmem_reserve[]: 0 0 0 0 0 [ 1449.575090] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1449.639436] lowmem_reserve[]: 0 0 0 0 0 [ 1449.643486] Node 1 Normal free:1266812kB min:53696kB low:67120kB high:80544kB active_anon:484kB inactive_anon:32156kB active_file:36kB inactive_file:3476kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:300kB bounce:0kB free_pcp:464kB local_pcp:464kB free_cma:0kB [ 1449.676424] lowmem_reserve[]: 0 0 0 0 0 [ 1449.680494] Node 0 DMA: 0*4kB 1*8kB (E) 1*16kB (E) 2*32kB (UE) 6*64kB (UE) 2*128kB (UE) 2*256kB (UE) 4*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11480kB [ 1449.701284] Node 0 DMA32: 438*4kB (UME) 508*8kB (UME) 534*16kB (UME) 54*32kB (UME) 5334*64kB (UME) 702*128kB (UM) 119*256kB (UM) 30*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 493144kB [ 1449.721454] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1449.732434] Node 1 Normal: 3*4kB (U) 4*8kB (U) 7*16kB (U) 5*32kB (U) 9297*64kB (UME) 2275*128kB (UM) 690*256kB (UM) 150*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 1139964kB [ 1449.751612] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1449.776693] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1449.785318] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1449.817744] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1449.826379] 32949 total pagecache pages [ 1449.848704] 0 pages in swap cache [ 1449.852224] Swap cache stats: add 0, delete 0, find 0/0 [ 1449.866706] Free swap = 0kB [ 1449.869754] Total swap = 0kB [ 1449.872822] 2097051 pages RAM [ 1449.875936] 0 pages HighMem/MovableOnly [ 1449.896677] 363849 pages reserved [ 1449.900168] 0 pages cma reserved [ 1449.903586] Out of memory (oom_kill_allocating_task): Kill process 16621 (in:imklog) score 0 or sacrifice child [ 1449.926740] Killed process 16619 (rsyslogd) total-vm:254332kB, anon-rss:684kB, file-rss:0kB, shmem-rss:0kB [ 1449.941491] oom_reaper: reaped process 16619 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 20:06:21 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x7fffffff, 0x23}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, 0x0, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000080)=0x1) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x4, 0xcf, 0x7ff, 0x8, 0x0, 0x1, 0xb51, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x40) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000001480)={'syztnl1\x00', &(0x7f0000001400)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x1f, 0xffff0000, 0x43, @mcast1, @loopback, 0x20, 0x10, 0x2, 0x1}}) openat$zero(0xffffffffffffff9c, &(0x7f00000014c0), 0x803, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) 20:06:21 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x7fffffff, 0x23}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, 0x0, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000080)=0x1) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x4, 0xcf, 0x7ff, 0x8, 0x0, 0x1, 0xb51, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x40) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000001480)={'syztnl1\x00', &(0x7f0000001400)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x1f, 0xffff0000, 0x43, @mcast1, @loopback, 0x20, 0x10, 0x2, 0x1}}) r6 = openat$zero(0xffffffffffffff9c, &(0x7f00000014c0), 0x803, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(r7, 0x65, 0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x10, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xffffffff}, [@map_val={0x18, 0x9, 0x2, 0x0, r4}]}, &(0x7f0000000240)='GPL\x00', 0x1000, 0x1000, &(0x7f0000000280)=""/4096, 0x40f00, 0x3, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000001500)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000001540)={0x2, 0xe, 0x200, 0x6}, 0x10, 0x0, r7}, 0x78) 20:06:21 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x8, 0x4}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x34}) 20:06:21 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x0, 0x23}) 20:06:21 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x7fffffff}) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x2401, 0x0) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000040)=0x20) 20:06:21 executing program 0: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x168, 0x29}) 20:06:21 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x7fffffff, 0x23}) 20:06:21 executing program 0: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x168, 0x29}) 20:06:21 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x0, 0x23}) 20:06:21 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x7fffffff, 0x23}) r1 = openat$urandom(0xffffffffffffff9c, 0x0, 0x2401, 0x0) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000040)=0x20) 20:06:21 executing program 0: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x168, 0x29}) 20:06:21 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x7fffffff}) [ 1451.187358] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1451.216049] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1451.223708] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1451.225595] syz-executor.5: [ 1451.235686] CPU: 1 PID: 16681 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1451.246581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1451.255937] Call Trace: [ 1451.256568] syz-executor.4 cpuset=/ [ 1451.258549] dump_stack+0x1b2/0x281 [ 1451.258563] warn_alloc.cold+0x96/0x1cc [ 1451.262175] mems_allowed=0-1 [ 1451.266133] ? zone_watermark_ok_safe+0x220/0x220 [ 1451.278160] __alloc_pages_nodemask+0x2127/0x2720 [ 1451.283182] ? retint_kernel+0x2d/0x2d [ 1451.287075] ? lock_acquire+0x170/0x3f0 [ 1451.291059] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1451.296026] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1451.301570] ? __mutex_unlock_slowpath+0x75/0x770 [ 1451.306423] ? alloc_pages_current+0x21c/0x260 [ 1451.310996] alloc_pages_current+0x155/0x260 [ 1451.315390] ion_page_pool_alloc+0x118/0x1b0 [ 1451.319795] ion_system_heap_allocate+0x133/0x8c0 [ 1451.324637] ? ion_alloc+0x187/0x810 [ 1451.328354] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1451.333805] ? ion_system_contig_heap_create+0x130/0x130 [ 1451.339248] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1451.344367] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1451.349209] ion_alloc+0x204/0x810 [ 1451.352735] ? ion_dma_buf_release+0x40/0x40 [ 1451.357238] ? __might_fault+0x177/0x1b0 [ 1451.361527] ion_ioctl+0xea/0x1f0 [ 1451.365169] ? ion_query_heaps+0x360/0x360 [ 1451.369401] ? ion_query_heaps+0x360/0x360 [ 1451.373619] do_vfs_ioctl+0x75a/0xff0 [ 1451.377417] ? ioctl_preallocate+0x1a0/0x1a0 [ 1451.381820] ? lock_downgrade+0x740/0x740 [ 1451.385973] ? __fget+0x225/0x360 [ 1451.389419] ? do_vfs_ioctl+0xff0/0xff0 [ 1451.393375] ? security_file_ioctl+0x83/0xb0 [ 1451.397777] SyS_ioctl+0x7f/0xb0 [ 1451.401142] ? do_vfs_ioctl+0xff0/0xff0 [ 1451.405117] do_syscall_64+0x1d5/0x640 [ 1451.409000] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1451.414181] RIP: 0033:0x4665d9 [ 1451.417355] RSP: 002b:00007f6d56c88188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1451.425064] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1451.432324] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1451.439585] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1451.446847] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1451.454118] R13: 00007ffda15d7cdf R14: 00007f6d56c88300 R15: 0000000000022000 [ 1451.462500] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1451.473138] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1451.478513] CPU: 1 PID: 16686 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1451.486685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1451.496034] Call Trace: [ 1451.498617] dump_stack+0x1b2/0x281 [ 1451.502247] warn_alloc.cold+0x96/0x1cc [ 1451.506232] ? zone_watermark_ok_safe+0x220/0x220 [ 1451.511186] __alloc_pages_nodemask+0x2127/0x2720 [ 1451.516035] ? lock_acquire+0x170/0x3f0 [ 1451.520006] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1451.525037] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1451.530495] ? __mutex_unlock_slowpath+0x75/0x770 [ 1451.535349] ? retint_kernel+0x2d/0x2d [ 1451.539271] alloc_pages_current+0x155/0x260 [ 1451.543688] ion_page_pool_alloc+0x118/0x1b0 [ 1451.548090] ion_system_heap_allocate+0x133/0x8c0 [ 1451.553127] ? ion_alloc+0x187/0x810 [ 1451.556836] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1451.562399] ? ion_system_contig_heap_create+0x130/0x130 [ 1451.567993] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1451.573111] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1451.578094] ion_alloc+0x204/0x810 [ 1451.581764] ? ion_dma_buf_release+0x40/0x40 [ 1451.586175] ? __might_fault+0x177/0x1b0 [ 1451.590230] ion_ioctl+0xea/0x1f0 [ 1451.593941] ? ion_query_heaps+0x360/0x360 [ 1451.598171] ? ion_query_heaps+0x360/0x360 [ 1451.602417] do_vfs_ioctl+0x75a/0xff0 [ 1451.606215] ? ioctl_preallocate+0x1a0/0x1a0 [ 1451.610616] ? lock_downgrade+0x740/0x740 [ 1451.614763] ? __fget+0x225/0x360 [ 1451.618237] ? do_vfs_ioctl+0xff0/0xff0 [ 1451.622239] ? security_file_ioctl+0x83/0xb0 [ 1451.626924] SyS_ioctl+0x7f/0xb0 [ 1451.630296] ? do_vfs_ioctl+0xff0/0xff0 [ 1451.634353] do_syscall_64+0x1d5/0x640 [ 1451.638231] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1451.643416] RIP: 0033:0x4665d9 [ 1451.646617] RSP: 002b:00007f7465981188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1451.654330] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1451.661598] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1451.668863] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1451.676150] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1451.683426] R13: 00007ffc7a8155ff R14: 00007f7465981300 R15: 0000000000022000 [ 1451.691740] warn_alloc_show_mem: 3 callbacks suppressed [ 1451.691743] Mem-Info: [ 1451.693436] CPU: 0 PID: 16695 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1451.697286] active_anon:14377 inactive_anon:31116 isolated_anon:36 [ 1451.697286] active_file:1534 inactive_file:2253 isolated_file:0 [ 1451.697286] unevictable:0 dirty:51 writeback:0 unstable:0 [ 1451.697286] slab_reclaimable:12662 slab_unreclaimable:124430 [ 1451.697286] mapped:54184 shmem:31516 pagetables:740 bounce:0 [ 1451.697286] free:223343 free_pcp:364 free_cma:0 [ 1451.699514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1451.699518] Call Trace: [ 1451.699539] dump_stack+0x1b2/0x281 [ 1451.699554] warn_alloc.cold+0x96/0x1cc [ 1451.713105] Node 0 active_anon:57116kB inactive_anon:92344kB active_file:4064kB inactive_file:7500kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:132284kB dirty:200kB writeback:0kB shmem:93720kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1451.741535] ? zone_watermark_ok_safe+0x220/0x220 [ 1451.741560] __alloc_pages_nodemask+0x2127/0x2720 [ 1451.741576] ? lock_acquire+0x170/0x3f0 [ 1451.741589] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1451.741605] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1451.741616] ? __mutex_unlock_slowpath+0x75/0x770 [ 1451.741629] alloc_pages_current+0x155/0x260 [ 1451.741640] ion_page_pool_alloc+0x118/0x1b0 [ 1451.741651] ion_system_heap_allocate+0x133/0x8c0 [ 1451.790834] Node 1 active_anon:392kB inactive_anon:32120kB active_file:2072kB inactive_file:1512kB unevictable:0kB isolated(anon):96kB isolated(file):0kB mapped:84452kB dirty:4kB writeback:0kB shmem:32344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1451.794371] ? ion_alloc+0x187/0x810 [ 1451.794384] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1451.794392] ? ion_system_contig_heap_create+0x130/0x130 [ 1451.794404] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1451.809253] Node 0 [ 1451.813461] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1451.813474] ion_alloc+0x204/0x810 [ 1451.813499] ? ion_dma_buf_release+0x40/0x40 [ 1451.828377] DMA free:11164kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1451.832044] ? __might_fault+0x177/0x1b0 [ 1451.832058] ion_ioctl+0xea/0x1f0 [ 1451.832069] ? ion_query_heaps+0x360/0x360 [ 1451.894654] lowmem_reserve[]: [ 1451.894826] ? ion_query_heaps+0x360/0x360 [ 1451.939440] do_vfs_ioctl+0x75a/0xff0 [ 1451.943247] ? ioctl_preallocate+0x1a0/0x1a0 [ 1451.947661] ? lock_downgrade+0x740/0x740 [ 1451.949319] 0 [ 1451.951825] ? __fget+0x225/0x360 [ 1451.951836] ? do_vfs_ioctl+0xff0/0xff0 [ 1451.951848] ? security_file_ioctl+0x83/0xb0 [ 1451.951858] SyS_ioctl+0x7f/0xb0 [ 1451.959233] 2717 [ 1451.961068] ? do_vfs_ioctl+0xff0/0xff0 [ 1451.961081] do_syscall_64+0x1d5/0x640 [ 1451.961096] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1451.969984] 2718 [ 1451.970951] RIP: 0033:0x4665d9 [ 1451.986074] 2718 [ 1451.986135] RSP: 002b:00007f5f77a6d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1451.996010] 2718 [ 1451.999073] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1451.999078] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1451.999082] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1451.999087] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1451.999092] R13: 00007ffe82aa5b1f R14: 00007f5f77a6d300 R15: 0000000000022000 [ 1452.082349] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1452.095888] Node 0 DMA32 free:298164kB min:36200kB low:45248kB high:54296kB active_anon:57120kB inactive_anon:92320kB active_file:4064kB inactive_file:8288kB unevictable:0kB writepending:200kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7328kB pagetables:2700kB bounce:0kB free_pcp:108kB local_pcp:12kB free_cma:0kB [ 1452.101424] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 1452.150928] lowmem_reserve[]: 0 0 0 0 0 [ 1452.166581] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1452.209470] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1452.234094] lowmem_reserve[]: 0 0 0 0 0 [ 1452.239982] Node 1 Normal free:183660kB min:53696kB low:67120kB high:80544kB active_anon:392kB inactive_anon:32136kB active_file:2072kB inactive_file:1512kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:260kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 1452.240002] syz-executor.1 cpuset=/ [ 1452.268978] lowmem_reserve[]: 0 0 0 0 0 [ 1452.288398] Node 0 DMA: 15*4kB (U) 12*8kB (UE) 8*16kB (UE) 4*32kB (UE) 1*64kB (E) 1*128kB (E) 1*256kB (E) 4*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11100kB [ 1452.290159] systemd[1]: rsyslog.service: Unit entered failed state. [ 1452.320112] Node 0 DMA32: 1*4kB (M) 237*8kB (ME) 117*16kB (UME) 5040*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 165052kB [ 1452.326729] systemd[1]: rsyslog.service: Failed with result 'signal'. [ 1452.333864] mems_allowed=0-1 [ 1452.344358] CPU: 1 PID: 16675 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1452.352241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1452.361598] Call Trace: [ 1452.364191] dump_stack+0x1b2/0x281 [ 1452.367892] warn_alloc.cold+0x96/0x1cc [ 1452.371883] ? zone_watermark_ok_safe+0x220/0x220 [ 1452.376740] __alloc_pages_nodemask+0x2127/0x2720 [ 1452.381590] ? io_schedule_timeout+0x140/0x140 [ 1452.386180] ? lock_acquire+0x170/0x3f0 [ 1452.390160] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1452.395005] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1452.400458] ? __mutex_unlock_slowpath+0x75/0x770 [ 1452.405385] ? retint_kernel+0x2d/0x2d [ 1452.409277] alloc_pages_current+0x155/0x260 [ 1452.413693] ion_page_pool_alloc+0x118/0x1b0 [ 1452.418102] ion_system_heap_allocate+0x133/0x8c0 [ 1452.422947] ? ion_alloc+0x187/0x810 [ 1452.426669] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1452.432146] ? ion_system_contig_heap_create+0x130/0x130 [ 1452.437598] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1452.443135] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1452.448006] ion_alloc+0x204/0x810 [ 1452.451551] ? ion_dma_buf_release+0x40/0x40 [ 1452.455961] ? __might_fault+0x177/0x1b0 [ 1452.460023] ion_ioctl+0xea/0x1f0 [ 1452.463491] ? ion_query_heaps+0x360/0x360 [ 1452.467754] ? ion_query_heaps+0x360/0x360 [ 1452.472032] do_vfs_ioctl+0x75a/0xff0 [ 1452.475923] ? ioctl_preallocate+0x1a0/0x1a0 [ 1452.480342] ? lock_downgrade+0x740/0x740 [ 1452.484612] ? __fget+0x225/0x360 [ 1452.488068] ? do_vfs_ioctl+0xff0/0xff0 [ 1452.492049] ? security_file_ioctl+0x83/0xb0 [ 1452.496459] SyS_ioctl+0x7f/0xb0 [ 1452.499827] ? do_vfs_ioctl+0xff0/0xff0 [ 1452.503815] do_syscall_64+0x1d5/0x640 [ 1452.507710] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1452.512902] RIP: 0033:0x4665d9 [ 1452.516089] RSP: 002b:00007f088674a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1452.523798] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1452.531086] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1452.538350] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1452.545617] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1452.552914] R13: 00007fff2a06071f R14: 00007f088674a300 R15: 0000000000022000 [ 1452.563183] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1452.570119] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1452.597900] Node 1 Normal: 3*4kB (UE) 21*8kB (M) 751*16kB (UM) 2205*32kB (UM) 2*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 82884kB [ 1452.612074] systemd[1]: rsyslog.service: Service hold-off time over, scheduling restart. [ 1452.612136] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1452.629495] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1452.644601] systemd[1]: Stopped System Logging Service. [ 1452.681780] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1452.710840] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1452.739225] 32974 total pagecache pages [ 1452.753251] 0 pages in swap cache [ 1452.761266] Swap cache stats: add 0, delete 0, find 0/0 [ 1452.773378] Free swap = 0kB [ 1452.779807] Total swap = 0kB [ 1452.785102] 2097051 pages RAM [ 1452.806610] 0 pages HighMem/MovableOnly [ 1452.813994] 363849 pages reserved [ 1452.831407] 0 pages cma reserved [ 1452.904286] oom_reaper: reaped process 16675 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1452.938162] syz-executor.3 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1452.961105] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1452.966281] CPU: 1 PID: 15473 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1452.974158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1452.983518] Call Trace: [ 1452.986117] dump_stack+0x1b2/0x281 [ 1452.989752] dump_header+0x178/0x82f [ 1452.993459] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1452.998544] ? ___ratelimit+0x2cd/0x530 [ 1453.002502] oom_kill_process.cold+0x10/0xa40 [ 1453.006987] out_of_memory+0xe3e/0x1190 [ 1453.011060] ? oom_killer_disable+0x1c0/0x1c0 [ 1453.015541] ? mutex_trylock+0x152/0x1a0 [ 1453.019586] __alloc_pages_nodemask+0x23e1/0x2720 [ 1453.024506] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1453.029340] alloc_pages_current+0x155/0x260 [ 1453.033732] filemap_fault+0x11a1/0x1ad0 [ 1453.037781] ext4_filemap_fault+0x84/0xb0 [ 1453.041924] __do_fault+0xfa/0x380 [ 1453.045544] __handle_mm_fault+0x2497/0x4620 [ 1453.049938] ? vm_insert_page+0x7c0/0x7c0 [ 1453.054066] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 1453.058453] ? nanosleep_copyout+0x100/0x100 [ 1453.062846] ? mark_held_locks+0xa6/0xf0 [ 1453.066888] handle_mm_fault+0x455/0x9c0 [ 1453.070933] __do_page_fault+0x549/0xad0 [ 1453.074982] ? spurious_fault+0x640/0x640 [ 1453.079232] ? do_page_fault+0x60/0x500 [ 1453.083184] ? page_fault+0x2f/0x50 [ 1453.086833] page_fault+0x45/0x50 [ 1453.090306] RIP: 1624e4:0xd [ 1453.093229] RSP: 0012:00007ffda15d7f9c EFLAGS: 00000032 [ 1453.098898] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1453.116147] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1453.130410] Mem-Info: [ 1453.132846] active_anon:14353 inactive_anon:31117 isolated_anon:12 [ 1453.132846] active_file:27 inactive_file:0 isolated_file:0 [ 1453.132846] unevictable:0 dirty:1 writeback:0 unstable:0 [ 1453.132846] slab_reclaimable:12662 slab_unreclaimable:123885 [ 1453.132846] mapped:52241 shmem:31516 pagetables:740 bounce:0 [ 1453.132846] free:13952 free_pcp:88 free_cma:0 [ 1453.133700] syz-executor.5: [ 1453.168468] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1453.178707] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1453.183390] Node 0 active_anon:57020kB inactive_anon:92344kB active_file:96kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:125712kB dirty:0kB writeback:0kB shmem:93720kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1453.205137] syz-executor.5 cpuset= [ 1453.224243] syz-executor.1 cpuset= [ 1453.227857] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1453.233932] / [ 1453.238697] CPU: 1 PID: 16681 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1453.240278] / [ 1453.240421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1453.248335] mems_allowed=0-1 [ 1453.249988] Call Trace: [ 1453.259361] syz-executor.4 cpuset= [ 1453.262431] dump_stack+0x1b2/0x281 [ 1453.264981] / [ 1453.268525] warn_alloc.cold+0x96/0x1cc [ 1453.272150] mems_allowed=0-1 [ 1453.273823] ? zone_watermark_ok_safe+0x220/0x220 [ 1453.285676] ? usleep_range+0x130/0x130 [ 1453.289632] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1453.294718] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1453.296393] mems_allowed=0-1 [ 1453.299717] ? run_timer_softirq+0x5a0/0x5a0 [ 1453.307210] __alloc_pages_nodemask+0x2127/0x2720 [ 1453.312038] ? lock_acquire+0x170/0x3f0 [ 1453.315998] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1453.320823] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1453.325316] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1453.330756] alloc_pages_current+0x155/0x260 [ 1453.335413] ion_page_pool_alloc+0x118/0x1b0 [ 1453.339807] ion_system_heap_allocate+0x133/0x8c0 [ 1453.344631] ? ion_alloc+0x187/0x810 [ 1453.348326] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1453.353800] ? ion_system_contig_heap_create+0x130/0x130 [ 1453.359231] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1453.364229] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1453.369054] ion_alloc+0x204/0x810 [ 1453.372579] ? ion_dma_buf_release+0x40/0x40 [ 1453.376980] ? __might_fault+0x177/0x1b0 [ 1453.381022] ion_ioctl+0xea/0x1f0 [ 1453.384561] ? ion_query_heaps+0x360/0x360 [ 1453.388783] ? ion_query_heaps+0x360/0x360 [ 1453.393006] do_vfs_ioctl+0x75a/0xff0 [ 1453.396796] ? ioctl_preallocate+0x1a0/0x1a0 [ 1453.401202] ? lock_downgrade+0x740/0x740 [ 1453.405355] ? __fget+0x225/0x360 [ 1453.408797] ? do_vfs_ioctl+0xff0/0xff0 [ 1453.412753] ? security_file_ioctl+0x83/0xb0 [ 1453.417144] SyS_ioctl+0x7f/0xb0 [ 1453.420489] ? do_vfs_ioctl+0xff0/0xff0 [ 1453.424442] do_syscall_64+0x1d5/0x640 [ 1453.428315] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1453.433494] RIP: 0033:0x4665d9 [ 1453.436751] RSP: 002b:00007f6d56c88188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1453.444556] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1453.451905] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1453.459159] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1453.466426] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1453.473789] R13: 00007ffda15d7cdf R14: 00007f6d56c88300 R15: 0000000000022000 [ 1453.481054] CPU: 0 PID: 16695 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1453.483576] Node 1 active_anon:392kB inactive_anon:32148kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:83188kB dirty:0kB writeback:0kB shmem:32344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1453.488939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1453.488943] Call Trace: [ 1453.488963] dump_stack+0x1b2/0x281 [ 1453.488979] warn_alloc.cold+0x96/0x1cc [ 1453.536005] ? zone_watermark_ok_safe+0x220/0x220 [ 1453.540928] ? usleep_range+0x130/0x130 [ 1453.544888] ? try_to_free_pages+0x23f/0x6e0 [ 1453.549282] ? _find_next_bit+0xdb/0x100 [ 1453.553348] ? run_timer_softirq+0x5a0/0x5a0 [ 1453.557756] __alloc_pages_nodemask+0x2127/0x2720 [ 1453.558278] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1453.562621] ? lock_acquire+0x170/0x3f0 [ 1453.562635] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1453.597533] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1453.602015] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1453.607568] alloc_pages_current+0x155/0x260 [ 1453.611971] ion_page_pool_alloc+0x118/0x1b0 [ 1453.616365] ion_system_heap_allocate+0x133/0x8c0 [ 1453.621195] ? ion_alloc+0x187/0x810 [ 1453.624902] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1453.630365] ? ion_system_contig_heap_create+0x130/0x130 [ 1453.635852] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1453.636410] lowmem_reserve[]: [ 1453.640877] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1453.640879] 0 2717 [ 1453.643970] ion_alloc+0x204/0x810 [ 1453.654759] ? ion_dma_buf_release+0x40/0x40 [ 1453.659152] ? __might_fault+0x177/0x1b0 [ 1453.663209] ion_ioctl+0xea/0x1f0 [ 1453.666657] ? ion_query_heaps+0x360/0x360 [ 1453.669950] 2718 2718 [ 1453.670903] ? ion_query_heaps+0x360/0x360 [ 1453.670909] 2718 [ 1453.673389] do_vfs_ioctl+0x75a/0xff0 [ 1453.683439] ? ioctl_preallocate+0x1a0/0x1a0 [ 1453.687840] ? lock_downgrade+0x740/0x740 [ 1453.691985] Node 0 [ 1453.691993] ? __fget+0x225/0x360 [ 1453.692003] ? do_vfs_ioctl+0xff0/0xff0 [ 1453.694234] DMA32 free:18296kB min:36200kB low:45248kB high:54296kB active_anon:57020kB inactive_anon:92344kB active_file:96kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7328kB pagetables:2700kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1453.697675] ? security_file_ioctl+0x83/0xb0 [ 1453.697686] SyS_ioctl+0x7f/0xb0 [ 1453.697695] ? do_vfs_ioctl+0xff0/0xff0 [ 1453.697706] do_syscall_64+0x1d5/0x640 [ 1453.697719] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1453.697728] RIP: 0033:0x4665d9 [ 1453.716392] lowmem_reserve[]: [ 1453.730370] RSP: 002b:00007f5f77a6d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1453.730381] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1453.730386] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1453.730391] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1453.730396] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1453.730400] R13: 00007ffe82aa5b1f R14: 00007f5f77a6d300 R15: 0000000000022000 [ 1453.749912] CPU: 0 PID: 16686 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1453.786407] 0 [ 1453.787916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1453.795187] 0 [ 1453.802436] Call Trace: [ 1453.802454] dump_stack+0x1b2/0x281 [ 1453.802468] warn_alloc.cold+0x96/0x1cc [ 1453.802480] ? zone_watermark_ok_safe+0x220/0x220 [ 1453.836408] 0 0 [ 1453.838327] ? usleep_range+0x130/0x130 [ 1453.838339] ? try_to_free_pages+0x23f/0x6e0 [ 1453.840392] 0 [ 1453.844367] ? _find_next_bit+0xdb/0x100 [ 1453.854582] ? run_timer_softirq+0x5a0/0x5a0 [ 1453.858972] Node 0 [ 1453.858982] __alloc_pages_nodemask+0x2127/0x2720 [ 1453.858999] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1453.861316] ? lock_acquire+0x170/0x3f0 [ 1453.866230] lowmem_reserve[]: [ 1453.891725] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1453.891734] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1453.891749] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1453.891765] alloc_pages_current+0x155/0x260 [ 1453.891775] ion_page_pool_alloc+0x118/0x1b0 [ 1453.891784] ion_system_heap_allocate+0x133/0x8c0 [ 1453.891794] ? ion_alloc+0x187/0x810 [ 1453.931952] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1453.936467] 0 [ 1453.937388] ? ion_system_contig_heap_create+0x130/0x130 [ 1453.937390] 0 0 [ 1453.939195] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1453.944633] 0 [ 1453.946596] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1453.946608] ion_alloc+0x204/0x810 [ 1453.946622] ? ion_dma_buf_release+0x40/0x40 [ 1453.946637] ? __might_fault+0x177/0x1b0 [ 1453.966363] 0 [ 1453.970204] ion_ioctl+0xea/0x1f0 [ 1453.972097] Node 1 [ 1453.975535] ? ion_query_heaps+0x360/0x360 [ 1453.975546] Normal free:26760kB min:53696kB low:67120kB high:80544kB active_anon:392kB inactive_anon:32148kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:260kB bounce:0kB free_pcp:232kB local_pcp:120kB free_cma:0kB [ 1453.975550] lowmem_reserve[]: [ 1453.977773] ? ion_query_heaps+0x360/0x360 [ 1453.977783] do_vfs_ioctl+0x75a/0xff0 [ 1453.977795] ? ioctl_preallocate+0x1a0/0x1a0 [ 1453.977806] ? lock_downgrade+0x740/0x740 [ 1453.982026] warn_alloc_show_mem: 3 callbacks suppressed [ 1453.982030] Mem-Info: [ 1454.010037] ? __fget+0x225/0x360 [ 1454.010045] ? do_vfs_ioctl+0xff0/0xff0 [ 1454.010056] ? security_file_ioctl+0x83/0xb0 [ 1454.010066] SyS_ioctl+0x7f/0xb0 [ 1454.010076] ? do_vfs_ioctl+0xff0/0xff0 [ 1454.036366] 0 [ 1454.037769] do_syscall_64+0x1d5/0x640 [ 1454.041200] 0 [ 1454.045163] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1454.056353] 0 [ 1454.056960] RIP: 0033:0x4665d9 [ 1454.058840] 0 [ 1454.062806] RSP: 002b:00007f7465981188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1454.064601] 0 [ 1454.069782] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1454.069788] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1454.069793] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1454.069799] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1454.069804] R13: 00007ffc7a8155ff R14: 00007f7465981300 R15: 0000000000022000 [ 1454.123373] CPU: 1 PID: 16675 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1454.131256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1454.140617] Call Trace: [ 1454.143411] dump_stack+0x1b2/0x281 [ 1454.147053] warn_alloc.cold+0x96/0x1cc [ 1454.151125] ? zone_watermark_ok_safe+0x220/0x220 [ 1454.156050] ? usleep_range+0x130/0x130 [ 1454.160035] ? try_to_free_pages+0x23f/0x6e0 [ 1454.164448] ? _find_next_bit+0xdb/0x100 [ 1454.168511] ? run_timer_softirq+0x5a0/0x5a0 [ 1454.172924] __alloc_pages_nodemask+0x2127/0x2720 [ 1454.177857] ? lock_acquire+0x170/0x3f0 [ 1454.181839] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1454.186773] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1454.191273] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1454.196730] alloc_pages_current+0x155/0x260 [ 1454.201146] ion_page_pool_alloc+0x118/0x1b0 [ 1454.205560] ion_system_heap_allocate+0x133/0x8c0 [ 1454.210408] ? ion_alloc+0x187/0x810 [ 1454.214140] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1454.219646] ? ion_system_contig_heap_create+0x130/0x130 [ 1454.225097] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1454.230117] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1454.234969] ion_alloc+0x204/0x810 [ 1454.238524] ? ion_dma_buf_release+0x40/0x40 [ 1454.242946] ? __might_fault+0x177/0x1b0 [ 1454.247096] ion_ioctl+0xea/0x1f0 [ 1454.250545] ? ion_query_heaps+0x360/0x360 [ 1454.254778] ? ion_query_heaps+0x360/0x360 [ 1454.259009] do_vfs_ioctl+0x75a/0xff0 [ 1454.262811] ? ioctl_preallocate+0x1a0/0x1a0 [ 1454.267227] ? lock_downgrade+0x740/0x740 [ 1454.271377] ? __fget+0x225/0x360 [ 1454.274826] ? do_vfs_ioctl+0xff0/0xff0 [ 1454.278806] ? security_file_ioctl+0x83/0xb0 [ 1454.283213] SyS_ioctl+0x7f/0xb0 [ 1454.286575] ? do_vfs_ioctl+0xff0/0xff0 [ 1454.290549] do_syscall_64+0x1d5/0x640 [ 1454.294437] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1454.299623] RIP: 0033:0x4665d9 [ 1454.302816] RSP: 002b:00007f088674a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1454.310530] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1454.317805] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1454.325174] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1454.332534] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1454.339801] R13: 00007fff2a06071f R14: 00007f088674a300 R15: 0000000000022000 [ 1454.349695] active_anon:14353 inactive_anon:31123 isolated_anon:0 [ 1454.349695] active_file:17 inactive_file:217 isolated_file:0 [ 1454.349695] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1454.349695] slab_reclaimable:12680 slab_unreclaimable:123800 [ 1454.349695] mapped:52275 shmem:31516 pagetables:740 bounce:0 [ 1454.349695] free:63366 free_pcp:326 free_cma:0 [ 1454.396293] Node 0 active_anon:57020kB inactive_anon:92344kB active_file:64kB inactive_file:1664kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:126412kB dirty:0kB writeback:0kB shmem:93720kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1454.430919] Node 1 active_anon:392kB inactive_anon:32148kB active_file:4kB inactive_file:304kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:83388kB dirty:0kB writeback:0kB shmem:32344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1454.463877] Node 0 DMA: 0*4kB 2*8kB (UE) 8*16kB (UE) 4*32kB (UE) 2*64kB (UE) 1*128kB (E) 1*256kB (E) 4*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11024kB [ 1454.485107] Node 0 DMA32: 483*4kB (UME) 1572*8kB (UME) 4331*16kB (UME) 2326*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 158236kB [ 1454.524442] Node 0 DMA free:12048kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1454.572403] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1454.586046] systemd[1]: Starting System Logging Service... [ 1454.600969] systemd[1]: Stopped Journal Service. [ 1454.614480] Node 1 Normal: 4*4kB (UME) 1*8kB (U) 12*16kB (UM) 736*32kB (UM) 15*64kB (M) 7*128kB (M) 2*256kB (UM) 0*512kB 16*1024kB (U) 18*2048kB (U) 0*4096kB = 79384kB [ 1454.660769] systemd[1]: Starting Journal Service... [ 1454.671073] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1454.679586] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1454.695032] Node 0 DMA32 free:212764kB min:36200kB low:45248kB high:54296kB active_anon:57420kB inactive_anon:92344kB active_file:164kB inactive_file:5764kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7392kB pagetables:2996kB bounce:0kB free_pcp:1432kB local_pcp:560kB free_cma:0kB [ 1454.729658] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1454.744695] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1454.769088] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1454.776325] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1454.786723] CPU: 0 PID: 16695 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1454.789583] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1454.794804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1454.794808] Call Trace: [ 1454.794824] dump_stack+0x1b2/0x281 [ 1454.794838] warn_alloc.cold+0x96/0x1cc [ 1454.794849] ? zone_watermark_ok_safe+0x220/0x220 [ 1454.794871] __alloc_pages_nodemask+0x2127/0x2720 [ 1454.794880] ? __schedule+0x893/0x1de0 [ 1454.794896] ? lock_acquire+0x170/0x3f0 [ 1454.794909] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1454.817616] lowmem_reserve[]: [ 1454.819380] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1454.823327] 0 [ 1454.828290] ? __mutex_unlock_slowpath+0x75/0x770 [ 1454.828301] ? ion_page_pool_remove+0xc0/0x280 [ 1454.828313] alloc_pages_current+0x155/0x260 [ 1454.828324] ion_page_pool_alloc+0x118/0x1b0 [ 1454.828334] ion_system_heap_allocate+0x133/0x8c0 [ 1454.828343] ? _raw_spin_unlock+0x29/0x40 [ 1454.828350] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1454.828358] ? ion_system_contig_heap_create+0x130/0x130 [ 1454.828367] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1454.828378] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1454.828387] ion_alloc+0x27a/0x810 [ 1454.828399] ? ion_dma_buf_release+0x40/0x40 [ 1454.914552] ? __might_fault+0x177/0x1b0 [ 1454.918601] ion_ioctl+0xea/0x1f0 [ 1454.922038] ? ion_query_heaps+0x360/0x360 [ 1454.926296] ? ion_query_heaps+0x360/0x360 [ 1454.930518] do_vfs_ioctl+0x75a/0xff0 [ 1454.934317] ? ioctl_preallocate+0x1a0/0x1a0 [ 1454.938721] ? lock_downgrade+0x740/0x740 [ 1454.942862] ? __fget+0x225/0x360 [ 1454.946299] ? do_vfs_ioctl+0xff0/0xff0 [ 1454.950258] ? security_file_ioctl+0x83/0xb0 [ 1454.954650] SyS_ioctl+0x7f/0xb0 [ 1454.957997] ? do_vfs_ioctl+0xff0/0xff0 [ 1454.961968] do_syscall_64+0x1d5/0x640 [ 1454.965843] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1454.971018] RIP: 0033:0x4665d9 [ 1454.974188] RSP: 002b:00007f5f77a6d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1454.981971] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1454.989307] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1454.996556] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1455.003893] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1455.011144] R13: 00007ffe82aa5b1f R14: 00007f5f77a6d300 R15: 0000000000022000 [ 1455.029287] 33540 total pagecache pages [ 1455.040045] 0 pages in swap cache [ 1455.041283] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1455.043713] Swap cache stats: add 0, delete 0, find 0/0 [ 1455.067092] 0 0 0 0 [ 1455.076300] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1455.079185] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1455.081546] CPU: 0 PID: 16686 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1455.081554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1455.111374] Free swap = 0kB [ 1455.115322] Call Trace: [ 1455.124837] Total swap = 0kB [ 1455.127880] dump_stack+0x1b2/0x281 [ 1455.127894] warn_alloc.cold+0x96/0x1cc [ 1455.127905] ? zone_watermark_ok_safe+0x220/0x220 [ 1455.127927] __alloc_pages_nodemask+0x2127/0x2720 [ 1455.127937] ? ___preempt_schedule+0x16/0x18 [ 1455.127951] ? lock_acquire+0x170/0x3f0 [ 1455.127966] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1455.133789] 2097051 pages RAM [ 1455.137155] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1455.137167] ? __mutex_unlock_slowpath+0x75/0x770 [ 1455.137182] alloc_pages_current+0x155/0x260 [ 1455.137194] ion_page_pool_alloc+0x118/0x1b0 [ 1455.141145] 0 pages HighMem/MovableOnly [ 1455.145972] ion_system_heap_allocate+0x133/0x8c0 [ 1455.154785] lowmem_reserve[]: [ 1455.155196] ? _raw_spin_unlock+0x29/0x40 [ 1455.179781] 0 [ 1455.181824] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1455.186224] 0 [ 1455.190204] ? ion_system_contig_heap_create+0x130/0x130 [ 1455.190214] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1455.190225] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1455.190234] ion_alloc+0x27a/0x810 [ 1455.190247] ? ion_dma_buf_release+0x40/0x40 [ 1455.190258] ? __might_fault+0x177/0x1b0 [ 1455.190268] ion_ioctl+0xea/0x1f0 [ 1455.190279] ? ion_query_heaps+0x360/0x360 [ 1455.229971] 0 [ 1455.230542] ? ion_query_heaps+0x360/0x360 [ 1455.234931] 0 [ 1455.238978] do_vfs_ioctl+0x75a/0xff0 [ 1455.238989] ? ioctl_preallocate+0x1a0/0x1a0 [ 1455.238997] ? lock_downgrade+0x740/0x740 [ 1455.239010] ? __fget+0x225/0x360 [ 1455.239017] ? do_vfs_ioctl+0xff0/0xff0 [ 1455.239030] ? security_file_ioctl+0x83/0xb0 [ 1455.242469] 363849 pages reserved [ 1455.246676] SyS_ioctl+0x7f/0xb0 [ 1455.246683] ? do_vfs_ioctl+0xff0/0xff0 [ 1455.246695] do_syscall_64+0x1d5/0x640 [ 1455.246708] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1455.246716] RIP: 0033:0x4665d9 [ 1455.246720] RSP: 002b:00007f7465981188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1455.246730] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1455.246735] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1455.246741] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1455.246746] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1455.246751] R13: 00007ffc7a8155ff R14: 00007f7465981300 R15: 0000000000022000 [ 1455.279398] warn_alloc_show_mem: 3 callbacks suppressed [ 1455.279401] Mem-Info: [ 1455.279421] active_anon:14424 inactive_anon:31123 isolated_anon:0 [ 1455.279421] active_file:132 inactive_file:1906 isolated_file:0 [ 1455.279421] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1455.279421] slab_reclaimable:12720 slab_unreclaimable:124109 [ 1455.279421] mapped:53486 shmem:31516 pagetables:779 bounce:0 [ 1455.279421] free:117186 free_pcp:519 free_cma:0 [ 1455.279437] Node 0 active_anon:57320kB inactive_anon:92344kB active_file:524kB inactive_file:7228kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:130492kB dirty:0kB writeback:0kB shmem:93720kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1455.319158] 0 [ 1455.356314] Node 1 active_anon:376kB inactive_anon:32148kB active_file:4kB inactive_file:396kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:83452kB dirty:0kB writeback:0kB shmem:32344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1455.416298] 0 pages cma reserved [ 1455.476287] Out of memory (oom_kill_allocating_task): Kill process 15473 (syz-executor.3) score 0 or sacrifice child [ 1455.481171] Node 0 DMA free:11016kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1455.496308] Killed process 16681 (syz-executor.3) total-vm:93384kB, anon-rss:160kB, file-rss:34820kB, shmem-rss:0kB [ 1455.524214] Node 1 Normal free:145888kB min:53696kB low:67120kB high:80544kB active_anon:376kB inactive_anon:32148kB active_file:104kB inactive_file:296kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:260kB bounce:0kB free_pcp:624kB local_pcp:620kB free_cma:0kB [ 1455.566315] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1455.574735] Node 0 DMA32 free:160544kB min:36200kB low:45248kB high:54296kB active_anon:57420kB inactive_anon:92344kB active_file:3124kB inactive_file:5588kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7392kB pagetables:2856kB bounce:0kB free_pcp:464kB local_pcp:348kB free_cma:0kB [ 1455.587823] lowmem_reserve[]: [ 1455.611052] oom_reaper: reaped process 16695 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1455.652748] oom_reaper: reaped process 16686 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1455.657435] 0 [ 1455.676301] lowmem_reserve[]: 0 0 0 0 0 [ 1455.682192] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1455.683902] 0 [ 1455.715954] oom_reaper: reaped process 16681 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1455.732989] lowmem_reserve[]: 0 0 0 0 0 [ 1455.749287] Node 1 Normal free:145888kB min:53696kB low:67120kB high:80544kB active_anon:376kB inactive_anon:32148kB active_file:104kB inactive_file:296kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:260kB bounce:0kB free_pcp:628kB local_pcp:8kB free_cma:0kB [ 1455.764987] 0 0 0 [ 1455.813743] systemd-journald[16710]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1455.816235] lowmem_reserve[]: 0 0 0 0 0 [ 1455.836912] Node 0 DMA: 0*4kB 3*8kB (UE) 11*16kB (UE) 4*32kB (UE) 1*64kB (E) 1*128kB (E) [ 1455.840333] Node 0 DMA: 0*4kB 3*8kB (UE) 11*16kB (UE) 4*32kB (UE) 1*64kB (E) 1*128kB (E) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 11016kB [ 1455.876270] 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 11016kB [ 1455.906336] Node 0 DMA32: 111*4kB (ME) 26*8kB (ME) 36*16kB (ME) 1036*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 34380kB [ 1455.937114] Node 0 DMA32: 253*4kB (UME) 112*8kB (UME) 42*16kB (UME) 1045*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36020kB [ 1455.951120] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1455.951163] Node 1 Normal: 0*4kB 1*8kB (M) 759*16kB (U) 1298*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53688kB [ 1456.021386] rs:main Q:Reg invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 [ 1456.034936] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1456.056246] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1456.065302] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1456.065777] Node 1 Normal: 44*4kB (UM) 21*8kB (UME) 18*16kB (UME) 807*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26456kB [ 1456.096212] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1456.102328] rs:main Q:Reg cpuset=/ mems_allowed=0-1 [ 1456.106533] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1456.110256] CPU: 1 PID: 16713 Comm: rs:main Q:Reg Not tainted 4.14.232-syzkaller #0 [ 1456.126621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1456.127203] 32590 total pagecache pages [ 1456.136230] Call Trace: [ 1456.136246] dump_stack+0x1b2/0x281 [ 1456.136260] dump_header+0x178/0x82f [ 1456.140241] 0 pages in swap cache [ 1456.142818] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1456.146438] Swap cache stats: add 0, delete 0, find 0/0 [ 1456.150202] ? ___ratelimit+0x2cd/0x530 [ 1456.153638] Free swap = 0kB [ 1456.158719] oom_kill_process.cold+0x10/0xa40 [ 1456.158737] out_of_memory+0xe3e/0x1190 [ 1456.158751] ? oom_killer_disable+0x1c0/0x1c0 [ 1456.158757] ? mutex_trylock+0x152/0x1a0 [ 1456.158768] __alloc_pages_nodemask+0x23e1/0x2720 [ 1456.164124] Total swap = 0kB [ 1456.168073] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1456.168081] ? mark_held_locks+0xa6/0xf0 [ 1456.168090] ? _raw_spin_unlock_irq+0x24/0x80 [ 1456.171083] 2097051 pages RAM [ 1456.175575] ? __lock_acquire+0x5fc/0x3f20 [ 1456.179537] 0 pages HighMem/MovableOnly [ 1456.184000] ? __schedule+0x893/0x1de0 [ 1456.188052] 363849 pages reserved [ 1456.192872] alloc_pages_vma+0xd2/0x6d0 [ 1456.195864] 0 pages cma reserved [ 1456.200691] __handle_mm_fault+0x25fa/0x4620 [ 1456.200702] ? vm_insert_page+0x7c0/0x7c0 [ 1456.200712] ? rt_mutex_futex_unlock+0xc0/0xc0 [ 1456.248467] ? vfs_write+0x35d/0x4d0 [ 1456.252166] ? mark_held_locks+0xa6/0xf0 [ 1456.256264] handle_mm_fault+0x455/0x9c0 [ 1456.260310] __do_page_fault+0x549/0xad0 [ 1456.264353] ? spurious_fault+0x640/0x640 [ 1456.268575] ? do_page_fault+0x60/0x500 [ 1456.272531] ? page_fault+0x2f/0x50 [ 1456.276136] page_fault+0x45/0x50 [ 1456.279570] RIP: e0000078:0x7fede0006f90 [ 1456.283704] RSP: 005b:0000000000002710 EFLAGS: 00000090 [ 1456.286338] warn_alloc: 1 callbacks suppressed [ 1456.286342] syz-executor.5: [ 1456.289763] Mem-Info: [ 1456.291718] page allocation failure: order:0 [ 1456.298077] active_anon:14630 inactive_anon:32135 isolated_anon:0 [ 1456.298077] active_file:21 inactive_file:15 isolated_file:0 [ 1456.298077] unevictable:0 dirty:3 writeback:0 unstable:0 [ 1456.298077] slab_reclaimable:12799 slab_unreclaimable:123822 [ 1456.298077] mapped:52260 shmem:32548 pagetables:794 bounce:0 [ 1456.298077] free:13795 free_pcp:30 free_cma:0 [ 1456.299408] syz-executor.4: [ 1456.301777] Node 0 active_anon:57848kB inactive_anon:96448kB active_file:80kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:125852kB dirty:12kB writeback:0kB shmem:97844kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1456.319280] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1456.345186] Node 1 active_anon:672kB inactive_anon:32092kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:83188kB dirty:0kB writeback:0kB shmem:32348kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1456.372387] page allocation failure: order:0 [ 1456.384085] syz-executor.1: [ 1456.415806] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1456.416736] Node 0 [ 1456.419203] (null) [ 1456.426011] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1456.430284] syz-executor.5 cpuset= [ 1456.433407] page allocation failure: order:0 [ 1456.458226] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1456.463390] lowmem_reserve[]: [ 1456.464201] (null) [ 1456.471326] 0 2717 2718 2718 2718 [ 1456.471343] Node 0 DMA32 free:17560kB min:36200kB low:45248kB high:54296kB active_anon:57848kB inactive_anon:96252kB active_file:496kB inactive_file:436kB unevictable:0kB writepending:12kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7456kB pagetables:2912kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1456.471362] lowmem_reserve[]: [ 1456.474464] / [ 1456.480075] 0 [ 1456.482039] mems_allowed=0-1 [ 1456.516239] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1456.520941] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1456.531788] CPU: 0 PID: 16695 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1456.536202] syz-executor.1 cpuset= [ 1456.539754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1456.539761] Call Trace: [ 1456.543303] / [ 1456.552652] dump_stack+0x1b2/0x281 [ 1456.559333] 0 0 [ 1456.560538] warn_alloc.cold+0x96/0x1cc [ 1456.560539] 0 0 [ 1456.562503] ? zone_watermark_ok_safe+0x220/0x220 [ 1456.567070] mems_allowed=0-1 [ 1456.568419] ? usleep_range+0x130/0x130 [ 1456.580406] ? try_to_free_pages+0x23f/0x6e0 [ 1456.580412] Node 0 [ 1456.585165] ? _find_next_bit+0xdb/0x100 [ 1456.585175] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1456.585179] lowmem_reserve[]: [ 1456.587482] ? run_timer_softirq+0x5a0/0x5a0 [ 1456.587500] __alloc_pages_nodemask+0x2127/0x2720 [ 1456.587517] ? lock_acquire+0x170/0x3f0 [ 1456.587533] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1456.598992] 0 [ 1456.616661] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1456.616677] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1456.616695] alloc_pages_current+0x155/0x260 [ 1456.616707] ion_page_pool_alloc+0x118/0x1b0 [ 1456.616716] ion_system_heap_allocate+0x133/0x8c0 [ 1456.616727] ? _raw_spin_unlock+0x29/0x40 [ 1456.616735] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1456.616742] ? ion_system_contig_heap_create+0x130/0x130 [ 1456.616750] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1456.616759] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1456.616769] ion_alloc+0x27a/0x810 [ 1456.636214] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1456.638566] ? ion_dma_buf_release+0x40/0x40 [ 1456.640345] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1456.644824] ? __might_fault+0x177/0x1b0 [ 1456.669550] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1456.672952] ion_ioctl+0xea/0x1f0 [ 1456.678424] 0 [ 1456.683402] ? ion_query_heaps+0x360/0x360 [ 1456.692119] 32590 total pagecache pages [ 1456.700420] ? ion_query_heaps+0x360/0x360 [ 1456.700432] do_vfs_ioctl+0x75a/0xff0 [ 1456.700443] ? ioctl_preallocate+0x1a0/0x1a0 [ 1456.700452] ? lock_downgrade+0x740/0x740 [ 1456.700467] ? __fget+0x225/0x360 [ 1456.705002] 0 [ 1456.713830] ? do_vfs_ioctl+0xff0/0xff0 [ 1456.713842] ? security_file_ioctl+0x83/0xb0 [ 1456.713851] SyS_ioctl+0x7f/0xb0 [ 1456.713860] ? do_vfs_ioctl+0xff0/0xff0 [ 1456.713871] do_syscall_64+0x1d5/0x640 [ 1456.713885] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1456.713892] RIP: 0033:0x4665d9 [ 1456.713897] RSP: 002b:00007f5f77a6d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1456.713906] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1456.713911] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1456.713921] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1456.713926] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1456.713931] R13: 00007ffe82aa5b1f R14: 00007f5f77a6d300 R15: 0000000000022000 [ 1456.727060] CPU: 0 PID: 16686 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1456.746170] 0 pages in swap cache [ 1456.748351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1456.752741] Swap cache stats: add 0, delete 0, find 0/0 [ 1456.756864] Call Trace: [ 1456.756883] dump_stack+0x1b2/0x281 [ 1456.756897] warn_alloc.cold+0x96/0x1cc [ 1456.756909] ? zone_watermark_ok_safe+0x220/0x220 [ 1456.756922] ? usleep_range+0x130/0x130 [ 1456.756932] ? try_to_free_pages+0x23f/0x6e0 [ 1456.766161] 0 [ 1456.770586] ? _find_next_bit+0xdb/0x100 [ 1456.773948] 0 [ 1456.777918] ? run_timer_softirq+0x5a0/0x5a0 [ 1456.777935] __alloc_pages_nodemask+0x2127/0x2720 [ 1456.777952] ? lock_acquire+0x170/0x3f0 [ 1456.777965] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1456.777974] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1456.777991] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1456.786180] Free swap = 0kB [ 1456.787051] alloc_pages_current+0x155/0x260 [ 1456.790209] Total swap = 0kB [ 1456.798248] ion_page_pool_alloc+0x118/0x1b0 [ 1456.798258] ion_system_heap_allocate+0x133/0x8c0 [ 1456.798270] ? _raw_spin_unlock+0x29/0x40 [ 1456.798278] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1456.798285] ? ion_system_contig_heap_create+0x130/0x130 [ 1456.798294] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1456.798304] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1456.798312] ion_alloc+0x27a/0x810 [ 1456.798325] ? ion_dma_buf_release+0x40/0x40 [ 1456.798336] ? __might_fault+0x177/0x1b0 [ 1456.798347] ion_ioctl+0xea/0x1f0 [ 1456.798356] ? ion_query_heaps+0x360/0x360 [ 1456.828016] ? ion_query_heaps+0x360/0x360 [ 1456.835280] Node 1 [ 1456.843158] do_vfs_ioctl+0x75a/0xff0 [ 1456.843170] ? ioctl_preallocate+0x1a0/0x1a0 [ 1456.843179] ? lock_downgrade+0x740/0x740 [ 1456.843191] ? __fget+0x225/0x360 [ 1456.843199] ? do_vfs_ioctl+0xff0/0xff0 [ 1456.843210] ? security_file_ioctl+0x83/0xb0 [ 1456.843220] SyS_ioctl+0x7f/0xb0 [ 1456.846690] 2097051 pages RAM [ 1456.855995] ? do_vfs_ioctl+0xff0/0xff0 [ 1456.876170] Normal free:26660kB min:53696kB low:67120kB high:80544kB active_anon:672kB inactive_anon:32092kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:264kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1456.876369] do_syscall_64+0x1d5/0x640 [ 1456.880315] lowmem_reserve[]: [ 1456.884713] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1456.886517] 0 pages HighMem/MovableOnly [ 1456.890526] RIP: 0033:0x4665d9 [ 1456.892312] 363849 pages reserved [ 1456.896695] RSP: 002b:00007f7465981188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1456.896705] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1456.896710] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1456.896715] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1456.896720] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1456.896724] R13: 00007ffc7a8155ff R14: 00007f7465981300 R15: 0000000000022000 [ 1456.906318] warn_alloc_show_mem: 1 callbacks suppressed [ 1456.906321] Mem-Info: [ 1456.910793] CPU: 1 PID: 16675 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1456.914897] active_anon:14639 inactive_anon:32150 isolated_anon:0 [ 1456.914897] active_file:34 inactive_file:13 isolated_file:0 [ 1456.914897] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1456.914897] slab_reclaimable:12799 slab_unreclaimable:123822 [ 1456.914897] mapped:52250 shmem:32558 pagetables:794 bounce:0 [ 1456.914897] free:13858 free_pcp:0 free_cma:0 [ 1456.920323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1456.920327] Call Trace: [ 1456.920351] dump_stack+0x1b2/0x281 [ 1456.920364] warn_alloc.cold+0x96/0x1cc [ 1456.920376] ? zone_watermark_ok_safe+0x220/0x220 [ 1456.920386] ? usleep_range+0x130/0x130 [ 1456.920394] ? queue_work_on+0x10d/0x1d0 [ 1456.920405] ? _find_next_bit+0xdb/0x100 [ 1456.931088] Node 0 active_anon:57856kB inactive_anon:96508kB active_file:132kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:125812kB dirty:0kB writeback:0kB shmem:97884kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1456.935285] ? run_timer_softirq+0x5a0/0x5a0 [ 1456.940178] Node 1 active_anon:700kB inactive_anon:32092kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:83188kB dirty:0kB writeback:0kB shmem:32348kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1456.944292] __alloc_pages_nodemask+0x2127/0x2720 [ 1456.949218] Node 0 [ 1456.954629] ? lock_acquire+0x170/0x3f0 [ 1456.959734] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1456.964530] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1456.968076] lowmem_reserve[]: [ 1456.972450] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1456.976506] 0 [ 1456.980021] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1456.984395] 2717 [ 1456.988629] alloc_pages_current+0x155/0x260 [ 1456.988645] ion_page_pool_alloc+0x118/0x1b0 [ 1456.990855] 2718 [ 1456.994634] ion_system_heap_allocate+0x133/0x8c0 [ 1456.999123] 2718 [ 1457.003264] ? _raw_spin_unlock+0x29/0x40 [ 1457.006809] 2718 [ 1457.010841] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1457.018575] ? ion_system_contig_heap_create+0x130/0x130 [ 1457.018586] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1457.018596] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1457.018606] ion_alloc+0x27a/0x810 [ 1457.022643] Node 0 [ 1457.026604] ? ion_dma_buf_release+0x40/0x40 [ 1457.026616] ? __might_fault+0x177/0x1b0 [ 1457.026628] ion_ioctl+0xea/0x1f0 [ 1457.054230] DMA32 free:17692kB min:36200kB low:45248kB high:54296kB active_anon:57856kB inactive_anon:96508kB active_file:56kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7456kB pagetables:2912kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1457.058068] ? ion_query_heaps+0x360/0x360 [ 1457.058081] ? ion_query_heaps+0x360/0x360 [ 1457.058091] do_vfs_ioctl+0x75a/0xff0 [ 1457.061185] lowmem_reserve[]: [ 1457.066358] ? ioctl_preallocate+0x1a0/0x1a0 [ 1457.066368] ? lock_downgrade+0x740/0x740 [ 1457.066383] ? __fget+0x225/0x360 [ 1457.070419] 0 [ 1457.073679] ? do_vfs_ioctl+0xff0/0xff0 [ 1457.077151] 0 [ 1457.084991] ? security_file_ioctl+0x83/0xb0 [ 1457.092266] 0 [ 1457.099513] SyS_ioctl+0x7f/0xb0 [ 1457.099521] ? do_vfs_ioctl+0xff0/0xff0 [ 1457.099535] do_syscall_64+0x1d5/0x640 [ 1457.106833] 0 [ 1457.114081] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1457.121346] 0 [ 1457.126675] RIP: 0033:0x4665d9 [ 1457.126680] RSP: 002b:00007f088674a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1457.126689] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1457.126697] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1457.137117] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1457.137122] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1457.137126] R13: 00007fff2a06071f R14: 00007f088674a300 R15: 0000000000022000 [ 1457.138832] 0 [ 1457.240043] Node 0 [ 1457.240562] 0 pages cma reserved [ 1457.309583] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1457.336153] 0 [ 1457.373868] lowmem_reserve[]: [ 1457.416149] 0 [ 1457.492306] 0 0 0 0 0 [ 1457.589945] Node 1 Normal free:53756kB min:53696kB low:67120kB high:80544kB active_anon:704kB inactive_anon:36048kB active_file:108kB inactive_file:348kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:264kB bounce:0kB free_pcp:1316kB local_pcp:676kB free_cma:0kB [ 1457.656126] 0 0 [ 1457.658158] Node 0 DMA: 23*4kB (UM) 8*8kB (UME) 11*16kB (UME) 8*32kB (UME) 3*64kB (UME) 2*128kB (ME) 1*256kB (E) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11020kB [ 1457.666116] lowmem_reserve[]: 0 0 0 0 0 [ 1457.699978] Node 0 DMA: 23*4kB (UM) 8*8kB (UME) 11*16kB (UME) 8*32kB (UME) 3*64kB (UME) 2*128kB (ME) 1*256kB (E) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11020kB [ 1457.716145] Node 0 DMA32: 441*4kB (UME) 242*8kB (UME) 81*16kB (UME) 545*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 6*1024kB (U) 0*2048kB 0*4096kB = 28580kB [ 1457.716203] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1457.750218] Node 0 DMA32: 472*4kB (UME) 2155*8kB (UME) 99*16kB (UME) 544*32kB (UME) 1*64kB (U) 0*128kB 0*256kB 0*512kB 6*1024kB (U) 0*2048kB 0*4096kB = 44328kB [ 1457.776199] Node 1 Normal: 103*4kB (U) 101*8kB (UM) 105*16kB (UE) 1130*32kB (UE) 1*64kB (M) 1*128kB (M) 1*256kB (M) 1*512kB (M) 158*1024kB (UM) 15*2048kB (UM) 0*4096kB = 232532kB [ 1457.816197] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1457.819708] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1457.846115] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1457.851644] Node 1 [ 1457.876118] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1457.878781] Normal: 103*4kB (U) 101*8kB (UM) 105*16kB (UE) 1130*32kB (UE) 1*64kB (M) 1*128kB (M) 1*256kB (M) 1*512kB (M) 158*1024kB (UM) 15*2048kB (UM) 0*4096kB = 232532kB [ 1457.915491] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1457.928402] 34175 total pagecache pages [ 1457.930640] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1457.939344] 0 pages in swap cache [ 1457.945923] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1457.948013] Swap cache stats: add 0, delete 0, find 0/0 [ 1457.974560] Free swap = 0kB [ 1457.986118] Total swap = 0kB [ 1457.989587] 2097051 pages RAM [ 1457.999379] 0 pages HighMem/MovableOnly [ 1458.003376] 363849 pages reserved [ 1458.006097] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1458.009502] 0 pages cma reserved [ 1458.015687] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1458.015693] 34603 total pagecache pages [ 1458.015701] 0 pages in swap cache [ 1458.015706] Swap cache stats: add 0, delete 0, find 0/0 [ 1458.015709] Free swap = 0kB [ 1458.015713] Total swap = 0kB [ 1458.015719] 2097051 pages RAM [ 1458.015722] 0 pages HighMem/MovableOnly [ 1458.015725] 363849 pages reserved [ 1458.015728] 0 pages cma reserved [ 1458.126141] Out of memory (oom_kill_allocating_task): Kill process 16713 (rs:main Q:Reg) score 0 or sacrifice child [ 1458.146433] Killed process 16709 (rsyslogd) total-vm:254332kB, anon-rss:668kB, file-rss:0kB, shmem-rss:0kB 20:06:29 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x7fffffff, 0x23}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, 0x0, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000080)=0x1) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x4, 0xcf, 0x7ff, 0x8, 0x0, 0x1, 0xb51, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x40) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000001480)={'syztnl1\x00', &(0x7f0000001400)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x1f, 0xffff0000, 0x43, @mcast1, @loopback, 0x20, 0x10, 0x2, 0x1}}) openat$zero(0xffffffffffffff9c, &(0x7f00000014c0), 0x803, 0x0) 20:06:29 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x7fffffff, 0x23}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, 0x0, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000080)=0x1) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x4, 0xcf, 0x7ff, 0x8, 0x0, 0x1, 0xb51, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x40) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000001480)={'syztnl1\x00', &(0x7f0000001400)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x1f, 0xffff0000, 0x43, @mcast1, @loopback, 0x20, 0x10, 0x2, 0x1}}) openat$zero(0xffffffffffffff9c, &(0x7f00000014c0), 0x803, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, 0x0, 0x0) 20:06:29 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000140)={0x168, 0x29}) 20:06:29 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x7fffffff, 0x23}) r1 = openat$urandom(0xffffffffffffff9c, 0x0, 0x2401, 0x0) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000040)=0x20) 20:06:29 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x0, 0x23}) openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x4e0200, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) [ 1458.230701] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL 20:06:29 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x7fffffff}) [ 1458.273733] systemd[1]: rsyslog.service: Unit entered failed state. [ 1458.292843] systemd[1]: rsyslog.service: Failed with result 'signal'. 20:06:29 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x7fffffff}) 20:06:29 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000140)={0x168, 0x29}) 20:06:29 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x4087fffffff, 0x1}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, 0x0, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0x0, 0xfffc, "dcbec5", 0x7, 0x1}) 20:06:29 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000140)={0x168, 0x29}) 20:06:29 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x7fffffff, 0x23}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000000)={'rose0\x00'}) 20:06:29 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x7fffffff, 0x23}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, 0x0, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000080)=0x1) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x4, 0xcf, 0x7ff, 0x8, 0x0, 0x1, 0xb51, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x40) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000001480)={'syztnl1\x00', &(0x7f0000001400)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x1f, 0xffff0000, 0x43, @mcast1, @loopback, 0x20, 0x10, 0x2, 0x1}}) r6 = openat$zero(0xffffffffffffff9c, &(0x7f00000014c0), 0x803, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(r7, 0x65, 0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x10, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xffffffff}, [@map_val={0x18, 0x9, 0x2, 0x0, r4}]}, &(0x7f0000000240)='GPL\x00', 0x1000, 0x1000, &(0x7f0000000280)=""/4096, 0x40f00, 0x3, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000001500)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000001540)={0x2, 0xe, 0x200, 0x6}, 0x10, 0x0, r7}, 0x78) [ 1458.497155] systemd[1]: rsyslog.service: Service hold-off time over, scheduling restart. [ 1458.552794] systemd[1]: Stopped System Logging Service. [ 1458.653010] systemd[1]: Starting System Logging Service... [ 1459.099162] systemd[1]: Started System Logging Service. [ 1459.220951] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1459.273397] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1459.296558] CPU: 0 PID: 16720 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1459.304766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1459.314124] Call Trace: [ 1459.316732] dump_stack+0x1b2/0x281 [ 1459.320461] warn_alloc.cold+0x96/0x1cc [ 1459.324438] ? zone_watermark_ok_safe+0x220/0x220 [ 1459.329488] __alloc_pages_nodemask+0x2127/0x2720 [ 1459.334354] ? lock_acquire+0x170/0x3f0 [ 1459.338355] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1459.343218] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1459.348677] ? __mutex_unlock_slowpath+0x75/0x770 [ 1459.353536] alloc_pages_current+0x155/0x260 [ 1459.357958] ion_page_pool_alloc+0x118/0x1b0 [ 1459.362387] ion_system_heap_allocate+0x133/0x8c0 [ 1459.367238] ? ion_alloc+0x187/0x810 [ 1459.370947] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1459.376723] ? ion_system_contig_heap_create+0x130/0x130 [ 1459.382189] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1459.387307] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1459.392239] ion_alloc+0x204/0x810 [ 1459.395791] ? ion_dma_buf_release+0x40/0x40 [ 1459.400221] ? __might_fault+0x177/0x1b0 [ 1459.404421] ion_ioctl+0xea/0x1f0 [ 1459.407874] ? ion_query_heaps+0x360/0x360 [ 1459.412114] ? ion_query_heaps+0x360/0x360 [ 1459.416373] do_vfs_ioctl+0x75a/0xff0 [ 1459.419627] syz-executor.1: page allocation failure: order:4 [ 1459.420174] ? ioctl_preallocate+0x1a0/0x1a0 [ 1459.420186] ? lock_downgrade+0x740/0x740 [ 1459.429131] syz-executor.4: [ 1459.430593] ? __fget+0x225/0x360 [ 1459.430605] ? do_vfs_ioctl+0xff0/0xff0 [ 1459.430615] ? security_file_ioctl+0x83/0xb0 [ 1459.430629] SyS_ioctl+0x7f/0xb0 [ 1459.444734] page allocation failure: order:4 [ 1459.445692] ? do_vfs_ioctl+0xff0/0xff0 [ 1459.461955] do_syscall_64+0x1d5/0x640 [ 1459.466207] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1459.471459] RIP: 0033:0x4665d9 [ 1459.473418] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1459.474842] RSP: 002b:00007f6d56c88188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1459.474852] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1459.474857] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1459.474862] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1459.474867] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1459.474873] R13: 00007ffda15d7cdf R14: 00007f6d56c88300 R15: 0000000000022000 [ 1459.485174] syz-executor.5: [ 1459.490223] syz-executor.5: [ 1459.511979] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1459.511995] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1459.512015] CPU: 0 PID: 16749 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1459.512020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1459.512023] Call Trace: [ 1459.512041] dump_stack+0x1b2/0x281 [ 1459.512054] warn_alloc.cold+0x96/0x1cc [ 1459.525448] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1459.526721] ? zone_watermark_ok_safe+0x220/0x220 [ 1459.526743] __alloc_pages_nodemask+0x2127/0x2720 [ 1459.526761] ? lock_acquire+0x170/0x3f0 [ 1459.526775] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1459.526791] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1459.529860] (null) [ 1459.532833] ? __mutex_unlock_slowpath+0x75/0x770 [ 1459.532854] alloc_pages_current+0x155/0x260 [ 1459.532870] ion_page_pool_alloc+0x118/0x1b0 [ 1459.585778] syz-executor.4 cpuset= [ 1459.588401] ion_system_heap_allocate+0x133/0x8c0 [ 1459.588412] ? ion_alloc+0x187/0x810 [ 1459.588423] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1459.588432] ? ion_system_contig_heap_create+0x130/0x130 [ 1459.588440] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1459.588451] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1459.588462] ion_alloc+0x204/0x810 [ 1459.588475] ? ion_dma_buf_release+0x40/0x40 [ 1459.588486] ? __might_fault+0x177/0x1b0 [ 1459.588495] ion_ioctl+0xea/0x1f0 [ 1459.588504] ? ion_query_heaps+0x360/0x360 [ 1459.599264] (null) [ 1459.602222] ? ion_query_heaps+0x360/0x360 [ 1459.602233] do_vfs_ioctl+0x75a/0xff0 [ 1459.613410] / [ 1459.614782] ? ioctl_preallocate+0x1a0/0x1a0 [ 1459.633452] page allocation failure: order:4 [ 1459.635674] ? lock_downgrade+0x740/0x740 [ 1459.635690] ? __fget+0x225/0x360 [ 1459.635703] ? do_vfs_ioctl+0xff0/0xff0 [ 1459.644684] mems_allowed=0-1 [ 1459.646710] ? security_file_ioctl+0x83/0xb0 [ 1459.646723] SyS_ioctl+0x7f/0xb0 [ 1459.646731] ? do_vfs_ioctl+0xff0/0xff0 [ 1459.646742] do_syscall_64+0x1d5/0x640 [ 1459.646755] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1459.646763] RIP: 0033:0x4665d9 [ 1459.646768] RSP: 002b:00007f7465960188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1459.646778] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 00000000004665d9 [ 1459.646783] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1459.646788] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1459.646792] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1459.646801] R13: 00007ffc7a8155ff R14: 00007f7465960300 R15: 0000000000022000 [ 1459.657525] syz-executor.1 cpuset= [ 1459.790641] CPU: 1 PID: 16716 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1459.793359] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1459.794214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1459.810958] (null) [ 1459.818525] Call Trace: [ 1459.818544] dump_stack+0x1b2/0x281 [ 1459.818558] warn_alloc.cold+0x96/0x1cc [ 1459.818569] ? zone_watermark_ok_safe+0x220/0x220 [ 1459.818589] __alloc_pages_nodemask+0x2127/0x2720 [ 1459.829587] syz-executor.5 cpuset= [ 1459.830872] ? ___preempt_schedule+0x16/0x18 [ 1459.830890] ? lock_acquire+0x170/0x3f0 [ 1459.830905] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1459.836895] / [ 1459.840599] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1459.847494] warn_alloc_show_mem: 2 callbacks suppressed [ 1459.847497] Mem-Info: [ 1459.848529] ? __mutex_unlock_slowpath+0x75/0x770 [ 1459.848548] alloc_pages_current+0x155/0x260 [ 1459.853661] active_anon:14785 inactive_anon:33148 isolated_anon:24 [ 1459.853661] active_file:1417 inactive_file:3322 isolated_file:27 [ 1459.853661] unevictable:0 dirty:131 writeback:0 unstable:0 [ 1459.853661] slab_reclaimable:12877 slab_unreclaimable:125735 [ 1459.853661] mapped:55614 shmem:33564 pagetables:808 bounce:0 [ 1459.853661] free:176789 free_pcp:92 free_cma:0 [ 1459.857341] ion_page_pool_alloc+0x118/0x1b0 [ 1459.857352] ion_system_heap_allocate+0x133/0x8c0 [ 1459.857360] ? ion_alloc+0x187/0x810 [ 1459.857371] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1459.857379] ? ion_system_contig_heap_create+0x130/0x130 [ 1459.857391] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1459.862677] mems_allowed=0-1 [ 1459.864639] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1459.864653] ion_alloc+0x204/0x810 [ 1459.864666] ? ion_dma_buf_release+0x40/0x40 [ 1459.871187] Node 0 active_anon:58672kB inactive_anon:96508kB active_file:5596kB inactive_file:13224kB unevictable:0kB isolated(anon):0kB isolated(file):108kB mapped:139148kB dirty:520kB writeback:0kB shmem:97884kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1459.872417] ? __might_fault+0x177/0x1b0 [ 1459.872430] ion_ioctl+0xea/0x1f0 [ 1459.872441] ? ion_query_heaps+0x360/0x360 [ 1459.883935] Node 1 active_anon:468kB inactive_anon:36084kB active_file:72kB inactive_file:64kB unevictable:0kB isolated(anon):96kB isolated(file):0kB mapped:83308kB dirty:4kB writeback:0kB shmem:36372kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1459.915589] ? ion_query_heaps+0x360/0x360 [ 1459.915602] do_vfs_ioctl+0x75a/0xff0 [ 1459.915613] ? ioctl_preallocate+0x1a0/0x1a0 [ 1459.915621] ? lock_downgrade+0x740/0x740 [ 1459.915634] ? __fget+0x225/0x360 [ 1459.915643] ? do_vfs_ioctl+0xff0/0xff0 [ 1460.027568] Node 0 [ 1460.027752] ? security_file_ioctl+0x83/0xb0 [ 1460.046295] DMA free:11176kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:48kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1460.047857] SyS_ioctl+0x7f/0xb0 [ 1460.047866] ? do_vfs_ioctl+0xff0/0xff0 [ 1460.047879] do_syscall_64+0x1d5/0x640 [ 1460.056167] lowmem_reserve[]: [ 1460.058461] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1460.058469] RIP: 0033:0x4665d9 [ 1460.058477] RSP: 002b:00007f5f77a6d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1460.114571] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1460.121839] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1460.129102] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1460.136380] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1460.143651] R13: 00007ffe82aa5b1f R14: 00007f5f77a6d300 R15: 0000000000022000 [ 1460.150931] CPU: 0 PID: 16746 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1460.158998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1460.168385] Call Trace: [ 1460.171007] dump_stack+0x1b2/0x281 [ 1460.174787] warn_alloc.cold+0x96/0x1cc [ 1460.179005] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1460.184032] ? zone_watermark_ok_safe+0x220/0x220 [ 1460.188906] __alloc_pages_nodemask+0x2127/0x2720 [ 1460.193778] ? __schedule+0x893/0x1de0 [ 1460.197676] ? lock_acquire+0x170/0x3f0 [ 1460.201671] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1460.206529] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1460.211990] ? __mutex_unlock_slowpath+0x75/0x770 [ 1460.216848] alloc_pages_current+0x155/0x260 [ 1460.221262] ion_page_pool_alloc+0x118/0x1b0 [ 1460.225709] ion_system_heap_allocate+0x133/0x8c0 [ 1460.230659] ? ion_alloc+0x187/0x810 [ 1460.234380] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1460.239837] ? ion_system_contig_heap_create+0x130/0x130 [ 1460.245306] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1460.250341] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1460.255206] ion_alloc+0x204/0x810 [ 1460.258758] ? ion_dma_buf_release+0x40/0x40 [ 1460.263184] ? __might_fault+0x177/0x1b0 [ 1460.267313] ion_ioctl+0xea/0x1f0 [ 1460.270784] ? ion_query_heaps+0x360/0x360 [ 1460.275112] ? ion_query_heaps+0x360/0x360 [ 1460.279357] do_vfs_ioctl+0x75a/0xff0 [ 1460.283184] ? ioctl_preallocate+0x1a0/0x1a0 [ 1460.287594] ? lock_downgrade+0x740/0x740 [ 1460.291751] ? __fget+0x225/0x360 [ 1460.295210] ? do_vfs_ioctl+0xff0/0xff0 [ 1460.299194] ? security_file_ioctl+0x83/0xb0 [ 1460.303606] SyS_ioctl+0x7f/0xb0 [ 1460.306973] ? do_vfs_ioctl+0xff0/0xff0 [ 1460.310956] do_syscall_64+0x1d5/0x640 [ 1460.314854] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1460.320049] RIP: 0033:0x4665d9 [ 1460.323555] RSP: 002b:00007f7465981188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1460.331524] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1460.339025] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1460.346399] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1460.353711] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1460.361286] R13: 00007ffc7a8155ff R14: 00007f7465981300 R15: 0000000000022000 [ 1460.386039] 0 2717 2718 2718 2718 [ 1460.398601] Node 0 DMA32 free:404976kB min:36200kB low:45248kB high:54296kB active_anon:58816kB inactive_anon:96512kB active_file:5568kB inactive_file:13264kB unevictable:0kB writepending:552kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7552kB pagetables:3024kB bounce:0kB free_pcp:216kB local_pcp:216kB free_cma:0kB [ 1460.479578] / mems_allowed=0-1 [ 1460.490567] CPU: 1 PID: 16723 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1460.492887] lowmem_reserve[]: [ 1460.498494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1460.498498] Call Trace: [ 1460.498518] dump_stack+0x1b2/0x281 [ 1460.498532] warn_alloc.cold+0x96/0x1cc [ 1460.498544] ? zone_watermark_ok_safe+0x220/0x220 [ 1460.498564] __alloc_pages_nodemask+0x2127/0x2720 [ 1460.498572] ? __schedule+0x893/0x1de0 [ 1460.498587] ? lock_acquire+0x170/0x3f0 [ 1460.498602] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1460.498619] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1460.498631] ? __mutex_unlock_slowpath+0x75/0x770 [ 1460.498647] alloc_pages_current+0x155/0x260 [ 1460.498661] ion_page_pool_alloc+0x118/0x1b0 [ 1460.498670] ion_system_heap_allocate+0x133/0x8c0 [ 1460.498683] ? ion_alloc+0x187/0x810 [ 1460.515267] 0 [ 1460.517327] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1460.517339] ? ion_system_contig_heap_create+0x130/0x130 [ 1460.517349] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1460.517360] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1460.517371] ion_alloc+0x204/0x810 [ 1460.525823] 0 [ 1460.526173] ? ion_dma_buf_release+0x40/0x40 [ 1460.526186] ? __might_fault+0x177/0x1b0 [ 1460.526200] ion_ioctl+0xea/0x1f0 [ 1460.543373] 0 [ 1460.543918] ? ion_query_heaps+0x360/0x360 [ 1460.561596] 0 [ 1460.563014] ? ion_query_heaps+0x360/0x360 [ 1460.563024] do_vfs_ioctl+0x75a/0xff0 [ 1460.563036] ? ioctl_preallocate+0x1a0/0x1a0 [ 1460.581119] 0 [ 1460.584448] ? lock_downgrade+0x740/0x740 [ 1460.584465] ? __fget+0x225/0x360 [ 1460.584475] ? do_vfs_ioctl+0xff0/0xff0 [ 1460.584489] ? security_file_ioctl+0x83/0xb0 [ 1460.608348] SyS_ioctl+0x7f/0xb0 [ 1460.608357] ? do_vfs_ioctl+0xff0/0xff0 [ 1460.608369] do_syscall_64+0x1d5/0x640 [ 1460.614259] Node 0 [ 1460.618025] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1460.618034] RIP: 0033:0x4665d9 [ 1460.618038] RSP: 002b:00007f088674a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1460.618048] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1460.618052] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1460.618057] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1460.618061] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1460.618066] R13: 00007fff2a06071f R14: 00007f088674a300 R15: 0000000000022000 [ 1460.810941] systemd[1]: Started Journal Service. [ 1460.888671] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1460.940414] lowmem_reserve[]: 0 0 0 0 0 [ 1460.947888] warn_alloc_show_mem: 1 callbacks suppressed [ 1460.947892] Mem-Info: [ 1460.961118] Node 1 Normal free:396992kB min:53696kB low:67120kB high:80544kB active_anon:468kB inactive_anon:36112kB active_file:72kB inactive_file:64kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:260kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1460.997551] active_anon:14821 inactive_anon:33156 isolated_anon:0 [ 1460.997551] active_file:1422 inactive_file:3332 isolated_file:0 [ 1460.997551] unevictable:0 dirty:139 writeback:0 unstable:0 [ 1460.997551] slab_reclaimable:12817 slab_unreclaimable:126224 [ 1460.997551] mapped:55672 shmem:33564 pagetables:821 bounce:0 [ 1460.997551] free:155040 free_pcp:101 free_cma:0 [ 1461.064992] lowmem_reserve[]: 0 0 0 0 0 [ 1461.078096] Node 0 DMA: 24*4kB (UM) 19*8kB (UME) 15*16kB (UME) 8*32kB (UME) 3*64kB (UME) 2*128kB (ME) 1*256kB (E) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11176kB [ 1461.104393] Node 0 active_anon:58816kB inactive_anon:96512kB active_file:5616kB inactive_file:13264kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139380kB dirty:552kB writeback:0kB shmem:97888kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1461.149968] Node 0 DMA32: 29*4kB (UM) 73*8kB (UE) 39*16kB (UME) 3396*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 109996kB [ 1461.171968] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1461.195109] Node 1 active_anon:468kB inactive_anon:36112kB active_file:72kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:83308kB dirty:4kB writeback:0kB shmem:36368kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1461.239435] Node 1 Normal: 12526*4kB (UM) 2413*8kB (UE) 2556*16kB (UME) 2242*32kB (UE) 18*64kB (ME) 7*128kB (UME) 1*256kB (M) 1*512kB (U) 34*1024kB (U) 1*2048kB (U) 0*4096kB = 221728kB [ 1461.264733] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1461.275705] Node 0 DMA free:11116kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:48kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1461.312639] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1461.324493] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1461.324500] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1461.324507] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1461.324511] 37474 total pagecache pages [ 1461.324521] 0 pages in swap cache [ 1461.324526] Swap cache stats: add 0, delete 0, find 0/0 [ 1461.324529] Free swap = 0kB [ 1461.324532] Total swap = 0kB [ 1461.324539] 2097051 pages RAM [ 1461.324542] 0 pages HighMem/MovableOnly [ 1461.324545] 363849 pages reserved [ 1461.324548] 0 pages cma reserved [ 1461.372780] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1461.425761] Node 0 DMA32 free:36048kB min:36200kB low:45248kB high:54296kB active_anon:58816kB inactive_anon:96512kB active_file:7460kB inactive_file:6012kB unevictable:0kB writepending:552kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7552kB pagetables:3024kB bounce:0kB free_pcp:736kB local_pcp:120kB free_cma:0kB [ 1461.508499] lowmem_reserve[]: 0 0 0 0 0 [ 1461.531565] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1461.563207] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1461.563912] lowmem_reserve[]: [ 1461.579561] CPU: 1 PID: 16747 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1461.582201] 0 [ 1461.582687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1461.590621] 0 [ 1461.592475] Call Trace: [ 1461.601930] 0 [ 1461.603710] dump_stack+0x1b2/0x281 [ 1461.606294] 0 [ 1461.608070] warn_alloc.cold+0x96/0x1cc [ 1461.611668] 0 [ 1461.613455] ? zone_watermark_ok_safe+0x220/0x220 [ 1461.619206] __alloc_pages_nodemask+0x2127/0x2720 [ 1461.624025] Node 1 [ 1461.628850] ? io_schedule_timeout+0x140/0x140 [ 1461.628864] ? lock_acquire+0x170/0x3f0 [ 1461.628879] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1461.631106] Normal free:53676kB min:53696kB low:67120kB high:80544kB active_anon:468kB inactive_anon:36112kB active_file:72kB inactive_file:64kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:260kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1461.635667] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1461.640421] lowmem_reserve[]: [ 1461.644449] ? __mutex_unlock_slowpath+0x75/0x770 [ 1461.672277] 0 [ 1461.677578] ? __sanitizer_cov_trace_pc+0x9/0x50 [ 1461.677593] alloc_pages_current+0x155/0x260 [ 1461.677606] ion_page_pool_alloc+0x118/0x1b0 [ 1461.680705] 0 [ 1461.685820] ion_system_heap_allocate+0x133/0x8c0 [ 1461.685830] ? ion_alloc+0x187/0x810 [ 1461.685839] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1461.685847] ? ion_system_contig_heap_create+0x130/0x130 [ 1461.685857] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1461.687746] 0 [ 1461.692374] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1461.696964] 0 [ 1461.701222] ion_alloc+0x204/0x810 [ 1461.703019] 0 [ 1461.707964] ? ion_dma_buf_release+0x40/0x40 [ 1461.707976] ? __might_fault+0x177/0x1b0 [ 1461.707986] ion_ioctl+0xea/0x1f0 [ 1461.707994] ? ion_query_heaps+0x360/0x360 [ 1461.708005] ? ion_query_heaps+0x360/0x360 [ 1461.717147] do_vfs_ioctl+0x75a/0xff0 [ 1461.717157] ? ioctl_preallocate+0x1a0/0x1a0 [ 1461.717166] ? lock_downgrade+0x740/0x740 [ 1461.717179] ? __fget+0x225/0x360 [ 1461.717190] ? do_vfs_ioctl+0xff0/0xff0 [ 1461.722805] Node 0 [ 1461.727651] ? security_file_ioctl+0x83/0xb0 [ 1461.727663] SyS_ioctl+0x7f/0xb0 [ 1461.727671] ? do_vfs_ioctl+0xff0/0xff0 [ 1461.727680] do_syscall_64+0x1d5/0x640 [ 1461.727695] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1461.727706] RIP: 0033:0x4665d9 [ 1461.729576] DMA: [ 1461.734321] RSP: 002b:00007f3d1f881188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1461.736301] 9*4kB [ 1461.739730] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1461.741523] (UM) [ 1461.745907] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1461.745916] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1461.745921] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1461.745925] R13: 00007ffdbbfa296f R14: 00007f3d1f881300 R15: 0000000000022000 [ 1461.973666] oom_reaper: reaped process 16716 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1461.998055] rs:main Q:Reg invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1462.025813] rs:main Q:Reg cpuset=/ mems_allowed=0-1 [ 1462.030897] CPU: 0 PID: 16756 Comm: rs:main Q:Reg Not tainted 4.14.232-syzkaller #0 [ 1462.038793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1462.048141] Call Trace: [ 1462.050742] dump_stack+0x1b2/0x281 [ 1462.054461] dump_header+0x178/0x82f [ 1462.058188] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1462.063298] ? ___ratelimit+0x2cd/0x530 [ 1462.067276] oom_kill_process.cold+0x10/0xa40 [ 1462.071787] out_of_memory+0xe3e/0x1190 [ 1462.075784] ? oom_killer_disable+0x1c0/0x1c0 [ 1462.080287] ? mutex_trylock+0x152/0x1a0 [ 1462.084350] __alloc_pages_nodemask+0x23e1/0x2720 [ 1462.089211] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1462.094076] alloc_pages_current+0x155/0x260 [ 1462.098494] filemap_fault+0x11a1/0x1ad0 [ 1462.102563] ext4_filemap_fault+0x84/0xb0 [ 1462.106818] __do_fault+0xfa/0x380 [ 1462.110357] __handle_mm_fault+0x2497/0x4620 [ 1462.114762] ? vm_insert_page+0x7c0/0x7c0 [ 1462.118275] 12*8kB [ 1462.118903] ? do_mprotect_pkey+0x691/0x7e0 [ 1462.118909] (UME) [ 1462.121156] ? mark_held_locks+0xa6/0xf0 [ 1462.125462] 15*16kB [ 1462.127595] handle_mm_fault+0x455/0x9c0 [ 1462.127607] __do_page_fault+0x549/0xad0 [ 1462.127618] ? spurious_fault+0x640/0x640 [ 1462.127626] ? do_page_fault+0x60/0x500 [ 1462.127634] ? page_fault+0x2f/0x50 [ 1462.127640] page_fault+0x45/0x50 [ 1462.127648] RIP: 015f:0x7f4f70059be8 [ 1462.127652] RSP: 0009:00007f4f70057dd0 EFLAGS: 0000013b [ 1462.142020] Mem-Info: [ 1462.147156] syz-executor.4: [ 1462.159442] active_anon:14811 inactive_anon:33156 isolated_anon:0 [ 1462.159442] active_file:41 inactive_file:3 isolated_file:0 [ 1462.159442] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1462.159442] slab_reclaimable:12806 slab_unreclaimable:125659 [ 1462.159442] mapped:52764 shmem:33564 pagetables:821 bounce:0 [ 1462.159442] free:13924 free_pcp:30 free_cma:0 [ 1462.169806] page allocation failure: order:0 [ 1462.182347] Node 0 active_anon:58776kB inactive_anon:96512kB active_file:160kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:127868kB dirty:0kB writeback:0kB shmem:97888kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1462.215840] (UME) 8*32kB (UME) 3*64kB (UME) 2*128kB (ME) 1*256kB (E) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11060kB [ 1462.251431] Node 1 active_anon:468kB inactive_anon:36112kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:83188kB dirty:0kB writeback:0kB shmem:36368kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1462.263514] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1462.303443] Node 0 [ 1462.303458] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1462.323944] DMA32: [ 1462.350622] (null) [ 1462.355029] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1462.358484] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1462.361998] 594*4kB [ 1462.365169] Node 0 [ 1462.365171] (UME) 335*8kB [ 1462.378399] CPU: 1 PID: 16716 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1462.383175] DMA32 free:17892kB min:36200kB low:45248kB high:54296kB active_anon:58776kB inactive_anon:96512kB active_file:52kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7552kB pagetables:3024kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1462.389151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1462.389155] Call Trace: [ 1462.389173] dump_stack+0x1b2/0x281 [ 1462.389189] warn_alloc.cold+0x96/0x1cc [ 1462.418102] lowmem_reserve[]: [ 1462.427526] ? zone_watermark_ok_safe+0x220/0x220 [ 1462.427536] ? usleep_range+0x130/0x130 [ 1462.427548] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1462.430145] 0 [ 1462.433772] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1462.437741] 0 [ 1462.440810] ? run_timer_softirq+0x5a0/0x5a0 [ 1462.445622] 0 [ 1462.449584] __alloc_pages_nodemask+0x2127/0x2720 [ 1462.449601] ? lock_acquire+0x170/0x3f0 [ 1462.454670] 0 [ 1462.456463] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1462.456471] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1462.456486] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1462.461485] 0 [ 1462.463287] alloc_pages_current+0x155/0x260 [ 1462.469622] ion_page_pool_alloc+0x118/0x1b0 [ 1462.474531] Node 0 [ 1462.478493] ion_system_heap_allocate+0x133/0x8c0 [ 1462.478503] ? ion_alloc+0x187/0x810 [ 1462.478514] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1462.480298] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1462.485129] ? ion_system_contig_heap_create+0x130/0x130 [ 1462.489613] lowmem_reserve[]: [ 1462.495037] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1462.496837] 0 [ 1462.501216] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1462.505604] 0 [ 1462.507826] ion_alloc+0x204/0x810 [ 1462.507838] ? ion_dma_buf_release+0x40/0x40 [ 1462.507850] ? __might_fault+0x177/0x1b0 [ 1462.512662] 0 [ 1462.516381] ion_ioctl+0xea/0x1f0 [ 1462.516390] ? ion_query_heaps+0x360/0x360 [ 1462.516401] ? ion_query_heaps+0x360/0x360 [ 1462.521833] 0 [ 1462.547003] do_vfs_ioctl+0x75a/0xff0 [ 1462.547015] ? ioctl_preallocate+0x1a0/0x1a0 [ 1462.547024] ? lock_downgrade+0x740/0x740 [ 1462.547036] ? __fget+0x225/0x360 [ 1462.547047] ? do_vfs_ioctl+0xff0/0xff0 [ 1462.553180] 0 [ 1462.556401] ? security_file_ioctl+0x83/0xb0 [ 1462.556413] SyS_ioctl+0x7f/0xb0 [ 1462.556422] ? do_vfs_ioctl+0xff0/0xff0 [ 1462.556433] do_syscall_64+0x1d5/0x640 [ 1462.556447] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1462.563463] RIP: 0033:0x4665d9 [ 1462.568526] Node 1 [ 1462.570271] RSP: 002b:00007f5f77a6d188 EFLAGS: 00000246 [ 1462.573826] Normal free:26828kB min:53696kB low:67120kB high:80544kB active_anon:468kB inactive_anon:36112kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:260kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1462.578205] ORIG_RAX: 0000000000000010 [ 1462.578211] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1462.578215] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1462.578220] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1462.578224] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1462.578228] R13: 00007ffe82aa5b1f R14: 00007f5f77a6d300 R15: 0000000000022000 [ 1462.587167] (ME) [ 1462.606069] lowmem_reserve[]: [ 1462.613862] 91*16kB [ 1462.614316] 0 [ 1462.618337] (UME) 174*32kB (UME) 39*64kB (UM) 7*128kB (M) 5*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 18288kB [ 1462.618393] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1462.618441] Node 1 Normal: [ 1462.634566] 0 [ 1462.643376] 8*4kB [ 1462.650853] 0 [ 1462.652023] (M) [ 1462.693272] 0 [ 1462.715631] 4*8kB [ 1462.726468] 0 [ 1462.752580] (M) [ 1462.775527] Node 0 DMA: 0*4kB 2*8kB (UE) 5*16kB (UE) 4*32kB (UE) 2*64kB (UE) 1*128kB (E) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 10976kB [ 1462.780470] 8*16kB [ 1462.797099] Node 0 DMA32: 594*4kB (UME) 335*8kB (ME) 91*16kB (UME) 174*32kB (UME) 39*64kB (UM) 7*128kB (M) 5*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 18288kB [ 1462.812114] (M) 833*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26848kB [ 1462.819661] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1462.841120] Node 1 Normal: 8*4kB (M) 4*8kB (M) 8*16kB (M) 833*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26848kB [ 1462.841826] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1462.854775] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1462.878656] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1462.882857] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1462.890221] warn_alloc_show_mem: 3 callbacks suppressed [ 1462.890224] Mem-Info: [ 1462.913502] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1462.914930] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1462.923047] active_anon:14811 inactive_anon:33156 isolated_anon:0 [ 1462.923047] active_file:24 inactive_file:11 isolated_file:0 [ 1462.923047] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1462.923047] slab_reclaimable:12806 slab_unreclaimable:125633 [ 1462.923047] mapped:52761 shmem:33564 pagetables:821 bounce:0 [ 1462.923047] free:13980 free_pcp:53 free_cma:0 [ 1462.951800] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1462.970134] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1462.988790] 33596 total pagecache pages [ 1462.992806] 0 pages in swap cache [ 1462.999661] Swap cache stats: add 0, delete 0, find 0/0 [ 1463.005032] Free swap = 0kB [ 1463.010992] Total swap = 0kB [ 1463.014017] 2097051 pages RAM [ 1463.020675] 0 pages HighMem/MovableOnly [ 1463.024831] 363849 pages reserved [ 1463.031274] Node 0 active_anon:58772kB inactive_anon:96512kB active_file:60kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:127868kB dirty:0kB writeback:0kB shmem:97888kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1463.043629] 33596 total pagecache pages [ 1463.064600] 0 pages cma reserved [ 1463.068005] Out of memory (oom_kill_allocating_task): Kill process 16756 (rs:main Q:Reg) score 0 or sacrifice child [ 1463.079356] 0 pages in swap cache [ 1463.082821] Swap cache stats: add 0, delete 0, find 0/0 [ 1463.084315] Killed process 16750 (rsyslogd) total-vm:254332kB, anon-rss:676kB, file-rss:0kB, shmem-rss:0kB [ 1463.104206] Node 1 active_anon:468kB inactive_anon:36112kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:83188kB dirty:0kB writeback:0kB shmem:36368kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1463.114134] Free swap = 0kB [ 1463.150545] Total swap = 0kB [ 1463.151312] oom_reaper: reaped process 16750 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1463.153613] 2097051 pages RAM [ 1463.184232] syz-executor.2 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1463.203046] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1463.220125] 0 pages HighMem/MovableOnly [ 1463.235318] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1463.240981] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1463.252627] 363849 pages reserved [ 1463.256961] Node 0 DMA32 free:18996kB min:36200kB low:45248kB high:54296kB active_anon:57764kB inactive_anon:96512kB active_file:60kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7552kB pagetables:3024kB bounce:0kB free_pcp:660kB local_pcp:660kB free_cma:0kB [ 1463.259801] CPU: 1 PID: 9029 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1463.287928] lowmem_reserve[]: [ 1463.293842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1463.293851] 0 [ 1463.296947] Call Trace: [ 1463.296966] dump_stack+0x1b2/0x281 [ 1463.296976] dump_header+0x178/0x82f [ 1463.296985] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1463.296994] ? ___ratelimit+0x2cd/0x530 [ 1463.297002] oom_kill_process.cold+0x10/0xa40 [ 1463.297020] out_of_memory+0xe3e/0x1190 [ 1463.306627] 0 [ 1463.308397] ? oom_killer_disable+0x1c0/0x1c0 [ 1463.310950] 0 [ 1463.314564] ? mutex_trylock+0x152/0x1a0 [ 1463.318293] 0 [ 1463.323338] __alloc_pages_nodemask+0x23e1/0x2720 [ 1463.327302] 0 [ 1463.331793] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1463.337534] alloc_pages_current+0x155/0x260 [ 1463.341990] Node 0 [ 1463.343789] filemap_fault+0x11a1/0x1ad0 [ 1463.347854] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1463.349625] ext4_filemap_fault+0x84/0xb0 [ 1463.354431] lowmem_reserve[]: [ 1463.356216] __do_fault+0xfa/0x380 [ 1463.356226] __handle_mm_fault+0x2497/0x4620 [ 1463.356237] ? vm_insert_page+0x7c0/0x7c0 [ 1463.361174] 0 [ 1463.365560] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 1463.367797] 0 [ 1463.371819] ? nanosleep_copyout+0x100/0x100 [ 1463.396806] 0 [ 1463.400926] ? mark_held_locks+0xa6/0xf0 [ 1463.404020] 0 [ 1463.407554] handle_mm_fault+0x455/0x9c0 [ 1463.407567] __do_page_fault+0x549/0xad0 [ 1463.407578] ? spurious_fault+0x640/0x640 [ 1463.411975] 0 [ 1463.416104] ? do_page_fault+0x60/0x500 [ 1463.416113] ? page_fault+0x2f/0x50 [ 1463.416119] page_fault+0x45/0x50 [ 1463.416127] RIP: 1645ef:0xd [ 1463.422305] RSP: 016d:00007ffdbbfa2c2c EFLAGS: 00000011 [ 1463.424085] Node 1 [ 1463.440854] 0 pages cma reserved [ 1463.459350] Normal free:26948kB min:53696kB low:67120kB high:80544kB active_anon:468kB inactive_anon:36112kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:260kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1463.473056] Mem-Info: [ 1463.483987] lowmem_reserve[]: 0 0 0 0 0 [ 1463.519575] active_anon:14535 inactive_anon:33156 isolated_anon:0 [ 1463.519575] active_file:41 inactive_file:0 isolated_file:0 [ 1463.519575] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1463.519575] slab_reclaimable:12806 slab_unreclaimable:125607 [ 1463.519575] mapped:52764 shmem:33564 pagetables:821 bounce:0 [ 1463.519575] free:14230 free_pcp:165 free_cma:0 [ 1463.522640] Node 0 [ 1463.567140] Node 0 active_anon:57672kB inactive_anon:96512kB active_file:56kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:127868kB dirty:0kB writeback:0kB shmem:97888kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1463.575059] DMA: [ 1463.606003] Node 1 active_anon:468kB inactive_anon:36112kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:83188kB dirty:0kB writeback:0kB shmem:36368kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1463.614194] 0*4kB [ 1463.644856] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1463.655266] 2*8kB [ 1463.682898] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1463.691070] Node 0 DMA32 free:18996kB min:36200kB low:45248kB high:54296kB active_anon:57764kB inactive_anon:96512kB active_file:56kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7552kB pagetables:3024kB bounce:0kB free_pcp:660kB local_pcp:0kB free_cma:0kB [ 1463.691125] (UE) [ 1463.733569] lowmem_reserve[]: [ 1463.734384] 5*16kB [ 1463.739595] 0 0 0 0 0 [ 1463.742714] (UE) 4*32kB [ 1463.744556] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1463.756218] (UE) [ 1463.787765] lowmem_reserve[]: 0 0 0 0 0 [ 1463.793860] Node 1 Normal free:26948kB min:53696kB low:67120kB high:80544kB active_anon:468kB inactive_anon:36112kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:260kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1463.795673] 2*64kB [ 1463.826730] lowmem_reserve[]: 0 0 0 0 0 [ 1463.833160] Node 0 DMA: 0*4kB 2*8kB (UE) 5*16kB (UE) 4*32kB (UE) 2*64kB (UE) 1*128kB (E) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 10976kB [ 1463.842812] (UE) [ 1463.852272] Node 0 DMA32: 695*4kB (UME) 367*8kB (UME) 97*16kB (UME) 184*32kB (UME) 39*64kB (UM) 7*128kB (M) 5*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 19364kB [ 1463.868265] 1*128kB (E) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 10976kB [ 1463.874156] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1463.894221] Node 1 Normal: 8*4kB (M) 5*8kB (UM) 9*16kB (UM) 836*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26968kB [ 1463.899954] Node 0 [ 1463.915485] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1463.924714] DMA32: [ 1463.934734] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1463.936662] 695*4kB [ 1463.937129] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1463.945614] (UME) [ 1463.965414] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1463.967616] 33596 total pagecache pages [ 1463.988322] 0 pages in swap cache [ 1463.991785] Swap cache stats: add 0, delete 0, find 0/0 [ 1463.993885] 367*8kB [ 1464.001909] Free swap = 0kB [ 1464.005784] (UME) 97*16kB (UME) 184*32kB (UME) 39*64kB (UM) 7*128kB (M) 5*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 19364kB [ 1464.010866] Total swap = 0kB [ 1464.032246] 2097051 pages RAM [ 1464.035380] 0 pages HighMem/MovableOnly [ 1464.038748] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1464.041159] 363849 pages reserved [ 1464.062106] 0 pages cma reserved [ 1464.065478] Out of memory (oom_kill_allocating_task): Kill process 9029 (syz-executor.2) score 0 or sacrifice child [ 1464.067713] Node 1 Normal: 8*4kB (M) 5*8kB (UM) 9*16kB (UM) 836*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26968kB [ 1464.083075] Killed process 16747 (syz-executor.2) total-vm:93384kB, anon-rss:156kB, file-rss:34820kB, shmem-rss:0kB [ 1464.141981] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1464.166666] oom_reaper: reaped process 16747 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1464.201973] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1464.213130] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1464.213343] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1464.239148] systemd-journal cpuset=/ mems_allowed=0-1 [ 1464.244513] CPU: 1 PID: 16710 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 1464.252474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1464.252604] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1464.261813] Call Trace: [ 1464.261832] dump_stack+0x1b2/0x281 [ 1464.261846] dump_header+0x178/0x82f [ 1464.270429] 33596 total pagecache pages [ 1464.272983] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1464.276625] 0 pages in swap cache [ 1464.280312] ? ___ratelimit+0x2cd/0x530 [ 1464.284261] Swap cache stats: add 0, delete 0, find 0/0 [ 1464.289354] oom_kill_process.cold+0x10/0xa40 [ 1464.289376] out_of_memory+0xe3e/0x1190 [ 1464.292810] Free swap = 0kB [ 1464.296789] ? oom_killer_disable+0x1c0/0x1c0 [ 1464.296797] ? mutex_trylock+0x152/0x1a0 [ 1464.296808] __alloc_pages_nodemask+0x23e1/0x2720 [ 1464.302189] Total swap = 0kB [ 1464.306764] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1464.306780] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1464.310725] 2097051 pages RAM [ 1464.313817] ? cache_grow_begin+0x3f/0x700 [ 1464.318311] 0 pages HighMem/MovableOnly [ 1464.322336] cache_grow_begin+0x91/0x700 [ 1464.327184] 363849 pages reserved [ 1464.330183] fallback_alloc+0x207/0x2c0 [ 1464.334993] 0 pages cma reserved [ 1464.340000] kmem_cache_alloc+0x1e5/0x3c0 [ 1464.340012] getname_flags+0xc8/0x550 [ 1464.340022] do_sys_open+0x1ce/0x410 [ 1464.379287] ? filp_open+0x60/0x60 [ 1464.382828] ? do_syscall_64+0x4c/0x640 [ 1464.386799] ? do_sys_open+0x410/0x410 [ 1464.390735] do_syscall_64+0x1d5/0x640 [ 1464.394637] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1464.399831] RIP: 0033:0x7f199c3d0840 [ 1464.403545] RSP: 002b:00007ffd32d3e0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1464.411293] RAX: ffffffffffffffda RBX: 00007ffd32d3e3d0 RCX: 00007f199c3d0840 [ 1464.415176] syz-executor.4: [ 1464.418551] RDX: 00000000000001a0 RSI: 0000000000080042 RDI: 000055c8b04e2f50 [ 1464.418556] RBP: 000000000000000d R08: 00000000000001c0 R09: 00000000ffffffff [ 1464.418560] R10: 0000000000000069 R11: 0000000000000246 R12: 00000000ffffffff [ 1464.418564] R13: 000055c8b04de040 R14: 00007ffd32d3e390 R15: 000055c8b04e29d0 [ 1464.451222] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1464.488583] Mem-Info: [ 1464.491046] active_anon:14502 inactive_anon:33156 isolated_anon:0 [ 1464.491046] active_file:44 inactive_file:4 isolated_file:0 [ 1464.491046] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1464.491046] slab_reclaimable:12796 slab_unreclaimable:125587 [ 1464.491046] mapped:52764 shmem:33564 pagetables:791 bounce:0 [ 1464.491046] free:25174 free_pcp:398 free_cma:0 [ 1464.541668] Node 0 active_anon:57540kB inactive_anon:96512kB active_file:172kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:127868kB dirty:0kB writeback:0kB shmem:97888kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1464.565961] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1464.623780] CPU: 0 PID: 16747 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1464.631709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1464.641076] Call Trace: [ 1464.643687] dump_stack+0x1b2/0x281 [ 1464.647327] warn_alloc.cold+0x96/0x1cc [ 1464.651475] ? zone_watermark_ok_safe+0x220/0x220 [ 1464.656320] ? usleep_range+0x130/0x130 [ 1464.660290] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1464.665393] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1464.670408] ? run_timer_softirq+0x5a0/0x5a0 [ 1464.674827] __alloc_pages_nodemask+0x2127/0x2720 [ 1464.679675] ? lock_acquire+0x170/0x3f0 [ 1464.683656] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1464.688493] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1464.692991] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1464.698440] ? __sanitizer_cov_trace_pc+0x9/0x50 [ 1464.703217] alloc_pages_current+0x155/0x260 [ 1464.707798] ion_page_pool_alloc+0x118/0x1b0 [ 1464.712224] ion_system_heap_allocate+0x133/0x8c0 [ 1464.717062] ? ion_alloc+0x187/0x810 [ 1464.720774] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1464.726218] ? ion_system_contig_heap_create+0x130/0x130 [ 1464.731661] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1464.736672] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1464.741512] ion_alloc+0x204/0x810 [ 1464.745050] ? ion_dma_buf_release+0x40/0x40 [ 1464.749458] ? __might_fault+0x177/0x1b0 [ 1464.753548] ion_ioctl+0xea/0x1f0 [ 1464.754539] Node 1 active_anon:468kB inactive_anon:36112kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:83188kB dirty:0kB writeback:0kB shmem:36368kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1464.756997] ? ion_query_heaps+0x360/0x360 [ 1464.757008] ? ion_query_heaps+0x360/0x360 [ 1464.757018] do_vfs_ioctl+0x75a/0xff0 [ 1464.757028] ? ioctl_preallocate+0x1a0/0x1a0 [ 1464.757037] ? lock_downgrade+0x740/0x740 [ 1464.757049] ? __fget+0x225/0x360 [ 1464.757058] ? do_vfs_ioctl+0xff0/0xff0 [ 1464.757069] ? security_file_ioctl+0x83/0xb0 [ 1464.757078] SyS_ioctl+0x7f/0xb0 [ 1464.757088] ? do_vfs_ioctl+0xff0/0xff0 [ 1464.824109] do_syscall_64+0x1d5/0x640 [ 1464.828006] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1464.833194] RIP: 0033:0x4665d9 [ 1464.836400] RSP: 002b:00007f3d1f881188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1464.844142] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1464.851417] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1464.858691] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1464.865958] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1464.873243] R13: 00007ffdbbfa296f R14: 00007f3d1f881300 R15: 0000000000022000 [ 1464.914839] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1464.962686] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1464.977393] Node 0 DMA free:10996kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1464.993728] CPU: 0 PID: 16716 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1465.011433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1465.020801] Call Trace: [ 1465.023486] dump_stack+0x1b2/0x281 [ 1465.027121] warn_alloc.cold+0x96/0x1cc [ 1465.031100] ? zone_watermark_ok_safe+0x220/0x220 [ 1465.036058] __alloc_pages_nodemask+0x2127/0x2720 [ 1465.040898] ? lock_acquire+0x170/0x3f0 [ 1465.044903] ? lock_acquire+0x170/0x3f0 [ 1465.048895] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1465.053756] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1465.059210] ? __mutex_unlock_slowpath+0x75/0x770 [ 1465.064140] alloc_pages_current+0x155/0x260 [ 1465.068547] ion_page_pool_alloc+0x118/0x1b0 [ 1465.072967] ion_system_heap_allocate+0x133/0x8c0 [ 1465.077813] ? _raw_spin_unlock+0x29/0x40 [ 1465.081970] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1465.086893] ? ion_system_contig_heap_create+0x130/0x130 [ 1465.092891] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1465.097905] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1465.102784] ion_alloc+0x27a/0x810 [ 1465.106329] ? ion_dma_buf_release+0x40/0x40 [ 1465.110846] ? __might_fault+0x177/0x1b0 [ 1465.114932] ion_ioctl+0xea/0x1f0 [ 1465.118409] ? ion_query_heaps+0x360/0x360 [ 1465.122643] ? ion_query_heaps+0x360/0x360 [ 1465.126960] do_vfs_ioctl+0x75a/0xff0 [ 1465.130758] ? ioctl_preallocate+0x1a0/0x1a0 [ 1465.135196] ? lock_downgrade+0x740/0x740 [ 1465.139347] ? __fget+0x225/0x360 [ 1465.142842] ? do_vfs_ioctl+0xff0/0xff0 [ 1465.146989] ? security_file_ioctl+0x83/0xb0 [ 1465.151412] SyS_ioctl+0x7f/0xb0 [ 1465.154775] ? do_vfs_ioctl+0xff0/0xff0 [ 1465.158749] do_syscall_64+0x1d5/0x640 [ 1465.162640] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1465.164034] lowmem_reserve[]: [ 1465.167835] RIP: 0033:0x4665d9 [ 1465.167839] RSP: 002b:00007f5f77a6d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1465.167848] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1465.167853] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1465.167857] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1465.167862] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1465.167867] R13: 00007ffe82aa5b1f R14: 00007f5f77a6d300 R15: 0000000000022000 [ 1465.506647] 0 2717 2718 2718 2718 [ 1465.510248] Node 0 DMA32 free:36196kB min:36200kB low:45248kB high:54296kB active_anon:57540kB inactive_anon:96512kB active_file:168kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7424kB pagetables:2904kB bounce:0kB free_pcp:824kB local_pcp:132kB free_cma:0kB [ 1465.691209] Mem-Info: [ 1465.693687] active_anon:14502 inactive_anon:33156 isolated_anon:0 [ 1465.693687] active_file:9 inactive_file:0 isolated_file:0 [ 1465.693687] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1465.693687] slab_reclaimable:12796 slab_unreclaimable:125459 [ 1465.693687] mapped:52764 shmem:33564 pagetables:791 bounce:0 [ 1465.693687] free:25205 free_pcp:391 free_cma:0 [ 1465.766555] lowmem_reserve[]: 0 0 0 0 0 [ 1465.769510] Node 0 active_anon:57540kB inactive_anon:96512kB active_file:132kB inactive_file:80kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:127868kB dirty:0kB writeback:0kB shmem:97888kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1465.770884] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1465.943591] Node 1 active_anon:468kB inactive_anon:36112kB active_file:0kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:83188kB dirty:0kB writeback:0kB shmem:36368kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1465.962255] lowmem_reserve[]: 0 0 0 0 0 [ 1466.035538] Node 1 Normal free:274236kB min:53696kB low:67120kB high:80544kB active_anon:468kB inactive_anon:36112kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:260kB bounce:0kB free_pcp:752kB local_pcp:120kB free_cma:0kB [ 1466.195611] lowmem_reserve[]: 0 0 0 0 0 [ 1466.199678] Node 0 DMA: 1*4kB (U) 6*8kB (UE) 11*16kB (UE) 4*32kB (UE) 15*64kB (UE) 7*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11940kB [ 1466.205528] Node 0 DMA free:11912kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1466.319617] Node 0 DMA32: 273*4kB (UME) 285*8kB (ME) 62*16kB (UME) 34*32kB (UME) 2335*64kB (UME) 440*128kB (UM) 47*256kB (U) 8*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 227340kB [ 1466.336598] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1466.377742] Node 1 Normal: 7*4kB (M) 4*8kB (M) 8*16kB (M) 1670*32kB (UME) 7294*64kB (UME) 1198*128kB (UME) 344*256kB (UM) 66*512kB (U) 38*1024kB (U) 1*2048kB (U) 0*4096kB = 836604kB [ 1466.394651] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1466.439165] Node 0 DMA32 free:45168kB min:36200kB low:45248kB high:54296kB active_anon:57540kB inactive_anon:96512kB active_file:624kB inactive_file:3768kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7456kB pagetables:2904kB bounce:0kB free_pcp:504kB local_pcp:308kB free_cma:0kB [ 1466.449084] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1466.555531] lowmem_reserve[]: 0 0 0 0 0 [ 1466.559602] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1466.587215] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1466.635669] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1466.644696] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1466.685553] 35506 total pagecache pages [ 1466.689293] lowmem_reserve[]: 0 0 [ 1466.689674] 0 pages in swap cache [ 1466.689681] Swap cache stats: add 0, delete 0, find 0/0 [ 1466.693127] 0 [ 1466.705558] Free swap = 0kB [ 1466.710406] Total swap = 0kB [ 1466.713532] 2097051 pages RAM [ 1466.725676] 0 0 [ 1466.727668] Node 1 Normal free:364796kB min:53696kB low:67120kB high:80544kB active_anon:468kB inactive_anon:36112kB active_file:200kB inactive_file:2608kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:260kB bounce:0kB free_pcp:536kB local_pcp:500kB free_cma:0kB [ 1466.757075] 0 pages HighMem/MovableOnly [ 1466.761068] 363849 pages reserved [ 1466.764525] 0 pages cma reserved [ 1466.785506] Out of memory (oom_kill_allocating_task): Kill process 16710 (systemd-journal) score 0 or sacrifice child [ 1466.829296] Killed process 16710 (systemd-journal) total-vm:46096kB, anon-rss:464kB, file-rss:0kB, shmem-rss:2112kB [ 1466.890112] oom_reaper: reaped process 16710 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:2112kB [ 1466.910517] lowmem_reserve[]: 0 0 0 0 0 [ 1466.914548] Node 0 DMA: 0*4kB 2*8kB (UE) 2*16kB (UE) 2*32kB (UE) 4*64kB (UE) 7*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10992kB [ 1466.961702] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1466.972282] oom_reaper: reaped process 16720 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1466.983500] Node 0 DMA32: 582*4kB (UME) 301*8kB (UME) 68*16kB (UME) 31*32kB (UME) 25*64kB (UME) 1*128kB (M) 21*256kB (U) 8*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18016kB [ 1466.993161] syz-executor.3: [ 1467.001258] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1467.007368] syz-executor.2 cpuset= [ 1467.020469] page allocation failure: order:0 [ 1467.023079] syz-executor.5: [ 1467.024059] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1467.031133] Node 0 [ 1467.031935] (null) [ 1467.044430] / mems_allowed=0-1 [ 1467.051880] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1467.062980] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1467.069007] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1467.074148] CPU: 1 PID: 16720 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1467.082194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1467.085428] Normal: [ 1467.091536] Call Trace: [ 1467.091543] 0*4kB [ 1467.094011] dump_stack+0x1b2/0x281 [ 1467.102339] warn_alloc.cold+0x96/0x1cc [ 1467.105481] syz-executor.5 cpuset=/ [ 1467.106317] ? zone_watermark_ok_safe+0x220/0x220 [ 1467.106329] ? usleep_range+0x130/0x130 [ 1467.109947] mems_allowed=0-1 [ 1467.121838] ? try_to_free_pages+0x23f/0x6e0 [ 1467.125438] 0*8kB 0*16kB [ 1467.126239] ? _find_next_bit+0xdb/0x100 [ 1467.126250] ? run_timer_softirq+0x5a0/0x5a0 [ 1467.128991] 0*32kB [ 1467.133128] __alloc_pages_nodemask+0x2127/0x2720 [ 1467.144595] ? lock_acquire+0x170/0x3f0 [ 1467.148562] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1467.153480] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1467.158005] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1467.163702] alloc_pages_current+0x155/0x260 [ 1467.165444] 0*64kB 0*128kB [ 1467.168106] ion_page_pool_alloc+0x118/0x1b0 [ 1467.168116] ion_system_heap_allocate+0x133/0x8c0 [ 1467.171041] 0*256kB [ 1467.175523] ? ion_alloc+0x187/0x810 [ 1467.175534] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1467.175543] ? ion_system_contig_heap_create+0x130/0x130 [ 1467.175554] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1467.203308] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1467.205416] 0*512kB 0*1024kB [ 1467.208141] ion_alloc+0x204/0x810 [ 1467.208153] ? ion_dma_buf_release+0x40/0x40 [ 1467.211241] 0*2048kB [ 1467.214767] ? __might_fault+0x177/0x1b0 [ 1467.225603] ion_ioctl+0xea/0x1f0 [ 1467.229145] ? ion_query_heaps+0x360/0x360 [ 1467.233366] ? ion_query_heaps+0x360/0x360 [ 1467.237601] do_vfs_ioctl+0x75a/0xff0 [ 1467.241395] ? ioctl_preallocate+0x1a0/0x1a0 [ 1467.245437] 0*4096kB [ 1467.245790] ? lock_downgrade+0x740/0x740 [ 1467.245794] = 0kB [ 1467.245799] Node 1 [ 1467.248203] ? __fget+0x225/0x360 [ 1467.252344] Normal: [ 1467.254395] ? do_vfs_ioctl+0xff0/0xff0 [ 1467.266327] ? security_file_ioctl+0x83/0xb0 [ 1467.270720] SyS_ioctl+0x7f/0xb0 [ 1467.274188] ? do_vfs_ioctl+0xff0/0xff0 [ 1467.278148] do_syscall_64+0x1d5/0x640 [ 1467.282029] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1467.285410] 21*4kB [ 1467.287203] RIP: 0033:0x4665d9 [ 1467.287205] (ME) 15*8kB [ 1467.289425] RSP: 002b:00007f6d56c88188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1467.292613] (M) [ 1467.295267] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1467.312235] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1467.319519] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1467.326790] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1467.334043] R13: 00007ffda15d7cdf R14: 00007f6d56c88300 R15: 0000000000022000 [ 1467.335399] 12*16kB (UM) 17*32kB (ME) 21*64kB (ME) 9*128kB (UME) 2*256kB (M) 2*512kB (UM) 21*1024kB (U) 0*2048kB 0*4096kB = 26476kB [ 1467.348147] CPU: 1 PID: 16749 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1467.361235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1467.370789] Call Trace: [ 1467.373474] dump_stack+0x1b2/0x281 [ 1467.377196] warn_alloc.cold+0x96/0x1cc [ 1467.381159] ? zone_watermark_ok_safe+0x220/0x220 [ 1467.385987] ? usleep_range+0x130/0x130 [ 1467.390032] ? try_to_free_pages+0x23f/0x6e0 [ 1467.394429] ? _find_next_bit+0xdb/0x100 [ 1467.398491] ? run_timer_softirq+0x5a0/0x5a0 [ 1467.402888] __alloc_pages_nodemask+0x2127/0x2720 [ 1467.405401] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1467.407729] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1467.421392] ? migrate_swap_stop+0x880/0x880 [ 1467.425871] ? lock_acquire+0x170/0x3f0 [ 1467.429837] alloc_pages_current+0x155/0x260 [ 1467.434243] ion_page_pool_alloc+0x118/0x1b0 [ 1467.438636] ion_system_heap_allocate+0x133/0x8c0 [ 1467.443462] ? ion_alloc+0x187/0x810 [ 1467.445527] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1467.447177] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1467.461298] ? ion_system_contig_heap_create+0x130/0x130 [ 1467.466739] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1467.471917] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1467.475396] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1467.476762] ion_alloc+0x204/0x810 [ 1467.489199] ? ion_dma_buf_release+0x40/0x40 [ 1467.493594] ? __might_fault+0x177/0x1b0 [ 1467.497652] ion_ioctl+0xea/0x1f0 [ 1467.501102] ? ion_query_heaps+0x360/0x360 [ 1467.505340] ? ion_query_heaps+0x360/0x360 [ 1467.505392] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1467.509910] do_vfs_ioctl+0x75a/0xff0 [ 1467.522312] ? ioctl_preallocate+0x1a0/0x1a0 [ 1467.526721] ? lock_downgrade+0x740/0x740 [ 1467.530867] ? __fget+0x225/0x360 [ 1467.534312] ? do_vfs_ioctl+0xff0/0xff0 [ 1467.538276] ? security_file_ioctl+0x83/0xb0 [ 1467.542690] SyS_ioctl+0x7f/0xb0 [ 1467.545397] 33618 total pagecache pages [ 1467.546045] ? do_vfs_ioctl+0xff0/0xff0 [ 1467.550050] 0 pages in swap cache [ 1467.554014] do_syscall_64+0x1d5/0x640 [ 1467.561327] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1467.566502] RIP: 0033:0x4665d9 [ 1467.569680] RSP: 002b:00007f7465960188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1467.577637] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 00000000004665d9 [ 1467.584952] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1467.585434] Swap cache stats: add 0, delete 0, find 0/0 [ 1467.592502] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1467.605133] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1467.612396] R13: 00007ffc7a8155ff R14: 00007f7465960300 R15: 0000000000022000 [ 1467.615392] Free swap = 0kB [ 1467.622683] Total swap = 0kB [ 1467.631016] oom_reaper: reaped process 16749 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1467.638177] CPU: 0 PID: 16746 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1467.644948] warn_alloc_show_mem: 1 callbacks suppressed [ 1467.644951] Mem-Info: [ 1467.649169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1467.649173] Call Trace: [ 1467.649191] dump_stack+0x1b2/0x281 [ 1467.649205] warn_alloc.cold+0x96/0x1cc [ 1467.649217] ? zone_watermark_ok_safe+0x220/0x220 [ 1467.649231] ? usleep_range+0x130/0x130 [ 1467.657280] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1467.657339] ? try_to_free_pages+0x23f/0x6e0 [ 1467.668772] active_anon:14383 inactive_anon:33156 isolated_anon:0 [ 1467.668772] active_file:43 inactive_file:11 isolated_file:0 [ 1467.668772] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1467.668772] slab_reclaimable:12789 slab_unreclaimable:125345 [ 1467.668772] mapped:52234 shmem:33564 pagetables:824 bounce:0 [ 1467.668772] free:13834 free_pcp:2 free_cma:0 [ 1467.669264] ? _find_next_bit+0xdb/0x100 [ 1467.672888] Node 0 active_anon:56920kB inactive_anon:96512kB active_file:116kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:125712kB dirty:0kB writeback:0kB shmem:97888kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1467.676883] ? run_timer_softirq+0x5a0/0x5a0 [ 1467.676900] __alloc_pages_nodemask+0x2127/0x2720 [ 1467.676916] ? lock_acquire+0x170/0x3f0 [ 1467.676931] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1467.676942] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1467.705572] (null) [ 1467.733758] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1467.733778] alloc_pages_current+0x155/0x260 [ 1467.733793] ion_page_pool_alloc+0x118/0x1b0 [ 1467.733802] ion_system_heap_allocate+0x133/0x8c0 [ 1467.733810] ? ion_alloc+0x187/0x810 [ 1467.733819] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1467.733828] ? ion_system_contig_heap_create+0x130/0x130 [ 1467.733841] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1467.755515] Node 1 active_anon:612kB inactive_anon:36112kB active_file:56kB inactive_file:80kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:83224kB dirty:0kB writeback:0kB shmem:36368kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1467.765940] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1467.765953] ion_alloc+0x204/0x810 [ 1467.765967] ? ion_dma_buf_release+0x40/0x40 [ 1467.765977] ? __might_fault+0x177/0x1b0 [ 1467.825458] Node 0 [ 1467.830067] ion_ioctl+0xea/0x1f0 [ 1467.879647] ? ion_query_heaps+0x360/0x360 [ 1467.883921] ? ion_query_heaps+0x360/0x360 [ 1467.885404] , order=0, oom_score_adj=0 [ 1467.888168] do_vfs_ioctl+0x75a/0xff0 [ 1467.892140] syz-fuzzer cpuset= [ 1467.896043] ? ioctl_preallocate+0x1a0/0x1a0 [ 1467.896053] ? lock_downgrade+0x740/0x740 [ 1467.896065] ? __fget+0x225/0x360 [ 1467.896073] ? do_vfs_ioctl+0xff0/0xff0 [ 1467.896083] ? security_file_ioctl+0x83/0xb0 [ 1467.896092] SyS_ioctl+0x7f/0xb0 [ 1467.896100] ? do_vfs_ioctl+0xff0/0xff0 [ 1467.927399] do_syscall_64+0x1d5/0x640 [ 1467.931307] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1467.935486] / [ 1467.936496] RIP: 0033:0x4665d9 [ 1467.936500] mems_allowed=0-1 [ 1467.944471] RSP: 002b:00007f7465981188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1467.952206] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1467.959484] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1467.966758] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1467.974034] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1467.975427] DMA free:11016kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1467.981288] R13: 00007ffc7a8155ff R14: 00007f7465981300 R15: 0000000000022000 [ 1467.991982] CPU: 0 PID: 16747 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1468.022363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1468.031722] Call Trace: [ 1468.034317] dump_stack+0x1b2/0x281 [ 1468.037961] warn_alloc.cold+0x96/0x1cc [ 1468.041955] ? zone_watermark_ok_safe+0x220/0x220 [ 1468.046814] __alloc_pages_nodemask+0x2127/0x2720 [ 1468.051647] ? __schedule+0x893/0x1de0 [ 1468.055533] ? lock_acquire+0x170/0x3f0 [ 1468.059670] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1468.064617] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1468.070078] ? __mutex_unlock_slowpath+0x75/0x770 [ 1468.075015] alloc_pages_current+0x155/0x260 [ 1468.079423] ion_page_pool_alloc+0x118/0x1b0 [ 1468.083839] ion_system_heap_allocate+0x133/0x8c0 [ 1468.088724] ? _raw_spin_unlock+0x29/0x40 [ 1468.092872] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1468.097790] ? ion_system_contig_heap_create+0x130/0x130 [ 1468.103230] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1468.108262] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1468.109115] lowmem_reserve[]: 0 [ 1468.113102] ion_alloc+0x27a/0x810 [ 1468.113115] ? ion_dma_buf_release+0x40/0x40 [ 1468.116430] 2717 [ 1468.119929] ? __might_fault+0x177/0x1b0 [ 1468.124317] 2718 [ 1468.126370] ion_ioctl+0xea/0x1f0 [ 1468.126379] ? ion_query_heaps+0x360/0x360 [ 1468.126390] ? ion_query_heaps+0x360/0x360 [ 1468.126399] do_vfs_ioctl+0x75a/0xff0 [ 1468.126410] ? ioctl_preallocate+0x1a0/0x1a0 [ 1468.126419] ? lock_downgrade+0x740/0x740 [ 1468.126432] ? __fget+0x225/0x360 [ 1468.160297] ? do_vfs_ioctl+0xff0/0xff0 [ 1468.164266] ? security_file_ioctl+0x83/0xb0 [ 1468.168669] SyS_ioctl+0x7f/0xb0 [ 1468.169461] 2718 [ 1468.172118] ? do_vfs_ioctl+0xff0/0xff0 [ 1468.172119] 2718 [ 1468.174210] do_syscall_64+0x1d5/0x640 [ 1468.184150] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1468.189441] RIP: 0033:0x4665d9 [ 1468.192646] RSP: 002b:00007f3d1f881188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1468.197236] Node 0 [ 1468.200346] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1468.200367] DMA32 free:34388kB min:36200kB low:45248kB high:54296kB active_anon:56916kB inactive_anon:96508kB active_file:36kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7392kB pagetables:2804kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1468.202571] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1468.202579] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1468.238930] lowmem_reserve[]: [ 1468.245378] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1468.245383] R13: 00007ffdbbfa296f R14: 00007f3d1f881300 R15: 0000000000022000 [ 1468.249782] 2097051 pages RAM [ 1468.259332] syz-executor.5: [ 1468.269248] 0 pages HighMem/MovableOnly [ 1468.287087] 363849 pages reserved [ 1468.290043] CPU: 1 PID: 23230 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 1468.290647] 0 pages cma reserved [ 1468.298169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1468.298173] Call Trace: [ 1468.298191] dump_stack+0x1b2/0x281 [ 1468.298202] dump_header+0x178/0x82f [ 1468.298215] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1468.326008] ? ___ratelimit+0x2cd/0x530 [ 1468.329988] oom_kill_process.cold+0x10/0xa40 [ 1468.334496] out_of_memory+0xe3e/0x1190 [ 1468.338615] ? oom_killer_disable+0x1c0/0x1c0 [ 1468.343115] ? mutex_trylock+0x152/0x1a0 [ 1468.347188] __alloc_pages_nodemask+0x23e1/0x2720 [ 1468.352478] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1468.357337] alloc_pages_current+0x155/0x260 [ 1468.361750] filemap_fault+0x11a1/0x1ad0 [ 1468.365817] ext4_filemap_fault+0x84/0xb0 [ 1468.369964] __do_fault+0xfa/0x380 [ 1468.373518] __handle_mm_fault+0x2497/0x4620 [ 1468.377926] ? vm_insert_page+0x7c0/0x7c0 [ 1468.382087] ? mark_held_locks+0xa6/0xf0 [ 1468.386250] handle_mm_fault+0x455/0x9c0 [ 1468.390319] __do_page_fault+0x549/0xad0 [ 1468.394412] ? spurious_fault+0x640/0x640 [ 1468.398558] ? do_page_fault+0x60/0x500 [ 1468.402542] ? page_fault+0x2f/0x50 [ 1468.406167] page_fault+0x45/0x50 [ 1468.409615] RIP: fe7080:0x15f358fff2a [ 1468.413411] RSP: 1e800:000000c0003a1e40 EFLAGS: 00000003 [ 1468.418670] 0 [ 1468.423339] syz-executor.4: [ 1468.428796] 0 0 0 0 [ 1468.434457] page allocation failure: order:0 [ 1468.440201] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1468.445776] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1468.474625] lowmem_reserve[]: [ 1468.480871] page allocation failure: order:4 [ 1468.481789] 0 [ 1468.484854] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1468.491182] syz-executor.2: [ 1468.492982] 0 0 0 0 [ 1468.503652] Node 1 Normal free:26316kB min:53696kB low:67120kB high:80544kB active_anon:612kB inactive_anon:36112kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:392kB bounce:0kB free_pcp:568kB local_pcp:448kB free_cma:0kB [ 1468.507479] (null) [ 1468.539151] (null) [ 1468.541331] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1468.542187] page allocation failure: order:0 [ 1468.546536] CPU: 0 PID: 16716 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1468.548932] lowmem_reserve[]: [ 1468.550936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1468.567623] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1468.571263] Call Trace: [ 1468.571270] (null) [ 1468.578381] dump_stack+0x1b2/0x281 [ 1468.578395] warn_alloc.cold+0x96/0x1cc [ 1468.578406] ? zone_watermark_ok_safe+0x220/0x220 [ 1468.578415] ? usleep_range+0x130/0x130 [ 1468.578424] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1468.578437] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1468.578446] ? run_timer_softirq+0x5a0/0x5a0 [ 1468.578461] __alloc_pages_nodemask+0x2127/0x2720 [ 1468.578475] ? lock_acquire+0x170/0x3f0 [ 1468.589883] 0 [ 1468.590908] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1468.598814] Mem-Info: [ 1468.599889] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1468.604980] active_anon:14382 inactive_anon:33155 isolated_anon:0 [ 1468.604980] active_file:34 inactive_file:22 isolated_file:0 [ 1468.604980] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1468.604980] slab_reclaimable:12775 slab_unreclaimable:124899 [ 1468.604980] mapped:52225 shmem:33564 pagetables:799 bounce:0 [ 1468.604980] free:13828 free_pcp:172 free_cma:0 [ 1468.610117] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1468.610135] alloc_pages_current+0x155/0x260 [ 1468.610147] ion_page_pool_alloc+0x118/0x1b0 [ 1468.610156] ion_system_heap_allocate+0x133/0x8c0 [ 1468.610167] ? _raw_spin_unlock+0x29/0x40 [ 1468.610175] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1468.610184] ? ion_system_contig_heap_create+0x130/0x130 [ 1468.610194] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1468.610203] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1468.610215] ion_alloc+0x27a/0x810 [ 1468.623424] syz-executor.2 cpuset= [ 1468.625213] ? ion_dma_buf_release+0x40/0x40 [ 1468.630378] 0 [ 1468.632485] ? __might_fault+0x177/0x1b0 [ 1468.643974] / [ 1468.670468] ion_ioctl+0xea/0x1f0 [ 1468.685344] 0 [ 1468.689795] ? ion_query_heaps+0x360/0x360 [ 1468.694027] 0 [ 1468.698949] ? ion_query_heaps+0x360/0x360 [ 1468.698960] do_vfs_ioctl+0x75a/0xff0 [ 1468.698971] ? ioctl_preallocate+0x1a0/0x1a0 [ 1468.698980] ? lock_downgrade+0x740/0x740 [ 1468.698992] ? __fget+0x225/0x360 [ 1468.698999] ? do_vfs_ioctl+0xff0/0xff0 [ 1468.699010] ? security_file_ioctl+0x83/0xb0 [ 1468.699020] SyS_ioctl+0x7f/0xb0 [ 1468.699028] ? do_vfs_ioctl+0xff0/0xff0 [ 1468.699040] do_syscall_64+0x1d5/0x640 [ 1468.699055] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1468.699063] RIP: 0033:0x4665d9 [ 1468.699067] RSP: 002b:00007f5f77a6d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1468.699079] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1468.713209] Node 0 active_anon:56916kB inactive_anon:96508kB active_file:36kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:125712kB dirty:0kB writeback:0kB shmem:97888kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1468.714626] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1468.718451] Node 1 active_anon:612kB inactive_anon:36112kB active_file:100kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:83188kB dirty:0kB writeback:0kB shmem:36368kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1468.721800] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1468.721808] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1468.735217] 0 [ 1468.737315] R13: 00007ffe82aa5b1f R14: 00007f5f77a6d300 R15: 0000000000022000 [ 1468.742521] syz-executor.5 cpuset= [ 1468.745216] / [ 1468.755005] Node 0 [ 1468.761457] mems_allowed=0-1 [ 1468.761857] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1468.765388] CPU: 0 PID: 16749 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1468.765395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1468.765399] Call Trace: [ 1468.765421] dump_stack+0x1b2/0x281 [ 1468.778448] Node 0 [ 1468.781173] warn_alloc.cold+0x96/0x1cc [ 1468.785038] DMA: [ 1468.790234] ? zone_watermark_ok_safe+0x220/0x220 [ 1468.790255] __alloc_pages_nodemask+0x2127/0x2720 [ 1468.790265] ? lock_acquire+0x170/0x3f0 [ 1468.790276] ? lock_acquire+0x170/0x3f0 [ 1468.790291] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1468.790308] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1468.790320] ? __mutex_unlock_slowpath+0x75/0x770 [ 1468.802354] lowmem_reserve[]: [ 1468.808555] alloc_pages_current+0x155/0x260 [ 1468.808570] ion_page_pool_alloc+0x118/0x1b0 [ 1468.808578] ion_system_heap_allocate+0x133/0x8c0 [ 1468.808591] ? _raw_spin_unlock+0x29/0x40 [ 1468.808599] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1468.808607] ? ion_system_contig_heap_create+0x130/0x130 [ 1468.808616] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1468.808625] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1468.808635] ion_alloc+0x27a/0x810 [ 1468.846242] mems_allowed=0-1 [ 1468.871242] ? ion_dma_buf_release+0x40/0x40 [ 1468.871255] ? __might_fault+0x177/0x1b0 [ 1468.871265] ion_ioctl+0xea/0x1f0 [ 1468.871273] ? ion_query_heaps+0x360/0x360 [ 1468.871285] ? ion_query_heaps+0x360/0x360 [ 1468.871294] do_vfs_ioctl+0x75a/0xff0 [ 1468.871305] ? ioctl_preallocate+0x1a0/0x1a0 [ 1468.871315] ? lock_downgrade+0x740/0x740 [ 1468.871327] ? __fget+0x225/0x360 [ 1468.871336] ? do_vfs_ioctl+0xff0/0xff0 [ 1468.871347] ? security_file_ioctl+0x83/0xb0 [ 1468.871362] SyS_ioctl+0x7f/0xb0 [ 1468.887602] 83*4kB [ 1468.887689] ? do_vfs_ioctl+0xff0/0xff0 [ 1468.894941] (U) [ 1468.898472] do_syscall_64+0x1d5/0x640 [ 1468.898486] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1468.898494] RIP: 0033:0x4665d9 [ 1468.898499] RSP: 002b:00007f7465960188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1468.898508] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 00000000004665d9 [ 1468.898513] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1468.898517] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1468.898522] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1468.898526] R13: 00007ffc7a8155ff R14: 00007f7465960300 R15: 0000000000022000 [ 1468.907745] warn_alloc_show_mem: 2 callbacks suppressed [ 1468.907748] Mem-Info: [ 1468.935159] 0 [ 1468.939231] active_anon:14383 inactive_anon:33155 isolated_anon:0 [ 1468.939231] active_file:33 inactive_file:1 isolated_file:0 [ 1468.939231] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1468.939231] slab_reclaimable:12775 slab_unreclaimable:124899 [ 1468.939231] mapped:52226 shmem:33564 pagetables:799 bounce:0 [ 1468.939231] free:13742 free_pcp:178 free_cma:0 [ 1468.939247] Node 0 active_anon:56916kB inactive_anon:96508kB active_file:88kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:125712kB dirty:0kB writeback:0kB shmem:97888kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1468.961167] CPU: 1 PID: 16747 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1468.973734] Node 1 active_anon:616kB inactive_anon:36112kB active_file:44kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:83192kB dirty:0kB writeback:0kB shmem:36368kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1468.976696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1468.976700] Call Trace: [ 1468.976717] dump_stack+0x1b2/0x281 [ 1468.976730] warn_alloc.cold+0x96/0x1cc [ 1468.976741] ? zone_watermark_ok_safe+0x220/0x220 [ 1468.976750] ? usleep_range+0x130/0x130 [ 1468.976760] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1468.980748] Node 0 [ 1468.985555] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1468.985565] ? run_timer_softirq+0x5a0/0x5a0 [ 1468.985581] __alloc_pages_nodemask+0x2127/0x2720 [ 1468.991018] DMA free:10980kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1468.995846] ? lock_acquire+0x170/0x3f0 [ 1468.995861] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1468.995872] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1468.998955] lowmem_reserve[]: [ 1469.003358] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1469.007762] 0 [ 1469.012600] alloc_pages_current+0x155/0x260 [ 1469.016756] 2717 [ 1469.021667] ion_page_pool_alloc+0x118/0x1b0 [ 1469.027293] 2718 [ 1469.032410] ion_system_heap_allocate+0x133/0x8c0 [ 1469.045299] 2718 [ 1469.048271] ? _raw_spin_unlock+0x29/0x40 [ 1469.052306] 2718 [ 1469.055743] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1469.055752] ? ion_system_contig_heap_create+0x130/0x130 [ 1469.055761] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1469.055775] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1469.076548] ion_alloc+0x27a/0x810 [ 1469.080068] Node 0 [ 1469.084032] ? ion_dma_buf_release+0x40/0x40 [ 1469.105336] DMA32 free:33372kB min:36200kB low:45248kB high:54296kB active_anon:56916kB inactive_anon:96508kB active_file:88kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7392kB pagetables:2804kB bounce:0kB free_pcp:144kB local_pcp:620kB free_cma:0kB [ 1469.109200] ? __might_fault+0x177/0x1b0 [ 1469.112397] lowmem_reserve[]: [ 1469.120199] ion_ioctl+0xea/0x1f0 [ 1469.120208] ? ion_query_heaps+0x360/0x360 [ 1469.120219] ? ion_query_heaps+0x360/0x360 [ 1469.120230] do_vfs_ioctl+0x75a/0xff0 [ 1469.145305] 0 [ 1469.149645] ? ioctl_preallocate+0x1a0/0x1a0 [ 1469.175311] 0 [ 1469.199817] ? lock_downgrade+0x740/0x740 [ 1469.199831] ? __fget+0x225/0x360 [ 1469.199840] ? do_vfs_ioctl+0xff0/0xff0 [ 1469.199854] ? security_file_ioctl+0x83/0xb0 [ 1469.275305] 0 [ 1469.278000] SyS_ioctl+0x7f/0xb0 [ 1469.281955] 0 [ 1469.286786] ? do_vfs_ioctl+0xff0/0xff0 [ 1469.286798] do_syscall_64+0x1d5/0x640 [ 1469.286811] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1469.286825] RIP: 0033:0x4665d9 [ 1469.305287] 0 [ 1469.307659] RSP: 002b:00007f3d1f881188 EFLAGS: 00000246 [ 1469.338292] ORIG_RAX: 0000000000000010 [ 1469.338298] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1469.338303] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1469.338307] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1469.338312] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1469.338316] R13: 00007ffdbbfa296f R14: 00007f3d1f881300 R15: 0000000000022000 [ 1469.355835] 2717 [ 1469.508855] Node 0 [ 1469.525275] 7*8kB [ 1469.546177] syz-executor.5: [ 1469.555051] (UE) [ 1469.578466] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1469.605332] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1469.611189] 2*16kB (UE) 2*32kB (UE) 2*64kB (UE) 5*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10980kB [ 1469.661939] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1469.666973] Node 0 DMA32: 606*4kB (UME) 307*8kB (UME) 315*16kB (UME) 464*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24768kB [ 1469.673573] CPU: 0 PID: 16746 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1469.688910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1469.695598] Node 0 [ 1469.698468] Call Trace: [ 1469.698477] Normal: [ 1469.700740] dump_stack+0x1b2/0x281 [ 1469.703421] 0*4kB [ 1469.705744] warn_alloc.cold+0x96/0x1cc [ 1469.705755] ? zone_watermark_ok_safe+0x220/0x220 [ 1469.705774] __alloc_pages_nodemask+0x2127/0x2720 [ 1469.705785] ? _raw_spin_unlock_irq+0x24/0x80 [ 1469.705803] ? lock_acquire+0x170/0x3f0 [ 1469.705817] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1469.712469] 0*8kB [ 1469.716375] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1469.716387] ? __mutex_unlock_slowpath+0x75/0x770 [ 1469.716401] alloc_pages_current+0x155/0x260 [ 1469.716414] ion_page_pool_alloc+0x118/0x1b0 [ 1469.716425] ion_system_heap_allocate+0x133/0x8c0 [ 1469.721274] 0*16kB [ 1469.726099] ? _raw_spin_unlock+0x29/0x40 [ 1469.726108] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1469.726117] ? ion_system_contig_heap_create+0x130/0x130 [ 1469.726127] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1469.726137] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1469.726145] ion_alloc+0x27a/0x810 [ 1469.726156] ? ion_dma_buf_release+0x40/0x40 [ 1469.726167] ? __might_fault+0x177/0x1b0 [ 1469.726179] ion_ioctl+0xea/0x1f0 [ 1469.732498] 0*32kB [ 1469.734745] ? ion_query_heaps+0x360/0x360 [ 1469.765084] 0*64kB [ 1469.765726] ? ion_query_heaps+0x360/0x360 [ 1469.765738] do_vfs_ioctl+0x75a/0xff0 [ 1469.765750] ? ioctl_preallocate+0x1a0/0x1a0 [ 1469.765763] ? lock_downgrade+0x740/0x740 [ 1469.767994] 0*128kB [ 1469.772135] ? __fget+0x225/0x360 [ 1469.814359] 0*256kB 0*512kB [ 1469.816595] ? do_vfs_ioctl+0xff0/0xff0 [ 1469.816607] ? security_file_ioctl+0x83/0xb0 [ 1469.816619] SyS_ioctl+0x7f/0xb0 [ 1469.820855] 0*1024kB [ 1469.824875] ? do_vfs_ioctl+0xff0/0xff0 [ 1469.854368] 2718 [ 1469.856428] do_syscall_64+0x1d5/0x640 [ 1469.856445] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1469.856453] RIP: 0033:0x4665d9 [ 1469.856458] RSP: 002b:00007f7465981188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1469.856467] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1469.856472] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1469.856477] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1469.856482] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1469.856487] R13: 00007ffc7a8155ff R14: 00007f7465981300 R15: 0000000000022000 [ 1469.878804] lowmem_reserve[]: [ 1469.889117] 0*2048kB [ 1469.920967] 0 0 0 0 0 [ 1469.939269] 2718 [ 1469.941388] Node 1 [ 1469.941394] 2718 [ 1469.943496] Normal free:53416kB min:53696kB low:67120kB high:80544kB active_anon:616kB inactive_anon:36112kB active_file:160kB inactive_file:152kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:392kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1469.945762] Node 0 DMA32 free:24816kB min:36200kB low:45248kB high:54296kB active_anon:56916kB inactive_anon:96508kB active_file:0kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7392kB pagetables:2804kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1469.945779] lowmem_reserve[]: 0 0 0 0 0 [ 1469.945797] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1469.951679] lowmem_reserve[]: [ 1469.980522] 0*4096kB [ 1470.006057] 0 0 [ 1470.020749] = 0kB [ 1470.035604] 0 0 0 [ 1470.035618] Node 0 DMA: 4*4kB (U) 1*8kB (E) 13*16kB (UE) 5*32kB (UE) 4*64kB (UE) 5*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11016kB [ 1470.049547] lowmem_reserve[]: [ 1470.062592] Node 0 DMA32: 606*4kB (UME) 307*8kB (UME) 315*16kB (UME) 464*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24768kB [ 1470.076822] Node 1 Normal: 14*4kB (UME) 4*8kB (UM) 437*16kB (UME) 1448*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB [ 1470.079989] Node 0 [ 1470.080000] 0*1024kB [ 1470.090592] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1470.090635] Node 1 Normal: 14*4kB (UME) 4*8kB (UM) 437*16kB (UME) 1448*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB [ 1470.103838] 0 [ 1470.105627] warn_alloc_show_mem: 2 callbacks suppressed [ 1470.105630] Mem-Info: [ 1470.128454] = 53416kB [ 1470.128992] 0*2048kB [ 1470.130945] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1470.130947] 0*4096kB = 53416kB [ 1470.133344] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1470.152747] 0 0 0 0 [ 1470.154144] active_anon:14383 inactive_anon:33155 isolated_anon:0 [ 1470.154144] active_file:0 inactive_file:3 isolated_file:0 [ 1470.154144] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1470.154144] slab_reclaimable:12775 slab_unreclaimable:124891 [ 1470.154144] mapped:52214 shmem:33564 pagetables:799 bounce:0 [ 1470.154144] free:22312 free_pcp:30 free_cma:0 [ 1470.159304] Node 1 [ 1470.189552] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1470.189560] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1470.189564] 33624 total pagecache pages [ 1470.189574] 0 pages in swap cache [ 1470.189579] Swap cache stats: add 0, delete 0, find 0/0 [ 1470.189583] Free swap = 0kB [ 1470.189586] Total swap = 0kB [ 1470.189592] 2097051 pages RAM [ 1470.189595] 0 pages HighMem/MovableOnly [ 1470.189598] 363849 pages reserved [ 1470.189602] 0 pages cma reserved [ 1470.225306] Node 0 active_anon:56916kB inactive_anon:96508kB active_file:0kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:125640kB dirty:0kB writeback:0kB shmem:97888kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1470.236654] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1470.245093] Node 1 active_anon:616kB inactive_anon:36112kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:83216kB dirty:0kB writeback:0kB shmem:36368kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1470.284623] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1470.328707] Normal free:26756kB min:53696kB low:67120kB high:80544kB active_anon:616kB inactive_anon:36112kB active_file:12kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:392kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1470.351601] Node 0 [ 1470.356754] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1470.371146] DMA free:11060kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1470.381839] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1470.397547] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1470.430869] CPU: 0 PID: 16749 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1470.437503] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1470.438964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1470.455840] Call Trace: [ 1470.458443] dump_stack+0x1b2/0x281 [ 1470.462089] warn_alloc.cold+0x96/0x1cc [ 1470.465841] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1470.466068] ? zone_watermark_ok_safe+0x220/0x220 [ 1470.474932] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1470.479599] ? usleep_range+0x130/0x130 [ 1470.479608] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1470.479620] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1470.479629] ? run_timer_softirq+0x5a0/0x5a0 [ 1470.479649] __alloc_pages_nodemask+0x2127/0x2720 [ 1470.479663] ? lock_acquire+0x170/0x3f0 [ 1470.489184] lowmem_reserve[]: [ 1470.492811] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1470.492821] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1470.492836] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1470.492854] alloc_pages_current+0x155/0x260 [ 1470.492863] ion_page_pool_alloc+0x118/0x1b0 [ 1470.492872] ion_system_heap_allocate+0x133/0x8c0 [ 1470.492883] ? _raw_spin_unlock+0x29/0x40 [ 1470.518614] 34697 total pagecache pages [ 1470.520460] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1470.520470] ? ion_system_contig_heap_create+0x130/0x130 [ 1470.520481] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1470.520493] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1470.520504] ion_alloc+0x27a/0x810 [ 1470.520517] ? ion_dma_buf_release+0x40/0x40 [ 1470.520530] ? __might_fault+0x177/0x1b0 [ 1470.520543] ion_ioctl+0xea/0x1f0 [ 1470.520551] ? ion_query_heaps+0x360/0x360 [ 1470.520563] ? ion_query_heaps+0x360/0x360 [ 1470.520574] do_vfs_ioctl+0x75a/0xff0 [ 1470.520585] ? ioctl_preallocate+0x1a0/0x1a0 [ 1470.520595] ? lock_downgrade+0x740/0x740 [ 1470.520608] ? __fget+0x225/0x360 [ 1470.520618] ? do_vfs_ioctl+0xff0/0xff0 [ 1470.520628] ? security_file_ioctl+0x83/0xb0 [ 1470.520644] SyS_ioctl+0x7f/0xb0 [ 1470.520651] ? do_vfs_ioctl+0xff0/0xff0 [ 1470.520662] do_syscall_64+0x1d5/0x640 [ 1470.525840] 0 [ 1470.530485] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1470.530493] RIP: 0033:0x4665d9 [ 1470.530497] RSP: 002b:00007f7465960188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1470.530506] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 00000000004665d9 [ 1470.530510] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1470.530515] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1470.530519] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1470.530524] R13: 00007ffc7a8155ff R14: 00007f7465960300 R15: 0000000000022000 [ 1470.548316] lowmem_reserve[]: [ 1470.554280] systemd[1]: Stopped Journal Service. [ 1470.554481] 0 [ 1470.565771] 0 pages in swap cache [ 1470.598766] 2717 [ 1470.637741] systemd[1]: Starting Journal Service... [ 1470.696419] 2718 [ 1470.700422] 0 [ 1470.708252] 2718 [ 1470.735261] 0 0 0 [ 1470.739632] Node 0 DMA: 1*4kB (U) 2*8kB (UE) 2*16kB (UE) 2*32kB (UE) 7*64kB (UE) 1*128kB (E) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 11444kB [ 1470.745190] 2718 [ 1470.775201] Swap cache stats: add 0, delete 0, find 0/0 [ 1470.780614] Free swap = 0kB [ 1470.781060] Node 0 DMA32 free:370392kB min:36200kB low:45248kB high:54296kB active_anon:56816kB inactive_anon:96508kB active_file:396kB inactive_file:2120kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7424kB pagetables:2804kB bounce:0kB free_pcp:308kB local_pcp:184kB free_cma:0kB [ 1470.784408] Total swap = 0kB [ 1470.825214] Node 0 DMA32: 99*4kB (ME) 174*8kB (ME) 72*16kB (UME) 383*32kB (UME) 3938*64kB (UME) 592*128kB (UM) 60*256kB (UM) 31*512kB (U) 3*1024kB (U) 0*2048kB 0*4096kB = 377308kB [ 1470.855792] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1470.885197] Node 1 Normal: 4*4kB (ME) 0*8kB 5*16kB (UE) 809*32kB (UE) 5824*64kB (UM) 1502*128kB (UM) 148*256kB (UM) 73*512kB (UM) 61*1024kB (U) 0*2048kB 0*4096kB = 728704kB [ 1470.895177] lowmem_reserve[]: 0 0 0 0 0 [ 1470.901320] 2097051 pages RAM [ 1470.911693] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1470.915208] 0 pages HighMem/MovableOnly [ 1470.947697] lowmem_reserve[]: 0 0 0 0 0 [ 1470.955188] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1470.957917] Node 1 Normal free:847616kB min:53696kB low:67120kB high:80544kB active_anon:568kB inactive_anon:36112kB active_file:1916kB inactive_file:1472kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:260kB bounce:0kB free_pcp:612kB local_pcp:352kB free_cma:0kB [ 1470.964771] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1470.994589] lowmem_reserve[]: 0 0 0 0 0 [ 1471.008619] Node 0 DMA: 1*4kB (U) 2*8kB (UE) 2*16kB (UE) 2*32kB (UE) 7*64kB (UE) 1*128kB (E) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 11444kB [ 1471.025629] Node 0 DMA32: 99*4kB (UE) 96*8kB (ME) 39*16kB (ME) 353*32kB (UE) 3930*64kB (UME) 608*128kB (UM) 60*256kB (UM) 31*512kB (U) 3*1024kB (U) 0*2048kB 0*4096kB = 376732kB [ 1471.044312] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1471.046438] 363849 pages reserved [ 1471.057241] Node 1 Normal: 4*4kB (ME) 0*8kB 5*16kB (UE) 809*32kB (UE) 6356*64kB (UM) 2329*128kB (UM) 311*256kB (UM) 130*512kB (UM) 73*1024kB (U) 0*2048kB 0*4096kB = 951808kB [ 1471.077648] 0 pages cma reserved [ 1471.100877] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1471.121554] systemd-journald[16761]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1471.126815] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1471.145178] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1471.165336] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1471.174303] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1471.189101] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1471.225855] 37702 total pagecache pages [ 1471.228858] 37702 total pagecache pages [ 1471.229864] 0 pages in swap cache [ 1471.233828] 0 pages in swap cache [ 1471.255795] Swap cache stats: add 0, delete 0, find 0/0 [ 1471.261263] Free swap = 0kB [ 1471.261583] Swap cache stats: add 0, delete 0, find 0/0 [ 1471.264329] Total swap = 0kB [ 1471.274405] systemd[1]: Started System Logging Service. [ 1471.305286] Free swap = 0kB [ 1471.308340] Total swap = 0kB [ 1471.311353] 2097051 pages RAM [ 1471.314459] 0 pages HighMem/MovableOnly [ 1471.315187] 2097051 pages RAM [ 1471.321627] 0 pages HighMem/MovableOnly [ 1471.329499] 363849 pages reserved [ 1471.333051] 0 pages cma reserved [ 1471.336559] Out of memory (oom_kill_allocating_task): Kill process 23230 (syz-fuzzer) score 0 or sacrifice child [ 1471.352314] 363849 pages reserved [ 1471.359017] Killed process 15508 (syz-executor.1) total-vm:84924kB, anon-rss:68kB, file-rss:0kB, shmem-rss:0kB [ 1471.365276] 0 pages cma reserved [ 1471.424563] oom_reaper: reaped process 15508 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1472.454495] oom_reaper: reaped process 16723 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1472.493317] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1472.519062] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1472.535062] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1472.540303] CPU: 1 PID: 16720 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1472.548203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1472.557635] Call Trace: [ 1472.560223] dump_stack+0x1b2/0x281 [ 1472.562374] in:imklog cpuset=/ [ 1472.563845] warn_alloc.cold+0x96/0x1cc [ 1472.563857] ? zone_watermark_ok_safe+0x220/0x220 [ 1472.567080] mems_allowed=0-1 [ 1472.571019] __alloc_pages_nodemask+0x2127/0x2720 [ 1472.583745] ? lock_acquire+0x170/0x3f0 [ 1472.587717] ? lock_acquire+0x170/0x3f0 [ 1472.591679] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1472.596602] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1472.602059] ? __mutex_unlock_slowpath+0x75/0x770 [ 1472.606889] ? __mutex_lock+0x2/0x1310 [ 1472.611032] alloc_pages_current+0x155/0x260 [ 1472.615431] ion_page_pool_alloc+0x118/0x1b0 [ 1472.619839] ion_system_heap_allocate+0x133/0x8c0 [ 1472.624681] ? _raw_spin_unlock+0x29/0x40 [ 1472.628819] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1472.633823] ? ion_system_contig_heap_create+0x130/0x130 [ 1472.639359] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1472.644373] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1472.649210] ion_alloc+0x27a/0x810 [ 1472.652743] ? ion_dma_buf_release+0x40/0x40 [ 1472.657138] ? __might_fault+0x177/0x1b0 [ 1472.661185] ion_ioctl+0xea/0x1f0 [ 1472.664618] ? ion_query_heaps+0x360/0x360 [ 1472.669022] ? ion_query_heaps+0x360/0x360 [ 1472.673240] do_vfs_ioctl+0x75a/0xff0 [ 1472.677022] ? ioctl_preallocate+0x1a0/0x1a0 [ 1472.681410] ? lock_downgrade+0x740/0x740 [ 1472.685543] ? __fget+0x225/0x360 [ 1472.688990] ? do_vfs_ioctl+0xff0/0xff0 [ 1472.692947] ? security_file_ioctl+0x83/0xb0 [ 1472.697375] SyS_ioctl+0x7f/0xb0 [ 1472.700730] ? do_vfs_ioctl+0xff0/0xff0 [ 1472.704695] do_syscall_64+0x1d5/0x640 [ 1472.708664] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1472.713836] RIP: 0033:0x4665d9 [ 1472.717035] RSP: 002b:00007f6d56c88188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1472.724726] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1472.731975] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1472.739224] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1472.746504] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1472.753754] R13: 00007ffda15d7cdf R14: 00007f6d56c88300 R15: 0000000000022000 [ 1472.761018] CPU: 0 PID: 16763 Comm: in:imklog Not tainted 4.14.232-syzkaller #0 [ 1472.768509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1472.777866] Call Trace: [ 1472.780461] dump_stack+0x1b2/0x281 [ 1472.784085] dump_header+0x178/0x82f [ 1472.787795] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1472.792901] ? ___ratelimit+0x2cd/0x530 [ 1472.796894] oom_kill_process.cold+0x10/0xa40 [ 1472.801399] out_of_memory+0xe3e/0x1190 [ 1472.805377] ? oom_killer_disable+0x1c0/0x1c0 [ 1472.809866] ? mutex_trylock+0x152/0x1a0 [ 1472.813923] __alloc_pages_nodemask+0x23e1/0x2720 [ 1472.818779] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1472.823637] alloc_pages_current+0x155/0x260 [ 1472.828045] filemap_fault+0x11a1/0x1ad0 [ 1472.832109] ext4_filemap_fault+0x84/0xb0 [ 1472.836256] __do_fault+0xfa/0x380 [ 1472.838584] warn_alloc_show_mem: 2 callbacks suppressed [ 1472.838587] Mem-Info: [ 1472.839795] __handle_mm_fault+0x2497/0x4620 [ 1472.845353] syz-executor.5: [ 1472.847681] ? vm_insert_page+0x7c0/0x7c0 [ 1472.852064] page allocation failure: order:0 [ 1472.855069] ? lock_downgrade+0x740/0x740 [ 1472.855082] ? mark_held_locks+0xa6/0xf0 [ 1472.855091] handle_mm_fault+0x455/0x9c0 [ 1472.855102] __do_page_fault+0x549/0xad0 [ 1472.855113] ? spurious_fault+0x640/0x640 [ 1472.855126] ? do_page_fault+0x60/0x500 [ 1472.855134] ? page_fault+0x2f/0x50 [ 1472.855144] page_fault+0x45/0x50 [ 1472.860542] syz-executor.1: [ 1472.863677] RIP: 1fa0:0x1f9f [ 1472.870365] active_anon:14768 inactive_anon:35188 isolated_anon:0 [ 1472.870365] active_file:76 inactive_file:14 isolated_file:0 [ 1472.870365] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1472.870365] slab_reclaimable:12777 slab_unreclaimable:125218 [ 1472.870365] mapped:43959 shmem:35612 pagetables:723 bounce:0 [ 1472.870365] free:13862 free_pcp:30 free_cma:0 [ 1472.871862] RSP: 0000:000055c31ced89d0 EFLAGS: 7f6835a73da0 [ 1472.875949] page allocation failure: order:0 [ 1472.890857] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1472.897020] Node 0 active_anon:58516kB inactive_anon:104640kB active_file:104kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:92532kB dirty:0kB writeback:0kB shmem:106080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1472.903596] (null) [ 1472.938373] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1472.945993] syz-executor.5 cpuset= [ 1472.952200] (null) [ 1472.986393] / [ 1472.992781] Node 1 active_anon:556kB inactive_anon:36112kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:83188kB dirty:0kB writeback:0kB shmem:36368kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1473.000871] mems_allowed=0-1 [ 1473.028701] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1473.032916] CPU: 0 PID: 16746 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1473.041693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1473.048573] Node 0 [ 1473.051042] Call Trace: [ 1473.051054] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1473.051059] lowmem_reserve[]: [ 1473.053396] dump_stack+0x1b2/0x281 [ 1473.068572] 0 [ 1473.083531] warn_alloc.cold+0x96/0x1cc [ 1473.083543] ? zone_watermark_ok_safe+0x220/0x220 [ 1473.083552] ? usleep_range+0x130/0x130 [ 1473.083563] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1473.108559] 2717 2718 [ 1473.110167] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1473.110173] 2718 [ 1473.112649] ? run_timer_softirq+0x5a0/0x5a0 [ 1473.124092] __alloc_pages_nodemask+0x2127/0x2720 [ 1473.128534] 2718 [ 1473.128929] ? lock_acquire+0x170/0x3f0 [ 1473.131051] Node 0 [ 1473.135010] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1473.135018] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1473.135035] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1473.135048] ? retint_kernel+0x2d/0x2d [ 1473.148542] DMA32 free:17924kB min:36200kB low:45248kB high:54296kB active_anon:58456kB inactive_anon:104640kB active_file:60kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7392kB pagetables:2632kB bounce:0kB free_pcp:124kB local_pcp:124kB free_cma:0kB [ 1473.151989] alloc_pages_current+0x155/0x260 [ 1473.168564] lowmem_reserve[]: [ 1473.184340] ion_page_pool_alloc+0x118/0x1b0 [ 1473.184350] ion_system_heap_allocate+0x133/0x8c0 [ 1473.184361] ? _raw_spin_unlock+0x29/0x40 [ 1473.184371] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1473.210374] ? ion_system_contig_heap_create+0x130/0x130 [ 1473.214998] 0 [ 1473.215830] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1473.215835] 0 [ 1473.217620] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1473.222612] 0 [ 1473.224397] ion_alloc+0x27a/0x810 [ 1473.234529] ? ion_dma_buf_release+0x40/0x40 [ 1473.238932] ? __might_fault+0x177/0x1b0 [ 1473.243038] ion_ioctl+0xea/0x1f0 [ 1473.246489] ? ion_query_heaps+0x360/0x360 [ 1473.250714] ? ion_query_heaps+0x360/0x360 [ 1473.254931] do_vfs_ioctl+0x75a/0xff0 [ 1473.255008] 0 0 [ 1473.258715] ? ioctl_preallocate+0x1a0/0x1a0 [ 1473.260675] ? lock_downgrade+0x740/0x740 [ 1473.269202] ? __fget+0x225/0x360 [ 1473.272636] ? do_vfs_ioctl+0xff0/0xff0 [ 1473.275004] Node 0 [ 1473.276596] ? security_file_ioctl+0x83/0xb0 [ 1473.276605] SyS_ioctl+0x7f/0xb0 [ 1473.278832] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1473.283216] ? do_vfs_ioctl+0xff0/0xff0 [ 1473.308508] lowmem_reserve[]: [ 1473.311449] do_syscall_64+0x1d5/0x640 [ 1473.322570] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1473.327751] RIP: 0033:0x4665d9 [ 1473.328486] 0 [ 1473.330931] RSP: 002b:00007f7465981188 EFLAGS: 00000246 [ 1473.330937] 0 [ 1473.332718] ORIG_RAX: 0000000000000010 [ 1473.343900] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1473.348539] 0 [ 1473.351155] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1473.351161] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1473.352969] 0 [ 1473.360235] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1473.360240] R13: 00007ffc7a8155ff R14: 00007f7465981300 R15: 0000000000022000 [ 1473.365963] Mem-Info: [ 1473.371462] CPU: 1 PID: 16723 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1473.377218] active_anon:14753 inactive_anon:35188 isolated_anon:0 [ 1473.377218] active_file:16 inactive_file:17 isolated_file:0 [ 1473.377218] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1473.377218] slab_reclaimable:12777 slab_unreclaimable:125214 [ 1473.377218] mapped:43914 shmem:35612 pagetables:723 bounce:0 [ 1473.377218] free:14132 free_pcp:31 free_cma:0 [ 1473.384420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1473.384425] Call Trace: [ 1473.386865] Node 0 active_anon:58456kB inactive_anon:104640kB active_file:60kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:92468kB dirty:0kB writeback:0kB shmem:106080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1473.394711] dump_stack+0x1b2/0x281 [ 1473.430028] Node 1 active_anon:556kB inactive_anon:36112kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:83188kB dirty:0kB writeback:0kB shmem:36368kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1473.439346] warn_alloc.cold+0x96/0x1cc [ 1473.439359] ? zone_watermark_ok_safe+0x220/0x220 [ 1473.441921] Node 0 [ 1473.469657] ? usleep_range+0x130/0x130 [ 1473.469666] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1473.469680] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1473.473297] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1473.500163] ? run_timer_softirq+0x5a0/0x5a0 [ 1473.500180] __alloc_pages_nodemask+0x2127/0x2720 [ 1473.500195] ? lock_acquire+0x170/0x3f0 [ 1473.504145] lowmem_reserve[]: [ 1473.508991] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1473.509000] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1473.509014] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1473.511248] 0 [ 1473.515229] alloc_pages_current+0x155/0x260 [ 1473.515240] ion_page_pool_alloc+0x118/0x1b0 [ 1473.520331] 2717 [ 1473.525516] ion_system_heap_allocate+0x133/0x8c0 [ 1473.525526] ? ion_alloc+0x187/0x810 [ 1473.525537] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1473.551045] 2718 [ 1473.555427] ? ion_system_contig_heap_create+0x130/0x130 [ 1473.555436] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1473.555447] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1473.560264] 2718 [ 1473.564221] ion_alloc+0x204/0x810 [ 1473.567320] 2718 [ 1473.572220] ? ion_dma_buf_release+0x40/0x40 [ 1473.582129] ? __might_fault+0x177/0x1b0 [ 1473.583912] Node 0 [ 1473.588316] ion_ioctl+0xea/0x1f0 [ 1473.588325] ? ion_query_heaps+0x360/0x360 [ 1473.588337] ? ion_query_heaps+0x360/0x360 [ 1473.592730] DMA32 free:17924kB min:36200kB low:45248kB high:54296kB active_anon:58456kB inactive_anon:104640kB active_file:60kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7392kB pagetables:2632kB bounce:0kB free_pcp:124kB local_pcp:0kB free_cma:0kB [ 1473.594779] do_vfs_ioctl+0x75a/0xff0 [ 1473.599619] lowmem_reserve[]: [ 1473.603308] ? ioctl_preallocate+0x1a0/0x1a0 [ 1473.608749] 0 [ 1473.610784] ? lock_downgrade+0x740/0x740 [ 1473.616237] 0 [ 1473.621268] ? __fget+0x225/0x360 [ 1473.626102] 0 [ 1473.628144] ? do_vfs_ioctl+0xff0/0xff0 [ 1473.631682] 0 [ 1473.633741] ? security_file_ioctl+0x83/0xb0 [ 1473.638139] 0 [ 1473.642186] SyS_ioctl+0x7f/0xb0 [ 1473.647843] ? do_vfs_ioctl+0xff0/0xff0 [ 1473.647855] do_syscall_64+0x1d5/0x640 [ 1473.647870] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1473.652079] Node 0 [ 1473.656314] RIP: 0033:0x4665d9 [ 1473.656318] RSP: 002b:00007f088674a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1473.656328] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1473.656336] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1473.684737] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1473.688450] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1473.688455] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1473.688460] R13: 00007fff2a06071f R14: 00007f088674a300 R15: 0000000000022000 [ 1473.692700] 0 [ 1473.715501] lowmem_reserve[]: [ 1473.798782] 0 [ 1473.864985] Node 1 Normal free:236468kB min:53696kB low:67120kB high:80544kB active_anon:556kB inactive_anon:36112kB active_file:4kB inactive_file:1504kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:260kB bounce:0kB free_pcp:144kB local_pcp:104kB free_cma:0kB [ 1473.868420] 0 [ 1473.935053] lowmem_reserve[]: 0 0 0 0 0 [ 1473.941015] Node 0 DMA: 0*4kB 2*8kB (UE) 2*16kB (UE) 3*32kB (UE) 14*64kB (UE) 4*128kB (UE) 3*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 12048kB [ 1473.968838] 0 0 0 [ 1473.971046] Node 1 Normal free:401268kB min:53696kB low:67120kB high:80544kB active_anon:556kB inactive_anon:36112kB active_file:8kB inactive_file:1588kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:260kB bounce:0kB free_pcp:144kB local_pcp:40kB free_cma:0kB [ 1473.984978] Node 0 [ 1474.022769] lowmem_reserve[]: [ 1474.025665] DMA32: 128*4kB (UME) 423*8kB (UME) 86*16kB (UME) 39*32kB (UME) 1630*64kB (UME) 145*128kB (UM) 13*256kB (UM) 16*512kB (UM) 14*1024kB (U) 0*2048kB 0*4096kB = 155256kB [ 1474.034954] 0 0 0 0 0 [ 1474.064969] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1474.068385] Node 0 DMA: 0*4kB 2*8kB (UE) 2*16kB (UE) 3*32kB (UE) 11*64kB (UE) 5*128kB (UE) 3*256kB (UE) 2*512kB (UE) 3*1024kB (UE) 3*2048kB (UME) 0*4096kB = 12496kB [ 1474.094980] Node 1 Normal: 7*4kB (UME) 13*8kB (UM) 7*16kB (UE) 2*32kB (UE) 3659*64kB (UME) 250*128kB (UME) 102*256kB (UM) 67*512kB (UM) 184*1024kB (U) 21*2048kB (UM) 1*4096kB (U) = 562420kB [ 1474.112371] Node 0 DMA32: 263*4kB (UME) 1547*8kB (UME) 106*16kB (UME) 43*32kB (UME) 2065*64kB (UME) 217*128kB (UM) 16*256kB (UM) 16*512kB (UM) 14*1024kB (U) 0*2048kB 0*4096kB = 203060kB [ 1474.112441] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB [ 1474.144973] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1474.158413] 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1474.169947] Node 1 Normal: 7*4kB (UME) 13*8kB (UM) 7*16kB (UE) 2*32kB (UE) 3659*64kB (UME) 250*128kB (UME) 102*256kB (UM) 67*512kB (UM) 184*1024kB (U) 21*2048kB (UM) 1*4096kB (U) = 562420kB [ 1474.184965] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1474.190659] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1474.209669] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1474.218443] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1474.225260] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1474.230771] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1474.244955] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1474.253558] 36539 total pagecache pages [ 1474.268657] 36539 total pagecache pages [ 1474.272921] 0 pages in swap cache [ 1474.274993] 0 pages in swap cache [ 1474.276408] Swap cache stats: add 0, delete 0, find 0/0 [ 1474.279815] Swap cache stats: add 0, delete 0, find 0/0 [ 1474.304950] Free swap = 0kB [ 1474.308097] Total swap = 0kB [ 1474.308830] Free swap = 0kB [ 1474.311138] 2097051 pages RAM [ 1474.314265] Total swap = 0kB [ 1474.321062] 2097051 pages RAM [ 1474.324194] 0 pages HighMem/MovableOnly [ 1474.328326] 0 pages HighMem/MovableOnly [ 1474.332380] 363849 pages reserved [ 1474.345515] 0 pages cma reserved [ 1474.348673] 363849 pages reserved [ 1474.352359] 0 pages cma reserved [ 1474.355795] Out of memory (oom_kill_allocating_task): Kill process 16763 (in:imklog) score 0 or sacrifice child [ 1474.370144] Killed process 16759 (rsyslogd) total-vm:254332kB, anon-rss:936kB, file-rss:0kB, shmem-rss:0kB [ 1474.380588] warn_alloc_show_mem: 1 callbacks suppressed [ 1474.380591] Mem-Info: [ 1474.392318] active_anon:14753 inactive_anon:35188 isolated_anon:0 [ 1474.392318] active_file:17 inactive_file:898 isolated_file:0 [ 1474.392318] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1474.392318] slab_reclaimable:12777 slab_unreclaimable:126363 [ 1474.392318] mapped:44554 shmem:35612 pagetables:723 bounce:0 [ 1474.392318] free:233728 free_pcp:520 free_cma:0 [ 1474.434451] oom_reaper: reaped process 16759 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1474.453203] Node 0 active_anon:57056kB inactive_anon:104640kB active_file:160kB inactive_file:2804kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:94624kB dirty:0kB writeback:0kB shmem:106080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1474.496636] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 1474.535000] Node 1 active_anon:556kB inactive_anon:36112kB active_file:8kB inactive_file:1588kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:84192kB dirty:0kB writeback:0kB shmem:36368kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1474.569430] systemd[1]: rsyslog.service: Unit entered failed state. [ 1474.591196] systemd[1]: rsyslog.service: Failed with result 'signal'. [ 1474.609221] systemd[1]: Started Journal Service. [ 1474.623280] Node 0 DMA free:12560kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1474.654247] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1474.660065] Node 0 DMA32 free:303656kB min:36200kB low:45248kB high:54296kB active_anon:57156kB inactive_anon:104640kB active_file:1660kB inactive_file:6176kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7264kB pagetables:2484kB bounce:0kB free_pcp:1072kB local_pcp:684kB free_cma:0kB [ 1474.694890] lowmem_reserve[]: 0 0 0 0 0 [ 1474.699288] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1474.729193] lowmem_reserve[]: 0 0 0 0 0 [ 1474.733660] Node 1 Normal free:608436kB min:53696kB low:67120kB high:80544kB active_anon:556kB inactive_anon:36112kB active_file:108kB inactive_file:1408kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:260kB bounce:0kB free_pcp:1424kB local_pcp:696kB free_cma:0kB [ 1474.771940] lowmem_reserve[]: 0 0 0 0 0 [ 1474.776050] Node 0 DMA: 2*4kB (U) 2*8kB (UE) 2*16kB (UE) 3*32kB (UE) 10*64kB (UE) 6*128kB (UE) 3*256kB (UE) 2*512kB (UE) 3*1024kB (UE) 3*2048kB (UME) 0*4096kB = 12568kB [ 1474.795338] Node 0 DMA32: 150*4kB (ME) 211*8kB (UME) 42*16kB (E) 19*32kB (UE) 1857*64kB (UE) 211*128kB (U) 14*256kB (UM) 15*512kB (UM) 14*1024kB (U) 0*2048kB 0*4096kB = 175024kB [ 1474.814423] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1474.829296] Node 1 Normal: 7645*4kB (UME) 130*8kB (UM) 341*16kB (UME) 56*32kB (UME) 3758*64kB (UME) 259*128kB (UME) 102*256kB (UM) 67*512kB (UM) 184*1024kB (U) 21*2048kB (UM) 1*4096kB (U) = 608468kB [ 1474.860360] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1474.869438] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1474.882670] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1474.899992] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1474.909899] 38796 total pagecache pages [ 1474.914479] 0 pages in swap cache [ 1474.925222] Swap cache stats: add 0, delete 0, find 0/0 [ 1474.931345] Free swap = 0kB [ 1474.934373] Total swap = 0kB [ 1474.942656] 2097051 pages RAM [ 1474.947526] 0 pages HighMem/MovableOnly [ 1474.951999] 363849 pages reserved [ 1474.960419] 0 pages cma reserved 20:06:47 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x7fffffff, 0x23}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, 0x0, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000080)=0x1) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x4, 0xcf, 0x7ff, 0x8, 0x0, 0x1, 0xb51, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x40) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000001480)={'syztnl1\x00', &(0x7f0000001400)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x1f, 0xffff0000, 0x43, @mcast1, @loopback, 0x20, 0x10, 0x2, 0x1}}) r6 = openat$zero(0xffffffffffffff9c, &(0x7f00000014c0), 0x803, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(r7, 0x65, 0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x10, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xffffffff}, [@map_val={0x18, 0x9, 0x2, 0x0, r4}]}, &(0x7f0000000240)='GPL\x00', 0x1000, 0x1000, &(0x7f0000000280)=""/4096, 0x40f00, 0x3, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000001500)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000001540)={0x2, 0xe, 0x200, 0x6}, 0x10, 0x0, r7}, 0x78) 20:06:47 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x7fffffff, 0x23}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, 0x0, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000080)=0x1) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x4, 0xcf, 0x7ff, 0x8, 0x0, 0x1, 0xb51, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x40) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000001480)={'syztnl1\x00', &(0x7f0000001400)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x1f, 0xffff0000, 0x43, @mcast1, @loopback, 0x20, 0x10, 0x2, 0x1}}) 20:06:47 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x7fffffff, 0x23}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, 0x0, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000080)=0x1) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x4, 0xcf, 0x7ff, 0x8, 0x0, 0x1, 0xb51, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x40) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000001480)={'syztnl1\x00', &(0x7f0000001400)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x1f, 0xffff0000, 0x43, @mcast1, @loopback, 0x20, 0x10, 0x2, 0x1}}) openat$zero(0xffffffffffffff9c, &(0x7f00000014c0), 0x803, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) 20:06:47 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x7fffffff, 0x23}) r1 = openat$urandom(0xffffffffffffff9c, 0x0, 0x2401, 0x0) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000040)=0x20) 20:06:47 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x7fffffff, 0x23}) socket$rxrpc(0x21, 0x2, 0xa) 20:06:47 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 20:06:48 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 20:06:48 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) [ 1477.047684] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1477.075570] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1477.130948] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1477.168632] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) 20:06:48 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x0, 0x29}) [ 1477.192165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1477.201039] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1477.203769] syz-executor.4: [ 1477.213587] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1477.229033] syz-executor.5 cpuset= [ 1477.238173] device bridge_slave_1 left promiscuous mode [ 1477.259339] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1477.271209] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1477.271413] / [ 1477.280262] bridge0: port 2(bridge_slave_1) entered disabled state [ 1477.283359] syz-executor.3 cpuset= [ 1477.292521] mems_allowed=0-1 [ 1477.294164] CPU: 0 PID: 16784 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1477.304229] syz-executor.4 cpuset= [ 1477.307323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1477.307327] Call Trace: [ 1477.307344] dump_stack+0x1b2/0x281 [ 1477.307358] warn_alloc.cold+0x96/0x1cc [ 1477.307370] ? zone_watermark_ok_safe+0x220/0x220 [ 1477.307392] __alloc_pages_nodemask+0x2127/0x2720 [ 1477.307410] ? lock_acquire+0x170/0x3f0 [ 1477.307424] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1477.307441] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1477.307453] ? __mutex_unlock_slowpath+0x75/0x770 [ 1477.307467] alloc_pages_current+0x155/0x260 [ 1477.325866] / [ 1477.327185] ion_page_pool_alloc+0x118/0x1b0 [ 1477.340391] mems_allowed=0-1 [ 1477.341046] ion_system_heap_allocate+0x133/0x8c0 [ 1477.378803] ? ion_alloc+0x187/0x810 [ 1477.382532] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1477.387993] ? ion_system_contig_heap_create+0x130/0x130 [ 1477.393438] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1477.398726] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1477.403801] ion_alloc+0x204/0x810 [ 1477.407344] ? ion_dma_buf_release+0x40/0x40 [ 1477.411836] ? __might_fault+0x177/0x1b0 [ 1477.415899] ion_ioctl+0xea/0x1f0 [ 1477.419377] ? ion_query_heaps+0x360/0x360 [ 1477.423617] ? ion_query_heaps+0x360/0x360 [ 1477.427851] do_vfs_ioctl+0x75a/0xff0 [ 1477.431645] ? ioctl_preallocate+0x1a0/0x1a0 [ 1477.436052] ? lock_downgrade+0x740/0x740 [ 1477.440382] ? __fget+0x225/0x360 [ 1477.443896] ? do_vfs_ioctl+0xff0/0xff0 [ 1477.447863] ? security_file_ioctl+0x83/0xb0 [ 1477.452307] SyS_ioctl+0x7f/0xb0 [ 1477.455672] ? do_vfs_ioctl+0xff0/0xff0 [ 1477.459819] do_syscall_64+0x1d5/0x640 [ 1477.463880] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1477.469153] RIP: 0033:0x4665d9 [ 1477.472398] RSP: 002b:00007f3d1f881188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1477.480312] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1477.487576] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1477.494845] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1477.502256] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1477.509790] R13: 00007ffdbbfa296f R14: 00007f3d1f881300 R15: 0000000000022000 [ 1477.524777] CPU: 1 PID: 16791 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1477.526978] / [ 1477.532951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1477.532959] Call Trace: [ 1477.537889] mems_allowed=0-1 [ 1477.544447] dump_stack+0x1b2/0x281 [ 1477.544463] warn_alloc.cold+0x96/0x1cc [ 1477.544476] ? zone_watermark_ok_safe+0x220/0x220 [ 1477.544500] __alloc_pages_nodemask+0x2127/0x2720 [ 1477.544519] ? lock_acquire+0x170/0x3f0 [ 1477.572065] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1477.577024] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1477.582487] ? __mutex_unlock_slowpath+0x75/0x770 [ 1477.587345] alloc_pages_current+0x155/0x260 [ 1477.591782] ion_page_pool_alloc+0x118/0x1b0 [ 1477.596200] ion_system_heap_allocate+0x133/0x8c0 [ 1477.601131] ? ion_alloc+0x187/0x810 [ 1477.604845] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1477.610287] ? ion_system_contig_heap_create+0x130/0x130 [ 1477.615754] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1477.620779] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1477.625615] ion_alloc+0x204/0x810 [ 1477.629151] ? ion_dma_buf_release+0x40/0x40 [ 1477.633680] ? __might_fault+0x177/0x1b0 [ 1477.637929] ion_ioctl+0xea/0x1f0 [ 1477.641441] ? ion_query_heaps+0x360/0x360 [ 1477.645675] ? ion_query_heaps+0x360/0x360 [ 1477.649943] do_vfs_ioctl+0x75a/0xff0 [ 1477.653757] ? ioctl_preallocate+0x1a0/0x1a0 [ 1477.658168] ? lock_downgrade+0x740/0x740 [ 1477.662314] ? __fget+0x225/0x360 [ 1477.665763] ? do_vfs_ioctl+0xff0/0xff0 [ 1477.669732] ? security_file_ioctl+0x83/0xb0 [ 1477.674150] SyS_ioctl+0x7f/0xb0 [ 1477.677609] ? do_vfs_ioctl+0xff0/0xff0 [ 1477.681599] do_syscall_64+0x1d5/0x640 [ 1477.685519] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1477.690750] RIP: 0033:0x4665d9 [ 1477.693978] RSP: 002b:00007f5f77a6d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1477.701880] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1477.709247] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1477.716784] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1477.724890] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1477.732830] R13: 00007ffe82aa5b1f R14: 00007f5f77a6d300 R15: 0000000000022000 [ 1477.740208] CPU: 0 PID: 16787 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1477.748549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1477.758302] Call Trace: [ 1477.760972] dump_stack+0x1b2/0x281 [ 1477.764697] warn_alloc.cold+0x96/0x1cc [ 1477.768680] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1477.773707] ? zone_watermark_ok_safe+0x220/0x220 [ 1477.778576] __alloc_pages_nodemask+0x2127/0x2720 [ 1477.783435] ? lock_acquire+0x170/0x3f0 [ 1477.787417] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1477.792541] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1477.798113] ? __mutex_unlock_slowpath+0x75/0x770 [ 1477.802959] ? __sanitizer_cov_trace_pc+0x3d/0x50 [ 1477.807811] alloc_pages_current+0x155/0x260 [ 1477.812315] ion_page_pool_alloc+0x118/0x1b0 [ 1477.816730] ion_system_heap_allocate+0x133/0x8c0 [ 1477.821564] ? ion_alloc+0x187/0x810 [ 1477.825677] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1477.831140] ? ion_system_contig_heap_create+0x130/0x130 [ 1477.836929] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1477.841945] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1477.846781] ion_alloc+0x204/0x810 [ 1477.850317] ? ion_dma_buf_release+0x40/0x40 [ 1477.854851] ? __might_fault+0x177/0x1b0 [ 1477.859533] ion_ioctl+0xea/0x1f0 [ 1477.862993] ? ion_query_heaps+0x360/0x360 [ 1477.867323] ? ion_query_heaps+0x360/0x360 [ 1477.871649] do_vfs_ioctl+0x75a/0xff0 [ 1477.875503] ? ioctl_preallocate+0x1a0/0x1a0 [ 1477.879903] ? lock_downgrade+0x740/0x740 [ 1477.884044] ? __fget+0x225/0x360 [ 1477.887495] ? do_vfs_ioctl+0xff0/0xff0 [ 1477.891478] ? security_file_ioctl+0x83/0xb0 [ 1477.895910] SyS_ioctl+0x7f/0xb0 [ 1477.899438] ? do_vfs_ioctl+0xff0/0xff0 [ 1477.903410] do_syscall_64+0x1d5/0x640 [ 1477.907389] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1477.912784] RIP: 0033:0x4665d9 [ 1477.915970] RSP: 002b:00007f6d56c88188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1477.923669] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1477.932453] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 20:06:49 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x0, 0x29}) [ 1477.939809] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1477.947078] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1477.954340] R13: 00007ffda15d7cdf R14: 00007f6d56c88300 R15: 0000000000022000 [ 1477.962195] device bridge_slave_0 left promiscuous mode [ 1477.968277] bridge0: port 1(bridge_slave_0) entered disabled state [ 1478.001434] CPU: 1 PID: 16789 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1478.009493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1478.019098] Call Trace: [ 1478.021795] dump_stack+0x1b2/0x281 [ 1478.025546] warn_alloc.cold+0x96/0x1cc [ 1478.029624] ? zone_watermark_ok_safe+0x220/0x220 [ 1478.034634] __alloc_pages_nodemask+0x2127/0x2720 [ 1478.039506] ? lock_acquire+0x170/0x3f0 [ 1478.043516] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1478.048398] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1478.054177] ? __mutex_unlock_slowpath+0x75/0x770 [ 1478.059152] alloc_pages_current+0x155/0x260 [ 1478.063585] ion_page_pool_alloc+0x118/0x1b0 [ 1478.068102] ion_system_heap_allocate+0x133/0x8c0 [ 1478.072957] ? ion_alloc+0x187/0x810 [ 1478.076889] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1478.082349] ? ion_system_contig_heap_create+0x130/0x130 [ 1478.087816] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1478.092845] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1478.097793] ion_alloc+0x204/0x810 [ 1478.101356] ? ion_dma_buf_release+0x40/0x40 [ 1478.105775] ? __might_fault+0x177/0x1b0 [ 1478.109852] ion_ioctl+0xea/0x1f0 [ 1478.113497] ? ion_query_heaps+0x360/0x360 [ 1478.118613] ? ion_query_heaps+0x360/0x360 [ 1478.122971] do_vfs_ioctl+0x75a/0xff0 [ 1478.126783] ? ioctl_preallocate+0x1a0/0x1a0 [ 1478.131200] ? lock_downgrade+0x740/0x740 [ 1478.135394] ? __fget+0x225/0x360 [ 1478.138856] ? do_vfs_ioctl+0xff0/0xff0 [ 1478.142939] ? security_file_ioctl+0x83/0xb0 [ 1478.146553] Mem-Info: [ 1478.147353] SyS_ioctl+0x7f/0xb0 [ 1478.147362] ? do_vfs_ioctl+0xff0/0xff0 [ 1478.147376] do_syscall_64+0x1d5/0x640 [ 1478.161108] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1478.164831] active_anon:14718 inactive_anon:35186 isolated_anon:0 [ 1478.164831] active_file:1659 inactive_file:5722 isolated_file:0 [ 1478.164831] unevictable:0 dirty:89 writeback:0 unstable:0 [ 1478.164831] slab_reclaimable:12589 slab_unreclaimable:124935 [ 1478.164831] mapped:48825 shmem:35609 pagetables:796 bounce:0 [ 1478.164831] free:102842 free_pcp:508 free_cma:0 [ 1478.166300] RIP: 0033:0x4665d9 [ 1478.166307] RSP: 002b:00007f7465981188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1478.166318] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1478.166324] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1478.166329] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1478.166334] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1478.166350] R13: 00007ffc7a8155ff R14: 00007f7465981300 R15: 0000000000022000 20:06:49 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x0, 0x29}) [ 1478.225027] Node 0 active_anon:57328kB inactive_anon:104628kB active_file:5816kB inactive_file:19796kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:109368kB dirty:196kB writeback:0kB shmem:106064kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1478.285287] device veth1_macvtap left promiscuous mode [ 1478.304784] device veth0_macvtap left promiscuous mode 20:06:49 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x168}) [ 1478.346084] device veth1_vlan left promiscuous mode [ 1478.351378] device veth0_vlan left promiscuous mode [ 1478.476311] Node 1 active_anon:1544kB inactive_anon:36116kB active_file:820kB inactive_file:3092kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:85932kB dirty:160kB writeback:0kB shmem:36372kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1478.516711] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1478.537473] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1478.545270] CPU: 0 PID: 16793 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1478.553787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1478.563241] Call Trace: [ 1478.565895] dump_stack+0x1b2/0x281 [ 1478.569530] warn_alloc.cold+0x96/0x1cc [ 1478.573535] ? zone_watermark_ok_safe+0x220/0x220 [ 1478.578402] __alloc_pages_nodemask+0x2127/0x2720 [ 1478.583255] ? io_schedule_timeout+0x140/0x140 [ 1478.587991] ? lock_acquire+0x170/0x3f0 [ 1478.591978] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1478.596847] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1478.602314] ? __mutex_unlock_slowpath+0x75/0x770 [ 1478.607165] ? alloc_pages_current+0x21c/0x260 [ 1478.611898] alloc_pages_current+0x155/0x260 [ 1478.616575] ion_page_pool_alloc+0x118/0x1b0 [ 1478.620989] ion_system_heap_allocate+0x133/0x8c0 [ 1478.625923] ? ion_alloc+0x187/0x810 [ 1478.629638] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1478.635178] ? ion_system_contig_heap_create+0x130/0x130 [ 1478.640633] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1478.645657] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1478.650593] ion_alloc+0x204/0x810 [ 1478.654142] ? ion_dma_buf_release+0x40/0x40 [ 1478.658568] ? __might_fault+0x177/0x1b0 [ 1478.662850] ion_ioctl+0xea/0x1f0 [ 1478.666406] ? ion_query_heaps+0x360/0x360 [ 1478.670650] ? ion_query_heaps+0x360/0x360 [ 1478.674940] do_vfs_ioctl+0x75a/0xff0 [ 1478.678753] ? ioctl_preallocate+0x1a0/0x1a0 [ 1478.683381] ? lock_downgrade+0x740/0x740 [ 1478.687630] ? __fget+0x225/0x360 [ 1478.691117] ? do_vfs_ioctl+0xff0/0xff0 [ 1478.695107] ? security_file_ioctl+0x83/0xb0 [ 1478.699532] SyS_ioctl+0x7f/0xb0 [ 1478.703054] ? do_vfs_ioctl+0xff0/0xff0 [ 1478.707065] do_syscall_64+0x1d5/0x640 [ 1478.710984] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1478.716205] RIP: 0033:0x4665d9 [ 1478.719405] RSP: 002b:00007f7465960188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1478.727297] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 00000000004665d9 [ 1478.734672] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1478.741947] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1478.749227] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1478.756504] R13: 00007ffc7a8155ff R14: 00007f7465960300 R15: 0000000000022000 [ 1478.783881] Node 0 DMA free:11096kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:20kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1478.828523] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1478.843516] Node 0 DMA32 free:291248kB min:36200kB low:45248kB high:54296kB active_anon:57328kB inactive_anon:104628kB active_file:5816kB inactive_file:19776kB unevictable:0kB writepending:196kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7360kB pagetables:2536kB bounce:0kB free_pcp:1388kB local_pcp:648kB free_cma:0kB [ 1478.874241] lowmem_reserve[]: 0 0 0 0 0 [ 1478.879214] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1478.913498] lowmem_reserve[]: 0 0 0 0 0 [ 1478.921599] Node 1 Normal free:287772kB min:53696kB low:67120kB high:80544kB active_anon:1544kB inactive_anon:36116kB active_file:820kB inactive_file:3092kB unevictable:0kB writepending:160kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:648kB bounce:0kB free_pcp:1292kB local_pcp:640kB free_cma:0kB [ 1478.984305] lowmem_reserve[]: 0 0 0 0 0 [ 1478.988660] Node 0 DMA: 22*4kB (UM) 10*8kB (UME) 11*16kB (UE) 6*32kB (UME) 3*64kB (UME) 3*128kB (UME) 3*256kB (UME) 2*512kB (ME) 4*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11096kB [ 1479.016171] device hsr_slave_1 left promiscuous mode [ 1479.051146] device hsr_slave_0 left promiscuous mode [ 1479.059203] Node 0 DMA32: 2*4kB (ME) 91*8kB (UME) 3622*16kB (UME) 4080*32kB (UME) 259*64kB (UM) 4*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 206336kB [ 1479.109118] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1479.120522] team0 (unregistering): Port device team_slave_1 removed [ 1479.139736] Node 1 Normal: 15896*4kB (UM) 4283*8kB (UM) 3730*16kB (UM) 3260*32kB (UE) 320*64kB (U) 29*128kB (U) 10*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 288600kB [ 1479.155953] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1479.156231] team0 (unregistering): Port device team_slave_0 removed [ 1479.166361] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1479.208059] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1479.230941] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1479.240840] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1479.257254] 42925 total pagecache pages [ 1479.274166] 0 pages in swap cache [ 1479.277981] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1479.286996] Swap cache stats: add 0, delete 0, find 0/0 [ 1479.316111] Free swap = 0kB [ 1479.325433] Total swap = 0kB [ 1479.335427] 2097051 pages RAM [ 1479.348649] 0 pages HighMem/MovableOnly [ 1479.361969] 363849 pages reserved [ 1479.365601] 0 pages cma reserved [ 1479.397738] bond0 (unregistering): Released all slaves [ 1479.988279] syz-executor.3 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1480.074273] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1480.131628] CPU: 1 PID: 15473 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1480.139767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1480.149155] Call Trace: [ 1480.151752] dump_stack+0x1b2/0x281 [ 1480.155386] dump_header+0x178/0x82f [ 1480.159102] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1480.164207] ? ___ratelimit+0x2cd/0x530 [ 1480.168303] oom_kill_process.cold+0x10/0xa40 [ 1480.172825] out_of_memory+0xe3e/0x1190 [ 1480.176894] ? oom_killer_disable+0x1c0/0x1c0 [ 1480.181395] ? mutex_trylock+0x152/0x1a0 [ 1480.185555] __alloc_pages_nodemask+0x23e1/0x2720 [ 1480.190528] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1480.195696] alloc_pages_current+0x155/0x260 [ 1480.200122] filemap_fault+0x11a1/0x1ad0 [ 1480.204262] ext4_filemap_fault+0x84/0xb0 [ 1480.208555] __do_fault+0xfa/0x380 [ 1480.212185] __handle_mm_fault+0x2497/0x4620 [ 1480.216599] ? vm_insert_page+0x7c0/0x7c0 [ 1480.220836] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 1480.225506] ? nanosleep_copyout+0x100/0x100 [ 1480.229926] ? mark_held_locks+0xa6/0xf0 [ 1480.233996] handle_mm_fault+0x455/0x9c0 [ 1480.238154] __do_page_fault+0x549/0xad0 [ 1480.242272] ? spurious_fault+0x640/0x640 [ 1480.246422] ? do_page_fault+0x60/0x500 [ 1480.250397] ? page_fault+0x2f/0x50 [ 1480.254023] page_fault+0x45/0x50 [ 1480.257479] RIP: 168ca9:0xb [ 1480.260444] RSP: 0018:00007ffda15d7f9c EFLAGS: 00000032 [ 1480.790021] Mem-Info: [ 1480.801125] active_anon:14756 inactive_anon:35186 isolated_anon:0 [ 1480.801125] active_file:33 inactive_file:1 isolated_file:25 [ 1480.801125] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1480.801125] slab_reclaimable:12530 slab_unreclaimable:122618 [ 1480.801125] mapped:52739 shmem:35609 pagetables:814 bounce:0 [ 1480.801125] free:25141 free_pcp:46 free_cma:0 [ 1480.834380] Node 0 active_anon:57480kB inactive_anon:104628kB active_file:132kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):100kB mapped:127768kB dirty:0kB writeback:0kB shmem:106064kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1480.862684] Node 1 active_anon:1544kB inactive_anon:36116kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:83188kB dirty:0kB writeback:0kB shmem:36372kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1480.909968] Node 0 DMA free:11064kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1480.941998] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1480.947096] Node 0 DMA32 free:35628kB min:36200kB low:45248kB high:54296kB active_anon:57480kB inactive_anon:104628kB active_file:112kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7360kB pagetables:2608kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1480.975881] lowmem_reserve[]: 0 0 0 0 0 [ 1480.979885] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1481.016563] lowmem_reserve[]: 0 0 0 0 0 [ 1481.020625] Node 1 Normal free:53348kB min:53696kB low:67120kB high:80544kB active_anon:1544kB inactive_anon:36116kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:648kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1481.133970] lowmem_reserve[]: 0 0 0 0 0 [ 1481.153966] Node 0 DMA: 8*4kB (U) 9*8kB (UE) 11*16kB (UE) 5*32kB (UE) 2*64kB (UE) 2*128kB (UE) 2*256kB (UE) 1*512kB (E) 3*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11064kB [ 1481.181418] Node 0 DMA32: 899*4kB (UME) 367*8kB (UME) 118*16kB (ME) 62*32kB (UME) 317*64kB (UM) 34*128kB (UM) 3*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35812kB [ 1481.208889] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1481.232198] Node 1 Normal: 51*4kB (UM) 39*8kB (UM) 24*16kB (UM) 734*32kB (UME) 349*64kB (UM) 32*128kB (UM) 10*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53380kB [ 1481.258101] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1481.273497] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1481.284321] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1481.299697] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1481.310560] 35633 total pagecache pages [ 1481.320925] 0 pages in swap cache [ 1481.326420] Swap cache stats: add 0, delete 0, find 0/0 [ 1481.331892] Free swap = 0kB [ 1481.363583] Total swap = 0kB [ 1481.372093] 2097051 pages RAM [ 1481.401407] 0 pages HighMem/MovableOnly [ 1481.444691] 363849 pages reserved [ 1481.448284] 0 pages cma reserved [ 1481.451647] Out of memory (oom_kill_allocating_task): Kill process 15473 (syz-executor.3) score 0 or sacrifice child [ 1481.478701] Killed process 16787 (syz-executor.3) total-vm:93384kB, anon-rss:160kB, file-rss:34820kB, shmem-rss:0kB [ 1481.542876] oom_reaper: reaped process 16787 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1481.566517] syz-executor.3 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1481.623753] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1481.672771] CPU: 0 PID: 15473 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1481.680697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1481.690058] Call Trace: [ 1481.692655] dump_stack+0x1b2/0x281 [ 1481.696314] dump_header+0x178/0x82f [ 1481.700101] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1481.705205] ? ___ratelimit+0x2cd/0x530 [ 1481.709284] oom_kill_process.cold+0x10/0xa40 [ 1481.713797] out_of_memory+0xe3e/0x1190 [ 1481.717785] ? oom_killer_disable+0x1c0/0x1c0 [ 1481.722299] ? mutex_trylock+0x152/0x1a0 [ 1481.726367] __alloc_pages_nodemask+0x23e1/0x2720 [ 1481.731217] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1481.736078] alloc_pages_current+0x155/0x260 [ 1481.740578] filemap_fault+0x11a1/0x1ad0 [ 1481.744653] ext4_filemap_fault+0x84/0xb0 [ 1481.748820] __do_fault+0xfa/0x380 [ 1481.752361] __handle_mm_fault+0x2497/0x4620 [ 1481.756774] ? vm_insert_page+0x7c0/0x7c0 [ 1481.760922] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 1481.765331] ? nanosleep_copyout+0x100/0x100 [ 1481.769752] ? mark_held_locks+0xa6/0xf0 [ 1481.773818] handle_mm_fault+0x455/0x9c0 [ 1481.777885] __do_page_fault+0x549/0xad0 [ 1481.781949] ? spurious_fault+0x640/0x640 [ 1481.786095] ? do_page_fault+0x60/0x500 [ 1481.790068] ? page_fault+0x2f/0x50 [ 1481.793796] page_fault+0x45/0x50 [ 1481.797257] RIP: 168ca9:0xb [ 1481.800190] RSP: 0018:00007ffda15d7f9c EFLAGS: 00000032 [ 1481.834134] Mem-Info: [ 1481.892528] active_anon:14756 inactive_anon:35186 isolated_anon:0 [ 1481.892528] active_file:23 inactive_file:9 isolated_file:0 [ 1481.892528] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1481.892528] slab_reclaimable:12520 slab_unreclaimable:122619 [ 1481.892528] mapped:52739 shmem:35609 pagetables:814 bounce:0 [ 1481.892528] free:13972 free_pcp:85 free_cma:0 [ 1481.942921] Node 0 active_anon:57452kB inactive_anon:104628kB active_file:88kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:127768kB dirty:0kB writeback:0kB shmem:106064kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1481.982737] Node 1 active_anon:1472kB inactive_anon:36116kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:83188kB dirty:0kB writeback:0kB shmem:36372kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1482.024111] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1482.055845] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1482.064800] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1482.072757] Node 0 DMA32 free:18080kB min:36200kB low:45248kB high:54296kB active_anon:57452kB inactive_anon:104628kB active_file:84kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7360kB pagetables:2608kB bounce:0kB free_pcp:208kB local_pcp:88kB free_cma:0kB [ 1482.121554] lowmem_reserve[]: 0 0 0 0 0 [ 1482.133065] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1482.164048] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1482.173498] lowmem_reserve[]: 0 0 0 0 0 [ 1482.199065] Node 1 Normal free:26844kB min:53696kB low:67120kB high:80544kB active_anon:1472kB inactive_anon:36116kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:648kB bounce:0kB free_pcp:192kB local_pcp:72kB free_cma:0kB [ 1482.251430] lowmem_reserve[]: 0 0 0 0 0 [ 1482.251765] CPU: 1 PID: 16787 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1482.255938] Node 0 [ 1482.263767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1482.263775] DMA: [ 1482.266028] Call Trace: [ 1482.266049] dump_stack+0x1b2/0x281 [ 1482.266063] warn_alloc.cold+0x96/0x1cc [ 1482.266074] ? zone_watermark_ok_safe+0x220/0x220 [ 1482.266085] ? usleep_range+0x130/0x130 [ 1482.275478] 1*4kB [ 1482.277504] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1482.277517] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1482.280099] (U) [ 1482.283715] ? run_timer_softirq+0x5a0/0x5a0 [ 1482.287706] 2*8kB [ 1482.292527] __alloc_pages_nodemask+0x2127/0x2720 [ 1482.296693] (UE) [ 1482.298816] ? lock_acquire+0x170/0x3f0 [ 1482.304009] 10*16kB (UE) [ 1482.309048] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1482.309058] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1482.309074] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1482.311030] 5*32kB [ 1482.315448] ? retint_kernel+0x2d/0x2d [ 1482.315461] alloc_pages_current+0x155/0x260 [ 1482.315473] ion_page_pool_alloc+0x118/0x1b0 [ 1482.317647] (UE) [ 1482.322584] ion_system_heap_allocate+0x133/0x8c0 [ 1482.324650] 2*64kB [ 1482.328621] ? ion_alloc+0x187/0x810 [ 1482.331393] (UE) [ 1482.336222] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1482.336232] ? ion_system_contig_heap_create+0x130/0x130 [ 1482.336240] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1482.336251] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1482.340731] 2*128kB [ 1482.346169] ion_alloc+0x204/0x810 [ 1482.346182] ? ion_dma_buf_release+0x40/0x40 [ 1482.346194] ? __might_fault+0x177/0x1b0 [ 1482.348413] (UE) [ 1482.352309] ion_ioctl+0xea/0x1f0 [ 1482.356718] 2*256kB [ 1482.361101] ? ion_query_heaps+0x360/0x360 [ 1482.363169] (UE) [ 1482.368006] ? ion_query_heaps+0x360/0x360 [ 1482.368017] do_vfs_ioctl+0x75a/0xff0 [ 1482.368029] ? ioctl_preallocate+0x1a0/0x1a0 [ 1482.370248] 1*512kB [ 1482.374036] ? lock_downgrade+0x740/0x740 [ 1482.376100] (E) [ 1482.381659] ? __fget+0x225/0x360 [ 1482.387103] 3*1024kB [ 1482.392117] ? do_vfs_ioctl+0xff0/0xff0 [ 1482.396970] (UE) [ 1482.399271] ? security_file_ioctl+0x83/0xb0 [ 1482.402792] 3*2048kB [ 1482.407189] SyS_ioctl+0x7f/0xb0 [ 1482.407197] ? do_vfs_ioctl+0xff0/0xff0 [ 1482.407208] do_syscall_64+0x1d5/0x640 [ 1482.412163] (UME) [ 1482.413487] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1482.416941] 0*4096kB [ 1482.419230] RIP: 0033:0x4665d9 [ 1482.423464] = 10964kB [ 1482.425522] RSP: 002b:00007f6d56c88188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1482.425533] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1482.425537] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1482.425542] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1482.425549] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1482.429875] Node 0 [ 1482.433659] R13: 00007ffda15d7cdf R14: 00007f6d56c88300 R15: 0000000000022000 [ 1482.438276] DMA32: [ 1482.445180] warn_alloc_show_mem: 4 callbacks suppressed [ 1482.445183] Mem-Info: [ 1482.482465] 894*4kB [ 1482.488239] active_anon:14731 inactive_anon:35186 isolated_anon:0 [ 1482.488239] active_file:24 inactive_file:0 isolated_file:0 [ 1482.488239] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1482.488239] slab_reclaimable:12518 slab_unreclaimable:122190 [ 1482.488239] mapped:52739 shmem:35609 pagetables:814 bounce:0 [ 1482.488239] free:14388 free_pcp:101 free_cma:0 [ 1482.564523] (UME) [ 1482.591863] Node 0 active_anon:57452kB inactive_anon:104628kB active_file:84kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:127768kB dirty:0kB writeback:0kB shmem:106064kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1482.626032] Node 1 active_anon:1472kB inactive_anon:36116kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:83188kB dirty:0kB writeback:0kB shmem:36372kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1482.657518] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1482.688289] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1482.693491] Node 0 DMA32 free:19744kB min:36200kB low:45248kB high:54296kB active_anon:57452kB inactive_anon:104628kB active_file:84kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7360kB pagetables:2608kB bounce:0kB free_pcp:212kB local_pcp:128kB free_cma:0kB [ 1482.718581] 376*8kB (UME) 125*16kB (UME) 66*32kB (UME) 41*64kB (UM) 45*128kB (UM) 3*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19848kB [ 1482.727091] lowmem_reserve[]: 0 0 0 0 0 [ 1482.739749] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1482.763139] Node 0 [ 1482.769550] lowmem_reserve[]: 0 0 0 0 0 [ 1482.775976] Node 1 Normal free:26844kB min:53696kB low:67120kB high:80544kB active_anon:1472kB inactive_anon:36116kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:648kB bounce:0kB free_pcp:192kB local_pcp:120kB free_cma:0kB [ 1482.793180] Normal: [ 1482.809208] lowmem_reserve[]: 0 0 0 0 0 [ 1482.815598] Node 0 DMA: 1*4kB (U) 2*8kB (UE) 10*16kB (UE) 5*32kB (UE) 2*64kB (UE) 2*128kB (UE) 2*256kB (UE) 1*512kB (E) 3*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10964kB [ 1482.833328] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1482.834770] Node 0 DMA32: 894*4kB (UME) 376*8kB (UME) 125*16kB (UME) 66*32kB (UME) 41*64kB (UM) 45*128kB (UM) 3*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19848kB [ 1482.858282] Node 1 Normal: 51*4kB (UM) 38*8kB (UM) 24*16kB (UM) 17*32kB (UME) 293*64kB (UM) 32*128kB (UM) 10*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26844kB [ 1482.870895] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1482.899024] Node 1 Normal: 51*4kB (UM) 38*8kB (UM) 24*16kB (UM) 17*32kB (UME) 293*64kB (UM) 32*128kB (UM) 10*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26844kB [ 1482.905126] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1482.933144] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1482.937920] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1482.963155] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1482.965993] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1482.993181] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1482.997154] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1483.023029] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1483.025947] 35633 total pagecache pages [ 1483.051464] 0 pages in swap cache [ 1483.053054] 35633 total pagecache pages [ 1483.062044] Swap cache stats: add 0, delete 0, find 0/0 [ 1483.080524] 0 pages in swap cache [ 1483.083865] Free swap = 0kB [ 1483.084140] Swap cache stats: add 0, delete 0, find 0/0 [ 1483.093415] Total swap = 0kB [ 1483.109883] Free swap = 0kB [ 1483.112931] Total swap = 0kB [ 1483.113683] 2097051 pages RAM [ 1483.133190] 2097051 pages RAM [ 1483.136355] 0 pages HighMem/MovableOnly [ 1483.140082] 0 pages HighMem/MovableOnly [ 1483.140619] 363849 pages reserved [ 1483.162185] 363849 pages reserved [ 1483.167965] 0 pages cma reserved [ 1483.171464] Out of memory (oom_kill_allocating_task): Kill process 15473 (syz-executor.3) score 0 or sacrifice child [ 1483.181588] 0 pages cma reserved [ 1483.222716] Killed process 15473 (syz-executor.3) total-vm:93120kB, anon-rss:108kB, file-rss:33504kB, shmem-rss:0kB [ 1483.264590] oom_reaper: reaped process 15473 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1483.663489] oom_reaper: reaped process 16784 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1483.678380] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1483.692553] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1483.696389] systemd-udevd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=-1000 [ 1483.702772] CPU: 0 PID: 16787 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1483.718808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1483.727808] systemd-udevd cpuset= [ 1483.728253] Call Trace: [ 1483.728260] / [ 1483.731712] dump_stack+0x1b2/0x281 [ 1483.738469] mems_allowed=0-1 [ 1483.739672] warn_alloc.cold+0x96/0x1cc [ 1483.746766] ? zone_watermark_ok_safe+0x220/0x220 [ 1483.751695] __alloc_pages_nodemask+0x2127/0x2720 [ 1483.754342] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1483.756684] ? lock_acquire+0x170/0x3f0 [ 1483.756699] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1483.776955] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1483.782398] ? __mutex_unlock_slowpath+0x75/0x770 [ 1483.787295] alloc_pages_current+0x155/0x260 [ 1483.788143] (null) [ 1483.791794] ion_page_pool_alloc+0x118/0x1b0 [ 1483.794069] syz-executor.2 cpuset= [ 1483.798468] ion_system_heap_allocate+0x133/0x8c0 [ 1483.798480] ? _raw_spin_unlock+0x29/0x40 [ 1483.798488] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1483.798495] ? ion_system_contig_heap_create+0x130/0x130 [ 1483.798505] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1483.798515] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1483.798524] ion_alloc+0x27a/0x810 [ 1483.798537] ? ion_dma_buf_release+0x40/0x40 [ 1483.828115] / [ 1483.831398] ? __might_fault+0x177/0x1b0 [ 1483.834974] mems_allowed=0-1 [ 1483.840479] ion_ioctl+0xea/0x1f0 [ 1483.852783] ? ion_query_heaps+0x360/0x360 [ 1483.857321] ? ion_query_heaps+0x360/0x360 [ 1483.861551] do_vfs_ioctl+0x75a/0xff0 [ 1483.865439] ? ioctl_preallocate+0x1a0/0x1a0 [ 1483.869851] ? lock_downgrade+0x740/0x740 [ 1483.873991] ? __fget+0x225/0x360 [ 1483.877435] ? do_vfs_ioctl+0xff0/0xff0 [ 1483.881408] ? security_file_ioctl+0x83/0xb0 [ 1483.885816] SyS_ioctl+0x7f/0xb0 [ 1483.889188] ? do_vfs_ioctl+0xff0/0xff0 [ 1483.893154] do_syscall_64+0x1d5/0x640 [ 1483.897034] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1483.902213] RIP: 0033:0x4665d9 [ 1483.905400] RSP: 002b:00007f6d56c88188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1483.913104] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1483.920384] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1483.927655] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1483.935051] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1483.942309] R13: 00007ffda15d7cdf R14: 00007f6d56c88300 R15: 0000000000022000 [ 1483.949588] CPU: 1 PID: 16784 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1483.955628] Mem-Info: [ 1483.957485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1483.959923] active_anon:14696 inactive_anon:35186 isolated_anon:0 [ 1483.959923] active_file:17 inactive_file:17 isolated_file:0 [ 1483.959923] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1483.959923] slab_reclaimable:12506 slab_unreclaimable:121842 [ 1483.959923] mapped:52748 shmem:35609 pagetables:769 bounce:0 [ 1483.959923] free:14104 free_pcp:0 free_cma:0 [ 1483.969274] Call Trace: [ 1483.969294] dump_stack+0x1b2/0x281 [ 1483.969308] warn_alloc.cold+0x96/0x1cc [ 1483.969330] ? xfs_trans_binval+0x550/0x5a0 [ 1484.002684] Node 0 active_anon:57276kB inactive_anon:104628kB active_file:40kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:127804kB dirty:0kB writeback:0kB shmem:106064kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1484.005240] ? zone_watermark_ok_safe+0x220/0x220 [ 1484.005250] ? usleep_range+0x130/0x130 [ 1484.005261] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1484.008879] Node 1 active_anon:1508kB inactive_anon:36116kB active_file:28kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:83188kB dirty:0kB writeback:0kB shmem:36372kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1484.012836] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1484.017170] Node 0 [ 1484.045199] ? run_timer_softirq+0x5a0/0x5a0 [ 1484.045216] __alloc_pages_nodemask+0x2127/0x2720 [ 1484.045238] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1484.050063] DMA free:10984kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1484.054024] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1484.059132] lowmem_reserve[]: [ 1484.087646] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1484.087666] alloc_pages_current+0x155/0x260 [ 1484.092662] 0 [ 1484.094893] ion_page_pool_alloc+0x118/0x1b0 [ 1484.094903] ion_system_heap_allocate+0x133/0x8c0 [ 1484.094912] ? ion_alloc+0x187/0x810 [ 1484.099410] 2717 [ 1484.104242] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1484.104252] ? ion_system_contig_heap_create+0x130/0x130 [ 1484.104264] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1484.109106] 2718 [ 1484.135618] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1484.135630] ion_alloc+0x204/0x810 [ 1484.135644] ? ion_dma_buf_release+0x40/0x40 [ 1484.140215] 2718 [ 1484.143399] ? __might_fault+0x177/0x1b0 [ 1484.148875] 2718 [ 1484.153339] ion_ioctl+0xea/0x1f0 [ 1484.159519] ? ion_query_heaps+0x360/0x360 [ 1484.164359] Node 0 [ 1484.168051] ? ion_query_heaps+0x360/0x360 [ 1484.170106] DMA32 free:18608kB min:36200kB low:45248kB high:54296kB active_anon:57276kB inactive_anon:104628kB active_file:40kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7360kB pagetables:2428kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1484.175628] do_vfs_ioctl+0x75a/0xff0 [ 1484.175639] ? ioctl_preallocate+0x1a0/0x1a0 [ 1484.175650] ? lock_downgrade+0x740/0x740 [ 1484.181075] lowmem_reserve[]: 0 [ 1484.186091] ? __fget+0x225/0x360 [ 1484.186100] ? do_vfs_ioctl+0xff0/0xff0 [ 1484.186115] ? security_file_ioctl+0x83/0xb0 [ 1484.186125] SyS_ioctl+0x7f/0xb0 [ 1484.188365] 0 [ 1484.193195] ? do_vfs_ioctl+0xff0/0xff0 [ 1484.196829] 0 [ 1484.201522] do_syscall_64+0x1d5/0x640 [ 1484.203653] 0 [ 1484.207706] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1484.207715] RIP: 0033:0x4665d9 [ 1484.207719] RSP: 002b:00007f3d1f881188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1484.209792] 0 [ 1484.213250] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1484.219698] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1484.223998] Node 0 [ 1484.252192] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1484.252198] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1484.252202] R13: 00007ffdbbfa296f R14: 00007f3d1f881300 R15: 0000000000022000 [ 1484.264250] CPU: 1 PID: 4629 Comm: systemd-udevd Not tainted 4.14.232-syzkaller #0 [ 1484.279011] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1484.281220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1484.284601] lowmem_reserve[]: [ 1484.286403] Call Trace: [ 1484.290359] 0 [ 1484.292157] dump_stack+0x1b2/0x281 [ 1484.296240] 0 [ 1484.298096] dump_header+0x178/0x82f [ 1484.303262] 0 [ 1484.306800] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1484.306810] ? ___ratelimit+0x2cd/0x530 [ 1484.306820] oom_kill_process.cold+0x10/0xa40 [ 1484.314532] 0 [ 1484.316428] ? lock_downgrade+0x740/0x740 [ 1484.323680] 0 [ 1484.331030] out_of_memory+0x2dc/0x1190 [ 1484.331043] ? oom_killer_disable+0x1c0/0x1c0 [ 1484.331053] ? mutex_trylock+0x152/0x1a0 [ 1484.340618] __alloc_pages_nodemask+0x23e1/0x2720 [ 1484.340639] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1484.348103] Node 1 [ 1484.355452] alloc_pages_current+0x155/0x260 [ 1484.355464] filemap_fault+0x11a1/0x1ad0 [ 1484.363198] Normal free:26824kB min:53696kB low:67120kB high:80544kB active_anon:1508kB inactive_anon:36116kB active_file:28kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:648kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1484.388084] ext4_filemap_fault+0x84/0xb0 [ 1484.388096] __do_fault+0xfa/0x380 [ 1484.388107] __handle_mm_fault+0x2497/0x4620 [ 1484.397505] lowmem_reserve[]: [ 1484.400584] ? lock_downgrade+0x740/0x740 [ 1484.403149] 0 [ 1484.405027] ? vm_insert_page+0x7c0/0x7c0 [ 1484.405043] ? mark_held_locks+0xa6/0xf0 [ 1484.405054] handle_mm_fault+0x455/0x9c0 [ 1484.408663] 0 [ 1484.410452] __do_page_fault+0x549/0xad0 [ 1484.414256] 0 [ 1484.416034] ? spurious_fault+0x640/0x640 [ 1484.421112] 0 [ 1484.425072] ? do_page_fault+0x60/0x500 [ 1484.425080] ? page_fault+0x2f/0x50 [ 1484.425090] page_fault+0x45/0x50 [ 1484.429741] 0 [ 1484.431561] RIP: 1b2b4010:0x55a21b2b4010 [ 1484.438091] RSP: 1b2c8ab0:000055a21a7e1d18 EFLAGS: 55a21b2b40e0 [ 1484.442169] Node 0 [ 1484.454327] Mem-Info: [ 1484.466179] DMA: [ 1484.469287] active_anon:14696 inactive_anon:35186 isolated_anon:0 [ 1484.469287] active_file:17 inactive_file:17 isolated_file:0 [ 1484.469287] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1484.469287] slab_reclaimable:12506 slab_unreclaimable:121842 [ 1484.469287] mapped:52748 shmem:35609 pagetables:769 bounce:0 [ 1484.469287] free:14129 free_pcp:3 free_cma:0 [ 1484.471402] 0*4kB [ 1484.501661] Node 0 active_anon:57276kB inactive_anon:104628kB active_file:40kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:127804kB dirty:0kB writeback:0kB shmem:106064kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1484.515362] 1*8kB [ 1484.521042] Node 1 active_anon:1508kB inactive_anon:36116kB active_file:28kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:83188kB dirty:0kB writeback:0kB shmem:36372kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1484.535296] (E) [ 1484.541099] Node 0 [ 1484.553604] 8*16kB [ 1484.556497] DMA free:10984kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1484.560068] (UE) [ 1484.563925] lowmem_reserve[]: [ 1484.575875] 5*32kB [ 1484.589523] 0 [ 1484.615978] (UE) [ 1484.653086] 2717 2718 2718 2718 [ 1484.763130] Node 0 DMA32 free:59732kB min:36200kB low:45248kB high:54296kB active_anon:57276kB inactive_anon:104628kB active_file:40kB inactive_file:2736kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7360kB pagetables:2428kB bounce:0kB free_pcp:172kB local_pcp:16kB free_cma:0kB [ 1484.774201] 3*64kB (UE) 2*128kB (UE) 2*256kB (UE) 1*512kB (E) 3*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10984kB [ 1484.857658] lowmem_reserve[]: 0 0 0 0 0 [ 1484.861698] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1484.864339] Node 0 DMA32: 809*4kB (UME) 180*8kB (UME) 98*16kB (UME) 33*32kB (UME) 93*64kB (U) 40*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18372kB [ 1484.976711] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1484.983779] lowmem_reserve[]: [ 1484.995496] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1485.001593] 0 [ 1485.011911] Node 1 Normal: 53*4kB (UM) 37*8kB (UM) 22*16kB (UM) 17*32kB (UME) 267*64kB (UME) 33*128kB (UME) 3*256kB (UM) 6*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26556kB [ 1485.022818] syz-executor.2 cpuset= [ 1485.029297] 0 0 0 0 [ 1485.039723] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1485.041561] Node 1 [ 1485.048624] / mems_allowed=0-1 [ 1485.054081] CPU: 1 PID: 16784 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1485.054206] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1485.061987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1485.070819] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1485.080209] Call Trace: [ 1485.080231] dump_stack+0x1b2/0x281 [ 1485.080245] warn_alloc.cold+0x96/0x1cc [ 1485.090289] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1485.091637] ? zone_watermark_ok_safe+0x220/0x220 [ 1485.095264] 35673 total pagecache pages [ 1485.099221] __alloc_pages_nodemask+0x2127/0x2720 [ 1485.107886] 0 pages in swap cache [ 1485.112715] ? io_schedule_timeout+0x140/0x140 [ 1485.116782] Swap cache stats: add 0, delete 0, find 0/0 [ 1485.121616] ? lock_acquire+0x170/0x3f0 [ 1485.125072] Free swap = 0kB [ 1485.129708] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1485.135065] Total swap = 0kB [ 1485.139018] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1485.142008] 2097051 pages RAM [ 1485.146838] ? __mutex_unlock_slowpath+0x75/0x770 [ 1485.146845] ? retint_kernel+0x2d/0x2d [ 1485.146864] alloc_pages_current+0x155/0x260 [ 1485.149875] 0 pages HighMem/MovableOnly [ 1485.155313] ion_page_pool_alloc+0x118/0x1b0 [ 1485.155322] ion_system_heap_allocate+0x133/0x8c0 [ 1485.155335] ? _raw_spin_unlock+0x29/0x40 [ 1485.158422] 363849 pages reserved [ 1485.163249] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1485.167149] 0 pages cma reserved [ 1485.171623] ? ion_system_contig_heap_create+0x130/0x130 [ 1485.206342] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1485.210595] Normal free:26416kB min:53696kB low:67120kB high:80544kB active_anon:1508kB inactive_anon:36116kB active_file:56kB inactive_file:40kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:648kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1485.211360] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1485.239320] lowmem_reserve[]: 0 [ 1485.244126] ion_alloc+0x27a/0x810 [ 1485.244140] ? ion_dma_buf_release+0x40/0x40 [ 1485.247419] 0 [ 1485.251033] ? __might_fault+0x177/0x1b0 [ 1485.255438] 0 [ 1485.257215] ion_ioctl+0xea/0x1f0 [ 1485.261359] 0 0 [ 1485.263262] ? ion_query_heaps+0x360/0x360 [ 1485.268686] ? ion_query_heaps+0x360/0x360 [ 1485.273077] Node 0 [ 1485.277301] do_vfs_ioctl+0x75a/0xff0 [ 1485.277314] ? ioctl_preallocate+0x1a0/0x1a0 [ 1485.277324] ? lock_downgrade+0x740/0x740 [ 1485.279573] DMA: [ 1485.283478] ? __fget+0x225/0x360 [ 1485.287889] 1*4kB [ 1485.292088] ? do_vfs_ioctl+0xff0/0xff0 [ 1485.294205] (U) [ 1485.297738] ? security_file_ioctl+0x83/0xb0 [ 1485.299880] 1*8kB [ 1485.303842] SyS_ioctl+0x7f/0xb0 [ 1485.305835] (E) [ 1485.310213] ? do_vfs_ioctl+0xff0/0xff0 [ 1485.312352] 6*16kB [ 1485.315707] do_syscall_64+0x1d5/0x640 [ 1485.315722] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1485.315730] RIP: 0033:0x4665d9 [ 1485.317784] (UE) [ 1485.321741] RSP: 002b:00007f3d1f881188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1485.323965] 5*32kB [ 1485.327835] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1485.327845] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1485.327850] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1485.327855] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1485.327859] R13: 00007ffdbbfa296f R14: 00007f3d1f881300 R15: 0000000000022000 [ 1485.335261] warn_alloc_show_mem: 1 callbacks suppressed [ 1485.335264] Mem-Info: [ 1485.346885] syz-executor.3: [ 1485.355809] active_anon:14699 inactive_anon:35186 isolated_anon:0 [ 1485.355809] active_file:16 inactive_file:12 isolated_file:0 [ 1485.355809] unevictable:0 dirty:4 writeback:16 unstable:0 [ 1485.355809] slab_reclaimable:12497 slab_unreclaimable:121992 [ 1485.355809] mapped:52800 shmem:35609 pagetables:769 bounce:0 [ 1485.355809] free:13998 free_pcp:0 free_cma:0 [ 1485.371405] page allocation failure: order:0 [ 1485.385345] Node 0 active_anon:57288kB inactive_anon:104628kB active_file:56kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:127940kB dirty:16kB writeback:60kB shmem:106064kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1485.397328] (UE) [ 1485.437155] Node 1 active_anon:1508kB inactive_anon:36116kB active_file:8kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:83260kB dirty:0kB writeback:4kB shmem:36372kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1485.468582] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1485.502543] Node 0 [ 1485.502859] (null) [ 1485.509754] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1485.509757] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1485.509776] Node 0 DMA32 free:18620kB min:36200kB low:45248kB high:54296kB active_anon:57288kB inactive_anon:104628kB active_file:0kB inactive_file:128kB unevictable:0kB writepending:76kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7360kB pagetables:2428kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1485.512610] syz-executor.3 cpuset= [ 1485.521853] lowmem_reserve[]: [ 1485.543850] 3*64kB [ 1485.557734] 0 [ 1485.580199] / mems_allowed=0-1 [ 1485.588411] CPU: 0 PID: 16787 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1485.591078] 0 [ 1485.596370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1485.596374] Call Trace: [ 1485.596393] dump_stack+0x1b2/0x281 [ 1485.596411] warn_alloc.cold+0x96/0x1cc [ 1485.596425] ? zone_watermark_ok_safe+0x220/0x220 [ 1485.598218] 0 [ 1485.607830] ? usleep_range+0x130/0x130 [ 1485.607838] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1485.607849] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1485.607858] ? run_timer_softirq+0x5a0/0x5a0 [ 1485.607873] __alloc_pages_nodemask+0x2127/0x2720 [ 1485.607888] ? lock_acquire+0x170/0x3f0 [ 1485.607902] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1485.607911] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1485.607926] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1485.607944] alloc_pages_current+0x155/0x260 [ 1485.607957] ion_page_pool_alloc+0x118/0x1b0 [ 1485.619846] 0 [ 1485.622950] ion_system_heap_allocate+0x133/0x8c0 [ 1485.627113] 0 [ 1485.628723] ? _raw_spin_unlock+0x29/0x40 [ 1485.639080] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1485.639088] ? ion_system_contig_heap_create+0x130/0x130 [ 1485.639097] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1485.639108] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1485.639118] ion_alloc+0x27a/0x810 [ 1485.639130] ? ion_dma_buf_release+0x40/0x40 [ 1485.639141] ? __might_fault+0x177/0x1b0 [ 1485.639152] ion_ioctl+0xea/0x1f0 [ 1485.639160] ? ion_query_heaps+0x360/0x360 [ 1485.639171] ? ion_query_heaps+0x360/0x360 [ 1485.639182] do_vfs_ioctl+0x75a/0xff0 [ 1485.639192] ? ioctl_preallocate+0x1a0/0x1a0 [ 1485.639203] ? lock_downgrade+0x740/0x740 [ 1485.653897] Node 0 [ 1485.657533] ? __fget+0x225/0x360 [ 1485.657542] ? do_vfs_ioctl+0xff0/0xff0 [ 1485.657554] ? security_file_ioctl+0x83/0xb0 [ 1485.657563] SyS_ioctl+0x7f/0xb0 [ 1485.657570] ? do_vfs_ioctl+0xff0/0xff0 [ 1485.657584] do_syscall_64+0x1d5/0x640 [ 1485.662195] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1485.667631] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1485.667639] RIP: 0033:0x4665d9 [ 1485.667643] RSP: 002b:00007f6d56c88188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1485.667652] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1485.667656] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1485.667660] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1485.667665] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1485.667670] R13: 00007ffda15d7cdf R14: 00007f6d56c88300 R15: 0000000000022000 [ 1485.675335] (UE) [ 1485.683810] lowmem_reserve[]: [ 1485.683863] 2*128kB [ 1485.685703] 0 0 0 0 0 [ 1485.685720] Node 1 Normal free:26416kB min:53696kB low:67120kB high:80544kB active_anon:1508kB inactive_anon:36116kB active_file:56kB inactive_file:40kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:648kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1485.685741] lowmem_reserve[]: 0 0 0 0 0 [ 1485.685761] Node 0 [ 1485.697436] (UE) [ 1485.709826] DMA: [ 1485.713889] 2*256kB [ 1485.716884] 1*4kB [ 1485.723204] (UE) [ 1485.732213] (U) [ 1485.736947] 1*512kB [ 1485.750072] 1*8kB [ 1485.753280] (E) [ 1485.772308] (E) [ 1485.776816] 3*1024kB [ 1485.850183] 6*16kB [ 1485.852804] (UE) [ 1485.904720] (UE) 5*32kB (UE) 3*64kB (UE) 2*128kB (UE) 2*256kB (UE) 1*512kB (E) 3*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10956kB [ 1485.951247] 3*2048kB (UME) 0*4096kB = 10956kB [ 1485.952513] Node 0 DMA32: 777*4kB (UME) 323*8kB (ME) 73*16kB (UME) 26*32kB (ME) 113*64kB (UM) 148*128kB (UM) 4*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 35404kB [ 1485.959824] Node 0 DMA32: 777*4kB (UME) 323*8kB (ME) 73*16kB (UME) 26*32kB (ME) 113*64kB (UM) 148*128kB (UM) 4*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 35404kB [ 1485.971664] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1485.990017] Node 0 [ 1485.997896] Node 1 Normal: [ 1486.000260] Normal: [ 1486.000268] 52*4kB [ 1486.003286] 0*4kB [ 1486.005688] (M) 37*8kB (UM) 21*16kB (M) 17*32kB (UME) 42*64kB (UME) 159*128kB (UME) 60*256kB (UM) 26*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 53096kB [ 1486.010976] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1486.024182] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1486.035618] Node 1 Normal: 52*4kB (M) 37*8kB (UM) 21*16kB (M) 17*32kB (UME) 42*64kB (UME) 159*128kB (UME) 60*256kB (UM) 26*512kB (U) 0*1024kB 0*2048kB [ 1486.041675] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1486.041684] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1486.058818] 0*4096kB [ 1486.065253] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1486.073256] = 53096kB [ 1486.075683] 35679 total pagecache pages [ 1486.075696] 0 pages in swap cache [ 1486.087444] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1486.103148] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1486.104133] Swap cache stats: add 0, delete 0, find 0/0 [ 1486.114814] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1486.124001] Free swap = 0kB [ 1486.129009] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1486.129198] Total swap = 0kB [ 1486.137794] 35654 total pagecache pages [ 1486.137802] 0 pages in swap cache [ 1486.137806] Swap cache stats: add 0, delete 0, find 0/0 [ 1486.137809] Free swap = 0kB [ 1486.137812] Total swap = 0kB [ 1486.137817] 2097051 pages RAM [ 1486.137820] 0 pages HighMem/MovableOnly [ 1486.137823] 363849 pages reserved [ 1486.137826] 0 pages cma reserved [ 1486.137833] Out of memory: Kill process 16788 (syz-executor.5) score 1004 or sacrifice child [ 1486.137856] Killed process 16789 (syz-executor.5) total-vm:93516kB, anon-rss:164kB, file-rss:34820kB, shmem-rss:0kB [ 1486.140856] 2097051 pages RAM [ 1486.188688] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1486.194701] 0 pages HighMem/MovableOnly [ 1486.199571] (null) [ 1486.206051] 363849 pages reserved [ 1486.212489] , order=0, oom_score_adj=0 [ 1486.219808] 0 pages cma reserved [ 1486.228204] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1486.253101] CPU: 0 PID: 7961 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 1486.260596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1486.269984] Call Trace: [ 1486.272580] dump_stack+0x1b2/0x281 [ 1486.276208] dump_header+0x178/0x82f [ 1486.279925] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1486.285027] ? ___ratelimit+0x2cd/0x530 [ 1486.288996] oom_kill_process.cold+0x10/0xa40 [ 1486.293498] out_of_memory+0xe3e/0x1190 [ 1486.297478] ? oom_killer_disable+0x1c0/0x1c0 [ 1486.301971] ? mutex_trylock+0x152/0x1a0 [ 1486.306039] __alloc_pages_nodemask+0x23e1/0x2720 [ 1486.310896] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1486.315753] alloc_pages_current+0x155/0x260 [ 1486.320593] filemap_fault+0x11a1/0x1ad0 [ 1486.324665] ext4_filemap_fault+0x84/0xb0 [ 1486.328809] __do_fault+0xfa/0x380 [ 1486.332354] __handle_mm_fault+0x2497/0x4620 [ 1486.336761] ? vm_insert_page+0x7c0/0x7c0 [ 1486.340992] ? lock_downgrade+0x740/0x740 [ 1486.345479] ? mark_held_locks+0xa6/0xf0 [ 1486.349540] handle_mm_fault+0x455/0x9c0 [ 1486.353688] __do_page_fault+0x549/0xad0 [ 1486.357748] ? spurious_fault+0x640/0x640 [ 1486.361898] ? do_page_fault+0x60/0x500 [ 1486.365872] ? page_fault+0x2f/0x50 [ 1486.369496] page_fault+0x45/0x50 [ 1486.372943] RIP: 0000:0x947a5c [ 1486.376138] RSP: 2e000:000000c00003df00 EFLAGS: 0043b6a0 [ 1486.413667] Mem-Info: [ 1486.461734] active_anon:14699 inactive_anon:35186 isolated_anon:0 [ 1486.461734] active_file:18 inactive_file:19 isolated_file:0 [ 1486.461734] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1486.461734] slab_reclaimable:12496 slab_unreclaimable:121980 [ 1486.461734] mapped:52777 shmem:35609 pagetables:732 bounce:0 [ 1486.461734] free:13857 free_pcp:94 free_cma:0 [ 1486.494120] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1486.536287] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1486.551151] Node 0 active_anon:57288kB inactive_anon:104628kB active_file:40kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:127920kB dirty:0kB writeback:0kB shmem:106064kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1486.560011] syz-executor.2 cpuset= [ 1486.584302] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1486.590116] syz-executor.3: [ 1486.607736] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1486.614200] Node 1 active_anon:1508kB inactive_anon:36116kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:83188kB dirty:0kB writeback:0kB shmem:36372kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1486.617831] CPU: 1 PID: 16793 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1486.645198] page allocation failure: order:1 [ 1486.651035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1486.651045] , mode:0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask= [ 1486.655428] Call Trace: [ 1486.655452] dump_stack+0x1b2/0x281 [ 1486.655465] warn_alloc.cold+0x96/0x1cc [ 1486.665035] (null) [ 1486.671859] ? zone_watermark_ok_safe+0x220/0x220 [ 1486.674594] Node 0 [ 1486.678202] ? usleep_range+0x130/0x130 [ 1486.682502] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1486.684628] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1486.684642] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1486.684651] ? run_timer_softirq+0x5a0/0x5a0 [ 1486.684668] __alloc_pages_nodemask+0x2127/0x2720 [ 1486.689493] syz-executor.3 cpuset= [ 1486.691713] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1486.695682] / [ 1486.721268] ? migrate_swap_stop+0x880/0x880 [ 1486.721277] ? lock_acquire+0x170/0x3f0 [ 1486.721297] alloc_pages_current+0x155/0x260 [ 1486.721310] ion_page_pool_alloc+0x118/0x1b0 [ 1486.726555] lowmem_reserve[]: [ 1486.731507] ion_system_heap_allocate+0x133/0x8c0 [ 1486.735951] 0 [ 1486.740932] ? ion_alloc+0x187/0x810 [ 1486.744473] 2717 [ 1486.749389] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1486.751083] 2718 [ 1486.755486] ? ion_system_contig_heap_create+0x130/0x130 [ 1486.755495] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1486.755506] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1486.755516] ion_alloc+0x204/0x810 [ 1486.759483] mems_allowed=0-1 [ 1486.763865] ? ion_dma_buf_release+0x40/0x40 [ 1486.768292] 2718 [ 1486.771450] ? __might_fault+0x177/0x1b0 [ 1486.794064] 2718 [ 1486.797852] ion_ioctl+0xea/0x1f0 [ 1486.807671] ? ion_query_heaps+0x360/0x360 [ 1486.807682] ? ion_query_heaps+0x360/0x360 [ 1486.807693] do_vfs_ioctl+0x75a/0xff0 [ 1486.807704] ? ioctl_preallocate+0x1a0/0x1a0 [ 1486.824032] Node 0 [ 1486.824770] ? lock_downgrade+0x740/0x740 [ 1486.826818] DMA32 free:17668kB min:36200kB low:45248kB high:54296kB active_anon:57288kB inactive_anon:104628kB active_file:52kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7360kB pagetables:2428kB bounce:0kB free_pcp:124kB local_pcp:4kB free_cma:0kB [ 1486.830355] ? __fget+0x225/0x360 [ 1486.844056] lowmem_reserve[]: [ 1486.847221] ? do_vfs_ioctl+0xff0/0xff0 [ 1486.849425] 0 [ 1486.853558] ? security_file_ioctl+0x83/0xb0 [ 1486.898395] SyS_ioctl+0x7f/0xb0 [ 1486.901745] ? do_vfs_ioctl+0xff0/0xff0 [ 1486.905704] do_syscall_64+0x1d5/0x640 [ 1486.909577] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1486.914775] RIP: 0033:0x4665d9 [ 1486.918062] RSP: 002b:00007f7465960188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1486.924045] 0 [ 1486.925763] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 00000000004665d9 [ 1486.925771] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1486.927565] 0 [ 1486.934920] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1486.934925] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1486.934929] R13: 00007ffc7a8155ff R14: 00007f7465960300 R15: 0000000000022000 [ 1486.947153] / [ 1486.963780] CPU: 0 PID: 16787 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1486.970039] syz-executor.5 cpuset= [ 1486.976060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1486.976064] Call Trace: [ 1486.976084] dump_stack+0x1b2/0x281 [ 1486.976096] warn_alloc.cold+0x96/0x1cc [ 1486.976105] ? zone_watermark_ok_safe+0x220/0x220 [ 1486.976115] ? usleep_range+0x130/0x130 [ 1486.979641] / [ 1486.988992] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1486.995495] mems_allowed=0-1 [ 1486.999311] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1487.006144] mems_allowed=0-1 [ 1487.008111] ? run_timer_softirq+0x5a0/0x5a0 [ 1487.030847] __alloc_pages_nodemask+0x2127/0x2720 [ 1487.035714] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1487.040578] ? tun_chr_close+0x41/0x60 [ 1487.044500] ? __fput+0x25f/0x7a0 [ 1487.047955] ? task_work_run+0x11f/0x190 [ 1487.052005] ? mark_held_locks+0xa6/0xf0 [ 1487.056051] ? cache_grow_begin+0x3f/0x700 [ 1487.060269] cache_grow_begin+0x91/0x700 [ 1487.064322] fallback_alloc+0x207/0x2c0 [ 1487.068288] kmem_cache_alloc_node_trace+0xed/0x400 [ 1487.073286] __kmalloc_node_track_caller+0x38/0x70 [ 1487.078246] __alloc_skb+0x460/0x510 [ 1487.081945] rtmsg_ifinfo_build_skb+0x65/0x130 [ 1487.086510] rtmsg_ifinfo+0x68/0x100 [ 1487.090292] dev_close_many+0x2bf/0x5f0 [ 1487.094261] ? __dev_close_many+0x270/0x270 [ 1487.098572] rollback_registered_many+0x399/0xba0 [ 1487.103414] ? netdev_state_change+0xf0/0xf0 [ 1487.107806] ? queue_delayed_work_on+0x114/0x1d0 [ 1487.112543] rollback_registered+0xca/0x170 [ 1487.116849] ? rollback_registered_many+0xba0/0xba0 [ 1487.121848] ? linkwatch_schedule_work+0xe5/0x110 [ 1487.126674] unregister_netdevice_queue+0x1b4/0x360 [ 1487.131672] __tun_detach+0xca2/0xf60 [ 1487.135466] ? tun_recvmsg+0x3b0/0x3b0 [ 1487.139338] tun_chr_close+0x41/0x60 [ 1487.143032] __fput+0x25f/0x7a0 [ 1487.146299] task_work_run+0x11f/0x190 [ 1487.150198] do_exit+0xa44/0x2850 [ 1487.153634] ? mm_update_next_owner+0x5b0/0x5b0 [ 1487.158283] ? get_signal+0x323/0x1ca0 [ 1487.162152] ? lock_acquire+0x170/0x3f0 [ 1487.166108] ? lock_downgrade+0x740/0x740 [ 1487.170237] do_group_exit+0x100/0x2e0 [ 1487.174112] get_signal+0x38d/0x1ca0 [ 1487.177818] ? ion_dma_buf_release+0x40/0x40 [ 1487.182208] do_signal+0x7c/0x1550 [ 1487.185734] ? ion_ioctl+0x13a/0x1f0 [ 1487.189433] ? ion_query_heaps+0x360/0x360 [ 1487.193649] ? setup_sigcontext+0x820/0x820 [ 1487.197949] ? ion_query_heaps+0x360/0x360 [ 1487.202163] ? do_vfs_ioctl+0xe2/0xff0 [ 1487.206039] ? ioctl_preallocate+0x1a0/0x1a0 [ 1487.210434] ? lock_downgrade+0x740/0x740 [ 1487.214573] ? __fget+0x225/0x360 [ 1487.218013] ? task_work_add+0x87/0xe0 [ 1487.221894] ? exit_to_usermode_loop+0x41/0x200 [ 1487.226565] exit_to_usermode_loop+0x160/0x200 [ 1487.231138] ? SyS_ioctl+0x5c/0xb0 [ 1487.234663] do_syscall_64+0x4a3/0x640 [ 1487.238542] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1487.243795] RIP: 0033:0x4665d9 [ 1487.246968] RSP: 002b:00007f6d56c88188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1487.255040] RAX: fffffffffffffff4 RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1487.262383] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1487.269720] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1487.276970] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1487.284222] R13: 00007ffda15d7cdf R14: 00007f6d56c88300 R15: 0000000000022000 [ 1487.291667] CPU: 1 PID: 16789 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1487.299590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1487.307023] 0 [ 1487.308951] Call Trace: [ 1487.308952] 0 [ 1487.310748] dump_stack+0x1b2/0x281 [ 1487.313309] Node 0 [ 1487.315094] warn_alloc.cold+0x96/0x1cc [ 1487.315105] ? zone_watermark_ok_safe+0x220/0x220 [ 1487.315114] ? usleep_range+0x130/0x130 [ 1487.315122] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1487.315134] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1487.318745] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1487.320957] ? run_timer_softirq+0x5a0/0x5a0 [ 1487.324926] lowmem_reserve[]: [ 1487.329735] __alloc_pages_nodemask+0x2127/0x2720 [ 1487.333676] 0 [ 1487.338774] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1487.338786] ? migrate_swap_stop+0x880/0x880 [ 1487.343866] 0 [ 1487.369175] ? lock_acquire+0x170/0x3f0 [ 1487.369197] alloc_pages_current+0x155/0x260 [ 1487.369210] ion_page_pool_alloc+0x118/0x1b0 [ 1487.373604] 0 [ 1487.376708] ion_system_heap_allocate+0x133/0x8c0 [ 1487.376718] ? ion_alloc+0x187/0x810 [ 1487.376729] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1487.381565] 0 [ 1487.383355] ? ion_system_contig_heap_create+0x130/0x130 [ 1487.388187] 0 [ 1487.392578] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1487.398321] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1487.402709] Node 1 [ 1487.407111] ion_alloc+0x204/0x810 [ 1487.407122] ? ion_dma_buf_release+0x40/0x40 [ 1487.407134] ? __might_fault+0x177/0x1b0 [ 1487.408923] Normal free:26804kB min:53696kB low:67120kB high:80544kB active_anon:1508kB inactive_anon:36116kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:544kB bounce:0kB free_pcp:252kB local_pcp:132kB free_cma:0kB [ 1487.413734] ion_ioctl+0xea/0x1f0 [ 1487.417435] lowmem_reserve[]: [ 1487.422878] ? ion_query_heaps+0x360/0x360 [ 1487.424675] 0 [ 1487.430102] ? ion_query_heaps+0x360/0x360 [ 1487.431876] 0 [ 1487.436873] do_vfs_ioctl+0x75a/0xff0 [ 1487.436885] ? ioctl_preallocate+0x1a0/0x1a0 [ 1487.436895] ? lock_downgrade+0x740/0x740 [ 1487.441712] 0 [ 1487.443935] ? __fget+0x225/0x360 [ 1487.447465] 0 [ 1487.451836] ? do_vfs_ioctl+0xff0/0xff0 [ 1487.455893] 0 [ 1487.484148] ? security_file_ioctl+0x83/0xb0 [ 1487.484161] SyS_ioctl+0x7f/0xb0 [ 1487.484171] ? do_vfs_ioctl+0xff0/0xff0 [ 1487.490795] do_syscall_64+0x1d5/0x640 [ 1487.495027] Node 0 [ 1487.496798] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1487.501086] DMA: [ 1487.502871] RIP: 0033:0x4665d9 [ 1487.506663] 1*4kB [ 1487.511125] RSP: 002b:00007f7465981188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1487.515288] (U) [ 1487.517058] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1487.520484] 1*8kB [ 1487.522265] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1487.526231] (E) [ 1487.528005] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1487.528012] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1487.532393] 6*16kB [ 1487.535734] R13: 00007ffc7a8155ff R14: 00007f7465981300 R15: 0000000000022000 [ 1487.540029] CPU: 1 PID: 16784 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1487.543821] (UE) [ 1487.545915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1487.545919] Call Trace: [ 1487.545937] dump_stack+0x1b2/0x281 [ 1487.545951] warn_alloc.cold+0x96/0x1cc [ 1487.545961] ? xfs_trans_binval+0x550/0x5a0 [ 1487.545971] ? zone_watermark_ok_safe+0x220/0x220 [ 1487.545980] ? usleep_range+0x130/0x130 [ 1487.545989] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1487.546001] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1487.546011] ? run_timer_softirq+0x5a0/0x5a0 [ 1487.546027] __alloc_pages_nodemask+0x2127/0x2720 [ 1487.546040] ? lock_acquire+0x170/0x3f0 [ 1487.546056] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1487.546066] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1487.546080] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1487.546092] ? retint_kernel+0x2d/0x2d [ 1487.546105] alloc_pages_current+0x155/0x260 [ 1487.546116] ion_page_pool_alloc+0x118/0x1b0 [ 1487.546126] ion_system_heap_allocate+0x133/0x8c0 [ 1487.546136] ? _raw_spin_unlock+0x29/0x40 [ 1487.546144] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1487.546152] ? ion_system_contig_heap_create+0x130/0x130 [ 1487.546160] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1487.546170] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1487.546180] ion_alloc+0x27a/0x810 [ 1487.546193] ? ion_dma_buf_release+0x40/0x40 [ 1487.546206] ? __might_fault+0x177/0x1b0 [ 1487.546218] ion_ioctl+0xea/0x1f0 [ 1487.546225] ? ion_query_heaps+0x360/0x360 [ 1487.546236] ? ion_query_heaps+0x360/0x360 [ 1487.546249] do_vfs_ioctl+0x75a/0xff0 [ 1487.570829] 5*32kB [ 1487.575985] ? ioctl_preallocate+0x1a0/0x1a0 [ 1487.575996] ? lock_downgrade+0x740/0x740 [ 1487.576007] ? __fget+0x225/0x360 [ 1487.576014] ? do_vfs_ioctl+0xff0/0xff0 [ 1487.576023] ? security_file_ioctl+0x83/0xb0 [ 1487.576032] SyS_ioctl+0x7f/0xb0 [ 1487.576038] ? do_vfs_ioctl+0xff0/0xff0 [ 1487.576048] do_syscall_64+0x1d5/0x640 [ 1487.576062] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1487.576072] RIP: 0033:0x4665d9 [ 1487.578302] (UE) [ 1487.585461] RSP: 002b:00007f3d1f881188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1487.585470] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1487.585474] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1487.585479] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1487.585484] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1487.585489] R13: 00007ffdbbfa296f R14: 00007f3d1f881300 R15: 0000000000022000 [ 1487.589202] warn_alloc_show_mem: 1 callbacks suppressed [ 1487.589204] Mem-Info: [ 1487.610462] 3*64kB [ 1487.614857] active_anon:14699 inactive_anon:35186 isolated_anon:0 [ 1487.614857] active_file:16 inactive_file:17 isolated_file:0 [ 1487.614857] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1487.614857] slab_reclaimable:12496 slab_unreclaimable:121988 [ 1487.614857] mapped:52761 shmem:35609 pagetables:743 bounce:0 [ 1487.614857] free:13848 free_pcp:101 free_cma:0 [ 1487.628912] (UE) [ 1487.632144] Node 0 active_anon:57288kB inactive_anon:104628kB active_file:32kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:127856kB dirty:0kB writeback:0kB shmem:106064kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1487.633930] 2*128kB [ 1487.639432] Node 1 active_anon:1508kB inactive_anon:36116kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:83188kB dirty:0kB writeback:0kB shmem:36372kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1487.657320] (UE) [ 1487.663766] Node 0 [ 1487.674474] 2*256kB (UE) 1*512kB (E) 3*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10956kB [ 1487.685770] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1487.700789] Node 0 [ 1487.707578] lowmem_reserve[]: [ 1487.717993] DMA32: [ 1487.722700] 0 [ 1487.731898] 838*4kB [ 1487.742125] 2717 [ 1487.743634] (ME) [ 1487.747788] 2718 2718 2718 [ 1487.747801] Node 0 DMA32 free:17632kB min:36200kB low:45248kB high:54296kB active_anon:57288kB inactive_anon:104628kB active_file:32kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7360kB pagetables:2428kB bounce:0kB free_pcp:152kB local_pcp:148kB free_cma:0kB [ 1487.747820] lowmem_reserve[]: 0 0 [ 1487.765749] 323*8kB [ 1487.773240] 0 [ 1487.785888] (ME) [ 1487.814579] 0 [ 1487.819778] 73*16kB [ 1487.823755] 0 [ 1487.831051] (UME) 27*32kB [ 1488.136641] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1488.174895] lowmem_reserve[]: 0 0 0 0 0 [ 1488.179028] Node 1 Normal free:395740kB min:53696kB low:67120kB high:80544kB active_anon:1508kB inactive_anon:36116kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:544kB bounce:0kB free_pcp:1428kB local_pcp:700kB free_cma:0kB [ 1488.282743] (UME) 13*64kB (M) 57*128kB (UM) 4*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 17632kB [ 1488.292830] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1488.313989] lowmem_reserve[]: 0 0 0 0 0 [ 1488.318112] Node 0 DMA: 28*4kB (U) 3*8kB (UE) 9*16kB (UE) 7*32kB (UE) 12*64kB (UE) 7*128kB (UE) 1*256kB (E) 2*512kB (UE) 3*1024kB (UE) 3*2048kB (UME) 0*4096kB = 12664kB [ 1488.341928] Node 0 DMA32: 9056*4kB (UME) 3688*8kB (UME) 3155*16kB (UME) 1788*32kB (UME) 1071*64kB (UME) 382*128kB (UM) 73*256kB (U) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 310576kB [ 1488.384055] Node 1 Normal: 10586*4kB (UME) 3396*8kB (UM) 2172*16kB (UM) 933*32kB (UME) 4096*64kB (UME) 602*128kB (UME) 57*256kB (UM) 37*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 506856kB [ 1488.387036] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1488.433988] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1488.442861] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1488.492573] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1488.524091] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1488.532790] 36873 total pagecache pages [ 1488.537022] Node 1 Normal: 12170*4kB (UME) 3640*8kB (UM) 2252*16kB (UM) 1001*32kB (UME) 3710*64kB (UME) 629*128kB (UME) 67*256kB (UM) 38*512kB (U) 4*1024kB (U) 0*2048kB 0*4096kB = 504520kB [ 1488.553938] 0 pages in swap cache [ 1488.561079] Swap cache stats: add 0, delete 0, find 0/0 [ 1488.588132] Free swap = 0kB [ 1488.591181] Total swap = 0kB [ 1488.608099] 2097051 pages RAM [ 1488.611236] 0 pages HighMem/MovableOnly [ 1488.637013] 363849 pages reserved [ 1488.640503] 0 pages cma reserved [ 1488.654319] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1488.658333] Out of memory (oom_kill_allocating_task): Kill process 7961 (syz-fuzzer) score 0 or sacrifice child [ 1488.665056] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1488.708276] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1488.708511] Killed process 15468 (syz-executor.5) total-vm:84924kB, anon-rss:68kB, file-rss:0kB, shmem-rss:0kB [ 1488.753989] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1488.762619] 37859 total pagecache pages [ 1488.772726] oom_reaper: reaped process 16789 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1488.795662] 0 pages in swap cache [ 1488.799297] Swap cache stats: add 0, delete 0, find 0/0 [ 1488.810599] oom_reaper: reaped process 15468 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1488.833933] Free swap = 0kB [ 1488.837005] Total swap = 0kB [ 1488.841367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1488.851457] 2097051 pages RAM [ 1488.859249] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1488.871397] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1488.874666] 0 pages HighMem/MovableOnly [ 1488.885750] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1488.887725] 363849 pages reserved [ 1488.897056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1488.905195] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1488.910424] CPU: 0 PID: 16793 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1488.918336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1488.927949] Call Trace: [ 1488.930540] dump_stack+0x1b2/0x281 [ 1488.933938] 0 pages cma reserved [ 1488.934169] warn_alloc.cold+0x96/0x1cc [ 1488.941585] ? zone_watermark_ok_safe+0x220/0x220 [ 1488.946456] __alloc_pages_nodemask+0x2127/0x2720 [ 1488.951307] ? lock_acquire+0x170/0x3f0 [ 1488.955289] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1488.960139] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1488.965694] ? __mutex_unlock_slowpath+0x75/0x770 [ 1488.970539] alloc_pages_current+0x155/0x260 [ 1488.975086] ion_page_pool_alloc+0x118/0x1b0 [ 1488.979666] ion_system_heap_allocate+0x133/0x8c0 [ 1488.984515] ? _raw_spin_unlock+0x29/0x40 [ 1488.988669] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1488.993599] ? ion_system_contig_heap_create+0x130/0x130 [ 1488.999054] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1489.004096] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1489.009069] ion_alloc+0x27a/0x810 [ 1489.012632] ? ion_dma_buf_release+0x40/0x40 [ 1489.017052] ? __might_fault+0x177/0x1b0 [ 1489.021119] ion_ioctl+0xea/0x1f0 [ 1489.024575] ? ion_query_heaps+0x360/0x360 [ 1489.028903] ? ion_query_heaps+0x360/0x360 [ 1489.033287] do_vfs_ioctl+0x75a/0xff0 [ 1489.037093] ? ioctl_preallocate+0x1a0/0x1a0 [ 1489.041505] ? lock_downgrade+0x740/0x740 [ 1489.045659] ? __fget+0x225/0x360 [ 1489.049115] ? do_vfs_ioctl+0xff0/0xff0 [ 1489.053089] ? security_file_ioctl+0x83/0xb0 [ 1489.057504] SyS_ioctl+0x7f/0xb0 [ 1489.060865] ? do_vfs_ioctl+0xff0/0xff0 [ 1489.064861] do_syscall_64+0x1d5/0x640 [ 1489.068755] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1489.073984] RIP: 0033:0x4665d9 [ 1489.077186] RSP: 002b:00007f7465960188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1489.084901] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 00000000004665d9 [ 1489.092260] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1489.099537] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1489.102244] device bridge_slave_1 left promiscuous mode [ 1489.106892] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1489.106898] R13: 00007ffc7a8155ff R14: 00007f7465960300 R15: 0000000000022000 [ 1489.109067] warn_alloc_show_mem: 3 callbacks suppressed [ 1489.109071] Mem-Info: [ 1489.142941] bridge0: port 2(bridge_slave_1) entered disabled state [ 1489.151885] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1489.156313] active_anon:14651 inactive_anon:35185 isolated_anon:12 [ 1489.156313] active_file:1168 inactive_file:1131 isolated_file:0 [ 1489.156313] unevictable:0 dirty:46 writeback:0 unstable:0 [ 1489.156313] slab_reclaimable:12453 slab_unreclaimable:121203 [ 1489.156313] mapped:37228 shmem:35607 pagetables:699 bounce:0 [ 1489.156313] free:92710 free_pcp:78 free_cma:0 [ 1489.183947] syz-executor.5 cpuset= [ 1489.202108] Node 0 active_anon:57180kB inactive_anon:104624kB active_file:4668kB inactive_file:4520kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:118252kB dirty:184kB writeback:0kB shmem:106056kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1489.223930] / [ 1489.238267] Node 1 active_anon:1424kB inactive_anon:36116kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:30760kB dirty:0kB writeback:0kB shmem:36372kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1489.253947] mems_allowed=0-1 [ 1489.271766] Node 0 DMA free:11000kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1489.294440] CPU: 1 PID: 16789 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1489.301556] lowmem_reserve[]: [ 1489.305896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1489.305900] Call Trace: [ 1489.305918] dump_stack+0x1b2/0x281 [ 1489.305932] warn_alloc.cold+0x96/0x1cc [ 1489.305943] ? zone_watermark_ok_safe+0x220/0x220 [ 1489.305964] __alloc_pages_nodemask+0x2127/0x2720 [ 1489.305976] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1489.305988] ? lock_acquire+0x170/0x3f0 [ 1489.306004] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1489.306022] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1489.306034] ? __mutex_unlock_slowpath+0x75/0x770 [ 1489.306049] alloc_pages_current+0x155/0x260 [ 1489.306060] ion_page_pool_alloc+0x118/0x1b0 [ 1489.306075] ion_system_heap_allocate+0x133/0x8c0 [ 1489.310752] 0 [ 1489.318519] ? _raw_spin_unlock+0x29/0x40 [ 1489.318530] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1489.318538] ? ion_system_contig_heap_create+0x130/0x130 [ 1489.318547] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1489.318559] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1489.321757] 2717 [ 1489.324773] ion_alloc+0x27a/0x810 [ 1489.324786] ? ion_dma_buf_release+0x40/0x40 [ 1489.324798] ? __might_fault+0x177/0x1b0 [ 1489.324809] ion_ioctl+0xea/0x1f0 [ 1489.329268] 2718 [ 1489.333607] ? ion_query_heaps+0x360/0x360 [ 1489.338615] 2718 [ 1489.343447] ? ion_query_heaps+0x360/0x360 [ 1489.347417] 2718 [ 1489.352228] do_vfs_ioctl+0x75a/0xff0 [ 1489.362589] ? ioctl_preallocate+0x1a0/0x1a0 [ 1489.367002] Node 0 [ 1489.371389] ? lock_downgrade+0x740/0x740 [ 1489.376257] DMA32 free:206936kB min:36200kB low:45248kB high:54296kB active_anon:57324kB inactive_anon:104624kB active_file:4752kB inactive_file:4460kB unevictable:0kB writepending:184kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7296kB pagetables:2360kB bounce:0kB free_pcp:252kB local_pcp:224kB free_cma:0kB [ 1489.378113] ? __fget+0x225/0x360 [ 1489.382275] lowmem_reserve[]: [ 1489.387201] ? do_vfs_ioctl+0xff0/0xff0 [ 1489.387212] ? security_file_ioctl+0x83/0xb0 [ 1489.387220] SyS_ioctl+0x7f/0xb0 [ 1489.387228] ? do_vfs_ioctl+0xff0/0xff0 [ 1489.387238] do_syscall_64+0x1d5/0x640 [ 1489.387252] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1489.394372] 0 [ 1489.397724] RIP: 0033:0x4665d9 [ 1489.402545] 0 [ 1489.404596] RSP: 002b:00007f7465981188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1489.404605] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1489.404609] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1489.404616] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1489.404621] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1489.404628] R13: 00007ffc7a8155ff R14: 00007f7465981300 R15: 0000000000022000 [ 1489.408150] 0 [ 1489.427992] device bridge_slave_0 left promiscuous mode [ 1489.429480] 0 [ 1489.433242] bridge0: port 1(bridge_slave_0) entered disabled state [ 1489.435371] 0 [ 1489.497688] device veth1_macvtap left promiscuous mode [ 1489.497709] device veth0_macvtap left promiscuous mode [ 1489.514687] device veth1_vlan left promiscuous mode [ 1489.517186] Node 0 [ 1489.519397] device veth0_vlan left promiscuous mode [ 1489.521193] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1489.521199] lowmem_reserve[]: 0 0 0 0 0 [ 1489.636352] Node 1 Normal free:149576kB min:53696kB low:67120kB high:80544kB active_anon:1424kB inactive_anon:36116kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:436kB bounce:0kB free_pcp:48kB local_pcp:48kB free_cma:0kB [ 1489.665483] lowmem_reserve[]: 0 0 0 0 0 [ 1489.669487] Node 0 DMA: 28*4kB (U) 3*8kB (UE) 9*16kB (UE) 7*32kB (UE) 2*64kB (UE) 7*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11000kB [ 1489.685012] Node 0 DMA32: 65*4kB (UME) 142*8kB (UME) 3124*16kB (UME) 2324*32kB (UME) 32*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 127796kB [ 1489.699960] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1489.711328] Node 1 Normal: 12059*4kB (UM) 3890*8kB (UM) 2344*16kB (UM) 1037*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 150044kB [ 1489.729066] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1489.738318] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1489.750321] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1489.771579] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1489.792799] 38023 total pagecache pages [ 1489.796885] 0 pages in swap cache [ 1489.800340] Swap cache stats: add 0, delete 0, find 0/0 [ 1489.819653] device hsr_slave_1 left promiscuous mode [ 1489.828059] Free swap = 0kB [ 1489.831185] Total swap = 0kB [ 1489.839047] 2097051 pages RAM [ 1489.839084] device hsr_slave_0 left promiscuous mode [ 1489.851875] 0 pages HighMem/MovableOnly [ 1489.867602] 363849 pages reserved [ 1489.871158] 0 pages cma reserved [ 1489.887643] team0 (unregistering): Port device team_slave_1 removed [ 1489.916583] team0 (unregistering): Port device team_slave_0 removed [ 1489.951311] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1489.958923] cron invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1489.984740] cron cpuset=/ mems_allowed=0-1 [ 1490.003944] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1490.013082] CPU: 0 PID: 7668 Comm: cron Not tainted 4.14.232-syzkaller #0 [ 1490.020030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1490.029452] Call Trace: [ 1490.032116] dump_stack+0x1b2/0x281 [ 1490.035741] dump_header+0x178/0x82f [ 1490.039456] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1490.044539] ? ___ratelimit+0x2cd/0x530 [ 1490.048494] oom_kill_process.cold+0x10/0xa40 [ 1490.052975] out_of_memory+0xe3e/0x1190 [ 1490.056936] ? oom_killer_disable+0x1c0/0x1c0 [ 1490.061414] ? mutex_trylock+0x152/0x1a0 [ 1490.065461] __alloc_pages_nodemask+0x23e1/0x2720 [ 1490.070290] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1490.075126] alloc_pages_current+0x155/0x260 [ 1490.079601] filemap_fault+0x11a1/0x1ad0 [ 1490.083657] ext4_filemap_fault+0x84/0xb0 [ 1490.087786] __do_fault+0xfa/0x380 [ 1490.091307] __handle_mm_fault+0x2497/0x4620 [ 1490.095786] ? vm_insert_page+0x7c0/0x7c0 [ 1490.099916] ? free_object+0xe4/0x240 [ 1490.103705] ? mark_held_locks+0xa6/0xf0 [ 1490.107757] handle_mm_fault+0x455/0x9c0 [ 1490.111802] __do_page_fault+0x549/0xad0 [ 1490.115860] ? spurious_fault+0x640/0x640 [ 1490.120077] ? do_page_fault+0x60/0x500 [ 1490.124289] ? page_fault+0x2f/0x50 [ 1490.127920] page_fault+0x45/0x50 [ 1490.131360] RIP: 518fd730: (null) [ 1490.135660] RSP: 003b:00007ffe518fd610 EFLAGS: 00000000 [ 1490.168950] bond0 (unregistering): Released all slaves [ 1490.179856] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1490.197956] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1490.203432] CPU: 0 PID: 16793 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1490.210708] Mem-Info: [ 1490.211329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1490.213741] active_anon:14626 inactive_anon:35186 isolated_anon:0 [ 1490.213741] active_file:41 inactive_file:13 isolated_file:0 [ 1490.213741] unevictable:0 dirty:15 writeback:18 unstable:0 [ 1490.213741] slab_reclaimable:12329 slab_unreclaimable:120777 [ 1490.213741] mapped:35458 shmem:35607 pagetables:650 bounce:0 [ 1490.213741] free:13980 free_pcp:184 free_cma:0 [ 1490.223162] Call Trace: [ 1490.223180] dump_stack+0x1b2/0x281 [ 1490.223193] warn_alloc.cold+0x96/0x1cc [ 1490.223205] ? zone_watermark_ok_safe+0x220/0x220 [ 1490.223215] ? usleep_range+0x130/0x130 [ 1490.223222] ? try_to_free_pages+0x23f/0x6e0 [ 1490.223232] ? _find_next_bit+0xdb/0x100 [ 1490.223242] ? run_timer_softirq+0x5a0/0x5a0 [ 1490.223259] __alloc_pages_nodemask+0x2127/0x2720 [ 1490.223274] ? lock_acquire+0x170/0x3f0 [ 1490.223298] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1490.266037] Node 0 active_anon:57088kB inactive_anon:104628kB active_file:160kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:111112kB dirty:56kB writeback:72kB shmem:106056kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1490.267421] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1490.272251] Node 1 active_anon:1416kB inactive_anon:36116kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:30720kB dirty:4kB writeback:0kB shmem:36372kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1490.276209] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1490.276228] alloc_pages_current+0x155/0x260 [ 1490.276239] ion_page_pool_alloc+0x118/0x1b0 [ 1490.276248] ion_system_heap_allocate+0x133/0x8c0 [ 1490.276259] ? _raw_spin_unlock+0x29/0x40 [ 1490.276267] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1490.276275] ? ion_system_contig_heap_create+0x130/0x130 [ 1490.276285] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1490.276295] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1490.276305] ion_alloc+0x27a/0x810 [ 1490.276318] ? ion_dma_buf_release+0x40/0x40 [ 1490.276330] ? __might_fault+0x177/0x1b0 [ 1490.276341] ion_ioctl+0xea/0x1f0 [ 1490.307552] Node 0 [ 1490.331097] ? ion_query_heaps+0x360/0x360 [ 1490.331109] ? ion_query_heaps+0x360/0x360 [ 1490.331118] do_vfs_ioctl+0x75a/0xff0 [ 1490.331129] ? ioctl_preallocate+0x1a0/0x1a0 [ 1490.331138] ? lock_downgrade+0x740/0x740 [ 1490.331150] ? __fget+0x225/0x360 [ 1490.331158] ? do_vfs_ioctl+0xff0/0xff0 [ 1490.331170] ? security_file_ioctl+0x83/0xb0 [ 1490.331179] SyS_ioctl+0x7f/0xb0 [ 1490.331186] ? do_vfs_ioctl+0xff0/0xff0 [ 1490.331210] do_syscall_64+0x1d5/0x640 [ 1490.331226] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1490.331233] RIP: 0033:0x4665d9 [ 1490.331240] RSP: 002b:00007f7465960188 EFLAGS: 00000246 [ 1490.390131] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1490.391103] ORIG_RAX: 0000000000000010 [ 1490.401813] lowmem_reserve[]: [ 1490.406398] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 00000000004665d9 [ 1490.406403] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1490.406408] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1490.406412] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1490.406416] R13: 00007ffc7a8155ff R14: 00007f7465960300 R15: 0000000000022000 [ 1490.413057] warn_alloc_show_mem: 1 callbacks suppressed [ 1490.413061] Mem-Info: [ 1490.414499] syz-executor.5: [ 1490.418525] active_anon:14626 inactive_anon:35186 isolated_anon:0 [ 1490.418525] active_file:41 inactive_file:13 isolated_file:0 [ 1490.418525] unevictable:0 dirty:15 writeback:18 unstable:0 [ 1490.418525] slab_reclaimable:12329 slab_unreclaimable:120752 [ 1490.418525] mapped:35458 shmem:35607 pagetables:650 bounce:0 [ 1490.418525] free:13831 free_pcp:235 free_cma:0 [ 1490.421942] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1490.429787] Node 0 active_anon:57088kB inactive_anon:104628kB active_file:160kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:111112kB dirty:56kB writeback:72kB shmem:106056kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1490.456742] 0 [ 1490.474910] Node 1 active_anon:1416kB inactive_anon:36116kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:30720kB dirty:4kB writeback:0kB shmem:36372kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1490.480407] (null) [ 1490.482117] Node 0 [ 1490.509701] 2717 [ 1490.526524] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1490.539392] syz-executor.5 cpuset= [ 1490.554747] lowmem_reserve[]: [ 1490.570208] 2718 [ 1490.618203] 0 [ 1490.639775] / [ 1490.684264] 2717 [ 1490.701688] 2718 2718 [ 1490.718913] mems_allowed=0-1 [ 1490.722033] CPU: 1 PID: 16789 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1490.726304] 2718 [ 1490.729928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1490.729934] 2718 [ 1490.732001] Call Trace: [ 1490.741372] 2718 [ 1490.743419] dump_stack+0x1b2/0x281 [ 1490.748025] warn_alloc.cold+0x96/0x1cc [ 1490.751633] Node 0 [ 1490.755654] ? zone_watermark_ok_safe+0x220/0x220 [ 1490.755664] ? usleep_range+0x130/0x130 [ 1490.755674] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1490.758363] DMA32 free:19056kB min:36200kB low:45248kB high:54296kB active_anon:57088kB inactive_anon:104628kB active_file:104kB inactive_file:0kB unevictable:0kB writepending:228kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7264kB pagetables:2252kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1490.763182] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1490.767150] lowmem_reserve[]: [ 1490.772221] ? run_timer_softirq+0x5a0/0x5a0 [ 1490.800422] 0 [ 1490.805414] __alloc_pages_nodemask+0x2127/0x2720 [ 1490.805429] ? lock_acquire+0x170/0x3f0 [ 1490.808504] 0 [ 1490.812903] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1490.814697] 0 [ 1490.819525] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1490.823482] 0 0 [ 1490.825281] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1490.825294] ? retint_kernel+0x2d/0x2d [ 1490.831899] alloc_pages_current+0x155/0x260 [ 1490.836388] Node 0 [ 1490.838343] ion_page_pool_alloc+0x118/0x1b0 [ 1490.843794] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1490.847652] ion_system_heap_allocate+0x133/0x8c0 [ 1490.852047] lowmem_reserve[]: [ 1490.854280] ? _raw_spin_unlock+0x29/0x40 [ 1490.854289] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1490.854299] ? ion_system_contig_heap_create+0x130/0x130 [ 1490.858682] 0 [ 1490.884342] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1490.884353] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1490.884365] ion_alloc+0x27a/0x810 [ 1490.889184] 0 [ 1490.892281] ? ion_dma_buf_release+0x40/0x40 [ 1490.896424] 0 [ 1490.901320] ? __might_fault+0x177/0x1b0 [ 1490.906754] 0 [ 1490.908618] ion_ioctl+0xea/0x1f0 [ 1490.913609] 0 [ 1490.918440] ? ion_query_heaps+0x360/0x360 [ 1490.918451] ? ion_query_heaps+0x360/0x360 [ 1490.918462] do_vfs_ioctl+0x75a/0xff0 [ 1490.923757] ? ioctl_preallocate+0x1a0/0x1a0 [ 1490.923767] ? lock_downgrade+0x740/0x740 [ 1490.923780] ? __fget+0x225/0x360 [ 1490.928159] Node 1 [ 1490.929968] ? do_vfs_ioctl+0xff0/0xff0 [ 1490.934039] Normal free:26404kB min:53696kB low:67120kB high:80544kB active_anon:1416kB inactive_anon:36116kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:348kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1490.935804] ? security_file_ioctl+0x83/0xb0 [ 1490.939227] lowmem_reserve[]: [ 1490.941274] SyS_ioctl+0x7f/0xb0 [ 1490.945528] 0 [ 1490.949821] ? do_vfs_ioctl+0xff0/0xff0 [ 1490.953605] 0 [ 1490.958018] do_syscall_64+0x1d5/0x640 [ 1490.958032] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1490.958040] RIP: 0033:0x4665d9 [ 1490.958044] RSP: 002b:00007f7465981188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1490.962185] 0 [ 1490.965617] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1490.965622] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1490.965627] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1490.965632] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1490.965637] R13: 00007ffc7a8155ff R14: 00007f7465981300 R15: 0000000000022000 [ 1490.970603] Node 0 [ 1490.971859] 0 [ 1491.001378] DMA32 free:19212kB min:36200kB low:45248kB high:54296kB active_anon:57088kB inactive_anon:104628kB active_file:100kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7232kB pagetables:2252kB bounce:0kB free_pcp:20kB local_pcp:20kB free_cma:0kB [ 1491.026177] 0 [ 1491.030735] lowmem_reserve[]: [ 1491.064799] 0 [ 1491.090748] Node 0 [ 1491.111633] 0 0 0 0 [ 1491.120715] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1491.134998] DMA: 15*4kB (U) 3*8kB (UE) 9*16kB (UE) 7*32kB (UE) 2*64kB (UE) 7*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10948kB [ 1491.148073] lowmem_reserve[]: 0 0 0 0 0 [ 1491.167090] Node 1 Normal free:26444kB min:53696kB low:67120kB high:80544kB active_anon:1416kB inactive_anon:36116kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:348kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1491.182492] Node 0 [ 1491.197434] lowmem_reserve[]: 0 0 0 0 0 [ 1491.203661] Node 0 DMA: 15*4kB (U) 3*8kB (UE) 9*16kB (UE) 7*32kB (UE) 2*64kB (UE) 7*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10948kB [ 1491.216243] DMA32: 1172*4kB (UME) 402*8kB (UME) 94*16kB (UME) 245*32kB (UME) 33*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB [ 1491.221214] Node 0 DMA32: 1172*4kB (UME) 402*8kB (UME) 94*16kB (UME) 245*32kB (UME) 387*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 42016kB [ 1491.250695] = 19360kB [ 1491.273793] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1491.293818] Node 1 Normal: 5*4kB (M) 5*8kB (UM) 1*16kB (M) 824*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26444kB [ 1491.326672] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1491.339444] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1491.388408] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1491.393862] Node 1 Normal: 5*4kB (M) 5*8kB (UM) 1*16kB (M) 825*32kB (UME) 4877*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 338604kB [ 1491.463766] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1491.472665] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1491.475502] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1491.533793] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1491.553756] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1491.562630] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1491.583737] 36059 total pagecache pages [ 1491.587952] 0 pages in swap cache [ 1491.591393] Swap cache stats: add 0, delete 0, find 0/0 [ 1491.633736] Free swap = 0kB [ 1491.636775] Total swap = 0kB [ 1491.639782] 2097051 pages RAM [ 1491.642889] 0 pages HighMem/MovableOnly [ 1491.651205] 36034 total pagecache pages [ 1491.658031] 363849 pages reserved [ 1491.661887] 0 pages cma reserved [ 1491.664833] 0 pages in swap cache [ 1491.665413] Out of memory (oom_kill_allocating_task): Kill process 7668 (cron) score 0 or sacrifice child [ 1491.668730] Swap cache stats: add 0, delete 0, find 0/0 [ 1491.678651] Killed process 7668 (cron) total-vm:27996kB, anon-rss:240kB, file-rss:0kB, shmem-rss:0kB [ 1491.694479] oom_reaper: reaped process 7668 (cron), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1491.706341] Free swap = 0kB [ 1491.710580] Total swap = 0kB [ 1491.714407] 2097051 pages RAM [ 1491.717999] 0 pages HighMem/MovableOnly [ 1491.722438] 363849 pages reserved [ 1491.726736] 0 pages cma reserved [ 1493.197609] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1493.204517] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1493.212646] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1493.221083] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1493.229821] device bridge_slave_1 left promiscuous mode [ 1493.236461] bridge0: port 2(bridge_slave_1) entered disabled state [ 1493.244613] device bridge_slave_0 left promiscuous mode [ 1493.250311] bridge0: port 1(bridge_slave_0) entered disabled state [ 1493.260881] device veth1_macvtap left promiscuous mode [ 1493.267238] device veth0_macvtap left promiscuous mode [ 1493.272577] device veth1_vlan left promiscuous mode [ 1493.279310] device veth0_vlan left promiscuous mode [ 1493.370263] device hsr_slave_1 left promiscuous mode [ 1493.379760] device hsr_slave_0 left promiscuous mode [ 1493.399012] team0 (unregistering): Port device team_slave_1 removed [ 1493.411998] team0 (unregistering): Port device team_slave_0 removed [ 1493.429319] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1493.441047] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1493.480799] bond0 (unregistering): Released all slaves [ 1494.522620] IPVS: ftp: loaded support on port[0] = 21 [ 1494.681364] chnl_net:caif_netlink_parms(): no params data found [ 1494.838476] bridge0: port 1(bridge_slave_0) entered blocking state [ 1494.846032] bridge0: port 1(bridge_slave_0) entered disabled state [ 1494.853346] device bridge_slave_0 entered promiscuous mode [ 1494.860466] bridge0: port 2(bridge_slave_1) entered blocking state [ 1494.867074] bridge0: port 2(bridge_slave_1) entered disabled state [ 1494.874370] device bridge_slave_1 entered promiscuous mode [ 1494.896657] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1494.906221] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1494.929166] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1494.936978] team0: Port device team_slave_0 added [ 1494.942720] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1494.950413] team0: Port device team_slave_1 added [ 1494.970353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1494.977264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1495.002609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1495.014401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1495.020668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1495.045941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1495.057120] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1495.064766] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1495.089489] device hsr_slave_0 entered promiscuous mode [ 1495.095597] device hsr_slave_1 entered promiscuous mode [ 1495.101790] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1495.109084] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1495.198957] bridge0: port 2(bridge_slave_1) entered blocking state [ 1495.205400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1495.212144] bridge0: port 1(bridge_slave_0) entered blocking state [ 1495.218578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1495.257541] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1495.264517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1495.273145] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1495.284422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1495.292003] bridge0: port 1(bridge_slave_0) entered disabled state [ 1495.300027] bridge0: port 2(bridge_slave_1) entered disabled state [ 1495.310643] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1495.317841] 8021q: adding VLAN 0 to HW filter on device team0 [ 1495.328138] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1495.336960] bridge0: port 1(bridge_slave_0) entered blocking state [ 1495.343591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1495.365100] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1495.372768] bridge0: port 2(bridge_slave_1) entered blocking state [ 1495.379197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1495.389686] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1495.398474] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1495.412608] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1495.423210] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1495.434283] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1495.441539] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1495.450092] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1495.458374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1495.472749] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1495.479765] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1495.492553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1495.499691] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1495.507743] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1495.568960] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1495.578826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1495.609550] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1495.617500] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1495.625237] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1495.635079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1495.642497] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1495.650140] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1495.657749] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1495.667539] device veth0_vlan entered promiscuous mode [ 1495.677118] device veth1_vlan entered promiscuous mode [ 1495.690396] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1495.699669] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1495.707048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1495.715804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1495.725802] device veth0_macvtap entered promiscuous mode [ 1495.731861] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1495.740368] device veth1_macvtap entered promiscuous mode [ 1495.746805] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1495.757326] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1495.766336] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1495.775960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1495.786139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1495.796136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1495.806543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1495.816590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1495.827104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1495.837464] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1495.844792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1495.852232] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1495.860804] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1495.868277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1495.876428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1495.886194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1495.896350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1495.905737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1495.915954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1495.925155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1495.935216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1495.945586] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1495.952717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1495.959635] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1495.967536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 20:07:07 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x7fffffff, 0x23}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, 0x0, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000080)=0x1) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x4, 0xcf, 0x7ff, 0x8, 0x0, 0x1, 0xb51, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x40) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000001480)={'syztnl1\x00', &(0x7f0000001400)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x1f, 0xffff0000, 0x43, @mcast1, @loopback, 0x20, 0x10, 0x2, 0x1}}) 20:07:07 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x7fffffff, 0x23}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, 0x0, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000080)=0x1) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x4, 0xcf, 0x7ff, 0x8, 0x0, 0x1, 0xb51, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x40) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000001480)={'syztnl1\x00', &(0x7f0000001400)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x1f, 0xffff0000, 0x43, @mcast1, @loopback, 0x20, 0x10, 0x2, 0x1}}) openat$zero(0xffffffffffffff9c, &(0x7f00000014c0), 0x803, 0x0) 20:07:07 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x168}) 20:07:07 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x7fffffff, 0x23}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, 0x0, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000080)=0x1) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x4, 0xcf, 0x7ff, 0x8, 0x0, 0x1, 0xb51, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x40) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000001480)={'syztnl1\x00', &(0x7f0000001400)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x1f, 0xffff0000, 0x43, @mcast1, @loopback, 0x20, 0x10, 0x2, 0x1}}) openat$zero(0xffffffffffffff9c, &(0x7f00000014c0), 0x803, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) 20:07:07 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7fffffff, 0x23, 0x1}) 20:07:07 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x7fffffff, 0x23}) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000040)=0x20) 20:07:07 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x168}) 20:07:07 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x7fffffff, 0x23}) r1 = openat$urandom(0xffffffffffffff9c, 0x0, 0x2401, 0x0) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000040)=0x20) [ 1496.574264] Bluetooth: hci2 command 0x0409 tx timeout [ 1496.596603] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1496.612014] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1496.617688] CPU: 0 PID: 17093 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1496.626269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1496.635812] Call Trace: [ 1496.638415] dump_stack+0x1b2/0x281 [ 1496.642261] warn_alloc.cold+0x96/0x1cc [ 1496.646791] ? zone_watermark_ok_safe+0x220/0x220 [ 1496.651667] __alloc_pages_nodemask+0x2127/0x2720 [ 1496.652849] syz-executor.4: [ 1496.656512] ? trace_hardirqs_on+0x10/0x10 [ 1496.656524] ? lock_acquire+0x170/0x3f0 [ 1496.656541] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1496.656560] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1496.656571] ? __mutex_unlock_slowpath+0x75/0x770 [ 1496.659672] page allocation failure: order:4 [ 1496.663825] ? retint_kernel+0x2d/0x2d [ 1496.663840] alloc_pages_current+0x155/0x260 [ 1496.663858] ion_page_pool_alloc+0x118/0x1b0 [ 1496.663866] ion_system_heap_allocate+0x133/0x8c0 [ 1496.663875] ? ion_alloc+0x187/0x810 [ 1496.663885] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1496.663893] ? ion_system_contig_heap_create+0x130/0x130 [ 1496.663901] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1496.663912] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1496.674549] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1496.678328] ion_alloc+0x204/0x810 [ 1496.678344] ? ion_dma_buf_release+0x40/0x40 [ 1496.678358] ? __might_fault+0x177/0x1b0 [ 1496.685562] (null) [ 1496.687684] ion_ioctl+0xea/0x1f0 [ 1496.687694] ? ion_query_heaps+0x360/0x360 [ 1496.687707] ? ion_query_heaps+0x360/0x360 [ 1496.687719] do_vfs_ioctl+0x75a/0xff0 [ 1496.691666] syz-executor.4 cpuset= [ 1496.695989] ? ioctl_preallocate+0x1a0/0x1a0 [ 1496.696000] ? lock_downgrade+0x740/0x740 [ 1496.696014] ? __fget+0x225/0x360 [ 1496.696022] ? do_vfs_ioctl+0xff0/0xff0 [ 1496.696033] ? security_file_ioctl+0x83/0xb0 [ 1496.696047] SyS_ioctl+0x7f/0xb0 [ 1496.696056] ? do_vfs_ioctl+0xff0/0xff0 [ 1496.706242] / [ 1496.709226] do_syscall_64+0x1d5/0x640 [ 1496.714834] mems_allowed=0-1 [ 1496.720109] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1496.720119] RIP: 0033:0x4665d9 [ 1496.720124] RSP: 002b:00007f3fdcb2c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1496.720134] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1496.720141] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1496.837608] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1496.844866] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1496.852117] R13: 00007fff69de001f R14: 00007f3fdcb2c300 R15: 0000000000022000 [ 1496.859479] CPU: 1 PID: 17102 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1496.867375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1496.872729] syz-executor.2: [ 1496.876813] Call Trace: [ 1496.876834] dump_stack+0x1b2/0x281 [ 1496.876846] warn_alloc.cold+0x96/0x1cc [ 1496.876858] ? zone_watermark_ok_safe+0x220/0x220 [ 1496.876879] __alloc_pages_nodemask+0x2127/0x2720 [ 1496.876894] ? lock_acquire+0x170/0x3f0 [ 1496.876907] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1496.879973] page allocation failure: order:4 [ 1496.882489] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1496.882503] ? __mutex_unlock_slowpath+0x75/0x770 [ 1496.882512] ? retint_kernel+0x2d/0x2d [ 1496.886546] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1496.890089] alloc_pages_current+0x155/0x260 [ 1496.890104] ion_page_pool_alloc+0x118/0x1b0 [ 1496.890114] ion_system_heap_allocate+0x133/0x8c0 [ 1496.896443] (null) [ 1496.899773] ? ion_alloc+0x187/0x810 [ 1496.899785] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1496.899797] ? ion_system_contig_heap_create+0x130/0x130 [ 1496.904102] syz-executor.2 cpuset= [ 1496.908620] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1496.908634] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1496.908647] ion_alloc+0x204/0x810 [ 1496.913118] / [ 1496.918468] ? ion_dma_buf_release+0x40/0x40 [ 1496.923966] mems_allowed=0-1 [ 1496.927177] ? __might_fault+0x177/0x1b0 [ 1496.927191] ion_ioctl+0xea/0x1f0 [ 1496.927202] ? ion_query_heaps+0x360/0x360 [ 1497.002476] ? ion_query_heaps+0x360/0x360 [ 1497.006792] do_vfs_ioctl+0x75a/0xff0 [ 1497.010598] ? ioctl_preallocate+0x1a0/0x1a0 [ 1497.015009] ? lock_downgrade+0x740/0x740 [ 1497.019152] ? __fget+0x225/0x360 [ 1497.022596] ? do_vfs_ioctl+0xff0/0xff0 [ 1497.026568] ? security_file_ioctl+0x83/0xb0 [ 1497.030973] SyS_ioctl+0x7f/0xb0 [ 1497.034336] ? do_vfs_ioctl+0xff0/0xff0 [ 1497.038326] do_syscall_64+0x1d5/0x640 [ 1497.042214] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1497.047400] RIP: 0033:0x4665d9 [ 1497.050577] RSP: 002b:00007f5f77a6d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1497.058279] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1497.065640] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1497.072990] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1497.080255] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1497.087524] R13: 00007ffe82aa5b1f R14: 00007f5f77a6d300 R15: 0000000000022000 [ 1497.094891] CPU: 0 PID: 17097 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1497.102832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1497.112187] Call Trace: [ 1497.114786] dump_stack+0x1b2/0x281 [ 1497.118429] warn_alloc.cold+0x96/0x1cc [ 1497.122409] ? zone_watermark_ok_safe+0x220/0x220 [ 1497.123401] warn_alloc_show_mem: 1 callbacks suppressed [ 1497.123404] Mem-Info: [ 1497.127267] __alloc_pages_nodemask+0x2127/0x2720 [ 1497.127279] ? __schedule+0x893/0x1de0 [ 1497.132709] active_anon:14538 inactive_anon:35185 isolated_anon:12 [ 1497.132709] active_file:1924 inactive_file:5354 isolated_file:0 [ 1497.132709] unevictable:0 dirty:89 writeback:0 unstable:0 [ 1497.132709] slab_reclaimable:12055 slab_unreclaimable:116124 [ 1497.132709] mapped:40021 shmem:35604 pagetables:707 bounce:0 [ 1497.132709] free:66589 free_pcp:372 free_cma:0 [ 1497.135051] ? lock_acquire+0x170/0x3f0 [ 1497.135066] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1497.135082] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1497.135096] ? __mutex_unlock_slowpath+0x75/0x770 [ 1497.135112] alloc_pages_current+0x155/0x260 [ 1497.143393] Node 0 active_anon:56496kB inactive_anon:104620kB active_file:7652kB inactive_file:20472kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:128892kB dirty:272kB writeback:0kB shmem:106040kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1497.143821] ion_page_pool_alloc+0x118/0x1b0 [ 1497.192475] Node 1 active_anon:1656kB inactive_anon:36120kB active_file:44kB inactive_file:944kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:31192kB dirty:84kB writeback:0kB shmem:36376kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1497.196741] ion_system_heap_allocate+0x133/0x8c0 [ 1497.196751] ? ion_alloc+0x187/0x810 [ 1497.196761] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1497.196769] ? ion_system_contig_heap_create+0x130/0x130 [ 1497.196781] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1497.201224] Node 0 [ 1497.229625] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1497.229637] ion_alloc+0x204/0x810 [ 1497.229649] ? ion_dma_buf_release+0x40/0x40 [ 1497.229660] ? __might_fault+0x177/0x1b0 [ 1497.229670] ion_ioctl+0xea/0x1f0 [ 1497.229677] ? ion_query_heaps+0x360/0x360 [ 1497.229689] ? ion_query_heaps+0x360/0x360 [ 1497.238489] DMA free:11080kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:20kB unevictable:0kB writepending:4kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1497.261405] do_vfs_ioctl+0x75a/0xff0 [ 1497.261418] ? ioctl_preallocate+0x1a0/0x1a0 [ 1497.261427] ? lock_downgrade+0x740/0x740 [ 1497.261439] ? __fget+0x225/0x360 [ 1497.261448] ? do_vfs_ioctl+0xff0/0xff0 [ 1497.261458] ? security_file_ioctl+0x83/0xb0 [ 1497.261468] SyS_ioctl+0x7f/0xb0 [ 1497.268805] lowmem_reserve[]: [ 1497.270000] ? do_vfs_ioctl+0xff0/0xff0 [ 1497.270013] do_syscall_64+0x1d5/0x640 [ 1497.270027] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1497.287159] 0 [ 1497.289218] RIP: 0033:0x4665d9 [ 1497.289223] RSP: 002b:00007f3d1f881188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1497.289236] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1497.297414] 2717 [ 1497.297594] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1497.310406] 2718 [ 1497.313704] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1497.313710] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1497.313715] R13: 00007ffdbbfa296f R14: 00007f3d1f881300 R15: 0000000000022000 [ 1497.492109] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1497.523099] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1497.542056] CPU: 0 PID: 17108 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1497.550078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1497.553483] 2718 [ 1497.559425] Call Trace: [ 1497.559433] 2718 [ 1497.561484] dump_stack+0x1b2/0x281 [ 1497.566258] warn_alloc.cold+0x96/0x1cc [ 1497.569853] Node 0 [ 1497.573811] ? zone_watermark_ok_safe+0x220/0x220 [ 1497.573835] __alloc_pages_nodemask+0x2127/0x2720 [ 1497.576055] DMA32 free:79728kB min:36200kB low:45248kB high:54296kB active_anon:56496kB inactive_anon:104620kB active_file:7652kB inactive_file:20452kB unevictable:0kB writepending:268kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7200kB pagetables:2376kB bounce:0kB free_pcp:156kB local_pcp:36kB free_cma:0kB [ 1497.580870] ? finish_task_switch+0x178/0x610 [ 1497.589833] lowmem_reserve[]: [ 1497.614909] ? switch_mm_irqs_off+0x601/0xeb0 [ 1497.614923] ? lock_acquire+0x170/0x3f0 [ 1497.614938] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1497.614954] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1497.614966] ? __mutex_unlock_slowpath+0x75/0x770 [ 1497.622885] 0 [ 1497.627035] alloc_pages_current+0x155/0x260 [ 1497.627049] ion_page_pool_alloc+0x118/0x1b0 [ 1497.627059] ion_system_heap_allocate+0x133/0x8c0 [ 1497.627067] ? ion_alloc+0x187/0x810 [ 1497.627084] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1497.633570] 0 [ 1497.635879] ? ion_system_contig_heap_create+0x130/0x130 [ 1497.641303] 0 [ 1497.646128] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1497.646139] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1497.646150] ion_alloc+0x204/0x810 [ 1497.646164] ? ion_dma_buf_release+0x40/0x40 [ 1497.647938] 0 [ 1497.652593] ? __might_fault+0x177/0x1b0 [ 1497.659986] 0 [ 1497.661811] ion_ioctl+0xea/0x1f0 [ 1497.671032] ? ion_query_heaps+0x360/0x360 [ 1497.672810] Node 0 [ 1497.678246] ? ion_query_heaps+0x360/0x360 [ 1497.678256] do_vfs_ioctl+0x75a/0xff0 [ 1497.678268] ? ioctl_preallocate+0x1a0/0x1a0 [ 1497.678280] ? lock_downgrade+0x740/0x740 [ 1497.680067] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1497.685060] ? __fget+0x225/0x360 [ 1497.685068] ? do_vfs_ioctl+0xff0/0xff0 [ 1497.685079] ? security_file_ioctl+0x83/0xb0 [ 1497.685089] SyS_ioctl+0x7f/0xb0 [ 1497.685096] ? do_vfs_ioctl+0xff0/0xff0 [ 1497.685106] do_syscall_64+0x1d5/0x640 [ 1497.685121] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1497.696460] lowmem_reserve[]: [ 1497.697867] RIP: 0033:0x4665d9 [ 1497.699651] 0 [ 1497.703694] RSP: 002b:00007ff6f5ea0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1497.703703] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1497.703707] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1497.703712] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1497.703716] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1497.703721] R13: 00007ffe35371b8f R14: 00007ff6f5ea0300 R15: 0000000000022000 [ 1497.840315] 0 0 0 0 [ 1497.842668] Node 1 Normal free:258316kB min:53696kB low:67120kB high:80544kB active_anon:1656kB inactive_anon:36120kB active_file:44kB inactive_file:944kB unevictable:0kB writepending:84kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:452kB bounce:0kB free_pcp:664kB local_pcp:0kB free_cma:0kB [ 1497.871835] lowmem_reserve[]: 0 0 0 0 0 [ 1497.884113] Node 0 DMA: 25*4kB (UM) 6*8kB (UME) 8*16kB (UE) 8*32kB (UME) 3*64kB (UME) 9*128kB (UME) 2*256kB (ME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11092kB [ 1497.900013] Node 0 DMA32: 2218*4kB (UME) 2675*8kB (UME) 3748*16kB (UME) 1215*32kB (UME) 216*64kB (UM) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 143072kB [ 1497.932226] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1497.953316] Node 1 Normal: 18385*4kB (UME) 6590*8kB (UM) 3213*16kB (U) 2305*32kB (UE) 288*64kB (U) 52*128kB (U) 8*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 278564kB [ 1497.978776] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1498.003187] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1498.015761] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1498.024703] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1498.042295] 42728 total pagecache pages [ 1498.047540] 0 pages in swap cache [ 1498.067153] Swap cache stats: add 0, delete 0, find 0/0 [ 1498.085346] Free swap = 0kB [ 1498.088524] Total swap = 0kB [ 1498.091534] 2097051 pages RAM [ 1498.107750] 0 pages HighMem/MovableOnly [ 1498.113676] 363849 pages reserved [ 1498.117119] 0 pages cma reserved [ 1498.653352] Bluetooth: hci2 command 0x041b tx timeout [ 1498.911931] oom_reaper: reaped process 17108 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1498.990832] syz-executor.0 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1499.008471] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1499.013714] CPU: 0 PID: 15474 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1499.021593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1499.030965] Call Trace: [ 1499.033549] dump_stack+0x1b2/0x281 [ 1499.037173] dump_header+0x178/0x82f [ 1499.040873] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1499.046081] ? ___ratelimit+0x2cd/0x530 [ 1499.050039] oom_kill_process.cold+0x10/0xa40 [ 1499.054617] out_of_memory+0xe3e/0x1190 [ 1499.058573] ? oom_killer_disable+0x1c0/0x1c0 [ 1499.063045] ? mutex_trylock+0x152/0x1a0 [ 1499.067238] __alloc_pages_nodemask+0x23e1/0x2720 [ 1499.072168] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1499.077135] alloc_pages_current+0x155/0x260 [ 1499.081524] filemap_fault+0x11a1/0x1ad0 [ 1499.085577] ext4_filemap_fault+0x84/0xb0 [ 1499.089792] __do_fault+0xfa/0x380 [ 1499.093398] __handle_mm_fault+0x2497/0x4620 [ 1499.097801] ? vm_insert_page+0x7c0/0x7c0 [ 1499.101936] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 1499.106329] ? nanosleep_copyout+0x100/0x100 [ 1499.110730] ? mark_held_locks+0xa6/0xf0 [ 1499.114791] handle_mm_fault+0x455/0x9c0 [ 1499.118920] __do_page_fault+0x549/0xad0 [ 1499.123064] ? spurious_fault+0x640/0x640 [ 1499.127189] ? do_page_fault+0x60/0x500 [ 1499.131142] ? page_fault+0x2f/0x50 [ 1499.134903] page_fault+0x45/0x50 [ 1499.138445] RIP: 16d97e:0x4 [ 1499.141373] RSP: 0042:00007ffe35371e4c EFLAGS: 00000032 [ 1499.144620] Mem-Info: [ 1499.147019] syz-executor.0: [ 1499.150062] active_anon:14666 inactive_anon:35185 isolated_anon:0 [ 1499.150062] active_file:13 inactive_file:13 isolated_file:0 [ 1499.150062] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1499.150062] slab_reclaimable:12047 slab_unreclaimable:114977 [ 1499.150062] mapped:52917 shmem:35604 pagetables:795 bounce:0 [ 1499.150062] free:13797 free_pcp:117 free_cma:0 [ 1499.152550] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1499.155618] Node 0 active_anon:57100kB inactive_anon:104620kB active_file:52kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:180948kB dirty:0kB writeback:0kB shmem:106040kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1499.215345] (null) [ 1499.229863] Node 1 active_anon:1564kB inactive_anon:36120kB active_file:0kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:30720kB dirty:0kB writeback:0kB shmem:36376kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1499.243312] syz-executor.0 cpuset= [ 1499.259478] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1499.272346] / [ 1499.298079] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1499.300419] mems_allowed=0-1 [ 1499.306962] Node 0 DMA32 free:17776kB min:36200kB low:45248kB high:54296kB active_anon:57100kB inactive_anon:104620kB active_file:52kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7264kB pagetables:2728kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1499.310035] CPU: 1 PID: 17108 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1499.344171] lowmem_reserve[]: [ 1499.345244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1499.345251] 0 [ 1499.348341] Call Trace: [ 1499.362263] dump_stack+0x1b2/0x281 [ 1499.363091] 0 [ 1499.365886] warn_alloc.cold+0x96/0x1cc [ 1499.365897] ? zone_watermark_ok_safe+0x220/0x220 [ 1499.365906] ? usleep_range+0x130/0x130 [ 1499.365915] ? try_to_free_pages+0x23f/0x6e0 [ 1499.365924] ? _find_next_bit+0xdb/0x100 [ 1499.365933] ? run_timer_softirq+0x5a0/0x5a0 [ 1499.365948] __alloc_pages_nodemask+0x2127/0x2720 [ 1499.365964] ? lock_acquire+0x170/0x3f0 [ 1499.365977] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1499.365988] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1499.369732] 0 [ 1499.371741] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1499.382191] 0 [ 1499.384997] ? __sanitizer_cov_trace_pc+0x1d/0x50 [ 1499.385011] alloc_pages_current+0x155/0x260 [ 1499.385023] ion_page_pool_alloc+0x118/0x1b0 [ 1499.385033] ion_system_heap_allocate+0x133/0x8c0 [ 1499.385042] ? ion_alloc+0x187/0x810 [ 1499.391074] 0 [ 1499.393510] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1499.393520] ? ion_system_contig_heap_create+0x130/0x130 [ 1499.393528] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1499.393539] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1499.393549] ion_alloc+0x204/0x810 [ 1499.393563] ? ion_dma_buf_release+0x40/0x40 [ 1499.393574] ? __might_fault+0x177/0x1b0 [ 1499.393585] ion_ioctl+0xea/0x1f0 [ 1499.393592] ? ion_query_heaps+0x360/0x360 [ 1499.393604] ? ion_query_heaps+0x360/0x360 [ 1499.407356] do_vfs_ioctl+0x75a/0xff0 [ 1499.412014] Node 0 [ 1499.413813] ? ioctl_preallocate+0x1a0/0x1a0 [ 1499.413823] ? lock_downgrade+0x740/0x740 [ 1499.413835] ? __fget+0x225/0x360 [ 1499.413843] ? do_vfs_ioctl+0xff0/0xff0 [ 1499.413853] ? security_file_ioctl+0x83/0xb0 [ 1499.413861] SyS_ioctl+0x7f/0xb0 [ 1499.413868] ? do_vfs_ioctl+0xff0/0xff0 [ 1499.413879] do_syscall_64+0x1d5/0x640 [ 1499.413894] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1499.421980] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1499.426016] RIP: 0033:0x4665d9 [ 1499.426021] RSP: 002b:00007ff6f5ea0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1499.426030] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1499.426034] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1499.426039] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1499.426044] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1499.426049] R13: 00007ffe35371b8f R14: 00007ff6f5ea0300 R15: 0000000000022000 [ 1499.442212] warn_alloc_show_mem: 3 callbacks suppressed [ 1499.442216] Mem-Info: [ 1499.450675] lowmem_reserve[]: [ 1499.456267] active_anon:14666 inactive_anon:35185 isolated_anon:0 [ 1499.456267] active_file:38 inactive_file:0 isolated_file:0 [ 1499.456267] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1499.456267] slab_reclaimable:12047 slab_unreclaimable:114977 [ 1499.456267] mapped:52917 shmem:35604 pagetables:795 bounce:0 [ 1499.456267] free:13822 free_pcp:0 free_cma:0 [ 1499.456375] 0 [ 1499.462398] Node 0 active_anon:57100kB inactive_anon:104620kB active_file:152kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:180948kB dirty:0kB writeback:0kB shmem:106040kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1499.473566] 0 [ 1499.486246] Node 1 active_anon:1564kB inactive_anon:36120kB active_file:0kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:30720kB dirty:0kB writeback:0kB shmem:36376kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1499.497536] 0 [ 1499.511980] Node 0 [ 1499.512366] 0 [ 1499.521283] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1499.531570] 0 [ 1499.550376] lowmem_reserve[]: [ 1499.597890] 0 [ 1499.611406] Node 1 [ 1499.616817] 2717 [ 1499.643025] Normal free:26540kB min:53696kB low:67120kB high:80544kB active_anon:1564kB inactive_anon:36120kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:452kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1499.654761] 2718 [ 1499.711951] lowmem_reserve[]: [ 1499.721611] 2718 [ 1499.760772] 0 [ 1499.789785] 2718 [ 1499.798429] Node 0 DMA32 free:17776kB min:36200kB low:45248kB high:54296kB active_anon:57100kB inactive_anon:104620kB active_file:52kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7264kB pagetables:2728kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB [ 1499.810242] 0 [ 1499.836740] lowmem_reserve[]: 0 0 0 0 0 [ 1499.842623] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1499.850719] 0 [ 1499.877846] lowmem_reserve[]: 0 0 0 0 0 [ 1499.888374] Node 1 Normal free:26540kB min:53696kB low:67120kB high:80544kB active_anon:1564kB inactive_anon:36120kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:452kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1499.892003] 0 [ 1499.930101] lowmem_reserve[]: 0 0 0 0 0 [ 1499.939653] 0 [ 1499.941363] Node 0 [ 1499.941467] Node 0 [ 1499.941469] DMA: 1*4kB [ 1499.952010] DMA: [ 1499.953361] (U) 1*8kB (E) 7*16kB (UE) 7*32kB (UE) 2*64kB (UE) 8*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10972kB [ 1499.961666] 1*4kB (U) 1*8kB (E) 7*16kB (UE) 7*32kB (UE) 2*64kB (UE) 8*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10972kB [ 1499.988839] Node 0 [ 1500.011805] Node 0 [ 1500.016346] DMA32: [ 1500.016350] DMA32: 1076*4kB [ 1500.018587] 1076*4kB [ 1500.020806] (ME) 379*8kB (ME) 103*16kB (UME) 47*32kB (ME) 32*64kB (UM) 13*128kB (M) 8*256kB (UM) 3*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 17784kB [ 1500.040473] (ME) [ 1500.065887] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1500.068980] 379*8kB [ 1500.092012] Node 1 Normal: 89*4kB (UME) 27*8kB (UM) 8*16kB (UM) 9*32kB (UME) 265*64kB (UM) 52*128kB (U) 8*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26652kB [ 1500.092074] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1500.092079] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1500.092085] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1500.092089] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1500.092093] 35630 total pagecache pages [ 1500.092102] 0 pages in swap cache [ 1500.092107] Swap cache stats: add 0, delete 0, find 0/0 [ 1500.092110] Free swap = 0kB [ 1500.092113] Total swap = 0kB [ 1500.092119] 2097051 pages RAM [ 1500.092122] 0 pages HighMem/MovableOnly [ 1500.092125] 363849 pages reserved [ 1500.092127] 0 pages cma reserved [ 1500.092134] Out of memory (oom_kill_allocating_task): Kill process 15474 (syz-executor.0) score 0 or sacrifice child [ 1500.092160] Killed process 15474 (syz-executor.0) total-vm:93120kB, anon-rss:104kB, file-rss:34820kB, shmem-rss:0kB [ 1500.101504] (ME) [ 1500.131762] oom_reaper: reaped process 15474 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1500.150285] 103*16kB [ 1500.166576] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1500.180184] (UME) [ 1500.198536] (null) [ 1500.208755] syz-executor.0: [ 1500.220295] , order=0, oom_score_adj=0 [ 1500.236291] page allocation failure: order:0, mode:0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null) [ 1500.245668] in:imklog cpuset=/ mems_allowed=0-1 [ 1500.251226] CPU: 0 PID: 16772 Comm: in:imklog Not tainted 4.14.232-syzkaller #0 [ 1500.257798] syz-executor.0 cpuset= [ 1500.258660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1500.258666] / [ 1500.262193] Call Trace: [ 1500.271574] 47*32kB [ 1500.273258] dump_stack+0x1b2/0x281 [ 1500.273272] dump_header+0x178/0x82f [ 1500.275835] (ME) [ 1500.278234] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1500.281841] 32*64kB [ 1500.285533] ? ___ratelimit+0x2cd/0x530 [ 1500.285542] oom_kill_process.cold+0x10/0xa40 [ 1500.285559] out_of_memory+0xe3e/0x1190 [ 1500.285572] ? oom_killer_disable+0x1c0/0x1c0 [ 1500.287632] mems_allowed=0-1 [ 1500.292721] ? mutex_trylock+0x152/0x1a0 [ 1500.292732] __alloc_pages_nodemask+0x23e1/0x2720 [ 1500.295069] (UM) [ 1500.299011] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1500.313086] 13*128kB [ 1500.313650] alloc_pages_current+0x155/0x260 [ 1500.316718] (M) [ 1500.320762] filemap_fault+0x11a1/0x1ad0 [ 1500.343089] 8*256kB (UM) 3*512kB (M) [ 1500.345320] ext4_filemap_fault+0x84/0xb0 [ 1500.345330] __do_fault+0xfa/0x380 [ 1500.349108] 0*1024kB [ 1500.353238] __handle_mm_fault+0x2497/0x4620 [ 1500.353250] ? vm_insert_page+0x7c0/0x7c0 [ 1500.353262] ? lock_downgrade+0x740/0x740 [ 1500.363133] 0*2048kB [ 1500.363584] ? mark_held_locks+0xa6/0xf0 [ 1500.367724] 0*4096kB = 17784kB [ 1500.371871] handle_mm_fault+0x455/0x9c0 [ 1500.385528] __do_page_fault+0x549/0xad0 [ 1500.389578] ? spurious_fault+0x640/0x640 [ 1500.393108] Node 0 Normal: [ 1500.393715] ? do_page_fault+0x60/0x500 [ 1500.393725] ? page_fault+0x2f/0x50 [ 1500.396647] 0*4kB [ 1500.400618] page_fault+0x45/0x50 [ 1500.409793] RIP: 1fa0:0x1f9f [ 1500.412963] RSP: 0000:00005565280bb9d0 EFLAGS: 7fe06917fda0 [ 1500.412982] CPU: 1 PID: 15474 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1500.424965] 0*8kB [ 1500.426829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1500.426832] 0*16kB 0*32kB [ 1500.428966] Call Trace: [ 1500.443895] dump_stack+0x1b2/0x281 [ 1500.447526] warn_alloc.cold+0x96/0x1cc [ 1500.450007] Mem-Info: [ 1500.451584] ? zone_watermark_ok_safe+0x220/0x220 [ 1500.457692] active_anon:14666 inactive_anon:35185 isolated_anon:0 [ 1500.457692] active_file:8 inactive_file:4 isolated_file:0 [ 1500.457692] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1500.457692] slab_reclaimable:12047 slab_unreclaimable:114981 [ 1500.457692] mapped:52917 shmem:35604 pagetables:795 bounce:0 [ 1500.457692] free:13852 free_pcp:54 free_cma:0 [ 1500.458818] ? usleep_range+0x130/0x130 [ 1500.495735] ? try_to_free_pages+0x23f/0x6e0 [ 1500.500145] ? _find_next_bit+0xdb/0x100 [ 1500.502769] 0*64kB [ 1500.504199] ? run_timer_softirq+0x5a0/0x5a0 [ 1500.504214] __alloc_pages_nodemask+0x2127/0x2720 [ 1500.504234] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1500.504256] alloc_pages_current+0x155/0x260 [ 1500.504267] filemap_fault+0x11a1/0x1ad0 [ 1500.506489] 0*128kB [ 1500.510993] ext4_filemap_fault+0x84/0xb0 [ 1500.526810] 0*256kB [ 1500.529070] __do_fault+0xfa/0x380 [ 1500.531369] 0*512kB [ 1500.535498] __handle_mm_fault+0x2497/0x4620 [ 1500.535507] ? vm_insert_page+0x7c0/0x7c0 [ 1500.535516] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 1500.535523] ? nanosleep_copyout+0x100/0x100 [ 1500.535537] ? mark_held_locks+0xa6/0xf0 [ 1500.535548] handle_mm_fault+0x455/0x9c0 [ 1500.535565] __do_page_fault+0x549/0xad0 [ 1500.549335] 0*1024kB [ 1500.552456] ? spurious_fault+0x640/0x640 [ 1500.560748] Node 0 active_anon:57100kB inactive_anon:104620kB active_file:32kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:180948kB dirty:0kB writeback:0kB shmem:106040kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1500.561331] ? do_page_fault+0x60/0x500 [ 1500.572817] 0*2048kB [ 1500.573474] ? page_fault+0x2f/0x50 [ 1500.573482] page_fault+0x45/0x50 [ 1500.573489] RIP: 16d97e:0x4 [ 1500.573494] RSP: 0042:00007ffe35371e4c EFLAGS: 00000032 [ 1500.596071] Mem-Info: [ 1500.617817] Node 1 active_anon:1564kB inactive_anon:36120kB active_file:0kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:30720kB dirty:0kB writeback:0kB shmem:36376kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1500.632701] active_anon:14666 inactive_anon:35185 isolated_anon:0 [ 1500.632701] active_file:8 inactive_file:4 isolated_file:0 [ 1500.632701] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1500.632701] slab_reclaimable:12047 slab_unreclaimable:114981 [ 1500.632701] mapped:52917 shmem:35604 pagetables:795 bounce:0 [ 1500.632701] free:13852 free_pcp:51 free_cma:0 [ 1500.665903] 0*4096kB [ 1500.697648] Node 0 active_anon:57100kB inactive_anon:104620kB active_file:132kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:180948kB dirty:0kB writeback:0kB shmem:106040kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1500.728908] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1500.736151] Node 1 active_anon:1564kB inactive_anon:36120kB active_file:0kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:30720kB dirty:0kB writeback:0kB shmem:36376kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1500.755625] Bluetooth: hci2 command 0x040f tx timeout [ 1500.792263] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1500.808296] = 0kB [ 1500.829093] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1500.838181] Node 1 Normal: 89*4kB (UME) 27*8kB (UM) 8*16kB (UM) 9*32kB (UME) 265*64kB (UM) 52*128kB (U) 8*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26652kB [ 1500.838449] lowmem_reserve[]: [ 1500.864093] Node 0 DMA32 free:17784kB min:36200kB low:45248kB high:54296kB active_anon:57100kB inactive_anon:104620kB active_file:20kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7264kB pagetables:2728kB bounce:0kB free_pcp:184kB local_pcp:108kB free_cma:0kB [ 1500.870526] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1500.907024] 0 2717 2718 2718 2718 [ 1500.910602] Node 0 DMA32 free:17784kB min:36200kB low:45248kB high:54296kB active_anon:57100kB inactive_anon:104620kB active_file:64kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7264kB pagetables:2728kB bounce:0kB free_pcp:184kB local_pcp:112kB free_cma:0kB [ 1500.920888] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1500.949232] lowmem_reserve[]: 0 0 0 0 0 [ 1500.965311] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1500.969106] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1501.000778] lowmem_reserve[]: 0 0 0 0 0 [ 1501.015395] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1501.019340] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1501.050613] lowmem_reserve[]: 0 0 0 0 0 [ 1501.065229] Node 1 Normal free:26652kB min:53696kB low:67120kB high:80544kB active_anon:1548kB inactive_anon:36120kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:452kB bounce:0kB free_pcp:16kB local_pcp:0kB free_cma:0kB [ 1501.068987] 35630 total pagecache pages [ 1501.103656] lowmem_reserve[]: 0 0 0 0 0 [ 1501.107672] Node 1 Normal free:26652kB min:53696kB low:67120kB high:80544kB active_anon:1548kB inactive_anon:36120kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:452kB bounce:0kB free_pcp:16kB local_pcp:0kB free_cma:0kB [ 1501.115630] 0 pages in swap cache [ 1501.146757] lowmem_reserve[]: 0 0 0 0 0 [ 1501.150866] Node 0 DMA: 1*4kB (U) 1*8kB (E) 7*16kB (UE) 7*32kB (UE) 2*64kB (UE) 8*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10972kB [ 1501.158881] Swap cache stats: add 0, delete 0, find 0/0 [ 1501.175772] lowmem_reserve[]: 0 0 0 0 0 [ 1501.179788] Node 0 DMA: 1*4kB (U) 1*8kB (E) 7*16kB (UE) 7*32kB (UE) 2*64kB (UE) 8*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10972kB [ 1501.186418] Free swap = 0kB [ 1501.205038] Node 0 DMA32: 1076*4kB (ME) 383*8kB (UME) 103*16kB (UME) 47*32kB (ME) 32*64kB (UM) 13*128kB (M) 8*256kB (UM) 3*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 17816kB [ 1501.212980] Total swap = 0kB [ 1501.228344] Node 0 DMA32: 1076*4kB (ME) 383*8kB (UME) 103*16kB (UME) 47*32kB (ME) 32*64kB (UM) 13*128kB (M) 8*256kB (UM) 3*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 17816kB [ 1501.240501] 2097051 pages RAM [ 1501.253962] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1501.262824] 0 pages HighMem/MovableOnly [ 1501.272313] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1501.272970] 363849 pages reserved [ 1501.297948] Node 1 Normal: 89*4kB (UME) 27*8kB (UM) 8*16kB (UM) 9*32kB (UME) 265*64kB (UM) 52*128kB (U) 8*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26652kB [ 1501.299896] 0 pages cma reserved [ 1501.320587] Node 1 Normal: 89*4kB (UME) 27*8kB (UM) 8*16kB (UM) 9*32kB (UME) 265*64kB (UM) 52*128kB (U) 8*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26652kB [ 1501.344911] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1501.387914] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1501.397948] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1501.423638] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1501.444551] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1501.476622] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1501.516514] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1501.537863] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1501.558332] 37184 total pagecache pages [ 1501.572311] 0 pages in swap cache [ 1501.577201] 37184 total pagecache pages [ 1501.585965] Swap cache stats: add 0, delete 0, find 0/0 [ 1501.596594] 0 pages in swap cache [ 1501.618934] Swap cache stats: add 0, delete 0, find 0/0 [ 1501.627448] Free swap = 0kB [ 1501.646256] Total swap = 0kB [ 1501.649680] 2097051 pages RAM [ 1501.652797] 0 pages HighMem/MovableOnly [ 1501.665934] Free swap = 0kB [ 1501.668970] Total swap = 0kB [ 1501.671986] 2097051 pages RAM [ 1501.693951] 363849 pages reserved [ 1501.697445] 0 pages cma reserved [ 1501.700912] Out of memory (oom_kill_allocating_task): Kill process 16772 (in:imklog) score 0 or sacrifice child [ 1501.729108] 0 pages HighMem/MovableOnly [ 1501.741883] 363849 pages reserved [ 1501.748098] 0 pages cma reserved [ 1501.793096] Killed process 16770 (rsyslogd) total-vm:254332kB, anon-rss:892kB, file-rss:0kB, shmem-rss:0kB [ 1501.837298] oom_reaper: reaped process 16770 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1501.950462] IPVS: ftp: loaded support on port[0] = 21 [ 1502.097929] IPVS: ftp: loaded support on port[0] = 21 [ 1502.175029] oom_reaper: reaped process 17097 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1502.276829] oom_reaper: reaped process 17102 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1502.309011] ion_system_heap invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=0, oom_score_adj=0 [ 1502.321447] ion_system_heap cpuset=/ mems_allowed=0-1 [ 1502.326722] CPU: 0 PID: 4248 Comm: ion_system_heap Not tainted 4.14.232-syzkaller #0 [ 1502.333065] syz-executor.4: [ 1502.334599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1502.334604] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1502.337625] Call Trace: [ 1502.347008] (null) [ 1502.356859] dump_stack+0x1b2/0x281 [ 1502.356877] dump_header+0x178/0x82f [ 1502.359435] syz-executor.4 cpuset= [ 1502.361592] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1502.365212] / [ 1502.368901] ? ___ratelimit+0x2cd/0x530 [ 1502.372418] mems_allowed=0-1 [ 1502.377509] oom_kill_process.cold+0x10/0xa40 [ 1502.377520] ? lock_downgrade+0x740/0x740 [ 1502.377533] out_of_memory+0x2dc/0x1190 [ 1502.398850] ? oom_killer_disable+0x1c0/0x1c0 [ 1502.403384] ? mutex_trylock+0x152/0x1a0 [ 1502.407426] __alloc_pages_nodemask+0x23e1/0x2720 [ 1502.412257] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1502.417084] ? ion_heap_clear_pages+0x4c/0x70 [ 1502.421560] ? lock_acquire+0x170/0x3f0 [ 1502.425515] ? cache_grow_begin+0x3f/0x700 [ 1502.429733] cache_grow_begin+0x91/0x700 [ 1502.433780] fallback_alloc+0x207/0x2c0 [ 1502.437740] kmem_cache_alloc_node_trace+0xed/0x400 [ 1502.442748] __get_vm_area_node+0xed/0x340 [ 1502.446963] vmap+0xd5/0x290 [ 1502.449962] ? ion_heap_clear_pages+0x23/0x70 [ 1502.454437] ? vunmap+0x50/0x50 [ 1502.457696] ? __vunmap+0x21c/0x300 [ 1502.461317] ion_heap_clear_pages+0x23/0x70 [ 1502.465679] ion_heap_sglist_zero+0x165/0x220 [ 1502.470204] ? ion_heap_clear_pages+0x70/0x70 [ 1502.474695] ? finish_task_switch+0x178/0x610 [ 1502.479189] ? pagerange_is_ram_callback+0x100/0x100 [ 1502.484453] ? ion_heap_deferred_free+0x222/0x470 [ 1502.489382] ion_system_heap_free+0x1d0/0x240 [ 1502.493870] ion_buffer_destroy+0x132/0x190 [ 1502.498177] ion_heap_deferred_free+0x22a/0x470 [ 1502.502830] ? __schedule+0x807/0x1de0 [ 1502.506702] ? ion_heap_shrink_scan+0x1a0/0x1a0 [ 1502.511455] ? wait_woken+0x230/0x230 [ 1502.515329] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1502.520459] ? ion_heap_shrink_scan+0x1a0/0x1a0 [ 1502.525231] kthread+0x30d/0x420 [ 1502.528643] ? kthread_create_on_node+0xd0/0xd0 [ 1502.533389] ret_from_fork+0x24/0x30 [ 1502.537098] CPU: 1 PID: 17102 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1502.544990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1502.554352] Call Trace: [ 1502.556958] dump_stack+0x1b2/0x281 [ 1502.560614] warn_alloc.cold+0x96/0x1cc [ 1502.564694] ? zone_watermark_ok_safe+0x220/0x220 [ 1502.569535] ? usleep_range+0x130/0x130 [ 1502.573776] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1502.578881] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1502.583913] ? run_timer_softirq+0x5a0/0x5a0 [ 1502.588327] __alloc_pages_nodemask+0x2127/0x2720 [ 1502.593187] ? lock_acquire+0x170/0x3f0 [ 1502.597168] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1502.601604] Mem-Info: [ 1502.602019] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1502.608156] active_anon:14387 inactive_anon:35191 isolated_anon:0 [ 1502.608156] active_file:18 inactive_file:19 isolated_file:0 [ 1502.608156] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1502.608156] slab_reclaimable:12044 slab_unreclaimable:114082 [ 1502.608156] mapped:52944 shmem:35612 pagetables:785 bounce:0 [ 1502.608156] free:13863 free_pcp:0 free_cma:0 [ 1502.608922] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1502.642225] syz-executor.2: [ 1502.647487] ? alloc_pages_current+0x16/0x260 [ 1502.647498] alloc_pages_current+0x155/0x260 [ 1502.647510] ion_page_pool_alloc+0x118/0x1b0 [ 1502.658412] page allocation failure: order:0 [ 1502.659548] ion_system_heap_allocate+0x133/0x8c0 [ 1502.665866] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1502.668339] ? ion_alloc+0x187/0x810 [ 1502.678622] Node 0 active_anon:56268kB inactive_anon:104616kB active_file:56kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:181024kB dirty:0kB writeback:0kB shmem:106036kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1502.680250] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1502.686886] (null) [ 1502.712945] ? ion_system_contig_heap_create+0x130/0x130 [ 1502.712956] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1502.712967] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1502.712977] ion_alloc+0x204/0x810 [ 1502.712989] ? ion_dma_buf_release+0x40/0x40 [ 1502.713001] ? __might_fault+0x177/0x1b0 [ 1502.713012] ion_ioctl+0xea/0x1f0 [ 1502.713020] ? ion_query_heaps+0x360/0x360 [ 1502.713032] ? ion_query_heaps+0x360/0x360 [ 1502.713041] do_vfs_ioctl+0x75a/0xff0 [ 1502.713053] ? ioctl_preallocate+0x1a0/0x1a0 [ 1502.713061] ? lock_downgrade+0x740/0x740 [ 1502.713074] ? __fget+0x225/0x360 [ 1502.725484] syz-executor.2 cpuset= [ 1502.726218] ? do_vfs_ioctl+0xff0/0xff0 [ 1502.731220] / [ 1502.736166] ? security_file_ioctl+0x83/0xb0 [ 1502.742508] mems_allowed=0-1 [ 1502.744088] SyS_ioctl+0x7f/0xb0 [ 1502.744098] ? do_vfs_ioctl+0xff0/0xff0 [ 1502.744109] do_syscall_64+0x1d5/0x640 [ 1502.744125] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1502.744137] RIP: 0033:0x4665d9 [ 1502.812630] RSP: 002b:00007f5f77a6d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1502.820335] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1502.827640] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1502.834905] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1502.842167] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1502.849425] R13: 00007ffe82aa5b1f R14: 00007f5f77a6d300 R15: 0000000000022000 [ 1502.856700] CPU: 0 PID: 17097 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1502.864619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1502.867161] syz-executor.0: [ 1502.874116] Call Trace: [ 1502.874138] dump_stack+0x1b2/0x281 [ 1502.874152] warn_alloc.cold+0x96/0x1cc [ 1502.874168] ? zone_watermark_ok_safe+0x220/0x220 [ 1502.880646] Mem-Info: [ 1502.883462] ? usleep_range+0x130/0x130 [ 1502.883472] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1502.883484] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1502.883494] ? run_timer_softirq+0x5a0/0x5a0 [ 1502.883511] __alloc_pages_nodemask+0x2127/0x2720 [ 1502.887599] active_anon:14387 inactive_anon:35191 isolated_anon:0 [ 1502.887599] active_file:18 inactive_file:19 isolated_file:0 [ 1502.887599] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1502.887599] slab_reclaimable:12044 slab_unreclaimable:114082 [ 1502.887599] mapped:52944 shmem:35612 pagetables:785 bounce:0 [ 1502.887599] free:13863 free_pcp:0 free_cma:0 [ 1502.892434] ? lock_acquire+0x170/0x3f0 [ 1502.894903] page allocation failure: order:4 [ 1502.898815] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1502.903920] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1502.908894] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1502.913323] Node 0 active_anon:56268kB inactive_anon:104616kB active_file:56kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:181024kB dirty:0kB writeback:0kB shmem:106036kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1502.918118] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1502.951468] (null) [ 1502.955475] ? __list_del_entry_valid+0xb3/0xf0 [ 1502.955489] alloc_pages_current+0x155/0x260 [ 1502.955502] ion_page_pool_alloc+0x118/0x1b0 [ 1502.959913] syz-executor.0 cpuset= [ 1502.964740] ion_system_heap_allocate+0x133/0x8c0 [ 1502.964750] ? ion_alloc+0x187/0x810 [ 1502.964759] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1502.964767] ? ion_system_contig_heap_create+0x130/0x130 [ 1502.964780] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1502.971869] / [ 1502.976345] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1503.004311] Node 1 active_anon:1280kB inactive_anon:36148kB active_file:16kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:30752kB dirty:0kB writeback:0kB shmem:36412kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1503.009686] ion_alloc+0x204/0x810 [ 1503.011809] Node 0 [ 1503.016461] ? ion_dma_buf_release+0x40/0x40 [ 1503.016473] ? __might_fault+0x177/0x1b0 [ 1503.016484] ion_ioctl+0xea/0x1f0 [ 1503.016491] ? ion_query_heaps+0x360/0x360 [ 1503.016503] ? ion_query_heaps+0x360/0x360 [ 1503.020899] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1503.025275] do_vfs_ioctl+0x75a/0xff0 [ 1503.025287] ? ioctl_preallocate+0x1a0/0x1a0 [ 1503.025296] ? lock_downgrade+0x740/0x740 [ 1503.025310] ? __fget+0x225/0x360 [ 1503.028878] mems_allowed=0-1 [ 1503.033711] ? do_vfs_ioctl+0xff0/0xff0 [ 1503.033722] ? security_file_ioctl+0x83/0xb0 [ 1503.033732] SyS_ioctl+0x7f/0xb0 [ 1503.033740] ? do_vfs_ioctl+0xff0/0xff0 [ 1503.042904] lowmem_reserve[]: [ 1503.048287] do_syscall_64+0x1d5/0x640 [ 1503.053295] 0 [ 1503.054981] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1503.059801] 2717 [ 1503.087028] RIP: 0033:0x4665d9 [ 1503.087033] RSP: 002b:00007f3d1f881188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1503.087042] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1503.087047] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1503.087052] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1503.087056] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1503.087061] R13: 00007ffdbbfa296f R14: 00007f3d1f881300 R15: 0000000000022000 [ 1503.096659] Bluetooth: hci2 command 0x0419 tx timeout [ 1503.128329] CPU: 1 PID: 17108 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1503.250942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1503.260294] Call Trace: [ 1503.262893] dump_stack+0x1b2/0x281 [ 1503.266523] warn_alloc.cold+0x96/0x1cc [ 1503.270604] ? zone_watermark_ok_safe+0x220/0x220 [ 1503.275476] __alloc_pages_nodemask+0x2127/0x2720 [ 1503.280525] ? lock_acquire+0x170/0x3f0 [ 1503.284508] ? lock_acquire+0x170/0x3f0 [ 1503.288487] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1503.293389] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1503.298951] ? __mutex_unlock_slowpath+0x75/0x770 [ 1503.303799] alloc_pages_current+0x155/0x260 [ 1503.308214] ion_page_pool_alloc+0x118/0x1b0 [ 1503.312628] ion_system_heap_allocate+0x133/0x8c0 [ 1503.317472] ? _raw_spin_unlock+0x29/0x40 [ 1503.321619] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1503.326560] ? ion_system_contig_heap_create+0x130/0x130 [ 1503.332012] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1503.337027] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1503.341875] ion_alloc+0x27a/0x810 [ 1503.345425] ? ion_dma_buf_release+0x40/0x40 [ 1503.349920] ? __might_fault+0x177/0x1b0 [ 1503.354002] ion_ioctl+0xea/0x1f0 [ 1503.357497] ? ion_query_heaps+0x360/0x360 [ 1503.361730] ? ion_query_heaps+0x360/0x360 [ 1503.365990] do_vfs_ioctl+0x75a/0xff0 [ 1503.369789] ? ioctl_preallocate+0x1a0/0x1a0 [ 1503.372942] 2718 [ 1503.374195] ? lock_downgrade+0x740/0x740 [ 1503.374197] 2718 2718 [ 1503.376259] ? __fget+0x225/0x360 [ 1503.382870] ? do_vfs_ioctl+0xff0/0xff0 [ 1503.382882] ? security_file_ioctl+0x83/0xb0 [ 1503.382892] SyS_ioctl+0x7f/0xb0 [ 1503.382901] ? do_vfs_ioctl+0xff0/0xff0 [ 1503.382911] do_syscall_64+0x1d5/0x640 [ 1503.382925] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1503.382933] RIP: 0033:0x4665d9 [ 1503.382938] RSP: 002b:00007ff6f5ea0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1503.382947] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1503.382952] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1503.382957] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1503.382961] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1503.382966] R13: 00007ffe35371b8f R14: 00007ff6f5ea0300 R15: 0000000000022000 [ 1503.464434] Bluetooth: hci5 command 0x0409 tx timeout [ 1503.470490] Node 0 DMA32 free:22544kB min:36200kB low:45248kB high:54296kB active_anon:56296kB inactive_anon:104616kB active_file:32kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7200kB pagetables:2516kB bounce:0kB free_pcp:212kB local_pcp:104kB free_cma:0kB [ 1503.503263] lowmem_reserve[]: 0 0 0 0 0 [ 1503.512916] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1503.540434] lowmem_reserve[]: 0 0 0 0 0 [ 1503.546005] Node 1 Normal free:466340kB min:53696kB low:67120kB high:80544kB active_anon:1264kB inactive_anon:36148kB active_file:132kB inactive_file:3536kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:592kB bounce:0kB free_pcp:788kB local_pcp:728kB free_cma:0kB [ 1503.592396] lowmem_reserve[]: 0 0 0 0 0 [ 1503.597165] Node 0 DMA: 1*4kB (U) 1*8kB (E) 7*16kB (UE) 7*32kB (UE) 2*64kB (UE) 8*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10972kB [ 1503.641321] Node 0 DMA32: 13436*4kB (UME) 522*8kB (UME) 379*16kB (UME) 59*32kB (UME) 40*64kB (UME) 19*128kB (UM) 15*256kB (UM) 8*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 78800kB [ 1503.673394] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1503.702969] Bluetooth: hci3 command 0x0409 tx timeout [ 1503.733310] Node 1 Normal: 2390*4kB (UME) 433*8kB (U) 539*16kB (UM) 19*32kB (UE) 5868*64kB (UME) 422*128kB (UM) 101*256kB (UM) 14*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 484848kB [ 1503.749022] chnl_net:caif_netlink_parms(): no params data found [ 1503.750945] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1503.783344] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1503.791963] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1503.802030] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1503.833006] 37200 total pagecache pages [ 1503.837072] 0 pages in swap cache [ 1503.840530] Swap cache stats: add 0, delete 0, find 0/0 [ 1503.865351] Free swap = 0kB [ 1503.868419] Total swap = 0kB [ 1503.871445] 2097051 pages RAM [ 1503.879158] 0 pages HighMem/MovableOnly [ 1503.894265] 363849 pages reserved [ 1503.897758] 0 pages cma reserved [ 1504.066322] chnl_net:caif_netlink_parms(): no params data found [ 1504.221471] bridge0: port 1(bridge_slave_0) entered blocking state [ 1504.246752] bridge0: port 1(bridge_slave_0) entered disabled state [ 1504.260278] device bridge_slave_0 entered promiscuous mode 20:07:15 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x7fffffff, 0x23}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, 0x0, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000080)=0x1) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x4, 0xcf, 0x7ff, 0x8, 0x0, 0x1, 0xb51, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x40) [ 1504.280522] bridge0: port 2(bridge_slave_1) entered blocking state [ 1504.316617] bridge0: port 2(bridge_slave_1) entered disabled state [ 1504.338931] device bridge_slave_1 entered promiscuous mode [ 1504.362551] warn_alloc_show_mem: 1 callbacks suppressed [ 1504.362555] Mem-Info: [ 1504.395614] active_anon:14423 inactive_anon:35191 isolated_anon:0 [ 1504.395614] active_file:685 inactive_file:2298 isolated_file:0 [ 1504.395614] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1504.395614] slab_reclaimable:11987 slab_unreclaimable:115890 [ 1504.395614] mapped:55092 shmem:35612 pagetables:778 bounce:0 [ 1504.395614] free:102234 free_pcp:474 free_cma:0 [ 1504.462057] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1504.487137] bridge0: port 1(bridge_slave_0) entered blocking state [ 1504.497787] bridge0: port 1(bridge_slave_0) entered disabled state [ 1504.514290] device bridge_slave_0 entered promiscuous mode [ 1504.532645] Node 0 active_anon:56424kB inactive_anon:104616kB active_file:1276kB inactive_file:5792kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:185508kB dirty:0kB writeback:0kB shmem:106036kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1504.533702] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1504.602758] Node 1 active_anon:1268kB inactive_anon:36148kB active_file:1464kB inactive_file:3400kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34860kB dirty:0kB writeback:0kB shmem:36412kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1504.640410] bridge0: port 2(bridge_slave_1) entered blocking state [ 1504.647328] bridge0: port 2(bridge_slave_1) entered disabled state [ 1504.678578] device bridge_slave_1 entered promiscuous mode [ 1504.730510] Node 0 DMA free:11036kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1504.773556] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1504.796383] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1504.806147] Node 0 DMA32 free:319628kB min:36200kB low:45248kB high:54296kB active_anon:56424kB inactive_anon:104616kB active_file:1276kB inactive_file:5792kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7360kB pagetables:2520kB bounce:0kB free_pcp:1340kB local_pcp:684kB free_cma:0kB [ 1504.843278] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1504.850743] team0: Port device team_slave_0 added [ 1504.860898] lowmem_reserve[]: 0 0 0 0 0 [ 1504.862273] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1504.869514] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1504.903196] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1504.924814] team0: Port device team_slave_1 added [ 1504.945796] lowmem_reserve[]: 0 0 0 0 0 [ 1504.950866] Node 1 Normal free:239420kB min:53696kB low:67120kB high:80544kB active_anon:1268kB inactive_anon:36140kB active_file:1480kB inactive_file:3384kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:592kB bounce:0kB free_pcp:1388kB local_pcp:648kB free_cma:0kB [ 1504.969065] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1504.987046] lowmem_reserve[]: 0 0 0 0 0 [ 1505.010656] Node 0 DMA: 16*4kB (U) 11*8kB (UE) 8*16kB (UE) 7*32kB (UE) 2*64kB (UE) 5*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11000kB [ 1505.029983] Node 0 DMA32: 59299*4kB (UME) 8970*8kB (UE) 4613*16kB (UE) 1907*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 443788kB [ 1505.033593] team0: Port device team_slave_0 added [ 1505.062125] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1505.079617] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1505.086817] Node 0 [ 1505.091701] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1505.107600] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1505.122586] CPU: 1 PID: 17097 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1505.127532] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1505.130486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1505.146572] Call Trace: [ 1505.149166] dump_stack+0x1b2/0x281 [ 1505.152794] warn_alloc.cold+0x96/0x1cc [ 1505.153256] syz-executor.1 cpuset= [ 1505.156766] ? zone_watermark_ok_safe+0x220/0x220 [ 1505.156767] / mems_allowed=0-1 [ 1505.160316] __alloc_pages_nodemask+0x2127/0x2720 [ 1505.166151] team0: Port device team_slave_1 added [ 1505.168619] ? retint_kernel+0x2d/0x2d [ 1505.182258] ? lock_acquire+0x170/0x3f0 [ 1505.186351] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1505.191471] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1505.197020] ? __mutex_unlock_slowpath+0x75/0x770 [ 1505.197709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1505.201864] ? retint_kernel+0x2d/0x2d [ 1505.201878] alloc_pages_current+0x155/0x260 [ 1505.214875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1505.216375] ion_page_pool_alloc+0x118/0x1b0 [ 1505.245928] ion_system_heap_allocate+0x133/0x8c0 [ 1505.250776] ? _raw_spin_unlock+0x29/0x40 [ 1505.254920] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1505.260017] ? ion_system_contig_heap_create+0x130/0x130 [ 1505.265455] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1505.270472] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1505.275328] ion_alloc+0x27a/0x810 [ 1505.278861] ? ion_dma_buf_release+0x40/0x40 [ 1505.283267] ? __might_fault+0x177/0x1b0 [ 1505.287338] ion_ioctl+0xea/0x1f0 [ 1505.290790] ? ion_query_heaps+0x360/0x360 [ 1505.295018] ? ion_query_heaps+0x360/0x360 [ 1505.299242] do_vfs_ioctl+0x75a/0xff0 [ 1505.302778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1505.303115] ? ioctl_preallocate+0x1a0/0x1a0 [ 1505.317300] ? lock_downgrade+0x740/0x740 [ 1505.321620] ? __fget+0x225/0x360 [ 1505.325074] ? do_vfs_ioctl+0xff0/0xff0 [ 1505.329045] ? security_file_ioctl+0x83/0xb0 [ 1505.333440] SyS_ioctl+0x7f/0xb0 [ 1505.336813] ? do_vfs_ioctl+0xff0/0xff0 [ 1505.341032] do_syscall_64+0x1d5/0x640 [ 1505.344937] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1505.350266] RIP: 0033:0x4665d9 [ 1505.353545] RSP: 002b:00007f3d1f881188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1505.359634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1505.361259] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1505.374802] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1505.382432] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1505.382803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1505.389696] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1505.389705] R13: 00007ffdbbfa296f R14: 00007f3d1f881300 R15: 0000000000022000 [ 1505.424300] Node 1 Normal: 23560*4kB (UM) 8288*8kB (U) 3930*16kB (UE) 2731*32kB (UE) 175*64kB (U) 4*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 322528kB [ 1505.446447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1505.463014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1505.468641] CPU: 0 PID: 17373 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1505.477166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1505.486505] Call Trace: [ 1505.489193] dump_stack+0x1b2/0x281 [ 1505.493007] warn_alloc.cold+0x96/0x1cc [ 1505.496994] ? zone_watermark_ok_safe+0x220/0x220 [ 1505.501832] __alloc_pages_nodemask+0x2127/0x2720 [ 1505.506665] ? lock_acquire+0x170/0x3f0 [ 1505.510921] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1505.515790] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1505.521293] ? __mutex_unlock_slowpath+0x75/0x770 [ 1505.526160] ? retint_kernel+0x2d/0x2d [ 1505.530039] alloc_pages_current+0x155/0x260 [ 1505.534528] ion_page_pool_alloc+0x118/0x1b0 [ 1505.538926] ion_system_heap_allocate+0x133/0x8c0 [ 1505.543763] ? ion_alloc+0x187/0x810 [ 1505.547483] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1505.553120] ? ion_system_contig_heap_create+0x130/0x130 [ 1505.558562] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1505.563564] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1505.568492] ion_alloc+0x204/0x810 [ 1505.572462] ? ion_dma_buf_release+0x40/0x40 [ 1505.576874] ? __might_fault+0x177/0x1b0 [ 1505.580936] ion_ioctl+0xea/0x1f0 [ 1505.584395] ? ion_query_heaps+0x360/0x360 [ 1505.588774] ? ion_query_heaps+0x360/0x360 [ 1505.593177] do_vfs_ioctl+0x75a/0xff0 [ 1505.596999] ? ioctl_preallocate+0x1a0/0x1a0 [ 1505.601419] ? lock_downgrade+0x740/0x740 [ 1505.605583] ? __fget+0x225/0x360 [ 1505.609034] ? do_vfs_ioctl+0xff0/0xff0 [ 1505.613025] ? security_file_ioctl+0x83/0xb0 [ 1505.617429] SyS_ioctl+0x7f/0xb0 [ 1505.620814] ? do_vfs_ioctl+0xff0/0xff0 [ 1505.624783] do_syscall_64+0x1d5/0x640 [ 1505.628661] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1505.634133] RIP: 0033:0x4665d9 [ 1505.637657] RSP: 002b:00007f3fdcb2c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1505.645448] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1505.652708] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1505.659973] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1505.667332] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1505.674679] R13: 00007fff69de001f R14: 00007f3fdcb2c300 R15: 0000000000022000 [ 1505.682258] Bluetooth: hci5 command 0x041b tx timeout [ 1505.699186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1505.703427] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1505.758044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1505.772806] Bluetooth: hci3 command 0x041b tx timeout [ 1505.776688] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1505.786574] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1505.793466] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1505.803344] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1505.806546] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1505.821528] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1505.829932] CPU: 1 PID: 17102 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1505.837809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1505.847159] Call Trace: [ 1505.849748] dump_stack+0x1b2/0x281 [ 1505.852744] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1505.853382] warn_alloc.cold+0x96/0x1cc [ 1505.861961] 38572 total pagecache pages [ 1505.866029] ? zone_watermark_ok_safe+0x220/0x220 [ 1505.866049] __alloc_pages_nodemask+0x2127/0x2720 [ 1505.866065] ? lock_acquire+0x170/0x3f0 [ 1505.866079] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1505.866095] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1505.866105] ? __mutex_unlock_slowpath+0x75/0x770 [ 1505.866115] ? alloc_pages_current+0x84/0x260 [ 1505.866125] alloc_pages_current+0x155/0x260 [ 1505.866139] ion_page_pool_alloc+0x118/0x1b0 [ 1505.866148] ion_system_heap_allocate+0x133/0x8c0 [ 1505.866159] ? _raw_spin_unlock+0x29/0x40 [ 1505.866167] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1505.866175] ? ion_system_contig_heap_create+0x130/0x130 [ 1505.866184] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1505.866196] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1505.896214] 0 pages in swap cache [ 1505.899102] ion_alloc+0x27a/0x810 [ 1505.917287] Swap cache stats: add 0, delete 0, find 0/0 [ 1505.921364] ? ion_dma_buf_release+0x40/0x40 [ 1505.937447] Free swap = 0kB [ 1505.941535] ? __might_fault+0x177/0x1b0 [ 1505.956932] Total swap = 0kB [ 1505.958269] ion_ioctl+0xea/0x1f0 [ 1505.961300] 2097051 pages RAM [ 1505.965348] ? ion_query_heaps+0x360/0x360 [ 1505.965358] ? ion_query_heaps+0x360/0x360 [ 1505.965368] do_vfs_ioctl+0x75a/0xff0 [ 1505.965379] ? ioctl_preallocate+0x1a0/0x1a0 [ 1505.965388] ? lock_downgrade+0x740/0x740 [ 1505.965399] ? __fget+0x225/0x360 [ 1505.965408] ? do_vfs_ioctl+0xff0/0xff0 [ 1505.965417] ? security_file_ioctl+0x83/0xb0 [ 1505.965428] SyS_ioctl+0x7f/0xb0 [ 1505.982741] 0 pages HighMem/MovableOnly [ 1505.983614] ? do_vfs_ioctl+0xff0/0xff0 [ 1505.987391] 363849 pages reserved [ 1505.991786] do_syscall_64+0x1d5/0x640 [ 1506.022762] 0 pages cma reserved [ 1506.023102] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1506.035600] RIP: 0033:0x4665d9 [ 1506.038788] RSP: 002b:00007f5f77a6d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1506.046583] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1506.054035] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1506.061397] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1506.068757] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1506.076034] R13: 00007ffe82aa5b1f R14: 00007f5f77a6d300 R15: 0000000000022000 [ 1506.088245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1506.096672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1506.129363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1506.160484] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1506.168752] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1506.183507] device hsr_slave_0 entered promiscuous mode [ 1506.189482] device hsr_slave_1 entered promiscuous mode [ 1506.211623] Mem-Info: [ 1506.215687] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1506.223014] active_anon:14416 inactive_anon:35189 isolated_anon:0 [ 1506.223014] active_file:1078 inactive_file:1991 isolated_file:0 [ 1506.223014] unevictable:0 dirty:2 writeback:11 unstable:0 [ 1506.223014] slab_reclaimable:11909 slab_unreclaimable:115673 [ 1506.223014] mapped:55238 shmem:35612 pagetables:778 bounce:0 [ 1506.223014] free:293416 free_pcp:242 free_cma:0 [ 1506.257593] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1506.268575] device hsr_slave_0 entered promiscuous mode [ 1506.274774] device hsr_slave_1 entered promiscuous mode [ 1506.288475] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1506.296705] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1506.318548] Node 0 active_anon:56496kB inactive_anon:104616kB active_file:1404kB inactive_file:6436kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:186268kB dirty:8kB writeback:40kB shmem:106036kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1506.422099] Node 1 active_anon:1268kB inactive_anon:36140kB active_file:3008kB inactive_file:1528kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34784kB dirty:0kB writeback:4kB shmem:36412kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1506.543992] Node 0 DMA free:11012kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1506.582363] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1506.658514] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1506.678184] Node 0 DMA32 free:549172kB min:36200kB low:45248kB high:54296kB active_anon:56496kB inactive_anon:104616kB active_file:1404kB inactive_file:6436kB unevictable:0kB writepending:48kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7264kB pagetables:2520kB bounce:0kB free_pcp:212kB local_pcp:152kB free_cma:0kB [ 1506.726088] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1506.742232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1506.764187] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1506.793520] lowmem_reserve[]: 0 0 0 0 0 [ 1506.795668] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1506.797623] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1506.834123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1506.855052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1506.862811] lowmem_reserve[]: 0 0 0 0 0 [ 1506.866864] Node 1 Normal free:531940kB min:53696kB low:67120kB high:80544kB active_anon:1268kB inactive_anon:36140kB active_file:3008kB inactive_file:1528kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:592kB bounce:0kB free_pcp:848kB local_pcp:164kB free_cma:0kB [ 1506.894207] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1506.902795] 8021q: adding VLAN 0 to HW filter on device team0 [ 1506.911748] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1506.937076] lowmem_reserve[]: 0 0 0 0 0 [ 1506.949804] Node 0 DMA: 14*4kB (U) 12*8kB (UE) 11*16kB (UE) 7*32kB (UE) 2*64kB (UE) 5*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11048kB [ 1506.977872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1506.993734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1507.001453] bridge0: port 1(bridge_slave_0) entered blocking state [ 1507.001906] Node 0 [ 1507.007872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1507.020909] DMA32: 416*4kB (UE) 171*8kB (UME) 1710*16kB (UE) 4471*32kB (UE) 2446*64kB (U) 219*128kB (U) 9*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 360344kB [ 1507.063328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1507.079841] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1507.092152] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1507.112232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1507.118406] Node 1 Normal: 12242*4kB (UM) 6190*8kB (UME) 4001*16kB (UME) 3205*32kB (UE) 4154*64kB (U) 360*128kB (U) 11*256kB (U) 6*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 583912kB [ 1507.142944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1507.151248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1507.172725] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1507.181751] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1507.183054] bridge0: port 2(bridge_slave_1) entered blocking state [ 1507.193898] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1507.196704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1507.209245] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1507.250275] 38717 total pagecache pages [ 1507.266754] 0 pages in swap cache [ 1507.277159] Swap cache stats: add 0, delete 0, find 0/0 [ 1507.278112] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1507.282692] Free swap = 0kB [ 1507.292557] Total swap = 0kB [ 1507.314971] 2097051 pages RAM [ 1507.315323] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1507.327025] 0 pages HighMem/MovableOnly [ 1507.337405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1507.341613] 363849 pages reserved [ 1507.347812] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1507.351758] 0 pages cma reserved [ 1507.375344] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1507.383264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1507.391132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1507.412087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1507.435444] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1507.445671] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1507.451751] 8021q: adding VLAN 0 to HW filter on device team0 [ 1507.469970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1507.480221] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1507.503785] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1507.519564] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1507.536957] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1507.553422] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1507.560851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1507.583658] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1507.591350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1507.613205] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1507.647204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1507.655428] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1507.673099] bridge0: port 1(bridge_slave_0) entered blocking state [ 1507.679531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1507.709505] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1507.716439] Bluetooth: hci5 command 0x040f tx timeout [ 1507.748695] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1507.756486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1507.768717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1507.786862] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1507.813429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1507.833139] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1507.840812] bridge0: port 2(bridge_slave_1) entered blocking state [ 1507.847236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1507.895763] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1507.901846] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1507.910318] Bluetooth: hci3 command 0x040f tx timeout [ 1507.927809] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1507.943466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1507.959587] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1507.980423] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1508.007238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1508.016982] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1508.035440] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1508.051224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1508.064514] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1508.071268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1508.079922] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1508.094809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1508.104109] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1508.121789] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1508.134778] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1508.142231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1508.151357] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1508.161702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1508.179904] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1508.209878] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1508.247449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1508.256967] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1508.289004] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1508.303146] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1508.356227] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1508.374323] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1508.389446] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1508.427086] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1508.534463] Node 1 active_anon:1956kB inactive_anon:36140kB active_file:144kB inactive_file:136kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:30768kB dirty:200kB writeback:0kB shmem:36412kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1508.562450] Node 0 DMA free:10948kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1508.600821] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1508.607979] Node 0 DMA32 free:17612kB min:36200kB low:45248kB high:54296kB active_anon:56344kB inactive_anon:104616kB active_file:36kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7232kB pagetables:2520kB bounce:0kB free_pcp:624kB local_pcp:156kB free_cma:0kB [ 1508.649172] lowmem_reserve[]: 0 0 0 0 0 [ 1508.657249] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1508.686284] lowmem_reserve[]: 0 0 0 0 0 [ 1508.690426] Node 1 Normal free:27068kB min:53696kB low:67120kB high:80544kB active_anon:1988kB inactive_anon:36140kB active_file:148kB inactive_file:184kB unevictable:0kB writepending:288kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:580kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1508.719768] lowmem_reserve[]: 0 0 0 0 0 [ 1508.723873] Node 0 DMA: 1*4kB (U) 2*8kB (UE) 1*16kB (E) 5*32kB (UE) 6*64kB (UE) 5*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10948kB [ 1508.739546] Node 0 DMA32: 1024*4kB (ME) 430*8kB (ME) 91*16kB (UME) 29*32kB (ME) 2*64kB (UM) 30*128kB (U) 12*256kB (U) 2*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 17984kB [ 1508.758969] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1508.817340] Node 1 Normal: 85*4kB (UME) 65*8kB (UME) 39*16kB (UME) 31*32kB (UME) 24*64kB (UM) 6*128kB (M) 17*256kB (U) 31*512kB (UM) 2*1024kB (UM) 0*2048kB 0*4096kB = 27052kB [ 1508.833541] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1508.842701] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1508.851272] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1508.860136] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1508.868841] 35712 total pagecache pages [ 1508.872941] 0 pages in swap cache [ 1508.876385] Swap cache stats: add 0, delete 0, find 0/0 [ 1508.881838] Free swap = 0kB [ 1508.884910] Total swap = 0kB [ 1508.888037] 2097051 pages RAM [ 1508.891184] 0 pages HighMem/MovableOnly [ 1508.894273] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1508.895591] 363849 pages reserved [ 1508.911117] 0 pages cma reserved [ 1508.916396] Out of memory: Kill process 17092 (syz-executor.1) score 1004 or sacrifice child [ 1508.926823] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1508.932091] CPU: 1 PID: 17097 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1508.939989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1508.948392] ion_system_heap invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask= [ 1508.949442] Call Trace: [ 1508.949443] (null), order=0, oom_score_adj=0 [ 1508.958708] dump_stack+0x1b2/0x281 [ 1508.958722] warn_alloc.cold+0x96/0x1cc [ 1508.958733] ? zone_watermark_ok_safe+0x220/0x220 [ 1508.958742] ? usleep_range+0x130/0x130 [ 1508.958750] ? try_to_free_pages+0x23f/0x6e0 [ 1508.958760] ? _find_next_bit+0xdb/0x100 [ 1508.958770] ? run_timer_softirq+0x5a0/0x5a0 [ 1508.958787] __alloc_pages_nodemask+0x2127/0x2720 [ 1508.958801] ? lock_acquire+0x170/0x3f0 [ 1508.958819] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1508.975368] ion_system_heap cpuset= [ 1508.978264] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1508.982220] / [ 1508.986632] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1509.005360] mems_allowed=0-1 [ 1509.008813] alloc_pages_current+0x155/0x260 [ 1509.031605] ion_page_pool_alloc+0x118/0x1b0 [ 1509.036017] ion_system_heap_allocate+0x133/0x8c0 [ 1509.040869] ? _raw_spin_unlock+0x29/0x40 [ 1509.045027] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1509.050045] ? ion_system_contig_heap_create+0x130/0x130 [ 1509.055500] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1509.060540] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1509.065391] ion_alloc+0x27a/0x810 [ 1509.068955] ? ion_dma_buf_release+0x40/0x40 [ 1509.073375] ? __might_fault+0x177/0x1b0 [ 1509.077436] ion_ioctl+0xea/0x1f0 [ 1509.080888] ? ion_query_heaps+0x360/0x360 [ 1509.085123] ? ion_query_heaps+0x360/0x360 [ 1509.089361] do_vfs_ioctl+0x75a/0xff0 [ 1509.093163] ? ioctl_preallocate+0x1a0/0x1a0 [ 1509.097570] ? lock_downgrade+0x740/0x740 [ 1509.101727] ? __fget+0x225/0x360 [ 1509.105174] ? do_vfs_ioctl+0xff0/0xff0 [ 1509.109151] ? security_file_ioctl+0x83/0xb0 [ 1509.113557] SyS_ioctl+0x7f/0xb0 [ 1509.116921] ? do_vfs_ioctl+0xff0/0xff0 [ 1509.120906] do_syscall_64+0x1d5/0x640 [ 1509.124809] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1509.130184] RIP: 0033:0x4665d9 [ 1509.133379] RSP: 002b:00007f3d1f881188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1509.141399] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1509.148780] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1509.156056] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1509.163341] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1509.170616] R13: 00007ffdbbfa296f R14: 00007f3d1f881300 R15: 0000000000022000 [ 1509.184007] warn_alloc_show_mem: 2 callbacks suppressed [ 1509.184010] Mem-Info: [ 1509.191816] active_anon:14583 inactive_anon:35189 isolated_anon:0 [ 1509.191816] active_file:46 inactive_file:7 isolated_file:0 [ 1509.191816] unevictable:0 dirty:72 writeback:0 unstable:0 [ 1509.191816] slab_reclaimable:11899 slab_unreclaimable:114885 [ 1509.191816] mapped:53017 shmem:35612 pagetables:775 bounce:0 [ 1509.191816] free:13854 free_pcp:30 free_cma:0 [ 1509.220586] CPU: 0 PID: 4248 Comm: ion_system_heap Not tainted 4.14.232-syzkaller #0 [ 1509.232967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1509.242317] Call Trace: [ 1509.244911] dump_stack+0x1b2/0x281 [ 1509.248538] dump_header+0x178/0x82f [ 1509.251376] Node 0 active_anon:56344kB inactive_anon:104616kB active_file:16kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:181348kB dirty:0kB writeback:0kB shmem:106036kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1509.252249] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1509.285396] ? ___ratelimit+0x2cd/0x530 [ 1509.289387] oom_kill_process.cold+0x10/0xa40 [ 1509.293886] ? lock_downgrade+0x740/0x740 [ 1509.296456] Node 1 active_anon:1988kB inactive_anon:36140kB active_file:124kB inactive_file:164kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:30720kB dirty:288kB writeback:0kB shmem:36412kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1509.298032] out_of_memory+0x2dc/0x1190 [ 1509.326172] Node 0 DMA free:10948kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1509.330114] ? oom_killer_disable+0x1c0/0x1c0 [ 1509.330125] ? mutex_trylock+0x152/0x1a0 [ 1509.356334] lowmem_reserve[]: [ 1509.360797] __alloc_pages_nodemask+0x23e1/0x2720 [ 1509.365357] 0 [ 1509.368533] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1509.373371] 2717 [ 1509.375149] ? ion_heap_clear_pages+0x4c/0x70 [ 1509.379962] 2718 [ 1509.382028] ? lock_acquire+0x170/0x3f0 [ 1509.386538] 2718 [ 1509.388552] ? cache_grow_begin+0x3f/0x700 [ 1509.392521] 2718 [ 1509.394562] cache_grow_begin+0x91/0x700 [ 1509.400853] fallback_alloc+0x207/0x2c0 [ 1509.404994] Node 0 DMA32 free:18044kB min:36200kB low:45248kB high:54296kB active_anon:56344kB inactive_anon:104616kB active_file:16kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7232kB pagetables:2520kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1509.409029] kmem_cache_alloc_node_trace+0xed/0x400 [ 1509.409039] __get_vm_area_node+0xed/0x340 [ 1509.437856] lowmem_reserve[]: [ 1509.442864] vmap+0xd5/0x290 [ 1509.442873] ? ion_heap_clear_pages+0x23/0x70 [ 1509.442882] ? vunmap+0x50/0x50 [ 1509.447098] 0 [ 1509.450193] ? __vunmap+0x21c/0x300 [ 1509.453223] 0 [ 1509.457673] ion_heap_clear_pages+0x23/0x70 [ 1509.460923] 0 [ 1509.462709] ion_heap_sglist_zero+0x165/0x220 [ 1509.462718] ? ion_heap_clear_pages+0x70/0x70 [ 1509.462731] ? finish_task_switch+0x178/0x610 [ 1509.466345] 0 [ 1509.468150] ? pagerange_is_ram_callback+0x100/0x100 [ 1509.472453] 0 [ 1509.474226] ? ion_heap_deferred_free+0x222/0x470 [ 1509.483177] ion_system_heap_free+0x1d0/0x240 [ 1509.483188] ion_buffer_destroy+0x132/0x190 [ 1509.483197] ion_heap_deferred_free+0x22a/0x470 [ 1509.487666] Node 0 [ 1509.489478] ? __schedule+0x807/0x1de0 [ 1509.494583] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1509.496353] ? ion_heap_shrink_scan+0x1a0/0x1a0 [ 1509.501307] lowmem_reserve[]: [ 1509.505909] ? wait_woken+0x230/0x230 [ 1509.505919] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1509.505928] ? ion_heap_shrink_scan+0x1a0/0x1a0 [ 1509.505937] kthread+0x30d/0x420 [ 1509.505946] ? kthread_create_on_node+0xd0/0xd0 [ 1509.510260] 0 [ 1509.514926] ret_from_fork+0x24/0x30 [ 1509.540037] Mem-Info: [ 1509.546489] syz-executor.0: [ 1509.570351] active_anon:14583 inactive_anon:35189 isolated_anon:0 [ 1509.570351] active_file:20 inactive_file:83 isolated_file:0 [ 1509.570351] unevictable:0 dirty:72 writeback:0 unstable:0 [ 1509.570351] slab_reclaimable:11899 slab_unreclaimable:114885 [ 1509.570351] mapped:53017 shmem:35612 pagetables:775 bounce:0 [ 1509.570351] free:13853 free_pcp:28 free_cma:0 [ 1509.580817] page allocation failure: order:0 [ 1509.599468] Node 0 active_anon:56344kB inactive_anon:104616kB active_file:16kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:181348kB dirty:0kB writeback:0kB shmem:106036kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1509.626431] 0 [ 1509.678793] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1509.680151] Node 1 active_anon:1988kB inactive_anon:36140kB active_file:128kB inactive_file:164kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:30720kB dirty:288kB writeback:0kB shmem:36412kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1509.680717] (null) [ 1509.697490] Node 0 [ 1509.724987] 0 0 0 [ 1509.729387] Node 1 Normal free:26524kB min:53696kB low:67120kB high:80544kB active_anon:1988kB inactive_anon:36140kB active_file:24kB inactive_file:176kB unevictable:0kB writepending:288kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:580kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1509.734767] DMA free:10948kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1509.766165] lowmem_reserve[]: [ 1509.794294] Bluetooth: hci5 command 0x0419 tx timeout [ 1509.796136] 0 0 0 0 0 [ 1509.809579] Node 0 DMA: 1*4kB (U) 2*8kB (UE) 1*16kB (E) 5*32kB (UE) 6*64kB (UE) 5*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10948kB [ 1509.810277] syz-executor.0 cpuset= [ 1509.833874] Node 0 DMA32: 1023*4kB (ME) 431*8kB (ME) 90*16kB (ME) 29*32kB (ME) 2*64kB (UM) 29*128kB (U) 12*256kB (U) 2*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 17844kB [ 1509.839968] / mems_allowed=0-1 [ 1509.867752] CPU: 0 PID: 17108 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1509.869189] Node 0 [ 1509.875711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1509.875715] Call Trace: [ 1509.875733] dump_stack+0x1b2/0x281 [ 1509.875745] warn_alloc.cold+0x96/0x1cc [ 1509.875757] ? zone_watermark_ok_safe+0x220/0x220 [ 1509.877979] Normal: [ 1509.887316] ? usleep_range+0x130/0x130 [ 1509.887324] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1509.887334] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1509.887344] ? run_timer_softirq+0x5a0/0x5a0 [ 1509.889902] 0*4kB [ 1509.893519] __alloc_pages_nodemask+0x2127/0x2720 [ 1509.893535] ? lock_acquire+0x170/0x3f0 [ 1509.897481] 0*8kB [ 1509.902311] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1509.904623] 0*16kB [ 1509.908570] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1509.913665] 0*32kB [ 1509.918770] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1509.923165] 0*64kB [ 1509.925287] ? retint_kernel+0x2d/0x2d [ 1509.930117] 0*128kB [ 1509.934080] alloc_pages_current+0x155/0x260 [ 1509.934096] ion_page_pool_alloc+0x118/0x1b0 [ 1509.936329] 0*256kB [ 1509.941168] ion_system_heap_allocate+0x133/0x8c0 [ 1509.943400] 0*512kB [ 1509.947868] ? _raw_spin_unlock+0x29/0x40 [ 1509.950082] 0*1024kB [ 1509.955519] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1509.955528] ? ion_system_contig_heap_create+0x130/0x130 [ 1509.955541] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1509.955552] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1509.957780] 0*2048kB [ 1509.961665] ion_alloc+0x27a/0x810 [ 1509.963983] 0*4096kB [ 1509.968362] ? ion_dma_buf_release+0x40/0x40 [ 1509.972756] = 0kB [ 1509.975054] ? __might_fault+0x177/0x1b0 [ 1509.979867] Node 1 [ 1509.982176] ion_ioctl+0xea/0x1f0 [ 1509.986345] Normal: [ 1509.988736] ? ion_query_heaps+0x360/0x360 [ 1509.993659] 82*4kB [ 1509.999084] ? ion_query_heaps+0x360/0x360 [ 1510.004088] (ME) [ 1510.008920] do_vfs_ioctl+0x75a/0xff0 [ 1510.011314] 63*8kB [ 1510.014846] ? ioctl_preallocate+0x1a0/0x1a0 [ 1510.014854] ? lock_downgrade+0x740/0x740 [ 1510.014867] ? __fget+0x225/0x360 [ 1510.017337] (ME) [ 1510.021728] ? do_vfs_ioctl+0xff0/0xff0 [ 1510.023785] 37*16kB [ 1510.027826] ? security_file_ioctl+0x83/0xb0 [ 1510.030033] (ME) [ 1510.033486] SyS_ioctl+0x7f/0xb0 [ 1510.033494] ? do_vfs_ioctl+0xff0/0xff0 [ 1510.033505] do_syscall_64+0x1d5/0x640 [ 1510.035804] 29*32kB [ 1510.040026] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1510.042242] (UME) [ 1510.046462] RIP: 0033:0x4665d9 [ 1510.046466] RSP: 002b:00007ff6f5ea0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1510.046476] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1510.046480] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1510.046487] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1510.048545] 24*64kB [ 1510.052322] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1510.052329] R13: 00007ffe35371b8f R14: 00007ff6f5ea0300 R15: 0000000000022000 [ 1510.054672] (UM) [ 1510.065763] Bluetooth: hci3 command 0x0419 tx timeout [ 1510.083612] 7*128kB [ 1510.243351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1510.342757] (UM) 15*256kB (U) 31*512kB (UM) 2*1024kB (UM) 0*2048kB 0*4096kB = 26544kB [ 1510.372533] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1510.381532] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1510.443742] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1510.464834] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1510.478477] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1510.489536] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1510.497765] 37716 total pagecache pages [ 1510.501757] 0 pages in swap cache [ 1510.506969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1510.516062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1510.529306] Swap cache stats: add 0, delete 0, find 0/0 [ 1510.551598] Free swap = 0kB [ 1510.561730] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1510.570910] Total swap = 0kB [ 1510.579928] 2097051 pages RAM [ 1510.587889] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1510.600179] 0 pages HighMem/MovableOnly [ 1510.610087] 363849 pages reserved [ 1510.618087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1510.642623] 0 pages cma reserved [ 1510.658862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1510.723825] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1510.731160] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1510.799359] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1510.836174] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1510.873298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1510.881219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1510.915806] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1510.923789] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1510.930631] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1510.949796] device veth0_vlan entered promiscuous mode [ 1510.963756] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1510.970835] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1510.995922] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1511.007153] device veth1_vlan entered promiscuous mode [ 1511.015094] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1511.021657] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1511.033120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1511.040733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1511.051681] device veth0_vlan entered promiscuous mode [ 1511.063844] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1511.075730] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1511.083124] Node 0 DMA32 free:45128kB min:36200kB low:45248kB high:54296kB active_anon:56328kB inactive_anon:104616kB active_file:5196kB inactive_file:3060kB unevictable:0kB writepending:28kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7232kB pagetables:2512kB bounce:0kB free_pcp:596kB local_pcp:184kB free_cma:0kB [ 1511.086329] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1511.121202] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1511.128283] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1511.140754] device veth1_vlan entered promiscuous mode [ 1511.147923] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1511.164624] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1511.189282] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1511.217841] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1511.232807] lowmem_reserve[]: 0 0 0 0 0 [ 1511.246843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1511.247081] Node 0 [ 1511.263364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1511.288765] device veth0_macvtap entered promiscuous mode [ 1511.303686] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1511.311152] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1511.322127] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1511.334610] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1511.342020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1511.363471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1511.371446] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1511.404590] device veth0_macvtap entered promiscuous mode [ 1511.427265] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1511.444307] device veth1_macvtap entered promiscuous mode [ 1511.450632] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1511.472617] lowmem_reserve[]: 0 0 0 0 0 [ 1511.475993] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1511.476963] Node 1 Normal free:368476kB min:53696kB low:67120kB high:80544kB active_anon:1616kB inactive_anon:36136kB active_file:28kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:496kB bounce:0kB free_pcp:472kB local_pcp:124kB free_cma:0kB [ 1511.528538] device veth1_macvtap entered promiscuous mode [ 1511.543009] lowmem_reserve[]: 0 0 0 0 0 [ 1511.543262] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1511.547029] Node 0 DMA: 1*4kB (U) 2*8kB (UE) 1*16kB (E) 2*32kB (UE) 6*64kB (UE) 7*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11108kB [ 1511.574988] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1511.589241] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1511.608322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1511.632353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1511.641605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1511.672598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1511.681903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1511.712593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1511.721768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1511.732810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1511.744381] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1511.751360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1511.761525] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1511.769792] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1511.783434] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1511.813008] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1511.847082] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1511.868648] Node 0 DMA32: 956*4kB (UME) 390*8kB (UME) 100*16kB (UME) 28*32kB (UME) 22*64kB (ME) 8*128kB (M) 42*256kB (UM) 18*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 31840kB [ 1511.876973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1511.895681] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1511.906998] Node 1 Normal: 78*4kB (UME) 69*8kB (UME) 42*16kB (UME) 33*32kB (UME) 34*64kB (ME) 11*128kB (ME) 1*256kB (U) 84*512kB (UM) 4*1024kB (UM) 0*2048kB 0*4096kB = 53536kB [ 1511.925459] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1511.945889] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1511.960515] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1511.971666] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1511.982990] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1511.987889] 35638 total pagecache pages [ 1511.994972] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1512.006295] CPU: 1 PID: 17102 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1512.011516] 0 pages in swap cache [ 1512.014173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1512.014177] Call Trace: [ 1512.014198] dump_stack+0x1b2/0x281 [ 1512.014211] warn_alloc.cold+0x96/0x1cc [ 1512.014224] ? zone_watermark_ok_safe+0x220/0x220 [ 1512.014234] ? usleep_range+0x130/0x130 [ 1512.014243] ? try_to_free_pages+0x23f/0x6e0 [ 1512.014252] ? _find_next_bit+0xdb/0x100 [ 1512.014263] ? run_timer_softirq+0x5a0/0x5a0 [ 1512.020648] Swap cache stats: add 0, delete 0, find 0/0 [ 1512.027574] __alloc_pages_nodemask+0x2127/0x2720 [ 1512.027597] ? lock_acquire+0x170/0x3f0 [ 1512.027612] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1512.027621] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1512.027637] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1512.027658] alloc_pages_current+0x155/0x260 [ 1512.027668] ion_page_pool_alloc+0x118/0x1b0 [ 1512.027680] ion_system_heap_allocate+0x133/0x8c0 [ 1512.044287] Free swap = 0kB [ 1512.046956] ? _raw_spin_unlock+0x29/0x40 [ 1512.051340] Total swap = 0kB [ 1512.055385] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1512.055394] ? ion_system_contig_heap_create+0x130/0x130 [ 1512.055403] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1512.055418] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1512.055428] ion_alloc+0x27a/0x810 [ 1512.055441] ? ion_dma_buf_release+0x40/0x40 [ 1512.055457] ? __might_fault+0x177/0x1b0 [ 1512.055468] ion_ioctl+0xea/0x1f0 [ 1512.055480] ? ion_query_heaps+0x360/0x360 [ 1512.055493] ? ion_query_heaps+0x360/0x360 [ 1512.072238] 2097051 pages RAM [ 1512.074020] do_vfs_ioctl+0x75a/0xff0 [ 1512.074033] ? ioctl_preallocate+0x1a0/0x1a0 [ 1512.074042] ? lock_downgrade+0x740/0x740 [ 1512.074055] ? __fget+0x225/0x360 [ 1512.074063] ? do_vfs_ioctl+0xff0/0xff0 [ 1512.074074] ? security_file_ioctl+0x83/0xb0 [ 1512.080250] 0 pages HighMem/MovableOnly [ 1512.083594] SyS_ioctl+0x7f/0xb0 [ 1512.083602] ? do_vfs_ioctl+0xff0/0xff0 [ 1512.083613] do_syscall_64+0x1d5/0x640 [ 1512.083628] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1512.083636] RIP: 0033:0x4665d9 [ 1512.083641] RSP: 002b:00007f5f77a6d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1512.083651] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1512.083656] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1512.083662] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1512.083667] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1512.083672] R13: 00007ffe82aa5b1f R14: 00007f5f77a6d300 R15: 0000000000022000 [ 1512.090937] warn_alloc_show_mem: 1 callbacks suppressed [ 1512.090940] Mem-Info: [ 1512.102350] 363849 pages reserved [ 1512.108794] active_anon:14486 inactive_anon:35188 isolated_anon:0 [ 1512.108794] active_file:14 inactive_file:13 isolated_file:0 [ 1512.108794] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1512.108794] slab_reclaimable:11912 slab_unreclaimable:113515 [ 1512.108794] mapped:53050 shmem:35611 pagetables:752 bounce:0 [ 1512.108794] free:13897 free_pcp:261 free_cma:0 [ 1512.110816] 0 pages cma reserved [ 1512.113889] Node 0 active_anon:56332kB inactive_anon:104616kB active_file:36kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:181480kB dirty:0kB writeback:0kB shmem:106036kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1512.113904] Node 1 active_anon:1612kB inactive_anon:36136kB active_file:20kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:30720kB dirty:0kB writeback:0kB shmem:36408kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1512.113907] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1512.113926] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1512.127675] Out of memory: Kill process 17369 (syz-executor.1) score 1004 or sacrifice child [ 1512.135391] Node 0 [ 1512.139738] Killed process 17373 (syz-executor.1) total-vm:93384kB, anon-rss:160kB, file-rss:34820kB, shmem-rss:0kB [ 1512.146329] DMA32 free:18016kB min:36200kB low:45248kB high:54296kB active_anon:56332kB inactive_anon:104616kB active_file:36kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7232kB pagetables:2512kB bounce:0kB free_pcp:924kB local_pcp:804kB free_cma:0kB [ 1512.169311] syz-executor.1: [ 1512.170133] lowmem_reserve[]: [ 1512.190997] page allocation failure: order:0 [ 1512.193590] 0 [ 1512.208877] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1512.210258] 0 [ 1512.265852] oom_reaper: reaped process 17373 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1512.269599] 0 [ 1512.308026] (null) [ 1512.463252] 0 0 [ 1512.463265] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1512.487483] syz-executor.1 cpuset= [ 1512.513502] lowmem_reserve[]: [ 1512.514447] kworker/0:3 invoked oom-killer: gfp_mask=0x14142c0(GFP_KERNEL|__GFP_NOWARN|__GFP_COMP|__GFP_NOMEMALLOC), nodemask= [ 1512.517089] 0 0 0 0 0 [ 1512.520292] (null) [ 1512.540658] / [ 1512.542861] mems_allowed=0-1 [ 1512.542874] CPU: 0 PID: 17373 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1512.542880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1512.542883] Call Trace: [ 1512.542903] dump_stack+0x1b2/0x281 [ 1512.549979] Node 1 [ 1512.555695] warn_alloc.cold+0x96/0x1cc [ 1512.555707] ? zone_watermark_ok_safe+0x220/0x220 [ 1512.555715] ? usleep_range+0x130/0x130 [ 1512.555725] ? try_to_free_pages+0x23f/0x6e0 [ 1512.565113] Normal free:26604kB min:53696kB low:67120kB high:80544kB active_anon:1612kB inactive_anon:36136kB active_file:20kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:348kB bounce:0kB free_pcp:380kB local_pcp:368kB free_cma:0kB [ 1512.567914] ? _find_next_bit+0xdb/0x100 [ 1512.571690] lowmem_reserve[]: [ 1512.573921] ? run_timer_softirq+0x5a0/0x5a0 [ 1512.573937] __alloc_pages_nodemask+0x2127/0x2720 [ 1512.573953] ? lock_acquire+0x170/0x3f0 [ 1512.577900] 0 [ 1512.582733] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1512.582741] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1512.582757] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1512.586726] 0 [ 1512.591131] alloc_pages_current+0x155/0x260 [ 1512.619416] 0 [ 1512.623436] ion_page_pool_alloc+0x118/0x1b0 [ 1512.623449] ion_system_heap_allocate+0x133/0x8c0 [ 1512.626529] 0 [ 1512.631030] ? ion_alloc+0x187/0x810 [ 1512.635866] 0 [ 1512.639809] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1512.646417] ? ion_system_contig_heap_create+0x130/0x130 [ 1512.646426] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1512.646435] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1512.646445] ion_alloc+0x204/0x810 [ 1512.650917] Node 0 [ 1512.656353] ? ion_dma_buf_release+0x40/0x40 [ 1512.656366] ? __might_fault+0x177/0x1b0 [ 1512.656377] ion_ioctl+0xea/0x1f0 [ 1512.658154] DMA: [ 1512.662543] ? ion_query_heaps+0x360/0x360 [ 1512.662554] ? ion_query_heaps+0x360/0x360 [ 1512.662564] do_vfs_ioctl+0x75a/0xff0 [ 1512.664518] 0*4kB [ 1512.668919] ? ioctl_preallocate+0x1a0/0x1a0 [ 1512.673787] 1*8kB [ 1512.675573] ? lock_downgrade+0x740/0x740 [ 1512.679256] (E) [ 1512.681047] ? __fget+0x225/0x360 [ 1512.686504] 1*16kB [ 1512.692013] ? do_vfs_ioctl+0xff0/0xff0 [ 1512.697133] (E) [ 1512.702202] ? security_file_ioctl+0x83/0xb0 [ 1512.705787] 2*32kB [ 1512.707965] SyS_ioctl+0x7f/0xb0 [ 1512.712384] (UE) [ 1512.716444] ? do_vfs_ioctl+0xff0/0xff0 [ 1512.719961] 4*64kB [ 1512.722013] do_syscall_64+0x1d5/0x640 [ 1512.726329] (UE) [ 1512.730488] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1512.734282] 7*128kB [ 1512.736394] RIP: 0033:0x4665d9 [ 1512.740878] (UE) [ 1512.743005] RSP: 002b:00007f3fdcb2c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1512.743015] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1512.743021] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1512.743026] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1512.743033] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1512.748697] 2*256kB [ 1512.749233] R13: 00007fff69de001f R14: 00007f3fdcb2c300 R15: 0000000000022000 [ 1512.752691] (UE) [ 1512.760533] , order=1, oom_score_adj=0 [ 1512.761310] 2*512kB [ 1512.765313] kworker/0:3 cpuset=/ mems_allowed=0-1 [ 1512.765452] CPU: 0 PID: 4644 Comm: kworker/0:3 Not tainted 4.14.232-syzkaller #0 [ 1512.765457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1512.765469] Workqueue: events send_dm_alert [ 1512.765474] Call Trace: [ 1512.765488] dump_stack+0x1b2/0x281 [ 1512.765499] dump_header+0x178/0x82f [ 1512.765509] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1512.765520] ? ___ratelimit+0x2cd/0x530 [ 1512.781657] (UE) [ 1512.783223] oom_kill_process.cold+0x10/0xa40 [ 1512.783236] ? lock_downgrade+0x740/0x740 [ 1512.783249] out_of_memory+0x2dc/0x1190 [ 1512.785296] 2*1024kB [ 1512.790472] ? oom_killer_disable+0x1c0/0x1c0 [ 1512.792814] (UE) [ 1512.795969] ? mutex_trylock+0x152/0x1a0 [ 1512.798011] 3*2048kB [ 1512.805791] __alloc_pages_nodemask+0x23e1/0x2720 [ 1512.805811] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1512.813090] (UME) [ 1512.820355] ? mark_held_locks+0xa6/0xf0 [ 1512.827665] 0*4096kB [ 1512.834881] ? cache_grow_begin+0x3f/0x700 [ 1512.834891] cache_grow_begin+0x91/0x700 [ 1512.834904] fallback_alloc+0x207/0x2c0 [ 1512.837221] = 10968kB [ 1512.844481] kmem_cache_alloc_node_trace+0xed/0x400 [ 1512.844493] __kmalloc_node_track_caller+0x38/0x70 [ 1512.844505] __alloc_skb+0x96/0x510 [ 1512.846553] Node 0 [ 1512.850510] reset_per_cpu_data+0x27/0x230 [ 1512.852832] DMA32: [ 1512.857637] send_dm_alert+0x19/0xd0 [ 1512.865193] 972*4kB [ 1512.874535] process_one_work+0x793/0x14a0 [ 1512.874552] ? work_busy+0x320/0x320 [ 1512.878857] (ME) [ 1512.881426] ? worker_thread+0x158/0xff0 [ 1512.885054] 392*8kB [ 1512.888730] ? _raw_spin_unlock_irq+0x24/0x80 [ 1512.893854] (ME) [ 1512.897798] worker_thread+0x5cc/0xff0 [ 1512.899875] 97*16kB [ 1512.904359] ? rescuer_thread+0xc80/0xc80 [ 1512.904367] kthread+0x30d/0x420 [ 1512.904375] ? kthread_create_on_node+0xd0/0xd0 [ 1512.908513] (ME) [ 1512.912470] ret_from_fork+0x24/0x30 [ 1512.925578] Mem-Info: [ 1512.925598] active_anon:14461 inactive_anon:35188 isolated_anon:0 [ 1512.925598] active_file:9 inactive_file:18 isolated_file:0 [ 1512.925598] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1512.925598] slab_reclaimable:11912 slab_unreclaimable:113515 [ 1512.925598] mapped:53050 shmem:35611 pagetables:715 bounce:0 [ 1512.925598] free:13897 free_pcp:348 free_cma:0 [ 1512.925612] Node 0 active_anon:56232kB inactive_anon:104616kB active_file:16kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:181480kB dirty:0kB writeback:0kB shmem:106036kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1512.925636] Node 1 active_anon:1612kB inactive_anon:36136kB active_file:20kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:30720kB dirty:0kB writeback:0kB shmem:36408kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1512.925639] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1512.925654] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1512.925673] Node 0 DMA32 free:18016kB min:36200kB low:45248kB high:54296kB active_anon:56232kB inactive_anon:104616kB active_file:16kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7232kB pagetables:2512kB bounce:0kB free_pcp:1008kB local_pcp:208kB free_cma:0kB [ 1512.925689] lowmem_reserve[]: 0 0 0 0 0 [ 1512.925706] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1512.925732] lowmem_reserve[]: 0 0 0 0 0 [ 1512.925749] Node 1 Normal free:26604kB min:53696kB low:67120kB high:80544kB active_anon:1612kB inactive_anon:36136kB active_file:20kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:348kB bounce:0kB free_pcp:384kB local_pcp:12kB free_cma:0kB [ 1512.925764] lowmem_reserve[]: 0 0 0 0 0 [ 1512.940200] 31*32kB [ 1512.953159] Node 0 [ 1512.956808] syz-executor.0: [ 1512.958973] DMA: [ 1512.961367] page allocation failure: order:1 [ 1512.975235] 0*4kB [ 1512.985835] (UME) [ 1512.996953] 1*8kB [ 1513.005293] 22*64kB [ 1513.010486] (E) [ 1513.011525] (ME) [ 1513.018972] 1*16kB [ 1513.026713] 9*128kB [ 1513.031170] , mode:0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask= [ 1513.032100] (UM) [ 1513.039904] (null) [ 1513.045525] 1*256kB [ 1513.085932] (E) [ 1513.107367] Mem-Info: [ 1513.132769] syz-executor.0 cpuset= [ 1513.158978] (M) [ 1513.174029] 2*32kB [ 1513.193201] active_anon:14461 inactive_anon:35188 isolated_anon:0 [ 1513.193201] active_file:7 inactive_file:20 isolated_file:0 [ 1513.193201] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1513.193201] slab_reclaimable:11912 slab_unreclaimable:113517 [ 1513.193201] mapped:53050 shmem:35611 pagetables:704 bounce:0 [ 1513.193201] free:13930 free_pcp:320 free_cma:0 [ 1513.205991] / [ 1513.223176] Node 0 active_anon:56232kB inactive_anon:104616kB active_file:16kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:181480kB dirty:0kB writeback:0kB shmem:106036kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1513.238131] (UE) [ 1513.256501] 11*512kB [ 1513.270269] mems_allowed=0-1 [ 1513.270879] (U) [ 1513.278267] CPU: 0 PID: 17108 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1513.283240] 0*1024kB [ 1513.283758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1513.285987] 0*2048kB [ 1513.288313] Call Trace: [ 1513.294311] Node 1 active_anon:1612kB inactive_anon:36136kB active_file:12kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:30720kB dirty:0kB writeback:0kB shmem:36408kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1513.296333] dump_stack+0x1b2/0x281 [ 1513.298446] Node 0 [ 1513.300755] warn_alloc.cold+0x96/0x1cc [ 1513.302749] 0*4096kB [ 1513.305118] ? zone_watermark_ok_safe+0x220/0x220 [ 1513.308644] = 18016kB [ 1513.310607] ? usleep_range+0x130/0x130 [ 1513.312854] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1513.346063] ? _find_next_bit+0xdb/0x100 [ 1513.346072] ? run_timer_softirq+0x5a0/0x5a0 [ 1513.346086] __alloc_pages_nodemask+0x2127/0x2720 [ 1513.346103] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1513.347821] Node 0 [ 1513.375649] ? mark_held_locks+0xa6/0xf0 [ 1513.375658] ? cache_grow_begin+0x3f/0x700 [ 1513.375668] cache_grow_begin+0x91/0x700 [ 1513.377725] Normal: [ 1513.380133] fallback_alloc+0x207/0x2c0 [ 1513.383253] lowmem_reserve[]: [ 1513.385194] kmem_cache_alloc_trace+0x1f1/0x3d0 [ 1513.393872] 0*4kB [ 1513.396247] ? dev_uevent_filter+0xd0/0xd0 [ 1513.405612] 0 [ 1513.407987] kobject_uevent_env+0x20c/0xf40 [ 1513.410543] 2717 [ 1513.437680] ? wait_for_completion_io+0x10/0x10 [ 1513.437692] ? is_acpi_device_node+0x5b/0x70 [ 1513.437703] device_del+0x642/0xa80 [ 1513.441329] 0*8kB [ 1513.443541] ? device_find_child+0x107/0x140 [ 1513.443549] ? __device_links_no_driver+0x1b0/0x1b0 [ 1513.443563] hci_conn_del_sysfs+0xca/0x160 [ 1513.447514] 0*16kB [ 1513.449911] hci_conn_cleanup+0x216/0x500 [ 1513.454748] 0*32kB [ 1513.457139] hci_conn_del+0x253/0x6f0 [ 1513.461106] 0*64kB [ 1513.486586] hci_conn_hash_flush+0x19c/0x260 [ 1513.486597] hci_dev_do_close+0x535/0xca0 [ 1513.486608] ? __fsnotify_inode_delete+0x20/0x20 [ 1513.486619] hci_unregister_dev+0x17f/0x8c0 [ 1513.490663] 2718 [ 1513.495042] ? fcntl_setlk+0xdb0/0xdb0 [ 1513.495052] ? vhci_close_dev+0x50/0x50 [ 1513.495061] vhci_release+0x70/0xe0 [ 1513.499896] 2718 [ 1513.504820] __fput+0x25f/0x7a0 [ 1513.504833] task_work_run+0x11f/0x190 [ 1513.504847] do_exit+0xa44/0x2850 [ 1513.507059] 2718 [ 1513.511106] ? mm_update_next_owner+0x5b0/0x5b0 [ 1513.515389] 0*128kB [ 1513.519396] ? get_signal+0x323/0x1ca0 [ 1513.521692] 0*256kB [ 1513.525653] ? lock_acquire+0x170/0x3f0 [ 1513.525660] ? lock_downgrade+0x740/0x740 [ 1513.525670] do_group_exit+0x100/0x2e0 [ 1513.525682] get_signal+0x38d/0x1ca0 [ 1513.533453] ? ion_dma_buf_release+0x40/0x40 [ 1513.533470] do_signal+0x7c/0x1550 [ 1513.533477] ? ion_ioctl+0x13a/0x1f0 [ 1513.533486] ? ion_query_heaps+0x360/0x360 [ 1513.535632] Node 0 [ 1513.539976] ? setup_sigcontext+0x820/0x820 [ 1513.541785] DMA32 free:18116kB min:36200kB low:45248kB high:54296kB active_anon:56232kB inactive_anon:104616kB active_file:16kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7232kB pagetables:2512kB bounce:0kB free_pcp:896kB local_pcp:688kB free_cma:0kB [ 1513.546079] ? ion_query_heaps+0x360/0x360 [ 1513.546087] ? do_vfs_ioctl+0xe2/0xff0 [ 1513.546095] ? ioctl_preallocate+0x1a0/0x1a0 [ 1513.546102] ? lock_downgrade+0x740/0x740 [ 1513.546112] ? __fget+0x225/0x360 [ 1513.546119] ? task_work_add+0x87/0xe0 [ 1513.546130] ? exit_to_usermode_loop+0x41/0x200 [ 1513.548188] 0*512kB [ 1513.552833] exit_to_usermode_loop+0x160/0x200 [ 1513.552842] ? SyS_ioctl+0x5c/0xb0 [ 1513.552851] do_syscall_64+0x4a3/0x640 [ 1513.557244] 0*1024kB [ 1513.560867] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1513.563039] lowmem_reserve[]: [ 1513.567408] RIP: 0033:0x4665d9 [ 1513.572421] 0*2048kB [ 1513.576618] RSP: 002b:00007ff6f5ea0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1513.578857] 0*4096kB [ 1513.583196] RAX: fffffffffffffff4 RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1513.583201] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1513.583205] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1513.583208] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1513.583212] R13: 00007ffe35371b8f R14: 00007ff6f5ea0300 R15: 0000000000022000 [ 1513.600469] 4*64kB [ 1513.609139] 0 [ 1513.625236] (UE) [ 1513.630337] 0 [ 1513.646400] 7*128kB [ 1513.652424] = 0kB [ 1513.666082] (UE) [ 1513.674126] 0 [ 1513.680553] 2*256kB [ 1513.690141] 0 [ 1513.729153] (UE) [ 1513.737301] Node 1 [ 1513.747383] 2*512kB [ 1513.751935] Normal: [ 1513.757360] (UE) [ 1513.761405] 75*4kB [ 1513.761883] 2*1024kB [ 1513.769405] (UME) [ 1513.778926] (UE) [ 1513.795184] 70*8kB [ 1513.804730] 3*2048kB [ 1513.819316] 0 [ 1513.834290] (UME) [ 1513.844218] (UME) [ 1513.850773] 0*4096kB [ 1513.859534] 45*16kB [ 1513.867776] = 10968kB [ 1513.870753] Node 0 [ 1513.880021] (UME) [ 1513.888291] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1513.891967] DMA32: 969*4kB (ME) 393*8kB (ME) 97*16kB (UME) 33*32kB (UME) 23*64kB (UME) 9*128kB (UM) 1*256kB (M) 11*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18140kB [ 1513.926447] 34*32kB (UME) 34*64kB (ME) 11*128kB (ME) 0*256kB 32*512kB (UM) 4*1024kB (UM) 0*2048kB 0*4096kB = 26732kB [ 1513.957338] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1513.961915] lowmem_reserve[]: [ 1513.982808] Node 1 [ 1513.982883] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1513.985945] Normal: [ 1513.988177] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1514.005878] 75*4kB (UME) 70*8kB (UME) 45*16kB (UME) 34*32kB (UME) 34*64kB (ME) 11*128kB (ME) 0*256kB 32*512kB (UM) 4*1024kB (UM) 0*2048kB 0*4096kB = 26732kB [ 1514.017110] 0 0 0 0 0 [ 1514.034137] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1514.034955] Node 1 [ 1514.050255] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1514.051787] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1514.056035] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1514.062147] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1514.078865] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1514.078872] 35638 total pagecache pages [ 1514.094584] Normal free:26732kB min:53696kB low:67120kB high:80544kB active_anon:1612kB inactive_anon:36136kB active_file:28kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:304kB bounce:0kB free_pcp:384kB local_pcp:372kB free_cma:0kB [ 1514.105282] 0 pages in swap cache [ 1514.137248] 35638 total pagecache pages [ 1514.141242] 0 pages in swap cache [ 1514.141293] Swap cache stats: add 0, delete 0, find 0/0 [ 1514.148149] Swap cache stats: add 0, delete 0, find 0/0 [ 1514.150103] Free swap = 0kB [ 1514.160959] lowmem_reserve[]: 0 0 0 0 0 [ 1514.167903] Mem-Info: [ 1514.168854] Node 0 DMA: [ 1514.170323] active_anon:14461 inactive_anon:35188 isolated_anon:0 [ 1514.170323] active_file:42 inactive_file:0 isolated_file:0 [ 1514.170323] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1514.170323] slab_reclaimable:11909 slab_unreclaimable:113494 [ 1514.170323] mapped:53050 shmem:35611 pagetables:704 bounce:0 [ 1514.170323] free:13960 free_pcp:313 free_cma:0 [ 1514.170337] Node 0 active_anon:56232kB inactive_anon:104616kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:181480kB dirty:0kB writeback:0kB shmem:106036kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1514.178168] Free swap = 0kB [ 1514.215849] Total swap = 0kB [ 1514.238420] 0*4kB 1*8kB (E) 1*16kB (E) 2*32kB (UE) 4*64kB (UE) 7*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10968kB [ 1514.252645] 2097051 pages RAM [ 1514.257739] 0 pages HighMem/MovableOnly [ 1514.258154] Node 0 [ 1514.261698] 363849 pages reserved [ 1514.261707] 0 pages cma reserved [ 1514.264502] DMA32: 969*4kB (ME) 393*8kB (ME) 97*16kB (UME) 33*32kB (UME) 23*64kB (UME) 9*128kB (UM) 1*256kB (M) 11*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18140kB [ 1514.286739] Node 1 active_anon:1612kB inactive_anon:36136kB active_file:28kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:30720kB dirty:0kB writeback:0kB shmem:36408kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1514.289419] Node 0 [ 1514.318212] Total swap = 0kB [ 1514.323628] 2097051 pages RAM [ 1514.327003] 0 pages HighMem/MovableOnly [ 1514.328315] Out of memory: Kill process 7960 (syz-fuzzer) score 6 or sacrifice child [ 1514.331050] 363849 pages reserved [ 1514.331056] 0 pages cma reserved [ 1514.349736] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1514.356507] Killed process 17111 (syz-executor.5) total-vm:84924kB, anon-rss:68kB, file-rss:0kB, shmem-rss:0kB [ 1514.359932] Node 1 Normal: 2*4kB (UE) 5*8kB (UE) 25*16kB (UME) 33*32kB (UME) 608*64kB (UME) 18*128kB (UME) 0*256kB 32*512kB (UM) 4*1024kB (UM) 0*2048kB 0*4096kB = 63200kB [ 1514.405571] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1514.419205] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1514.470192] oom_reaper: reaped process 17111 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1514.487797] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1514.512224] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1514.521100] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1514.529960] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1514.542152] Node 0 DMA32 free:52076kB min:36200kB low:45248kB high:54296kB active_anon:56232kB inactive_anon:104616kB active_file:240kB inactive_file:4124kB unevictable:0kB writepending:148kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7200kB pagetables:2512kB bounce:0kB free_pcp:544kB local_pcp:436kB free_cma:0kB [ 1514.552140] 37155 total pagecache pages [ 1514.602426] 0 pages in swap cache [ 1514.606696] Swap cache stats: add 0, delete 0, find 0/0 [ 1514.635877] Free swap = 0kB [ 1514.638952] Total swap = 0kB [ 1514.641970] 2097051 pages RAM [ 1514.652917] lowmem_reserve[]: 0 0 0 0 0 [ 1514.662235] 0 pages HighMem/MovableOnly [ 1514.667099] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1514.702167] 363849 pages reserved [ 1514.706234] 0 pages cma reserved [ 1514.768009] lowmem_reserve[]: 0 0 0 0 0 [ 1514.772047] Node 1 Normal free:449788kB min:53696kB low:67120kB high:80544kB active_anon:1612kB inactive_anon:36136kB active_file:28kB inactive_file:1712kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:304kB bounce:0kB free_pcp:572kB local_pcp:92kB free_cma:0kB [ 1514.885061] lowmem_reserve[]: 0 0 0 0 0 [ 1514.902143] Node 0 DMA: 0*4kB 1*8kB (E) 1*16kB (E) 2*32kB (UE) 14*64kB (UE) 7*128kB (UE) 2*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 12120kB [ 1514.932166] Node 0 DMA32: 389*4kB (UE) 180*8kB (UME) 60*16kB (E) 19*32kB (UE) 713*64kB (UME) 149*128kB (UM) 58*256kB (UM) 10*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 89236kB [ 1514.954182] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1514.965660] Node 1 Normal: 3*4kB (UME) 6*8kB (UME) 8*16kB (UME) 15*32kB (UME) 7169*64kB (UME) 687*128kB (UME) 62*256kB (UM) 34*512kB (UM) 4*1024kB (UM) 0*2048kB 0*4096kB = 584796kB 20:07:26 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x7fffffff, 0x23}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, 0x0, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000080)=0x1) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x4, 0xcf, 0x7ff, 0x8, 0x0, 0x1, 0xb51, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x40) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000001480)={'syztnl1\x00', &(0x7f0000001400)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x1f, 0xffff0000, 0x43, @mcast1, @loopback, 0x20, 0x10, 0x2, 0x1}}) openat$zero(0xffffffffffffff9c, &(0x7f00000014c0), 0x803, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) 20:07:26 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x7fffffff, 0x23}) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000040)=0x20) [ 1515.000025] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1515.026871] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1515.037591] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1515.048222] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1515.059189] 38816 total pagecache pages [ 1515.063916] 0 pages in swap cache [ 1515.068547] Swap cache stats: add 0, delete 0, find 0/0 [ 1515.092264] Free swap = 0kB [ 1515.097556] Total swap = 0kB [ 1515.107251] 2097051 pages RAM [ 1515.116973] 0 pages HighMem/MovableOnly [ 1515.131061] 363849 pages reserved [ 1515.142328] 0 pages cma reserved [ 1517.311847] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1517.313201] syz-executor.4: [ 1517.335942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1517.346910] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1517.365504] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1517.377806] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1517.380549] CPU: 1 PID: 17564 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1517.390276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1517.397628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1517.397633] Call Trace: [ 1517.397650] dump_stack+0x1b2/0x281 [ 1517.397663] warn_alloc.cold+0x96/0x1cc [ 1517.397675] ? zone_watermark_ok_safe+0x220/0x220 [ 1517.431310] __alloc_pages_nodemask+0x2127/0x2720 [ 1517.436319] ? lock_acquire+0x170/0x3f0 [ 1517.440294] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1517.445125] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1517.450647] ? __mutex_unlock_slowpath+0x75/0x770 [ 1517.455495] alloc_pages_current+0x155/0x260 [ 1517.459889] ion_page_pool_alloc+0x118/0x1b0 [ 1517.464379] ion_system_heap_allocate+0x133/0x8c0 [ 1517.469221] ? ion_alloc+0x187/0x810 [ 1517.473004] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1517.479045] ? ion_system_contig_heap_create+0x130/0x130 [ 1517.484480] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1517.489480] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1517.494479] ion_alloc+0x204/0x810 [ 1517.498016] ? ion_dma_buf_release+0x40/0x40 [ 1517.502687] ? __might_fault+0x177/0x1b0 [ 1517.506764] ion_ioctl+0xea/0x1f0 [ 1517.510230] ? ion_query_heaps+0x360/0x360 [ 1517.514732] ? ion_query_heaps+0x360/0x360 [ 1517.519045] do_vfs_ioctl+0x75a/0xff0 [ 1517.522949] ? ioctl_preallocate+0x1a0/0x1a0 [ 1517.527614] ? lock_downgrade+0x740/0x740 [ 1517.531845] ? __fget+0x225/0x360 [ 1517.535481] ? do_vfs_ioctl+0xff0/0xff0 [ 1517.539449] ? security_file_ioctl+0x83/0xb0 [ 1517.543876] SyS_ioctl+0x7f/0xb0 [ 1517.547330] ? do_vfs_ioctl+0xff0/0xff0 [ 1517.551295] do_syscall_64+0x1d5/0x640 [ 1517.555199] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1517.560471] RIP: 0033:0x4665d9 [ 1517.563825] RSP: 002b:00007f3d1f881188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1517.571876] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1517.579131] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1517.586582] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1517.594097] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1517.601389] R13: 00007ffdbbfa296f R14: 00007f3d1f881300 R15: 0000000000022000 [ 1517.608845] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1517.618049] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1517.623349] CPU: 0 PID: 17373 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1517.632143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1517.641866] Call Trace: [ 1517.644648] dump_stack+0x1b2/0x281 [ 1517.648903] warn_alloc.cold+0x96/0x1cc [ 1517.652883] ? zone_watermark_ok_safe+0x220/0x220 [ 1517.654321] Mem-Info: [ 1517.657929] __alloc_pages_nodemask+0x2127/0x2720 [ 1517.657945] ? lock_acquire+0x170/0x3f0 [ 1517.665684] active_anon:14596 inactive_anon:35187 isolated_anon:12 [ 1517.665684] active_file:1373 inactive_file:2133 isolated_file:0 [ 1517.665684] unevictable:0 dirty:9 writeback:0 unstable:0 [ 1517.665684] slab_reclaimable:11902 slab_unreclaimable:116439 [ 1517.665684] mapped:46811 shmem:35609 pagetables:726 bounce:0 [ 1517.665684] free:208616 free_pcp:223 free_cma:0 [ 1517.666001] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1517.666019] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1517.666030] ? __mutex_unlock_slowpath+0x75/0x770 [ 1517.666043] alloc_pages_current+0x155/0x260 [ 1517.666057] ion_page_pool_alloc+0x118/0x1b0 [ 1517.666066] ion_system_heap_allocate+0x133/0x8c0 [ 1517.666075] ? _raw_spin_unlock+0x29/0x40 [ 1517.666086] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1517.686616] Node 0 active_anon:57036kB inactive_anon:104612kB active_file:5408kB inactive_file:8912kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:156916kB dirty:28kB writeback:0kB shmem:106028kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1517.705844] ? ion_system_contig_heap_create+0x130/0x130 [ 1517.705855] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1517.705867] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1517.705876] ion_alloc+0x27a/0x810 [ 1517.705888] ? ion_dma_buf_release+0x40/0x40 [ 1517.705899] ? __might_fault+0x177/0x1b0 [ 1517.705909] ion_ioctl+0xea/0x1f0 [ 1517.705918] ? ion_query_heaps+0x360/0x360 [ 1517.705928] ? ion_query_heaps+0x360/0x360 [ 1517.705937] do_vfs_ioctl+0x75a/0xff0 [ 1517.705949] ? ioctl_preallocate+0x1a0/0x1a0 [ 1517.735501] Node 1 active_anon:1348kB inactive_anon:36136kB active_file:84kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:30828kB dirty:8kB writeback:0kB shmem:36408kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1517.739362] ? lock_downgrade+0x740/0x740 [ 1517.739381] ? __fget+0x225/0x360 [ 1517.755441] Node 0 [ 1517.772938] ? do_vfs_ioctl+0xff0/0xff0 [ 1517.772952] ? security_file_ioctl+0x83/0xb0 [ 1517.772961] SyS_ioctl+0x7f/0xb0 [ 1517.772971] ? do_vfs_ioctl+0xff0/0xff0 [ 1517.772982] do_syscall_64+0x1d5/0x640 [ 1517.773001] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1517.773008] RIP: 0033:0x4665d9 [ 1517.773012] RSP: 002b:00007f3fdcb2c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1517.773022] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1517.773027] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1517.773031] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1517.773036] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1517.773040] R13: 00007fff69de001f R14: 00007f3fdcb2c300 R15: 0000000000022000 [ 1517.783557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1517.784307] CPU: 1 PID: 17565 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1517.788789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1517.792310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1517.792314] Call Trace: [ 1517.792333] dump_stack+0x1b2/0x281 [ 1517.792346] warn_alloc.cold+0x96/0x1cc [ 1517.792359] ? zone_watermark_ok_safe+0x220/0x220 [ 1517.792380] __alloc_pages_nodemask+0x2127/0x2720 [ 1517.792397] ? lock_acquire+0x170/0x3f0 [ 1517.801107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1517.804284] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1517.804303] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1517.804315] ? __mutex_unlock_slowpath+0x75/0x770 [ 1517.804331] alloc_pages_current+0x155/0x260 [ 1517.810276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1517.812810] ion_page_pool_alloc+0x118/0x1b0 [ 1517.812821] ion_system_heap_allocate+0x133/0x8c0 [ 1517.812830] ? ion_alloc+0x187/0x810 [ 1517.812841] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1517.812851] ? ion_system_contig_heap_create+0x130/0x130 [ 1517.818619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1517.821197] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1517.821211] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1517.849854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1517.852756] ion_alloc+0x204/0x810 [ 1517.852771] ? ion_dma_buf_release+0x40/0x40 [ 1517.852784] ? __might_fault+0x177/0x1b0 [ 1517.852797] ion_ioctl+0xea/0x1f0 [ 1517.857870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1517.858646] ? ion_query_heaps+0x360/0x360 [ 1517.863362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1517.866991] ? ion_query_heaps+0x360/0x360 [ 1517.871612] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1517.874295] do_vfs_ioctl+0x75a/0xff0 [ 1517.874306] ? ioctl_preallocate+0x1a0/0x1a0 [ 1517.874316] ? lock_downgrade+0x740/0x740 [ 1517.874328] ? __fget+0x225/0x360 [ 1517.874336] ? do_vfs_ioctl+0xff0/0xff0 [ 1517.874347] ? security_file_ioctl+0x83/0xb0 [ 1517.874356] SyS_ioctl+0x7f/0xb0 [ 1517.874364] ? do_vfs_ioctl+0xff0/0xff0 [ 1517.882833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1517.883508] do_syscall_64+0x1d5/0x640 [ 1518.173822] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1518.179027] RIP: 0033:0x4665d9 [ 1518.182210] RSP: 002b:00007f5f77a6d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1518.189916] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1518.197196] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1518.204496] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1518.211959] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1518.219254] R13: 00007ffe82aa5b1f R14: 00007f5f77a6d300 R15: 0000000000022000 [ 1518.254174] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1518.266642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1518.267382] DMA free:11040kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1518.303201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1518.314676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1518.324308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1518.337481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1518.349496] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1518.355661] Node 0 DMA32 free:320748kB min:36200kB low:45248kB high:54296kB active_anon:56968kB inactive_anon:104612kB active_file:5572kB inactive_file:9888kB unevictable:0kB writepending:64kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7296kB pagetables:2632kB bounce:0kB free_pcp:732kB local_pcp:644kB free_cma:0kB [ 1518.387139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1518.397706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1518.407681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1518.419869] lowmem_reserve[]: 0 0 0 0 0 [ 1518.424409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1518.434141] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1518.464455] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1518.471471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1518.490990] lowmem_reserve[]: 0 0 0 0 0 20:07:29 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x7fffffff, 0x23}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, 0x0, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000080)=0x1) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x4, 0xcf, 0x7ff, 0x8, 0x0, 0x1, 0xb51, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x40) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000001480)={'syztnl1\x00', &(0x7f0000001400)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x1f, 0xffff0000, 0x43, @mcast1, @loopback, 0x20, 0x10, 0x2, 0x1}}) [ 1518.495120] Node 1 Normal free:79968kB min:53696kB low:67120kB high:80544kB active_anon:1328kB inactive_anon:36136kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:184kB bounce:0kB free_pcp:700kB local_pcp:688kB free_cma:0kB [ 1518.528781] lowmem_reserve[]: 0 0 0 0 0 [ 1518.534403] Node 0 DMA: 4*4kB (U) 10*8kB (UE) 10*16kB (UE) 7*32kB (UE) 5*64kB (UE) 8*128kB (UE) 2*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 11040kB [ 1518.551253] Node 0 DMA32: 17*4kB [ 1518.555911] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1518.566842] (UME) 484*8kB (UME) 50*16kB (ME) 6175*32kB (UME) 49*64kB (UM) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 205604kB [ 1518.586394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1518.594243] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1518.641054] Node 1 Normal: 461*4kB (UME) 1014*8kB (UM) 821*16kB (UM) 511*32kB (UME) 725*64kB (U) 102*128kB (U) 18*256kB (U) 11*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 110164kB [ 1518.696212] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1518.707767] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1518.724660] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1518.738930] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1518.751334] 40545 total pagecache pages [ 1518.758873] 0 pages in swap cache [ 1518.767488] Swap cache stats: add 0, delete 0, find 0/0 [ 1518.775678] Free swap = 0kB [ 1518.785063] Total swap = 0kB [ 1518.789896] 2097051 pages RAM [ 1518.798982] 0 pages HighMem/MovableOnly [ 1518.805416] 363849 pages reserved [ 1518.814577] 0 pages cma reserved [ 1518.927100] warn_alloc_show_mem: 1 callbacks suppressed [ 1518.927104] Mem-Info: [ 1518.951885] active_anon:14524 inactive_anon:35187 isolated_anon:0 [ 1518.951885] active_file:1620 inactive_file:5123 isolated_file:0 [ 1518.951885] unevictable:0 dirty:17 writeback:0 unstable:0 [ 1518.951885] slab_reclaimable:11902 slab_unreclaimable:114924 [ 1518.951885] mapped:40357 shmem:35609 pagetables:704 bounce:0 [ 1518.951885] free:30859 free_pcp:348 free_cma:0 [ 1519.105785] Node 0 active_anon:56768kB inactive_anon:104612kB active_file:1788kB inactive_file:1736kB unevictable:0kB isolated(anon):0kB isolated(file):132kB mapped:146000kB dirty:64kB writeback:0kB shmem:106028kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1519.180603] Node 1 active_anon:1328kB inactive_anon:36136kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:4kB writeback:0kB shmem:36408kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1519.247820] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1519.280002] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1519.286391] oom_reaper: reaped process 17564 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1519.289957] Node 0 DMA32 free:17800kB min:36200kB low:45248kB high:54296kB active_anon:56768kB inactive_anon:104612kB active_file:740kB inactive_file:240kB unevictable:0kB writepending:64kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7232kB pagetables:2632kB bounce:0kB free_pcp:28kB local_pcp:24kB free_cma:0kB [ 1519.327571] lowmem_reserve[]: 0 0 0 0 0 [ 1519.331579] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1519.357455] lowmem_reserve[]: 0 0 0 0 0 [ 1519.361474] Node 1 Normal free:26344kB min:53696kB low:67120kB high:80544kB active_anon:1328kB inactive_anon:36136kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:184kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1519.395572] lowmem_reserve[]: 0 0 0 0 0 [ 1519.399696] Node 0 DMA: 1*4kB (U) 1*8kB (E) 10*16kB (UE) 7*32kB (UE) 5*64kB (UE) 8*128kB (UE) 2*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10956kB [ 1519.419329] Node 0 DMA32: 1105*4kB (UME) 490*8kB (UME) 96*16kB (UME) 94*32kB (UME) 46*64kB (UM) 9*128kB (UM) 5*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18260kB [ 1519.439326] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1519.450158] Node 1 Normal: 36*4kB (UME) 25*8kB (M) 12*16kB (UM) 7*32kB (ME) 23*64kB (U) 102*128kB (U) 18*256kB (U) 11*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 26552kB [ 1519.470143] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1519.479043] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1519.491631] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1519.500718] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1519.514970] 35659 total pagecache pages [ 1519.518970] 0 pages in swap cache [ 1519.524451] Swap cache stats: add 0, delete 0, find 0/0 [ 1519.529812] Free swap = 0kB [ 1519.535262] Total swap = 0kB [ 1519.538374] 2097051 pages RAM [ 1519.541469] 0 pages HighMem/MovableOnly [ 1519.547486] 363849 pages reserved [ 1519.550960] 0 pages cma reserved [ 1519.696968] oom_reaper: reaped process 17565 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1519.752212] syz-executor.2 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1519.771869] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1519.775281] syz-executor.2 cpuset= [ 1519.788557] syz-executor.1 cpuset= [ 1519.790935] / [ 1519.795823] / [ 1519.796406] mems_allowed=0-1 [ 1519.797717] mems_allowed=0-1 [ 1519.799469] CPU: 1 PID: 17564 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1519.813873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1519.823225] Call Trace: [ 1519.825839] dump_stack+0x1b2/0x281 [ 1519.829506] dump_header+0x178/0x82f [ 1519.833221] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1519.838309] ? ___ratelimit+0x2cd/0x530 [ 1519.842408] oom_kill_process.cold+0x10/0xa40 [ 1519.846918] out_of_memory+0xe3e/0x1190 [ 1519.850920] ? oom_killer_disable+0x1c0/0x1c0 [ 1519.855414] ? mutex_trylock+0x152/0x1a0 [ 1519.859476] __alloc_pages_nodemask+0x23e1/0x2720 [ 1519.864316] ? lock_acquire+0x170/0x3f0 [ 1519.868295] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1519.873122] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1519.877623] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1519.883068] ? check_preemption_disabled+0x35/0x240 [ 1519.888082] alloc_pages_current+0x155/0x260 [ 1519.892486] ion_page_pool_alloc+0x118/0x1b0 [ 1519.896892] ion_system_heap_allocate+0x133/0x8c0 [ 1519.901719] ? ion_alloc+0x187/0x810 [ 1519.905420] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1519.910953] ? ion_system_contig_heap_create+0x130/0x130 [ 1519.916384] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1519.921543] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1519.926399] ion_alloc+0x204/0x810 [ 1519.929942] ? ion_dma_buf_release+0x40/0x40 [ 1519.934490] ? __might_fault+0x177/0x1b0 [ 1519.938559] ion_ioctl+0xea/0x1f0 [ 1519.942000] ? ion_query_heaps+0x360/0x360 [ 1519.946317] ? ion_query_heaps+0x360/0x360 [ 1519.950557] do_vfs_ioctl+0x75a/0xff0 [ 1519.954492] ? ioctl_preallocate+0x1a0/0x1a0 [ 1519.959018] ? lock_downgrade+0x740/0x740 [ 1519.963269] ? __fget+0x225/0x360 [ 1519.966804] ? do_vfs_ioctl+0xff0/0xff0 [ 1519.970989] ? security_file_ioctl+0x83/0xb0 [ 1519.975499] SyS_ioctl+0x7f/0xb0 [ 1519.978923] ? do_vfs_ioctl+0xff0/0xff0 [ 1519.982923] do_syscall_64+0x1d5/0x640 [ 1519.986818] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1519.991999] RIP: 0033:0x4665d9 [ 1519.995174] RSP: 002b:00007f3d1f881188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1520.002988] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1520.010278] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1520.017630] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1520.024891] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1520.032232] R13: 00007ffdbbfa296f R14: 00007f3d1f881300 R15: 0000000000022000 [ 1520.039503] CPU: 0 PID: 17373 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1520.047411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1520.051822] Mem-Info: [ 1520.056891] Call Trace: [ 1520.059322] active_anon:14467 inactive_anon:35185 isolated_anon:0 [ 1520.059322] active_file:22 inactive_file:19 isolated_file:1 [ 1520.059322] unevictable:0 dirty:19 writeback:0 unstable:0 [ 1520.059322] slab_reclaimable:11902 slab_unreclaimable:114329 [ 1520.059322] mapped:35731 shmem:35607 pagetables:686 bounce:0 [ 1520.059322] free:13811 free_pcp:0 free_cma:0 [ 1520.061908] dump_stack+0x1b2/0x281 [ 1520.061922] warn_alloc.cold+0x96/0x1cc [ 1520.061932] ? zone_watermark_ok_safe+0x220/0x220 [ 1520.061941] ? usleep_range+0x130/0x130 [ 1520.061952] ? _find_next_bit+0xdb/0x100 [ 1520.061972] ? run_timer_softirq+0x5a0/0x5a0 [ 1520.101333] Node 0 active_anon:56588kB inactive_anon:104612kB active_file:116kB inactive_file:76kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:142916kB dirty:80kB writeback:0kB shmem:106028kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1520.103357] __alloc_pages_nodemask+0x2127/0x2720 [ 1520.103374] ? lock_acquire+0x170/0x3f0 [ 1520.103388] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1520.103397] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1520.103412] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1520.103423] ? retint_kernel+0x2d/0x2d [ 1520.108279] Node 1 active_anon:1280kB inactive_anon:36128kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:36400kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1520.112254] alloc_pages_current+0x155/0x260 [ 1520.112269] ion_page_pool_alloc+0x118/0x1b0 [ 1520.112277] ion_system_heap_allocate+0x133/0x8c0 [ 1520.112289] ? _raw_spin_unlock+0x29/0x40 [ 1520.112302] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1520.112310] ? ion_system_contig_heap_create+0x130/0x130 [ 1520.112319] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1520.112329] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1520.112339] ion_alloc+0x27a/0x810 [ 1520.112354] ? ion_dma_buf_release+0x40/0x40 [ 1520.120234] Node 0 [ 1520.121045] ? __might_fault+0x177/0x1b0 [ 1520.155140] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1520.158128] ion_ioctl+0xea/0x1f0 [ 1520.166016] lowmem_reserve[]: [ 1520.167789] ? ion_query_heaps+0x360/0x360 [ 1520.177124] 0 [ 1520.177267] ? ion_query_heaps+0x360/0x360 [ 1520.210167] 2717 [ 1520.213321] do_vfs_ioctl+0x75a/0xff0 [ 1520.213334] ? ioctl_preallocate+0x1a0/0x1a0 [ 1520.213343] ? lock_downgrade+0x740/0x740 [ 1520.213355] ? __fget+0x225/0x360 [ 1520.213364] ? do_vfs_ioctl+0xff0/0xff0 [ 1520.213375] ? security_file_ioctl+0x83/0xb0 [ 1520.213387] SyS_ioctl+0x7f/0xb0 [ 1520.218313] 2718 [ 1520.222446] ? do_vfs_ioctl+0xff0/0xff0 [ 1520.222457] do_syscall_64+0x1d5/0x640 [ 1520.222471] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1520.222479] RIP: 0033:0x4665d9 [ 1520.222483] RSP: 002b:00007f3fdcb2c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1520.222492] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1520.222496] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1520.222501] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1520.222506] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1520.222511] R13: 00007fff69de001f R14: 00007f3fdcb2c300 R15: 0000000000022000 [ 1520.233782] syz-executor.4: [ 1520.244040] 2718 [ 1520.255335] page allocation failure: order:0 [ 1520.260273] 2718 [ 1520.293090] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1520.301459] (null) [ 1520.303593] Node 0 DMA32 free:17956kB min:36200kB low:45248kB high:54296kB active_anon:56564kB inactive_anon:104612kB active_file:64kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7232kB pagetables:2624kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1520.303613] lowmem_reserve[]: 0 0 0 0 0 [ 1520.303633] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1520.303651] lowmem_reserve[]: 0 0 0 [ 1520.316235] syz-executor.4 cpuset= [ 1520.324082] 0 [ 1520.330945] / [ 1520.332997] 0 [ 1520.349658] mems_allowed=0-1 [ 1520.365790] CPU: 0 PID: 17565 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1520.367729] Node 1 [ 1520.374073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1520.374078] Call Trace: [ 1520.374099] dump_stack+0x1b2/0x281 [ 1520.374112] warn_alloc.cold+0x96/0x1cc [ 1520.374123] ? zone_watermark_ok_safe+0x220/0x220 [ 1520.374132] ? usleep_range+0x130/0x130 [ 1520.374142] ? _find_next_bit+0xdb/0x100 [ 1520.374153] ? run_timer_softirq+0x5a0/0x5a0 [ 1520.374170] __alloc_pages_nodemask+0x2127/0x2720 [ 1520.387111] Normal free:26572kB min:53696kB low:67120kB high:80544kB active_anon:1276kB inactive_anon:36128kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:128kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1520.389622] ? lock_acquire+0x170/0x3f0 [ 1520.397105] lowmem_reserve[]: [ 1520.400280] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1520.408254] 0 [ 1520.409189] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1520.416464] 0 [ 1520.418421] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1520.453377] 0 [ 1520.477142] ? alloc_pages_current+0x123/0x260 [ 1520.477153] alloc_pages_current+0x155/0x260 [ 1520.477166] ion_page_pool_alloc+0x118/0x1b0 [ 1520.477175] ion_system_heap_allocate+0x133/0x8c0 [ 1520.477183] ? ion_alloc+0x187/0x810 [ 1520.477193] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1520.477201] ? ion_system_contig_heap_create+0x130/0x130 [ 1520.477211] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1520.477221] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1520.477231] ion_alloc+0x204/0x810 [ 1520.477243] ? ion_dma_buf_release+0x40/0x40 [ 1520.486179] 0 [ 1520.486267] ? __might_fault+0x177/0x1b0 [ 1520.487992] 0 [ 1520.489778] ion_ioctl+0xea/0x1f0 [ 1520.500724] ? ion_query_heaps+0x360/0x360 [ 1520.508074] Mem-Info: [ 1520.512291] ? ion_query_heaps+0x360/0x360 [ 1520.512302] do_vfs_ioctl+0x75a/0xff0 [ 1520.512314] ? ioctl_preallocate+0x1a0/0x1a0 [ 1520.512322] ? lock_downgrade+0x740/0x740 [ 1520.512334] ? __fget+0x225/0x360 [ 1520.512343] ? do_vfs_ioctl+0xff0/0xff0 [ 1520.514940] active_anon:14460 inactive_anon:35185 isolated_anon:0 [ 1520.514940] active_file:17 inactive_file:17 isolated_file:0 [ 1520.514940] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1520.514940] slab_reclaimable:11901 slab_unreclaimable:114317 [ 1520.514940] mapped:35713 shmem:35605 pagetables:688 bounce:0 [ 1520.514940] free:13871 free_pcp:0 free_cma:0 [ 1520.518543] ? security_file_ioctl+0x83/0xb0 [ 1520.527619] Node 0 [ 1520.531309] SyS_ioctl+0x7f/0xb0 [ 1520.535401] DMA: [ 1520.539761] ? do_vfs_ioctl+0xff0/0xff0 [ 1520.549714] Node 0 active_anon:56564kB inactive_anon:104612kB active_file:64kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:142852kB dirty:0kB writeback:0kB shmem:106028kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1520.572263] do_syscall_64+0x1d5/0x640 [ 1520.572278] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1520.572286] RIP: 0033:0x4665d9 [ 1520.572291] RSP: 002b:00007f5f77a6d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1520.572300] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1520.572304] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1520.572309] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1520.572314] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1520.572319] R13: 00007ffe82aa5b1f R14: 00007f5f77a6d300 R15: 0000000000022000 [ 1520.653508] 1*4kB [ 1520.655267] Node 1 active_anon:1276kB inactive_anon:36128kB active_file:4kB inactive_file:3204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1900kB dirty:0kB writeback:0kB shmem:36392kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1520.659611] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1520.660377] Node 0 [ 1520.671113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1520.675555] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1520.681076] (U) [ 1520.687628] lowmem_reserve[]: 0 [ 1520.705876] 1*8kB [ 1520.733899] 2717 [ 1520.758728] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1520.889487] 2718 [ 1520.907898] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1520.931518] (E) 10*16kB (UE) 7*32kB (UE) 5*64kB (UE) 8*128kB (UE) 2*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10956kB [ 1520.941050] 2718 [ 1520.944399] syz-executor.4 cpuset= [ 1520.946164] 2718 [ 1520.946464] / [ 1520.952240] Node 0 DMA32: 1114*4kB (UME) 677*8kB (UME) 92*16kB (UME) 96*32kB (UME) 20*64kB (UM) 9*128kB (UM) 5*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18128kB [ 1520.967958] Node 0 DMA32 free:18116kB min:36200kB low:45248kB high:54296kB active_anon:56564kB inactive_anon:104612kB active_file:52kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7232kB pagetables:2624kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 1520.969779] mems_allowed=0-1 [ 1521.003932] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1521.014701] Node 1 Normal: 50*4kB (UME) 38*8kB (UM) 28*16kB (UM) 23*32kB (UME) 42*64kB (UM) 108*128kB (UM) 20*256kB (UM) 7*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26904kB [ 1521.017325] lowmem_reserve[]: [ 1521.030336] CPU: 0 PID: 17565 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1521.030342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1521.030345] Call Trace: [ 1521.030365] dump_stack+0x1b2/0x281 [ 1521.030378] warn_alloc.cold+0x96/0x1cc [ 1521.051124] 0 [ 1521.053320] ? zone_watermark_ok_safe+0x220/0x220 [ 1521.053341] __alloc_pages_nodemask+0x2127/0x2720 [ 1521.053357] ? lock_acquire+0x170/0x3f0 [ 1521.053371] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1521.053389] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1521.053400] ? __mutex_unlock_slowpath+0x75/0x770 [ 1521.053413] alloc_pages_current+0x155/0x260 [ 1521.053425] ion_page_pool_alloc+0x118/0x1b0 [ 1521.077864] 0 [ 1521.081346] ion_system_heap_allocate+0x133/0x8c0 [ 1521.107302] ? _raw_spin_unlock+0x29/0x40 [ 1521.108451] 0 [ 1521.111452] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1521.111454] 0 0 [ 1521.113328] ? ion_system_contig_heap_create+0x130/0x130 [ 1521.113338] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1521.113348] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1521.113357] ion_alloc+0x27a/0x810 [ 1521.113369] ? ion_dma_buf_release+0x40/0x40 [ 1521.113381] ? __might_fault+0x177/0x1b0 [ 1521.113392] ion_ioctl+0xea/0x1f0 [ 1521.113400] ? ion_query_heaps+0x360/0x360 [ 1521.113412] ? ion_query_heaps+0x360/0x360 [ 1521.113421] do_vfs_ioctl+0x75a/0xff0 [ 1521.113431] ? ioctl_preallocate+0x1a0/0x1a0 [ 1521.139120] ? lock_downgrade+0x740/0x740 [ 1521.161241] Node 0 [ 1521.163709] ? __fget+0x225/0x360 [ 1521.163719] ? do_vfs_ioctl+0xff0/0xff0 [ 1521.163730] ? security_file_ioctl+0x83/0xb0 [ 1521.163739] SyS_ioctl+0x7f/0xb0 [ 1521.163747] ? do_vfs_ioctl+0xff0/0xff0 [ 1521.163759] do_syscall_64+0x1d5/0x640 [ 1521.163773] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1521.169926] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1521.172503] RIP: 0033:0x4665d9 [ 1521.172507] RSP: 002b:00007f5f77a6d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1521.172516] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1521.172520] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1521.172525] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1521.172530] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1521.172534] R13: 00007ffe82aa5b1f R14: 00007f5f77a6d300 R15: 0000000000022000 [ 1521.179670] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1521.191988] lowmem_reserve[]: [ 1521.201008] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1521.214502] 0 [ 1521.236058] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1521.249928] 0 [ 1521.261728] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1521.271228] 0 [ 1521.284211] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1521.296356] 0 [ 1521.307384] 35649 total pagecache pages [ 1521.318915] 0 [ 1521.337263] device bridge_slave_1 left promiscuous mode [ 1521.344514] Node 1 Normal free:26904kB min:53696kB low:67120kB high:80544kB active_anon:1276kB inactive_anon:36128kB active_file:108kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:128kB bounce:0kB free_pcp:16kB local_pcp:0kB free_cma:0kB [ 1521.350568] bridge0: port 2(bridge_slave_1) entered disabled state [ 1521.384728] lowmem_reserve[]: 0 0 0 0 0 [ 1521.388742] Node 0 DMA: 1*4kB (U) 1*8kB (E) 10*16kB (UE) 7*32kB (UE) 5*64kB (UE) 8*128kB (UE) 2*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10956kB [ 1521.396170] 0 pages in swap cache [ 1521.417469] Swap cache stats: add 0, delete 0, find 0/0 [ 1521.417496] Node 0 [ 1521.426935] Free swap = 0kB [ 1521.429648] DMA32: [ 1521.438389] Total swap = 0kB [ 1521.438455] 1093*4kB [ 1521.440632] 2097051 pages RAM [ 1521.449498] (ME) 671*8kB (UME) 92*16kB (UME) 96*32kB (UME) 20*64kB (UM) 9*128kB (UM) 5*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17996kB [ 1521.453161] 0 pages HighMem/MovableOnly [ 1521.467232] device bridge_slave_0 left promiscuous mode [ 1521.473856] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1521.481705] 363849 pages reserved [ 1521.488565] bridge0: port 1(bridge_slave_0) entered disabled state [ 1521.496623] Node 1 Normal: 39*4kB (UME) 30*8kB (UM) 27*16kB (UM) 23*32kB (UME) 42*64kB (UM) 108*128kB (UM) 20*256kB (UM) 7*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26780kB [ 1521.504766] 0 pages cma reserved [ 1521.524634] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1521.525928] Out of memory (oom_kill_allocating_task): Kill process 17564 (syz-executor.2) score 0 or sacrifice child [ 1521.546884] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1521.553992] Killed process 17564 (syz-executor.2) total-vm:93384kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1521.566202] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1521.576504] device veth1_macvtap left promiscuous mode [ 1521.580966] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1521.590618] device veth0_macvtap left promiscuous mode [ 1521.596017] device veth1_vlan left promiscuous mode [ 1521.600363] 35649 total pagecache pages [ 1521.601060] device veth0_vlan left promiscuous mode [ 1521.605090] 0 pages in swap cache [ 1521.620686] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1521.635744] kworker/0:0 invoked oom-killer: gfp_mask=0x14142c0(GFP_KERNEL|__GFP_NOWARN|__GFP_COMP|__GFP_NOMEMALLOC), nodemask=(null), order=1, oom_score_adj=0 [ 1521.652771] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1521.657912] CPU: 0 PID: 17564 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1521.665884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1521.675251] Call Trace: [ 1521.677850] dump_stack+0x1b2/0x281 [ 1521.681477] warn_alloc.cold+0x96/0x1cc [ 1521.685454] ? zone_watermark_ok_safe+0x220/0x220 [ 1521.690422] ? wait_for_completion_io+0x10/0x10 [ 1521.693417] Swap cache stats: add 0, delete 0, find 0/0 [ 1521.695100] __alloc_pages_nodemask+0x2127/0x2720 [ 1521.700467] Free swap = 0kB [ 1521.705320] ? lock_acquire+0x170/0x3f0 [ 1521.705335] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1521.705345] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1521.705360] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1521.705369] ? check_preemption_disabled+0x35/0x240 [ 1521.705387] alloc_pages_current+0x155/0x260 [ 1521.705398] ion_page_pool_alloc+0x118/0x1b0 [ 1521.705409] ion_system_heap_allocate+0x133/0x8c0 [ 1521.705418] ? ion_alloc+0x187/0x810 [ 1521.705428] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1521.705437] ? ion_system_contig_heap_create+0x130/0x130 [ 1521.705445] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1521.705456] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1521.760107] Total swap = 0kB [ 1521.761290] ion_alloc+0x204/0x810 [ 1521.769766] 2097051 pages RAM [ 1521.771122] ? ion_dma_buf_release+0x40/0x40 [ 1521.785240] ? __might_fault+0x177/0x1b0 [ 1521.789321] ion_ioctl+0xea/0x1f0 [ 1521.790238] 0 pages HighMem/MovableOnly [ 1521.792797] ? ion_query_heaps+0x360/0x360 [ 1521.792808] ? ion_query_heaps+0x360/0x360 [ 1521.792818] do_vfs_ioctl+0x75a/0xff0 [ 1521.792829] ? ioctl_preallocate+0x1a0/0x1a0 [ 1521.792838] ? lock_downgrade+0x740/0x740 [ 1521.792849] ? __fget+0x225/0x360 [ 1521.792859] ? do_vfs_ioctl+0xff0/0xff0 [ 1521.792870] ? security_file_ioctl+0x83/0xb0 [ 1521.792879] SyS_ioctl+0x7f/0xb0 [ 1521.792885] ? do_vfs_ioctl+0xff0/0xff0 [ 1521.792896] do_syscall_64+0x1d5/0x640 [ 1521.792910] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1521.792918] RIP: 0033:0x4665d9 [ 1521.792923] RSP: 002b:00007f3d1f881188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1521.808760] syz-executor.4: [ 1521.809125] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1521.818069] 363849 pages reserved [ 1521.821083] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1521.836945] page allocation failure: order:0 [ 1521.840615] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1521.858132] 0 pages cma reserved [ 1521.859882] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1521.879274] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1521.882402] R13: 00007ffdbbfa296f R14: 00007f3d1f881300 R15: 0000000000022000 [ 1521.886179] kworker/0:0 cpuset= [ 1521.891414] (null) [ 1521.896777] / [ 1521.911653] syz-executor.4 cpuset= [ 1521.918927] mems_allowed=0-1 [ 1521.920752] / [ 1521.922892] CPU: 0 PID: 13036 Comm: kworker/0:0 Not tainted 4.14.232-syzkaller #0 [ 1521.938484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1521.941644] mems_allowed=0-1 [ 1521.947839] Workqueue: events send_dm_alert [ 1521.955428] Call Trace: [ 1521.958017] dump_stack+0x1b2/0x281 [ 1521.961641] dump_header+0x178/0x82f [ 1521.965364] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1521.970453] ? ___ratelimit+0x2cd/0x530 [ 1521.974421] oom_kill_process.cold+0x10/0xa40 [ 1521.978940] ? lock_downgrade+0x740/0x740 [ 1521.983102] out_of_memory+0x2dc/0x1190 [ 1521.987076] ? oom_killer_disable+0x1c0/0x1c0 [ 1521.992146] ? mutex_trylock+0x152/0x1a0 [ 1521.996209] __alloc_pages_nodemask+0x23e1/0x2720 [ 1522.001143] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1522.005975] ? trace_hardirqs_on+0x10/0x10 [ 1522.010297] ? mark_held_locks+0xa6/0xf0 [ 1522.014349] ? cache_grow_begin+0x3f/0x700 [ 1522.018577] cache_grow_begin+0x91/0x700 [ 1522.022628] fallback_alloc+0x207/0x2c0 [ 1522.026593] kmem_cache_alloc_node_trace+0xed/0x400 [ 1522.031595] __kmalloc_node_track_caller+0x38/0x70 [ 1522.036611] __alloc_skb+0x96/0x510 [ 1522.040248] reset_per_cpu_data+0x27/0x230 [ 1522.044480] send_dm_alert+0x19/0xd0 [ 1522.048179] process_one_work+0x793/0x14a0 [ 1522.052405] ? work_busy+0x320/0x320 [ 1522.056121] ? worker_thread+0x158/0xff0 [ 1522.060180] ? _raw_spin_unlock_irq+0x24/0x80 [ 1522.064662] worker_thread+0x5cc/0xff0 [ 1522.068547] ? rescuer_thread+0xc80/0xc80 [ 1522.072680] kthread+0x30d/0x420 [ 1522.076043] ? kthread_create_on_node+0xd0/0xd0 [ 1522.080787] ret_from_fork+0x24/0x30 [ 1522.084498] CPU: 1 PID: 17565 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1522.092390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1522.101746] Call Trace: [ 1522.104342] dump_stack+0x1b2/0x281 [ 1522.107976] warn_alloc.cold+0x96/0x1cc [ 1522.111956] ? zone_watermark_ok_safe+0x220/0x220 [ 1522.116797] ? usleep_range+0x130/0x130 [ 1522.120804] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1522.125921] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1522.130936] ? run_timer_softirq+0x5a0/0x5a0 [ 1522.135352] __alloc_pages_nodemask+0x2127/0x2720 [ 1522.140205] ? lock_acquire+0x170/0x3f0 [ 1522.144187] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1522.149040] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1522.153629] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1522.159183] alloc_pages_current+0x155/0x260 [ 1522.163601] ion_page_pool_alloc+0x118/0x1b0 [ 1522.168093] ion_system_heap_allocate+0x133/0x8c0 [ 1522.172945] ? _raw_spin_unlock+0x29/0x40 [ 1522.177096] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1522.182027] ? ion_system_contig_heap_create+0x130/0x130 [ 1522.187493] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1522.192521] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1522.197422] ion_alloc+0x27a/0x810 [ 1522.200971] ? ion_dma_buf_release+0x40/0x40 [ 1522.205472] ? __might_fault+0x177/0x1b0 [ 1522.209541] ion_ioctl+0xea/0x1f0 [ 1522.213008] ? ion_query_heaps+0x360/0x360 [ 1522.217252] ? ion_query_heaps+0x360/0x360 [ 1522.221675] do_vfs_ioctl+0x75a/0xff0 [ 1522.225480] ? ioctl_preallocate+0x1a0/0x1a0 [ 1522.229890] ? lock_downgrade+0x740/0x740 [ 1522.234042] ? __fget+0x225/0x360 [ 1522.237527] ? do_vfs_ioctl+0xff0/0xff0 [ 1522.241501] ? security_file_ioctl+0x83/0xb0 [ 1522.245924] SyS_ioctl+0x7f/0xb0 [ 1522.249291] ? do_vfs_ioctl+0xff0/0xff0 [ 1522.253266] do_syscall_64+0x1d5/0x640 [ 1522.257158] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1522.262379] RIP: 0033:0x4665d9 [ 1522.265562] RSP: 002b:00007f5f77a6d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1522.273358] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1522.280664] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1522.288371] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1522.295641] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1522.302914] R13: 00007ffe82aa5b1f R14: 00007f5f77a6d300 R15: 0000000000022000 [ 1522.381628] Mem-Info: [ 1522.384081] active_anon:14460 inactive_anon:35185 isolated_anon:0 [ 1522.384081] active_file:23 inactive_file:4 isolated_file:0 [ 1522.384081] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1522.384081] slab_reclaimable:11900 slab_unreclaimable:114315 [ 1522.384081] mapped:35693 shmem:35605 pagetables:688 bounce:0 [ 1522.384081] free:290727 free_pcp:385 free_cma:0 [ 1522.434755] Node 0 active_anon:56564kB inactive_anon:104612kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:142852kB dirty:0kB writeback:0kB shmem:106028kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1522.481614] warn_alloc_show_mem: 2 callbacks suppressed [ 1522.481619] Mem-Info: [ 1522.489519] active_anon:14460 inactive_anon:35185 isolated_anon:0 [ 1522.489519] active_file:23 inactive_file:4 isolated_file:0 [ 1522.489519] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1522.489519] slab_reclaimable:11900 slab_unreclaimable:114315 [ 1522.489519] mapped:35693 shmem:35605 pagetables:688 bounce:0 [ 1522.489519] free:318359 free_pcp:369 free_cma:0 [ 1522.601652] Node 1 active_anon:1276kB inactive_anon:36128kB active_file:84kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:36392kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1522.651884] Node 0 active_anon:56564kB inactive_anon:104612kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:142852kB dirty:0kB writeback:0kB shmem:106028kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1522.680178] Node 0 DMA free:11916kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1522.731810] Node 1 active_anon:1276kB inactive_anon:36128kB active_file:84kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:36392kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1522.781574] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1522.786648] Node 0 DMA32 free:967364kB min:36200kB low:45248kB high:54296kB active_anon:56564kB inactive_anon:104612kB active_file:112kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7232kB pagetables:2624kB bounce:0kB free_pcp:1452kB local_pcp:716kB free_cma:0kB [ 1522.851623] Node 0 DMA free:11916kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1522.921889] lowmem_reserve[]: 0 0 0 0 0 [ 1522.925927] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1522.961570] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1522.966637] Node 0 DMA32 free:1186088kB min:36200kB low:45248kB high:54296kB active_anon:56564kB inactive_anon:104612kB active_file:112kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7232kB pagetables:2624kB bounce:0kB free_pcp:1276kB local_pcp:620kB free_cma:0kB [ 1523.041561] lowmem_reserve[]: 0 0 0 0 0 [ 1523.045598] Node 1 Normal free:1491956kB min:53696kB low:67120kB high:80544kB active_anon:1276kB inactive_anon:36128kB active_file:84kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:128kB bounce:0kB free_pcp:1280kB local_pcp:620kB free_cma:0kB [ 1523.098136] lowmem_reserve[]: 0 0 0 0 0 [ 1523.102377] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1523.130963] lowmem_reserve[]: 0 0 0 0 0 [ 1523.135429] Node 0 DMA: 4*4kB (U) 10*8kB (UE) 10*16kB (UE) 7*32kB (UE) 6*64kB (UE) 5*128kB (UE) 3*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 12000kB [ 1523.151410] lowmem_reserve[]: 0 0 0 0 0 [ 1523.159293] Node 1 Normal free:1519156kB min:53696kB low:67120kB high:80544kB active_anon:1276kB inactive_anon:36128kB active_file:84kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:128kB bounce:0kB free_pcp:1368kB local_pcp:672kB free_cma:0kB [ 1523.193798] Node 0 DMA32: 13984*4kB (UME) 20732*8kB (UME) 17077*16kB (UE) 7588*32kB (UE) 5932*64kB (UME) 1179*128kB (UM) 248*256kB (UM) 14*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 1339056kB [ 1523.203009] lowmem_reserve[]: 0 0 0 0 0 [ 1523.213302] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1523.217106] Node 0 DMA: 4*4kB (U) 10*8kB (UE) 10*16kB (UE) 7*32kB (UE) 6*64kB (UE) 5*128kB (UE) 3*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 12000kB [ 1523.231350] Node 1 Normal: 315*4kB (UME) 958*8kB (UME) 667*16kB (UME) 191*32kB (UME) 9265*64kB (UME) 3800*128kB (UME) 1228*256kB (UM) 183*512kB (UM) 6*1024kB (U) 0*2048kB 0*4096kB = 1519276kB [ 1523.247373] Node 0 DMA32: [ 1523.267602] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1523.267610] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1523.270458] 13946*4kB [ 1523.279734] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1523.290027] (UE) [ 1523.294529] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1523.300250] 20726*8kB [ 1523.305742] 37591 total pagecache pages [ 1523.312488] (UME) [ 1523.313163] 0 pages in swap cache [ 1523.317636] 17081*16kB [ 1523.319202] Swap cache stats: add 0, delete 0, find 0/0 [ 1523.319206] Free swap = 0kB [ 1523.319209] Total swap = 0kB [ 1523.319215] 2097051 pages RAM [ 1523.319219] 0 pages HighMem/MovableOnly [ 1523.319222] 363849 pages reserved 20:07:34 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x7fffffff, 0x23}) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000040)=0x20) [ 1523.319225] 0 pages cma reserved [ 1523.319232] Out of memory: Kill process 7960 (syz-fuzzer) score 6 or sacrifice child [ 1523.319285] Killed process 16852 (syz-executor.1) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1523.323377] (UME) 7588*32kB (UE) 5929*64kB (UE) 1173*128kB (UM) 248*256kB (UM) 14*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 1337960kB [ 1523.385858] oom_reaper: reaped process 16852 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1523.393394] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1523.456954] Node 1 Normal: 402*4kB (UME) 963*8kB (UME) 672*16kB (UME) 194*32kB (UME) 9263*64kB (UME) 3800*128kB (UME) 1229*256kB (UM) 183*512kB (UM) 6*1024kB (U) 0*2048kB 0*4096kB = 1519968kB [ 1523.588742] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1523.639512] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1523.681451] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1523.724088] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1523.747598] 39683 total pagecache pages [ 1523.756292] 0 pages in swap cache [ 1523.764433] Swap cache stats: add 0, delete 0, find 0/0 [ 1523.776792] Free swap = 0kB [ 1523.783219] Total swap = 0kB [ 1523.786480] device hsr_slave_1 left promiscuous mode [ 1523.789580] 2097051 pages RAM [ 1523.797096] 0 pages HighMem/MovableOnly [ 1523.805678] 363849 pages reserved [ 1523.812510] 0 pages cma reserved [ 1523.812766] device hsr_slave_0 left promiscuous mode [ 1523.854475] team0 (unregistering): Port device team_slave_1 removed [ 1523.886578] team0 (unregistering): Port device team_slave_0 removed [ 1523.912272] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1523.941059] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1524.036474] bond0 (unregistering): Released all slaves [ 1524.469876] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1524.500739] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1524.510330] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1524.516525] CPU: 0 PID: 17603 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1524.530143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1524.539589] Call Trace: [ 1524.539709] syz-executor.2 cpuset= [ 1524.542184] dump_stack+0x1b2/0x281 [ 1524.542199] warn_alloc.cold+0x96/0x1cc [ 1524.542209] ? zone_watermark_ok_safe+0x220/0x220 [ 1524.542231] __alloc_pages_nodemask+0x2127/0x2720 [ 1524.542239] ? __schedule+0x893/0x1de0 [ 1524.542255] ? lock_acquire+0x170/0x3f0 [ 1524.542269] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1524.542285] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1524.547567] / [ 1524.549436] ? __mutex_unlock_slowpath+0x75/0x770 [ 1524.555419] mems_allowed=0-1 [ 1524.558254] alloc_pages_current+0x155/0x260 [ 1524.558271] ion_page_pool_alloc+0x118/0x1b0 [ 1524.599668] ion_system_heap_allocate+0x133/0x8c0 [ 1524.604584] ? ion_alloc+0x187/0x810 [ 1524.608309] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1524.614094] ? ion_system_contig_heap_create+0x130/0x130 [ 1524.619526] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1524.624617] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1524.629455] ion_alloc+0x204/0x810 [ 1524.632990] ? ion_dma_buf_release+0x40/0x40 [ 1524.637400] ? __might_fault+0x177/0x1b0 [ 1524.641537] ion_ioctl+0xea/0x1f0 [ 1524.644987] ? ion_query_heaps+0x360/0x360 [ 1524.649205] ? ion_query_heaps+0x360/0x360 [ 1524.653421] do_vfs_ioctl+0x75a/0xff0 [ 1524.657205] ? ioctl_preallocate+0x1a0/0x1a0 [ 1524.661775] ? lock_downgrade+0x740/0x740 [ 1524.665929] ? __fget+0x225/0x360 [ 1524.669517] ? do_vfs_ioctl+0xff0/0xff0 [ 1524.673498] ? security_file_ioctl+0x83/0xb0 [ 1524.677905] SyS_ioctl+0x7f/0xb0 [ 1524.681272] ? do_vfs_ioctl+0xff0/0xff0 [ 1524.685251] do_syscall_64+0x1d5/0x640 [ 1524.689146] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1524.694333] RIP: 0033:0x4665d9 [ 1524.697518] RSP: 002b:00007f5f77a6d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1524.705225] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1524.712504] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1524.719768] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1524.727027] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1524.734405] R13: 00007ffe82aa5b1f R14: 00007f5f77a6d300 R15: 0000000000022000 [ 1524.771182] CPU: 1 PID: 17564 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1524.776718] warn_alloc_show_mem: 1 callbacks suppressed [ 1524.776722] Mem-Info: [ 1524.779112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1524.779117] Call Trace: [ 1524.779133] dump_stack+0x1b2/0x281 [ 1524.779146] warn_alloc.cold+0x96/0x1cc [ 1524.784735] active_anon:14655 inactive_anon:35183 isolated_anon:12 [ 1524.784735] active_file:1711 inactive_file:2071 isolated_file:0 [ 1524.784735] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1524.784735] slab_reclaimable:11906 slab_unreclaimable:114068 [ 1524.784735] mapped:47249 shmem:35603 pagetables:736 bounce:0 [ 1524.784735] free:180513 free_pcp:46 free_cma:0 [ 1524.787065] ? zone_watermark_ok_safe+0x220/0x220 [ 1524.787088] __alloc_pages_nodemask+0x2127/0x2720 [ 1524.796490] Node 0 active_anon:57348kB inactive_anon:104604kB active_file:6820kB inactive_file:8260kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:188996kB dirty:0kB writeback:0kB shmem:106020kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1524.799159] ? lock_acquire+0x170/0x3f0 [ 1524.799180] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1524.802870] Node 1 active_anon:1272kB inactive_anon:36128kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:36392kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1524.806761] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1524.806783] ? __mutex_unlock_slowpath+0x75/0x770 [ 1524.840493] Node 0 [ 1524.845265] ? retint_kernel+0x2d/0x2d [ 1524.845279] alloc_pages_current+0x155/0x260 [ 1524.845292] ion_page_pool_alloc+0x118/0x1b0 [ 1524.845302] ion_system_heap_allocate+0x133/0x8c0 [ 1524.850156] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1524.878393] ? _raw_spin_unlock+0x29/0x40 [ 1524.878403] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1524.878411] ? ion_system_contig_heap_create+0x130/0x130 [ 1524.878420] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1524.878430] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1524.878440] ion_alloc+0x27a/0x810 [ 1524.882442] lowmem_reserve[]: [ 1524.887224] ? ion_dma_buf_release+0x40/0x40 [ 1524.887238] ? __might_fault+0x177/0x1b0 [ 1524.914176] 0 [ 1524.919569] ion_ioctl+0xea/0x1f0 [ 1524.919581] ? ion_query_heaps+0x360/0x360 [ 1524.924563] 2717 [ 1524.926747] ? ion_query_heaps+0x360/0x360 [ 1524.926759] do_vfs_ioctl+0x75a/0xff0 [ 1524.930649] 2718 [ 1524.935030] ? ioctl_preallocate+0x1a0/0x1a0 [ 1524.935039] ? lock_downgrade+0x740/0x740 [ 1524.935051] ? __fget+0x225/0x360 [ 1524.935060] ? do_vfs_ioctl+0xff0/0xff0 [ 1524.939467] 2718 [ 1524.944905] ? security_file_ioctl+0x83/0xb0 [ 1524.944915] SyS_ioctl+0x7f/0xb0 [ 1524.944922] ? do_vfs_ioctl+0xff0/0xff0 [ 1524.944935] do_syscall_64+0x1d5/0x640 [ 1524.970565] 2718 [ 1524.974667] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1524.974675] RIP: 0033:0x4665d9 [ 1524.974679] RSP: 002b:00007f3d1f881188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1524.985024] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1524.985029] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1524.985034] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1524.985039] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1524.985044] R13: 00007ffdbbfa296f R14: 00007f3d1f881300 R15: 0000000000022000 [ 1525.127868] Node 0 DMA32 free:670152kB min:36200kB low:45248kB high:54296kB active_anon:57368kB inactive_anon:104600kB active_file:7448kB inactive_file:7680kB unevictable:0kB writepending:28kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7360kB pagetables:2940kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1525.142469] syz-executor.3: [ 1525.163779] lowmem_reserve[]: 0 0 0 0 0 [ 1525.170975] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1525.178625] page allocation failure: order:4 [ 1525.201688] lowmem_reserve[]: 0 0 0 0 0 [ 1525.210204] Node 1 Normal free:34284kB min:53696kB low:67120kB high:80544kB active_anon:1268kB inactive_anon:36128kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:120kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1525.217083] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1525.244041] lowmem_reserve[]: 0 0 0 0 0 [ 1525.257487] Node 0 DMA: 4*4kB (U) 10*8kB (UE) 10*16kB (UE) 7*32kB (UE) 6*64kB (UE) 5*128kB (UE) 3*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10976kB [ 1525.276678] (null) [ 1525.278941] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1525.284920] CPU: 0 PID: 17626 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1525.292807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1525.302171] Call Trace: [ 1525.304759] dump_stack+0x1b2/0x281 [ 1525.308475] warn_alloc.cold+0x96/0x1cc [ 1525.312479] ? zone_watermark_ok_safe+0x220/0x220 [ 1525.317341] __alloc_pages_nodemask+0x2127/0x2720 [ 1525.322184] ? lock_acquire+0x170/0x3f0 [ 1525.326244] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1525.331090] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1525.336630] ? __mutex_unlock_slowpath+0x75/0x770 [ 1525.341479] alloc_pages_current+0x155/0x260 [ 1525.345884] ion_page_pool_alloc+0x118/0x1b0 [ 1525.350285] ion_system_heap_allocate+0x133/0x8c0 [ 1525.355120] ? ion_alloc+0x187/0x810 [ 1525.358826] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1525.364266] ? ion_system_contig_heap_create+0x130/0x130 [ 1525.369794] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1525.374807] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1525.379673] ion_alloc+0x204/0x810 [ 1525.383211] ? ion_dma_buf_release+0x40/0x40 [ 1525.387624] ? __might_fault+0x177/0x1b0 [ 1525.391774] ion_ioctl+0xea/0x1f0 [ 1525.395232] ? ion_query_heaps+0x360/0x360 [ 1525.399463] ? ion_query_heaps+0x360/0x360 [ 1525.403791] do_vfs_ioctl+0x75a/0xff0 [ 1525.407600] ? ioctl_preallocate+0x1a0/0x1a0 [ 1525.412007] ? lock_downgrade+0x740/0x740 [ 1525.416154] ? __fget+0x225/0x360 [ 1525.419618] ? do_vfs_ioctl+0xff0/0xff0 [ 1525.423631] ? security_file_ioctl+0x83/0xb0 [ 1525.428049] SyS_ioctl+0x7f/0xb0 [ 1525.431410] ? do_vfs_ioctl+0xff0/0xff0 [ 1525.435383] do_syscall_64+0x1d5/0x640 [ 1525.439278] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1525.444462] RIP: 0033:0x4665d9 [ 1525.447656] RSP: 002b:00007f2b808a4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1525.453211] Node 0 [ 1525.455356] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1525.455362] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1525.455367] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1525.455373] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1525.455381] R13: 00007ffc9b8ba0df R14: 00007f2b808a4300 R15: 0000000000022000 [ 1525.462179] DMA32: 264*4kB (ME) 2744*8kB (UME) 16772*16kB (UME) 8636*32kB (UME) 20*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 568992kB [ 1525.589113] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1525.612941] Node 1 Normal: 286*4kB (UM) 934*8kB (UM) 737*16kB (UM) 418*32kB (UME) 9*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 34360kB [ 1525.654218] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1525.675117] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1525.696580] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1525.718567] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1525.740205] 39380 total pagecache pages [ 1525.752031] 0 pages in swap cache [ 1525.755581] Swap cache stats: add 0, delete 0, find 0/0 [ 1525.775408] Free swap = 0kB [ 1525.785165] Total swap = 0kB [ 1525.793133] 2097051 pages RAM [ 1525.797045] 0 pages HighMem/MovableOnly [ 1525.810869] 363849 pages reserved [ 1525.818752] 0 pages cma reserved [ 1525.948572] IPVS: ftp: loaded support on port[0] = 21 [ 1526.078493] IPVS: ftp: loaded support on port[0] = 21 [ 1526.162354] oom_reaper: reaped process 17626 (syz-executor.3), now anon-rss:0kB, file-rss:8kB, shmem-rss:0kB [ 1526.227477] oom_reaper: reaped process 17603 (syz-executor.4), now anon-rss:0kB, file-rss:4kB, shmem-rss:0kB [ 1526.263346] syz-executor.5 invoked oom-killer: gfp_mask=0x14040d0(GFP_KERNEL|__GFP_COMP|__GFP_RECLAIMABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1526.280232] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1526.289331] CPU: 0 PID: 17613 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1526.297220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1526.306742] Call Trace: [ 1526.309407] dump_stack+0x1b2/0x281 [ 1526.313038] dump_header+0x178/0x82f [ 1526.316838] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1526.322014] ? ___ratelimit+0x2cd/0x530 [ 1526.325969] oom_kill_process.cold+0x10/0xa40 [ 1526.330456] out_of_memory+0xe3e/0x1190 [ 1526.334417] ? oom_killer_disable+0x1c0/0x1c0 [ 1526.338895] ? mutex_trylock+0x152/0x1a0 [ 1526.342951] __alloc_pages_nodemask+0x23e1/0x2720 [ 1526.347788] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1526.352612] ? kfree_skbmem+0x98/0x100 [ 1526.356481] ? consume_skb+0xed/0x380 [ 1526.360318] ? cache_grow_begin+0x3f/0x700 [ 1526.364538] cache_grow_begin+0x91/0x700 [ 1526.368584] fallback_alloc+0x207/0x2c0 [ 1526.372634] kmem_cache_alloc+0x1e5/0x3c0 [ 1526.376775] ? sock_destroy_inode+0x60/0x60 [ 1526.381077] sock_alloc_inode+0x19/0x250 [ 1526.385137] ? sock_destroy_inode+0x60/0x60 [ 1526.389440] alloc_inode+0x5d/0x170 [ 1526.393050] new_inode_pseudo+0x14/0xe0 [ 1526.397024] sock_alloc+0x3c/0x270 [ 1526.400561] __sock_create+0x8a/0x620 [ 1526.404433] SyS_socket+0xd1/0x1b0 [ 1526.407953] ? move_addr_to_kernel+0x60/0x60 [ 1526.412445] ? do_syscall_64+0x4c/0x640 [ 1526.416400] ? move_addr_to_kernel+0x60/0x60 [ 1526.420793] do_syscall_64+0x1d5/0x640 [ 1526.424663] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1526.429837] RIP: 0033:0x467c47 [ 1526.433009] RSP: 002b:00007ffdd3c70788 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1526.440782] RAX: ffffffffffffffda RBX: 00007ffdd3c70888 RCX: 0000000000467c47 [ 1526.448034] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 1526.455298] RBP: 00000000004bf1ac R08: 0000000000000008 R09: 00007ffdd3c70832 [ 1526.462562] R10: 00000000004bf69a R11: 0000000000000246 R12: 00007ffdd3c707f0 [ 1526.469843] R13: 00007ffdd3c70888 R14: 00007ffdd3c70890 R15: 00000000000000f8 [ 1526.494032] Mem-Info: [ 1526.496486] active_anon:14589 inactive_anon:35186 isolated_anon:0 [ 1526.496486] active_file:35 inactive_file:0 isolated_file:0 [ 1526.496486] unevictable:0 dirty:19 writeback:0 unstable:0 [ 1526.496486] slab_reclaimable:11899 slab_unreclaimable:113495 [ 1526.496486] mapped:44519 shmem:35608 pagetables:727 bounce:0 [ 1526.496486] free:13901 free_pcp:30 free_cma:0 [ 1526.504131] syz-executor.2: [ 1526.530323] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1526.564379] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1526.569633] CPU: 0 PID: 17626 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1526.577602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1526.587051] Call Trace: [ 1526.589661] dump_stack+0x1b2/0x281 [ 1526.590565] page allocation failure: order:0 [ 1526.593313] warn_alloc.cold+0x96/0x1cc [ 1526.593324] ? zone_watermark_ok_safe+0x220/0x220 [ 1526.593333] ? usleep_range+0x130/0x130 [ 1526.593341] ? try_to_free_pages+0x23f/0x6e0 [ 1526.593350] ? _find_next_bit+0xdb/0x100 [ 1526.593362] ? run_timer_softirq+0x5a0/0x5a0 [ 1526.593378] __alloc_pages_nodemask+0x2127/0x2720 [ 1526.593395] ? lock_acquire+0x170/0x3f0 [ 1526.593409] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1526.593418] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1526.593433] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1526.593445] ? __sanitizer_cov_trace_pc+0x15/0x50 [ 1526.610561] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1526.610600] alloc_pages_current+0x155/0x260 [ 1526.617874] (null) [ 1526.619037] ion_page_pool_alloc+0x118/0x1b0 [ 1526.623525] syz-executor.4: [ 1526.628249] ion_system_heap_allocate+0x133/0x8c0 [ 1526.643832] syz-executor.2 cpuset= [ 1526.646964] ? ion_alloc+0x187/0x810 [ 1526.660857] page allocation failure: order:0 [ 1526.663315] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1526.663325] ? ion_system_contig_heap_create+0x130/0x130 [ 1526.663335] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1526.663346] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1526.663358] ion_alloc+0x204/0x810 [ 1526.663371] ? ion_dma_buf_release+0x40/0x40 [ 1526.663382] ? __might_fault+0x177/0x1b0 [ 1526.663393] ion_ioctl+0xea/0x1f0 [ 1526.663400] ? ion_query_heaps+0x360/0x360 [ 1526.663411] ? ion_query_heaps+0x360/0x360 [ 1526.663421] do_vfs_ioctl+0x75a/0xff0 [ 1526.663432] ? ioctl_preallocate+0x1a0/0x1a0 [ 1526.663441] ? lock_downgrade+0x740/0x740 [ 1526.663453] ? __fget+0x225/0x360 [ 1526.663461] ? do_vfs_ioctl+0xff0/0xff0 [ 1526.663472] ? security_file_ioctl+0x83/0xb0 [ 1526.663480] SyS_ioctl+0x7f/0xb0 [ 1526.663487] ? do_vfs_ioctl+0xff0/0xff0 [ 1526.663498] do_syscall_64+0x1d5/0x640 [ 1526.663510] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1526.663518] RIP: 0033:0x4665d9 [ 1526.663522] RSP: 002b:00007f2b808a4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1526.663531] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1526.663536] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1526.663541] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1526.663545] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1526.663551] R13: 00007ffc9b8ba0df R14: 00007f2b808a4300 R15: 0000000000022000 [ 1526.668981] Node 0 active_anon:57104kB inactive_anon:104616kB active_file:124kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:178076kB dirty:76kB writeback:0kB shmem:106040kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1526.670164] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1526.676691] Node 1 active_anon:1252kB inactive_anon:36128kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:36392kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1526.693716] / [ 1526.704301] Node 0 [ 1526.708022] (null) [ 1526.710972] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1526.723260] syz-executor.4 cpuset= [ 1526.732113] lowmem_reserve[]: [ 1526.744528] mems_allowed=0-1 [ 1526.758431] 0 [ 1526.767546] / [ 1526.769489] 2717 [ 1526.771682] mems_allowed=0-1 [ 1526.771694] CPU: 1 PID: 17603 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1526.771700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1526.771704] Call Trace: [ 1526.771719] dump_stack+0x1b2/0x281 [ 1526.771733] warn_alloc.cold+0x96/0x1cc [ 1526.771841] ? zone_watermark_ok_safe+0x220/0x220 [ 1526.785342] 2718 [ 1526.788165] ? usleep_range+0x130/0x130 [ 1526.795476] 2718 [ 1526.802698] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1526.802712] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1526.802722] ? run_timer_softirq+0x5a0/0x5a0 [ 1526.809997] warn_alloc_show_mem: 2 callbacks suppressed [ 1526.810000] Mem-Info: [ 1526.818044] __alloc_pages_nodemask+0x2127/0x2720 [ 1526.818060] ? lock_acquire+0x170/0x3f0 [ 1526.818074] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1526.825448] 2718 [ 1526.853896] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1526.853912] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1526.853930] alloc_pages_current+0x155/0x260 [ 1526.861063] active_anon:14589 inactive_anon:35186 isolated_anon:0 [ 1526.861063] active_file:32 inactive_file:16 isolated_file:0 [ 1526.861063] unevictable:0 dirty:19 writeback:0 unstable:0 [ 1526.861063] slab_reclaimable:11899 slab_unreclaimable:113495 [ 1526.861063] mapped:44519 shmem:35608 pagetables:727 bounce:0 [ 1526.861063] free:13901 free_pcp:30 free_cma:0 [ 1526.887738] ion_page_pool_alloc+0x118/0x1b0 [ 1526.887748] ion_system_heap_allocate+0x133/0x8c0 [ 1526.887756] ? ion_alloc+0x187/0x810 [ 1526.887768] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1526.891734] ? ion_system_contig_heap_create+0x130/0x130 [ 1526.891744] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1526.891756] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1526.893886] Node 0 [ 1526.919396] ion_alloc+0x204/0x810 [ 1526.919411] ? ion_dma_buf_release+0x40/0x40 [ 1526.919422] ? __might_fault+0x177/0x1b0 [ 1526.919433] ion_ioctl+0xea/0x1f0 [ 1526.919444] ? ion_query_heaps+0x360/0x360 [ 1526.923130] Node 0 active_anon:57104kB inactive_anon:104616kB active_file:124kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:178076kB dirty:76kB writeback:0kB shmem:106040kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1526.926223] ? ion_query_heaps+0x360/0x360 [ 1526.929313] Node 1 active_anon:1252kB inactive_anon:36128kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:36392kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1526.931095] do_vfs_ioctl+0x75a/0xff0 [ 1526.932911] Node 0 [ 1526.934935] ? ioctl_preallocate+0x1a0/0x1a0 [ 1526.938051] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1526.945934] ? lock_downgrade+0x740/0x740 [ 1526.945948] ? __fget+0x225/0x360 [ 1526.945956] ? do_vfs_ioctl+0xff0/0xff0 [ 1526.945969] ? security_file_ioctl+0x83/0xb0 [ 1526.955355] DMA32 free:17864kB min:36200kB low:45248kB high:54296kB active_anon:57204kB inactive_anon:104616kB active_file:68kB inactive_file:60kB unevictable:0kB writepending:76kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7328kB pagetables:2788kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1526.957886] SyS_ioctl+0x7f/0xb0 [ 1526.961542] lowmem_reserve[]: [ 1526.965495] ? do_vfs_ioctl+0xff0/0xff0 [ 1526.970431] 0 2717 [ 1526.972521] do_syscall_64+0x1d5/0x640 [ 1526.972537] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1526.972546] RIP: 0033:0x4665d9 [ 1526.976506] lowmem_reserve[]: [ 1526.978537] RSP: 002b:00007f5f77a6d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1526.983651] 0 [ 1526.988627] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1526.988634] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1526.993068] 2718 [ 1526.998414] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1526.998421] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1527.000811] 2718 [ 1527.005897] R13: 00007ffe82aa5b1f R14: 00007f5f77a6d300 R15: 0000000000022000 [ 1527.012503] CPU: 1 PID: 17564 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1527.027478] Bluetooth: hci0 command 0x0409 tx timeout [ 1527.031480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1527.031484] Call Trace: [ 1527.031501] dump_stack+0x1b2/0x281 [ 1527.031523] warn_alloc.cold+0x96/0x1cc [ 1527.065017] 0 [ 1527.069375] ? zone_watermark_ok_safe+0x220/0x220 [ 1527.074214] 0 [ 1527.077906] ? usleep_range+0x130/0x130 [ 1527.083356] 2718 [ 1527.088779] ? try_to_free_pages+0x23f/0x6e0 [ 1527.093835] 0 [ 1527.098632] ? _find_next_bit+0xdb/0x100 [ 1527.100839] 0 [ 1527.104363] ? run_timer_softirq+0x5a0/0x5a0 [ 1527.104378] __alloc_pages_nodemask+0x2127/0x2720 [ 1527.104396] ? lock_acquire+0x170/0x3f0 [ 1527.112831] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1527.112840] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1527.112857] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1527.116394] Bluetooth: hci2 command 0x0409 tx timeout [ 1527.120719] alloc_pages_current+0x155/0x260 [ 1527.149290] Node 0 [ 1527.153475] ion_page_pool_alloc+0x118/0x1b0 [ 1527.153487] ion_system_heap_allocate+0x133/0x8c0 [ 1527.183990] ? _raw_spin_unlock+0x29/0x40 [ 1527.183999] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1527.184009] ? ion_system_contig_heap_create+0x130/0x130 [ 1527.186224] Node 0 [ 1527.190621] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1527.216283] DMA32 free:17872kB min:36200kB low:45248kB high:54296kB active_anon:57200kB inactive_anon:104616kB active_file:64kB inactive_file:64kB unevictable:0kB writepending:4kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7296kB pagetables:2788kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1527.220370] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1527.224021] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1527.227789] ion_alloc+0x27a/0x810 [ 1527.232228] lowmem_reserve[]: [ 1527.260729] ? ion_dma_buf_release+0x40/0x40 [ 1527.260742] ? __might_fault+0x177/0x1b0 [ 1527.260753] ion_ioctl+0xea/0x1f0 [ 1527.264134] lowmem_reserve[]: [ 1527.267207] ? ion_query_heaps+0x360/0x360 [ 1527.271154] 0 [ 1527.273375] ? ion_query_heaps+0x360/0x360 [ 1527.273386] do_vfs_ioctl+0x75a/0xff0 [ 1527.273398] ? ioctl_preallocate+0x1a0/0x1a0 [ 1527.277259] 0 [ 1527.282445] ? lock_downgrade+0x740/0x740 [ 1527.282459] ? __fget+0x225/0x360 [ 1527.282468] ? do_vfs_ioctl+0xff0/0xff0 [ 1527.285643] 0 [ 1527.288731] ? security_file_ioctl+0x83/0xb0 [ 1527.296444] 0 [ 1527.298202] SyS_ioctl+0x7f/0xb0 [ 1527.305476] 0 [ 1527.312710] ? do_vfs_ioctl+0xff0/0xff0 [ 1527.312722] do_syscall_64+0x1d5/0x640 [ 1527.312737] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1527.314775] 0 [ 1527.322023] RIP: 0033:0x4665d9 [ 1527.322028] RSP: 002b:00007f3d1f881188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1527.322038] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1527.322045] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1527.329468] 0 [ 1527.331354] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1527.331359] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1527.331364] R13: 00007ffdbbfa296f R14: 00007f3d1f881300 R15: 0000000000022000 [ 1527.478952] 0 [ 1527.558691] 0 [ 1527.567820] Node 1 [ 1527.594545] 0 [ 1527.602954] Normal free:112800kB min:53696kB low:67120kB high:80544kB active_anon:1252kB inactive_anon:36128kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:120kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1527.635795] lowmem_reserve[]: [ 1527.681267] Node 0 [ 1527.709487] 0 0 0 0 0 [ 1527.727374] Node 0 DMA: 4*4kB (U) 10*8kB (UE) 10*16kB (UE) 7*32kB (UE) 6*64kB (UE) 5*128kB (UE) 3*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10976kB [ 1527.775159] Node 0 DMA32: 906*4kB (UME) 381*8kB (UME) 1782*16kB (UME) 1710*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 89904kB [ 1527.787203] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1527.811230] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1527.827673] warn_alloc_show_mem: 1 callbacks suppressed [ 1527.827676] Mem-Info: [ 1527.852069] Node 1 Normal: 8*4kB (M) 126*8kB (UM) 737*16kB (UM) 418*32kB (UME) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26784kB [ 1527.871374] active_anon:14568 inactive_anon:35186 isolated_anon:0 [ 1527.871374] active_file:15 inactive_file:1243 isolated_file:0 [ 1527.871374] unevictable:0 dirty:2 writeback:0 unstable:0 [ 1527.871374] slab_reclaimable:11905 slab_unreclaimable:113861 [ 1527.871374] mapped:45414 shmem:35608 pagetables:727 bounce:0 [ 1527.871374] free:32605 free_pcp:226 free_cma:0 [ 1527.906259] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1527.920664] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1527.944994] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1527.946610] lowmem_reserve[]: [ 1527.954943] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1527.972411] 0 0 0 0 0 [ 1527.974341] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1527.975416] Node 1 [ 1527.985230] CPU: 1 PID: 17603 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1527.995458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1527.998246] chnl_net:caif_netlink_parms(): no params data found [ 1528.004991] Call Trace: [ 1528.005011] dump_stack+0x1b2/0x281 [ 1528.005024] warn_alloc.cold+0x96/0x1cc [ 1528.005035] ? zone_watermark_ok_safe+0x220/0x220 [ 1528.005054] __alloc_pages_nodemask+0x2127/0x2720 [ 1528.011119] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1528.013677] ? lock_acquire+0x170/0x3f0 [ 1528.013691] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1528.013707] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1528.013718] ? __mutex_unlock_slowpath+0x75/0x770 [ 1528.013732] alloc_pages_current+0x155/0x260 [ 1528.022936] 36827 total pagecache pages [ 1528.026277] ion_page_pool_alloc+0x118/0x1b0 [ 1528.031242] 0 pages in swap cache [ 1528.039851] ion_system_heap_allocate+0x133/0x8c0 [ 1528.059678] Swap cache stats: add 0, delete 0, find 0/0 [ 1528.063415] ? _raw_spin_unlock+0x29/0x40 [ 1528.063426] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1528.063435] ? ion_system_contig_heap_create+0x130/0x130 [ 1528.063447] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1528.075335] Free swap = 0kB [ 1528.075377] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1528.080388] Total swap = 0kB [ 1528.085747] ion_alloc+0x27a/0x810 [ 1528.085760] ? ion_dma_buf_release+0x40/0x40 [ 1528.085772] ? __might_fault+0x177/0x1b0 [ 1528.085782] ion_ioctl+0xea/0x1f0 [ 1528.085790] ? ion_query_heaps+0x360/0x360 [ 1528.085803] ? ion_query_heaps+0x360/0x360 [ 1528.093894] 2097051 pages RAM [ 1528.094887] do_vfs_ioctl+0x75a/0xff0 [ 1528.100317] 0 pages HighMem/MovableOnly [ 1528.105322] ? ioctl_preallocate+0x1a0/0x1a0 [ 1528.105331] ? lock_downgrade+0x740/0x740 [ 1528.105343] ? __fget+0x225/0x360 [ 1528.105352] ? do_vfs_ioctl+0xff0/0xff0 [ 1528.105363] ? security_file_ioctl+0x83/0xb0 [ 1528.105372] SyS_ioctl+0x7f/0xb0 [ 1528.105380] ? do_vfs_ioctl+0xff0/0xff0 [ 1528.112568] 363849 pages reserved [ 1528.113214] do_syscall_64+0x1d5/0x640 [ 1528.116209] 0 pages cma reserved [ 1528.119745] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1528.125689] Out of memory (oom_kill_allocating_task): Kill process 17613 (syz-executor.5) score 0 or sacrifice child [ 1528.128170] RIP: 0033:0x4665d9 [ 1528.132701] Killed process 17613 (syz-executor.5) total-vm:93120kB, anon-rss:80kB, file-rss:34128kB, shmem-rss:0kB [ 1528.135941] RSP: 002b:00007f5f77a6d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1528.226873] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1528.234123] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1528.241520] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1528.248785] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1528.256040] R13: 00007ffe82aa5b1f R14: 00007f5f77a6d300 R15: 0000000000022000 [ 1528.274503] Node 0 active_anon:57060kB inactive_anon:104616kB active_file:1356kB inactive_file:3800kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:181904kB dirty:16kB writeback:0kB shmem:106040kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1528.307577] Normal free:26908kB min:53696kB low:67120kB high:80544kB active_anon:1252kB inactive_anon:36128kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:120kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1528.337603] Node 1 active_anon:1252kB inactive_anon:36128kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:36392kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1528.365785] lowmem_reserve[]: 0 0 0 0 0 [ 1528.370036] Node 0 DMA: 4*4kB (U) 10*8kB (UE) 10*16kB (UE) 7*32kB (UE) 6*64kB (UE) 5*128kB (UE) 3*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10976kB [ 1528.386348] Node 0 DMA32: 512*4kB (UME) 160*8kB (UME) 73*16kB (UME) 1018*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 37072kB [ 1528.421055] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1528.435904] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1528.437309] Node 0 [ 1528.465646] systemd-journal cpuset=/ mems_allowed=0-1 [ 1528.473468] CPU: 1 PID: 16761 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 1528.481549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1528.491757] Call Trace: [ 1528.494333] dump_stack+0x1b2/0x281 [ 1528.497944] dump_header+0x178/0x82f [ 1528.501667] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1528.506944] ? ___ratelimit+0x2cd/0x530 [ 1528.510933] oom_kill_process.cold+0x10/0xa40 [ 1528.515450] out_of_memory+0xe3e/0x1190 [ 1528.519595] ? oom_killer_disable+0x1c0/0x1c0 [ 1528.524073] ? mutex_trylock+0x152/0x1a0 [ 1528.528119] __alloc_pages_nodemask+0x23e1/0x2720 [ 1528.533131] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1528.537979] ? __put_seccomp_filter+0x90/0x90 [ 1528.542908] ? __seccomp_filter+0xbd/0xd60 [ 1528.547124] ? cache_grow_begin+0x3f/0x700 [ 1528.551354] cache_grow_begin+0x91/0x700 [ 1528.555397] fallback_alloc+0x207/0x2c0 [ 1528.559361] kmem_cache_alloc+0x1e5/0x3c0 [ 1528.563493] getname_flags+0xc8/0x550 [ 1528.567283] SyS_mkdirat+0x83/0x270 [ 1528.570891] ? SyS_mknod+0x30/0x30 [ 1528.574446] ? do_syscall_64+0x4c/0x640 [ 1528.578402] ? SyS_mkdirat+0x270/0x270 [ 1528.582274] do_syscall_64+0x1d5/0x640 [ 1528.586145] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1528.591321] RIP: 0033:0x7fd93bc07687 [ 1528.595024] RSP: 002b:00007fff8a68a368 EFLAGS: 00000293 ORIG_RAX: 0000000000000053 [ 1528.602727] RAX: ffffffffffffffda RBX: 00007fff8a68d3d0 RCX: 00007fd93bc07687 [ 1528.609990] RDX: 0000000000000000 RSI: 00000000000001ed RDI: 000055f79dad5d60 [ 1528.617247] RBP: 00007fff8a68a3a0 R08: 000055f79c6b43e5 R09: 0000000000000018 [ 1528.624513] R10: 0000000000000069 R11: 0000000000000293 R12: 0000000000000000 [ 1528.631765] R13: 0000000000000001 R14: 000055f79dad5d60 R15: 00007fff8a68a9e0 [ 1528.640478] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1528.650926] Node 1 Normal: 8*4kB (M) 126*8kB (UM) 737*16kB (UM) 418*32kB (UME) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26784kB [ 1528.660718] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1528.678305] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1528.680028] Node 0 [ 1528.688960] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1528.688967] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1528.688972] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1528.688976] 35674 total pagecache pages [ 1528.688986] 0 pages in swap cache [ 1528.688991] Swap cache stats: add 0, delete 0, find 0/0 [ 1528.688994] Free swap = 0kB [ 1528.688997] Total swap = 0kB [ 1528.689003] 2097051 pages RAM [ 1528.689006] 0 pages HighMem/MovableOnly [ 1528.689009] 363849 pages reserved [ 1528.689012] 0 pages cma reserved [ 1528.788018] DMA32 free:78980kB min:36200kB low:45248kB high:54296kB active_anon:57060kB inactive_anon:104616kB active_file:788kB inactive_file:244kB unevictable:0kB writepending:16kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7456kB pagetables:2788kB bounce:0kB free_pcp:552kB local_pcp:680kB free_cma:0kB [ 1528.910243] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1528.935970] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1528.942008] CPU: 1 PID: 17626 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1528.949994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1528.951148] lowmem_reserve[]: [ 1528.959344] Call Trace: [ 1528.959352] 0 [ 1528.962459] dump_stack+0x1b2/0x281 [ 1528.962472] warn_alloc.cold+0x96/0x1cc [ 1528.962485] ? zone_watermark_ok_safe+0x220/0x220 [ 1528.979393] __alloc_pages_nodemask+0x2127/0x2720 [ 1528.981133] 0 0 0 [ 1528.984259] ? check_preemption_disabled+0x35/0x240 [ 1528.984276] ? lock_acquire+0x170/0x3f0 [ 1528.986406] 0 [ 1528.991426] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1528.991442] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1528.991454] ? __mutex_unlock_slowpath+0x75/0x770 [ 1529.012474] ? __sanitizer_cov_trace_pc+0x15/0x50 [ 1529.012476] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1529.017317] alloc_pages_current+0x155/0x260 [ 1529.047332] ion_page_pool_alloc+0x118/0x1b0 [ 1529.051742] ion_system_heap_allocate+0x133/0x8c0 [ 1529.056586] ? _raw_spin_unlock+0x29/0x40 [ 1529.060730] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1529.065659] ? ion_system_contig_heap_create+0x130/0x130 [ 1529.071121] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1529.071131] lowmem_reserve[]: 0 [ 1529.076139] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1529.076151] ion_alloc+0x27a/0x810 [ 1529.079420] 0 [ 1529.084246] ? ion_dma_buf_release+0x40/0x40 [ 1529.084257] ? __might_fault+0x177/0x1b0 [ 1529.084267] ion_ioctl+0xea/0x1f0 [ 1529.084276] ? ion_query_heaps+0x360/0x360 [ 1529.101133] 0 [ 1529.101577] ? ion_query_heaps+0x360/0x360 [ 1529.105786] 0 [ 1529.107581] do_vfs_ioctl+0x75a/0xff0 [ 1529.117138] 0 [ 1529.117514] ? ioctl_preallocate+0x1a0/0x1a0 [ 1529.117536] ? lock_downgrade+0x740/0x740 [ 1529.119320] Node 1 [ 1529.123722] ? __fget+0x225/0x360 [ 1529.123730] ? do_vfs_ioctl+0xff0/0xff0 [ 1529.123739] ? security_file_ioctl+0x83/0xb0 [ 1529.123748] SyS_ioctl+0x7f/0xb0 [ 1529.123758] ? do_vfs_ioctl+0xff0/0xff0 [ 1529.127890] Normal free:29204kB min:53696kB low:67120kB high:80544kB active_anon:1252kB inactive_anon:36128kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:120kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1529.130118] do_syscall_64+0x1d5/0x640 [ 1529.133749] lowmem_reserve[]: [ 1529.137635] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1529.142033] 0 [ 1529.145365] RIP: 0033:0x4665d9 [ 1529.149319] 0 [ 1529.177052] RSP: 002b:00007f2b808a4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1529.177061] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1529.177066] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1529.177070] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1529.177075] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1529.177080] R13: 00007ffc9b8ba0df R14: 00007f2b808a4300 R15: 0000000000022000 [ 1529.179096] Mem-Info: [ 1529.187763] Bluetooth: hci0 command 0x041b tx timeout [ 1529.189715] active_anon:14578 inactive_anon:35186 isolated_anon:0 [ 1529.189715] active_file:94 inactive_file:269 isolated_file:0 [ 1529.189715] unevictable:0 dirty:4 writeback:0 unstable:0 [ 1529.189715] slab_reclaimable:11911 slab_unreclaimable:114163 [ 1529.189715] mapped:44645 shmem:35608 pagetables:727 bounce:0 [ 1529.189715] free:48135 free_pcp:71 free_cma:0 [ 1529.193401] 0 [ 1529.195904] Node 0 active_anon:57020kB inactive_anon:104616kB active_file:432kB inactive_file:1580kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:178876kB dirty:0kB writeback:0kB shmem:106040kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1529.198916] 0 [ 1529.206538] Node 1 active_anon:1252kB inactive_anon:36128kB active_file:0kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:36392kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1529.217100] 0 [ 1529.219730] Node 0 [ 1529.237308] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1529.247714] Node 0 [ 1529.249428] lowmem_reserve[]: [ 1529.328200] DMA: [ 1529.344003] 0 [ 1529.349530] 4*4kB [ 1529.372444] 2717 2718 2718 2718 [ 1529.387796] (U) 10*8kB (UE) 10*16kB (UE) 7*32kB (UE) 6*64kB (UE) 5*128kB (UE) 3*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10976kB [ 1529.388841] Node 0 DMA32 free:182096kB min:36200kB low:45248kB high:54296kB active_anon:57020kB inactive_anon:104616kB active_file:632kB inactive_file:4824kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7264kB pagetables:2704kB bounce:0kB free_pcp:760kB local_pcp:208kB free_cma:0kB [ 1529.422354] Node 0 [ 1529.437534] warn_alloc_show_mem: 1 callbacks suppressed [ 1529.437537] Mem-Info: [ 1529.444202] DMA32: [ 1529.445831] lowmem_reserve[]: [ 1529.450531] active_anon:14643 inactive_anon:35186 isolated_anon:0 [ 1529.450531] active_file:207 inactive_file:1547 isolated_file:0 [ 1529.450531] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1529.450531] slab_reclaimable:11912 slab_unreclaimable:114260 [ 1529.450531] mapped:36894 shmem:35608 pagetables:743 bounce:0 [ 1529.450531] free:55119 free_pcp:108 free_cma:0 [ 1529.458864] 6396*4kB [ 1529.489816] 0 0 0 0 0 [ 1529.496410] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1529.500684] (U) [ 1529.526867] lowmem_reserve[]: [ 1529.528015] 1054*8kB (UE) 4783*16kB (UE) 2169*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 179952kB [ 1529.535247] 0 [ 1529.546786] Node 0 active_anon:57020kB inactive_anon:104616kB active_file:2932kB inactive_file:5480kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:148476kB dirty:0kB writeback:0kB shmem:106040kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1529.565925] Node 0 [ 1529.577832] 0 0 0 0 [ 1529.584621] Node 1 Normal free:29244kB min:53696kB low:67120kB high:80544kB active_anon:1252kB inactive_anon:36128kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:120kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1529.588377] bridge0: port 1(bridge_slave_0) entered blocking state [ 1529.615033] Node 1 active_anon:1252kB inactive_anon:36128kB active_file:0kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:36392kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1529.627720] Normal: [ 1529.648720] lowmem_reserve[]: 0 0 0 0 0 [ 1529.652438] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1529.656188] Node 0 DMA: 4*4kB (U) 10*8kB (UE) 10*16kB (UE) 7*32kB (UE) 6*64kB (UE) 5*128kB (UE) 3*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10976kB [ 1529.668817] bridge0: port 1(bridge_slave_0) entered disabled state [ 1529.682048] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1529.691707] Node 1 [ 1529.714163] Node 0 DMA32: 5937*4kB (U) 982*8kB (UE) 4780*16kB (UE) 2209*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 178772kB [ 1529.722414] device bridge_slave_0 entered promiscuous mode [ 1529.730449] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1529.741696] bridge0: port 2(bridge_slave_1) entered blocking state [ 1529.747778] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1529.757670] Normal: 60*4kB (UM) 485*8kB (UM) 737*16kB (UM) 418*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB [ 1529.758834] Node 0 [ 1529.759478] 0*1024kB [ 1529.768677] Node 1 [ 1529.772425] bridge0: port 2(bridge_slave_1) entered disabled state [ 1529.773369] Normal: [ 1529.777069] device bridge_slave_1 entered promiscuous mode [ 1529.781979] DMA32 free:178120kB min:36200kB low:45248kB high:54296kB active_anon:57120kB inactive_anon:104616kB active_file:3028kB inactive_file:7300kB unevictable:0kB writepending:148kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7232kB pagetables:2556kB bounce:0kB free_pcp:772kB local_pcp:256kB free_cma:0kB [ 1529.788656] 0*2048kB [ 1529.789990] lowmem_reserve[]: 0 0 0 0 0 [ 1529.790011] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1529.790030] lowmem_reserve[]: [ 1529.827780] 0*4096kB [ 1529.854638] 60*4kB (UM) 485*8kB (UM) 737*16kB (UM) 418*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 29288kB [ 1529.866051] = 29288kB [ 1529.874779] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1529.875839] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1529.887478] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1529.893920] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1529.910649] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1529.923328] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1529.928543] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1529.935747] 39040 total pagecache pages [ 1529.946276] 0 pages in swap cache [ 1529.947226] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1529.950413] Swap cache stats: add 0, delete 0, find 0/0 [ 1529.959042] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1529.963702] Free swap = 0kB [ 1529.975674] Total swap = 0kB [ 1529.976768] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1529.979295] 2097051 pages RAM [ 1529.987553] 39373 total pagecache pages [ 1529.990355] 0 pages HighMem/MovableOnly [ 1530.000442] 0 0 0 0 0 [ 1530.004787] 0 pages in swap cache [ 1530.006690] Node 1 Normal free:29288kB min:53696kB low:67120kB high:80544kB active_anon:1252kB inactive_anon:36128kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:120kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1530.009160] 363849 pages reserved [ 1530.043515] Swap cache stats: add 0, delete 0, find 0/0 [ 1530.050381] Free swap = 0kB [ 1530.053704] Total swap = 0kB [ 1530.056740] 2097051 pages RAM [ 1530.059847] 0 pages HighMem/MovableOnly [ 1530.060425] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1530.064434] 363849 pages reserved [ 1530.074195] 0 pages cma reserved [ 1530.075324] team0: Port device team_slave_0 added [ 1530.077563] Out of memory (oom_kill_allocating_task): Kill process 16761 (systemd-journal) score 0 or sacrifice child [ 1530.087915] lowmem_reserve[]: [ 1530.093783] 0 pages cma reserved [ 1530.095074] 0 [ 1530.107257] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1530.116690] 0 0 0 0 [ 1530.119204] Node 0 DMA: 4*4kB (U) 10*8kB (UE) 10*16kB (UE) 7*32kB (UE) 6*64kB (UE) 5*128kB (UE) 3*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10976kB [ 1530.123989] Killed process 16761 (systemd-journal) total-vm:46096kB, anon-rss:480kB, file-rss:4kB, shmem-rss:4000kB [ 1530.139754] team0: Port device team_slave_1 added [ 1530.181096] Node 0 DMA32: 3023*4kB (UME) 1102*8kB (UE) 4793*16kB (UE) 2237*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 169180kB [ 1530.210417] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1530.224051] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1530.257379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1530.267964] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1530.274261] systemd[1]: Stopped Journal Service. [ 1530.282524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1530.315829] Node 1 Normal: 60*4kB (UM) 485*8kB (UM) 737*16kB (UM) 418*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 29288kB [ 1530.323417] systemd[1]: Starting Journal Service... [ 1530.331289] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1530.368976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1530.379247] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1530.397673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1530.404124] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1530.413600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1530.439533] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1530.448517] 42062 total pagecache pages [ 1530.452554] 0 pages in swap cache [ 1530.456007] Swap cache stats: add 0, delete 0, find 0/0 [ 1530.461765] Free swap = 0kB [ 1530.464799] Total swap = 0kB [ 1530.468050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1530.475485] 2097051 pages RAM [ 1530.485058] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1530.486859] 0 pages HighMem/MovableOnly [ 1530.492938] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1530.504171] 363849 pages reserved [ 1530.509497] systemd-journald[17826]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1530.530294] device hsr_slave_0 entered promiscuous mode [ 1530.531615] 0 pages cma reserved [ 1530.539528] device hsr_slave_1 entered promiscuous mode [ 1530.549865] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1530.572024] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1530.774146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1530.801369] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1530.827722] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1530.851803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1530.885561] device bridge_slave_1 left promiscuous mode [ 1530.904601] bridge0: port 2(bridge_slave_1) entered disabled state [ 1530.932507] device bridge_slave_0 left promiscuous mode [ 1530.938065] bridge0: port 1(bridge_slave_0) entered disabled state [ 1530.966620] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1530.991082] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1530.999051] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1531.022782] device bridge_slave_1 left promiscuous mode [ 1531.028319] bridge0: port 2(bridge_slave_1) entered disabled state [ 1531.041830] device bridge_slave_0 left promiscuous mode [ 1531.047345] bridge0: port 1(bridge_slave_0) entered disabled state [ 1531.075006] device veth1_macvtap left promiscuous mode [ 1531.080347] device veth0_macvtap left promiscuous mode [ 1531.101592] device veth1_vlan left promiscuous mode [ 1531.107156] device veth0_vlan left promiscuous mode [ 1531.121584] device veth1_macvtap left promiscuous mode [ 1531.126916] device veth0_macvtap left promiscuous mode [ 1531.141471] device veth1_vlan left promiscuous mode [ 1531.146560] device veth0_vlan left promiscuous mode [ 1531.209894] systemd[1]: Started Journal Service. [ 1531.224586] Bluetooth: hci0 command 0x040f tx timeout [ 1531.426657] device hsr_slave_1 left promiscuous mode [ 1531.460374] device hsr_slave_0 left promiscuous mode [ 1531.483347] team0 (unregistering): Port device team_slave_1 removed [ 1531.500078] team0 (unregistering): Port device team_slave_0 removed [ 1531.510278] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1531.527026] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1531.566659] bond0 (unregistering): Released all slaves [ 1531.659148] device hsr_slave_1 left promiscuous mode [ 1531.669029] device hsr_slave_0 left promiscuous mode [ 1531.714825] team0 (unregistering): Port device team_slave_1 removed [ 1531.741438] team0 (unregistering): Port device team_slave_0 removed [ 1531.752802] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1531.764223] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1531.797321] bond0 (unregistering): Released all slaves [ 1531.849185] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1531.956796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1531.966290] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1531.996628] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1532.011361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1532.018372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1532.044023] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1532.050123] 8021q: adding VLAN 0 to HW filter on device team0 [ 1532.063561] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1532.070600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1532.081938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1532.089588] bridge0: port 1(bridge_slave_0) entered blocking state [ 1532.095992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1532.133360] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1532.141707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1532.148846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1532.172017] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1532.193546] bridge0: port 2(bridge_slave_1) entered blocking state [ 1532.199935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1532.222930] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1532.240985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1532.250241] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1532.261059] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1532.281783] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1532.288791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1532.301540] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1532.326005] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1532.333525] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1532.351601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1532.383759] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1532.413787] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1532.422466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1532.430162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1532.453224] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1532.465585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1532.473631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1532.504965] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1532.511226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1532.535532] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1532.565724] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1532.585281] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1532.592459] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1532.612186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1532.858393] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1532.887720] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1532.904407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1532.912577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1533.011359] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1533.031630] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1533.038482] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1533.064867] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1533.081677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1533.089166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1533.100503] device veth0_vlan entered promiscuous mode [ 1533.111702] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1533.118968] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1533.128466] device veth1_vlan entered promiscuous mode [ 1533.135485] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1533.149319] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1533.166324] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1533.176973] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1533.187325] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1533.195976] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1533.206471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1533.215013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1533.227935] device veth0_macvtap entered promiscuous mode [ 1533.235330] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1533.247562] device veth1_macvtap entered promiscuous mode [ 1533.254527] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1533.266831] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1533.289017] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1533.298907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1533.300923] Bluetooth: hci0 command 0x0419 tx timeout [ 1533.313384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1533.324144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1533.336550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1533.346861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1533.360604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1533.375741] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1533.383513] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1533.394852] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1533.403729] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1533.414488] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1533.423206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1533.436969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1533.448120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1533.461756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1533.473368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1533.483993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1533.496523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1533.508730] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1533.518400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1533.526685] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1533.540366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 20:07:45 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x7fffffff, 0x23}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, 0x0, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000080)=0x1) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x4, 0xcf, 0x7ff, 0x8, 0x0, 0x1, 0xb51, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x40) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000001480)={'syztnl1\x00', &(0x7f0000001400)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x1f, 0xffff0000, 0x43, @mcast1, @loopback, 0x20, 0x10, 0x2, 0x1}}) 20:07:45 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x7fffffff, 0x23}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, 0x0, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000080)=0x1) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x4, 0xcf, 0x7ff, 0x8, 0x0, 0x1, 0xb51, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x40) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000001480)={'syztnl1\x00', &(0x7f0000001400)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x1f, 0xffff0000, 0x43, @mcast1, @loopback, 0x20, 0x10, 0x2, 0x1}}) openat$zero(0xffffffffffffff9c, &(0x7f00000014c0), 0x803, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) 20:07:45 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x7fffffff, 0x23}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, 0x0, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000080)=0x1) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) [ 1534.298111] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1534.336913] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1534.347231] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1534.361228] CPU: 1 PID: 17923 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1534.369307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1534.378720] Call Trace: [ 1534.381358] dump_stack+0x1b2/0x281 [ 1534.384989] warn_alloc.cold+0x96/0x1cc [ 1534.389052] ? zone_watermark_ok_safe+0x220/0x220 [ 1534.393917] __alloc_pages_nodemask+0x2127/0x2720 [ 1534.398808] ? lock_acquire+0x170/0x3f0 [ 1534.402788] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1534.407636] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1534.413118] ? __mutex_unlock_slowpath+0x75/0x770 [ 1534.417965] alloc_pages_current+0x155/0x260 [ 1534.422405] ion_page_pool_alloc+0x118/0x1b0 [ 1534.426816] ion_system_heap_allocate+0x133/0x8c0 [ 1534.431745] ? ion_alloc+0x187/0x810 [ 1534.435488] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1534.440942] ? ion_system_contig_heap_create+0x130/0x130 [ 1534.446396] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1534.451429] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1534.456273] ion_alloc+0x204/0x810 [ 1534.459822] ? ion_dma_buf_release+0x40/0x40 [ 1534.464241] ? __might_fault+0x177/0x1b0 [ 1534.468310] ion_ioctl+0xea/0x1f0 [ 1534.471767] ? ion_query_heaps+0x360/0x360 [ 1534.476096] ? ion_query_heaps+0x360/0x360 [ 1534.480342] do_vfs_ioctl+0x75a/0xff0 [ 1534.484148] ? ioctl_preallocate+0x1a0/0x1a0 [ 1534.488555] ? lock_downgrade+0x740/0x740 [ 1534.492713] ? __fget+0x225/0x360 [ 1534.496172] ? do_vfs_ioctl+0xff0/0xff0 [ 1534.500159] ? security_file_ioctl+0x83/0xb0 [ 1534.504581] SyS_ioctl+0x7f/0xb0 [ 1534.508156] ? do_vfs_ioctl+0xff0/0xff0 [ 1534.512140] do_syscall_64+0x1d5/0x640 [ 1534.516034] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1534.521224] RIP: 0033:0x4665d9 [ 1534.524568] RSP: 002b:00007f3d1f881188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1534.532328] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1534.539607] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1534.546963] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1534.554238] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1534.561512] R13: 00007ffdbbfa296f R14: 00007f3d1f881300 R15: 0000000000022000 [ 1534.578948] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1534.595000] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1534.600154] CPU: 1 PID: 17934 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1534.608145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1534.617595] Call Trace: [ 1534.620192] dump_stack+0x1b2/0x281 [ 1534.623830] warn_alloc.cold+0x96/0x1cc [ 1534.627810] ? zone_watermark_ok_safe+0x220/0x220 [ 1534.632671] __alloc_pages_nodemask+0x2127/0x2720 [ 1534.637519] ? __schedule+0x893/0x1de0 [ 1534.641416] ? lock_acquire+0x170/0x3f0 [ 1534.645399] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1534.650336] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1534.655792] ? __mutex_unlock_slowpath+0x75/0x770 [ 1534.660641] alloc_pages_current+0x155/0x260 [ 1534.665062] ion_page_pool_alloc+0x118/0x1b0 [ 1534.669699] ion_system_heap_allocate+0x133/0x8c0 [ 1534.674545] ? ion_alloc+0x187/0x810 [ 1534.678261] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1534.683711] ? ion_system_contig_heap_create+0x130/0x130 [ 1534.689182] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1534.694202] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1534.699049] ion_alloc+0x204/0x810 [ 1534.702597] ? ion_dma_buf_release+0x40/0x40 [ 1534.707008] ? __might_fault+0x177/0x1b0 [ 1534.711074] ion_ioctl+0xea/0x1f0 [ 1534.714647] ? ion_query_heaps+0x360/0x360 [ 1534.718891] ? ion_query_heaps+0x360/0x360 [ 1534.723130] do_vfs_ioctl+0x75a/0xff0 [ 1534.726951] ? ioctl_preallocate+0x1a0/0x1a0 [ 1534.731449] ? lock_downgrade+0x740/0x740 [ 1534.735607] ? __fget+0x225/0x360 [ 1534.739064] ? do_vfs_ioctl+0xff0/0xff0 [ 1534.743061] ? security_file_ioctl+0x83/0xb0 [ 1534.747474] SyS_ioctl+0x7f/0xb0 [ 1534.750840] ? do_vfs_ioctl+0xff0/0xff0 [ 1534.754824] do_syscall_64+0x1d5/0x640 [ 1534.758807] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1534.764091] RIP: 0033:0x4665d9 [ 1534.767277] RSP: 002b:00007f37127a1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1534.774993] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1534.782450] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1534.789724] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1534.797083] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1534.804524] R13: 00007ffd8a8e3f3f R14: 00007f37127a1300 R15: 0000000000022000 [ 1534.816463] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1534.821682] CPU: 1 PID: 17922 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1534.829567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1534.838922] Call Trace: [ 1534.841528] dump_stack+0x1b2/0x281 [ 1534.845164] warn_alloc.cold+0x96/0x1cc [ 1534.849142] ? zone_watermark_ok_safe+0x220/0x220 [ 1534.854005] __alloc_pages_nodemask+0x2127/0x2720 [ 1534.858848] ? _raw_spin_unlock_irq+0x24/0x80 [ 1534.863361] ? lock_acquire+0x170/0x3f0 [ 1534.867374] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1534.872228] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1534.877770] ? __mutex_unlock_slowpath+0x75/0x770 [ 1534.882706] alloc_pages_current+0x155/0x260 [ 1534.887117] ion_page_pool_alloc+0x118/0x1b0 [ 1534.891547] ion_system_heap_allocate+0x133/0x8c0 [ 1534.896415] ? ion_alloc+0x187/0x810 [ 1534.900130] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1534.905582] ? ion_system_contig_heap_create+0x130/0x130 [ 1534.911035] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1534.916052] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1534.920912] ion_alloc+0x204/0x810 [ 1534.924456] ? ion_dma_buf_release+0x40/0x40 [ 1534.928870] ? __might_fault+0x177/0x1b0 [ 1534.932935] ion_ioctl+0xea/0x1f0 [ 1534.936387] ? ion_query_heaps+0x360/0x360 [ 1534.940623] ? ion_query_heaps+0x360/0x360 [ 1534.944860] do_vfs_ioctl+0x75a/0xff0 [ 1534.948665] ? ioctl_preallocate+0x1a0/0x1a0 [ 1534.953070] ? lock_downgrade+0x740/0x740 [ 1534.957229] ? __fget+0x225/0x360 [ 1534.960678] ? do_vfs_ioctl+0xff0/0xff0 [ 1534.964654] ? security_file_ioctl+0x83/0xb0 [ 1534.969065] SyS_ioctl+0x7f/0xb0 [ 1534.972426] ? do_vfs_ioctl+0xff0/0xff0 [ 1534.976398] do_syscall_64+0x1d5/0x640 [ 1534.980298] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1534.985488] RIP: 0033:0x4665d9 [ 1534.988670] RSP: 002b:00007f2b808a4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1534.996379] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1535.003647] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1535.010938] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1535.018209] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1535.025563] R13: 00007ffc9b8ba0df R14: 00007f2b808a4300 R15: 0000000000022000 [ 1535.036745] Mem-Info: [ 1535.039273] active_anon:14585 inactive_anon:37218 isolated_anon:0 [ 1535.039273] active_file:2377 inactive_file:3510 isolated_file:0 [ 1535.039273] unevictable:0 dirty:26 writeback:0 unstable:0 [ 1535.039273] slab_reclaimable:11925 slab_unreclaimable:114464 [ 1535.039273] mapped:48500 shmem:37656 pagetables:721 bounce:0 [ 1535.039273] free:153407 free_pcp:353 free_cma:0 [ 1535.140758] Node 0 active_anon:56144kB inactive_anon:112736kB active_file:9548kB inactive_file:14088kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:202060kB dirty:100kB writeback:0kB shmem:114216kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1535.230729] Node 1 active_anon:2284kB inactive_anon:36136kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:8kB writeback:0kB shmem:36408kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1535.270548] Node 0 DMA free:11080kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:8kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1535.350968] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1535.371402] Node 0 DMA32 free:527772kB min:36200kB low:45248kB high:54296kB active_anon:56144kB inactive_anon:112736kB active_file:9548kB inactive_file:14080kB unevictable:0kB writepending:92kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7296kB pagetables:2408kB bounce:0kB free_pcp:44kB local_pcp:12kB free_cma:0kB [ 1535.440716] lowmem_reserve[]: 0 0 0 0 0 [ 1535.444755] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1535.520697] lowmem_reserve[]: 0 0 0 0 0 [ 1535.524737] Node 1 Normal free:72344kB min:53696kB low:67120kB high:80544kB active_anon:2284kB inactive_anon:36136kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:488kB bounce:0kB free_pcp:1380kB local_pcp:728kB free_cma:0kB [ 1535.611782] lowmem_reserve[]: 0 0 0 0 0 [ 1535.615827] Node 0 DMA: 2*4kB (U) 2*8kB (ME) 3*16kB (UME) 2*32kB (ME) 3*64kB (UME) 2*128kB (ME) 3*256kB (UME) 3*512kB (UME) 4*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11080kB [ 1535.650715] Node 0 DMA32: 46*4kB (ME) 33*8kB (UE) 65*16kB (ME) 6105*32kB (UME) 4517*64kB (UM) 432*128kB (U) 3*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 542000kB [ 1535.681322] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1535.696470] IPVS: ftp: loaded support on port[0] = 21 [ 1535.703902] Bluetooth: hci2 command 0x0409 tx timeout [ 1535.726723] Node 1 Normal: 370*4kB (UME) 675*8kB (UME) 620*16kB (UME) 388*32kB (UME) 662*64kB (UME) 22*128kB (UME) 2*256kB (UM) 96*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 124064kB [ 1535.793104] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1535.823868] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1535.856038] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1535.885243] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1535.914778] 43494 total pagecache pages [ 1535.918797] 0 pages in swap cache [ 1535.933648] Swap cache stats: add 0, delete 0, find 0/0 [ 1535.939058] Free swap = 0kB [ 1535.977161] Total swap = 0kB [ 1535.980227] 2097051 pages RAM [ 1536.003885] 0 pages HighMem/MovableOnly [ 1536.007901] 363849 pages reserved [ 1536.036159] 0 pages cma reserved [ 1536.102394] chnl_net:caif_netlink_parms(): no params data found [ 1536.368858] bridge0: port 1(bridge_slave_0) entered blocking state [ 1536.393866] bridge0: port 1(bridge_slave_0) entered disabled state [ 1536.420396] device bridge_slave_0 entered promiscuous mode [ 1536.435985] bridge0: port 2(bridge_slave_1) entered blocking state [ 1536.467118] bridge0: port 2(bridge_slave_1) entered disabled state [ 1536.494218] device bridge_slave_1 entered promiscuous mode [ 1536.557406] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1536.584915] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1536.661796] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1536.688486] team0: Port device team_slave_0 added [ 1536.695845] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1536.713607] team0: Port device team_slave_1 added [ 1536.763036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1536.777175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1536.820646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1536.854161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1536.868188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1536.928141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1536.939421] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1536.968043] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1537.035433] device hsr_slave_0 entered promiscuous mode [ 1537.041652] device hsr_slave_1 entered promiscuous mode [ 1537.050051] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1537.081074] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1537.299230] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1537.423870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1537.748369] oom_reaper: reaped process 17923 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1537.770737] Bluetooth: hci2 command 0x041b tx timeout [ 1537.828306] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1537.850235] systemd-journal cpuset=/ mems_allowed=0-1 [ 1537.865700] CPU: 1 PID: 17826 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 1537.873717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1537.883072] Call Trace: [ 1537.885665] dump_stack+0x1b2/0x281 [ 1537.889294] dump_header+0x178/0x82f [ 1537.893009] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1537.898197] ? ___ratelimit+0x2cd/0x530 [ 1537.902172] oom_kill_process.cold+0x10/0xa40 [ 1537.906683] out_of_memory+0xe3e/0x1190 [ 1537.910663] ? oom_killer_disable+0x1c0/0x1c0 [ 1537.915166] ? mutex_trylock+0x152/0x1a0 [ 1537.919233] __alloc_pages_nodemask+0x23e1/0x2720 [ 1537.924217] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1537.929114] alloc_pages_current+0x155/0x260 [ 1537.933545] filemap_fault+0x11a1/0x1ad0 [ 1537.937602] ext4_filemap_fault+0x84/0xb0 [ 1537.941912] __do_fault+0xfa/0x380 [ 1537.945456] __handle_mm_fault+0x2497/0x4620 [ 1537.949856] ? vm_insert_page+0x7c0/0x7c0 [ 1537.953994] ? mark_held_locks+0xa6/0xf0 [ 1537.958042] handle_mm_fault+0x455/0x9c0 [ 1537.962101] __do_page_fault+0x549/0xad0 [ 1537.966148] ? spurious_fault+0x640/0x640 [ 1537.970292] ? do_page_fault+0x60/0x500 [ 1537.974259] ? page_fault+0x2f/0x50 [ 1537.977868] page_fault+0x45/0x50 [ 1537.981310] RIP: 0001:0xffffffffffffffff [ 1537.985348] RSP: 111741e0:00007ffc0c72d600 EFLAGS: 7ffc0c72d410 [ 1537.990743] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1537.998625] Mem-Info: [ 1538.008698] active_anon:14675 inactive_anon:37218 isolated_anon:0 [ 1538.008698] active_file:18 inactive_file:9 isolated_file:0 [ 1538.008698] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1538.008698] slab_reclaimable:11929 slab_unreclaimable:113719 [ 1538.008698] mapped:52626 shmem:37656 pagetables:768 bounce:0 [ 1538.008698] free:13951 free_pcp:30 free_cma:0 [ 1538.009550] syz-executor.2: [ 1538.045690] Node 0 active_anon:56480kB inactive_anon:112736kB active_file:88kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210504kB dirty:0kB writeback:0kB shmem:114216kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1538.055296] page allocation failure: order:0 [ 1538.080908] Node 1 active_anon:2220kB inactive_anon:36136kB active_file:12kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:36408kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1538.092882] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1538.116839] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1538.124647] (null) [ 1538.154358] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1538.159434] Node 0 DMA32 free:18184kB min:36200kB low:45248kB high:54296kB active_anon:56480kB inactive_anon:112736kB active_file:36kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7360kB pagetables:2584kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1538.165714] syz-executor.2 cpuset= [ 1538.195915] lowmem_reserve[]: 0 0 0 0 0 [ 1538.200314] / [ 1538.203560] Node 0 [ 1538.203639] mems_allowed=0-1 [ 1538.205284] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1538.207515] CPU: 0 PID: 17923 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1538.213524] lowmem_reserve[]: [ 1538.235490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1538.235495] Call Trace: [ 1538.235514] dump_stack+0x1b2/0x281 [ 1538.235527] warn_alloc.cold+0x96/0x1cc [ 1538.235539] ? zone_watermark_ok_safe+0x220/0x220 [ 1538.235547] ? usleep_range+0x130/0x130 [ 1538.235556] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1538.235568] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1538.235577] ? run_timer_softirq+0x5a0/0x5a0 [ 1538.235592] __alloc_pages_nodemask+0x2127/0x2720 [ 1538.246331] 0 [ 1538.246585] ? lock_acquire+0x170/0x3f0 [ 1538.256894] 0 [ 1538.258506] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1538.265012] 0 [ 1538.266084] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1538.270977] 0 [ 1538.274932] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1538.280009] 0 [ 1538.285278] alloc_pages_current+0x155/0x260 [ 1538.285297] ion_page_pool_alloc+0x118/0x1b0 [ 1538.285306] ion_system_heap_allocate+0x133/0x8c0 [ 1538.285316] ? ion_alloc+0x187/0x810 [ 1538.285327] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1538.285338] ? ion_system_contig_heap_create+0x130/0x130 [ 1538.294600] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1538.296413] Node 1 [ 1538.300368] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1538.302769] Normal free:26776kB min:53696kB low:67120kB high:80544kB active_anon:2220kB inactive_anon:36136kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:488kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1538.306974] ion_alloc+0x204/0x810 [ 1538.308835] lowmem_reserve[]: [ 1538.313317] ? ion_dma_buf_release+0x40/0x40 [ 1538.313329] ? __might_fault+0x177/0x1b0 [ 1538.313340] ion_ioctl+0xea/0x1f0 [ 1538.313348] ? ion_query_heaps+0x360/0x360 [ 1538.313362] ? ion_query_heaps+0x360/0x360 [ 1538.313371] do_vfs_ioctl+0x75a/0xff0 [ 1538.313382] ? ioctl_preallocate+0x1a0/0x1a0 [ 1538.317384] 0 [ 1538.320624] ? lock_downgrade+0x740/0x740 [ 1538.320638] ? __fget+0x225/0x360 [ 1538.320647] ? do_vfs_ioctl+0xff0/0xff0 [ 1538.320658] ? security_file_ioctl+0x83/0xb0 [ 1538.320668] SyS_ioctl+0x7f/0xb0 [ 1538.323017] 0 [ 1538.326840] ? do_vfs_ioctl+0xff0/0xff0 [ 1538.334012] 0 [ 1538.336070] do_syscall_64+0x1d5/0x640 [ 1538.339841] 0 0 [ 1538.345369] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1538.345377] RIP: 0033:0x4665d9 [ 1538.345382] RSP: 002b:00007f3d1f881188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1538.345391] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1538.345396] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1538.345400] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1538.345405] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1538.345410] R13: 00007ffdbbfa296f R14: 00007f3d1f881300 R15: 0000000000022000 [ 1538.357454] warn_alloc_show_mem: 2 callbacks suppressed [ 1538.357457] Mem-Info: [ 1538.391314] active_anon:14675 inactive_anon:37218 isolated_anon:0 [ 1538.391314] active_file:12 inactive_file:11 isolated_file:0 [ 1538.391314] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1538.391314] slab_reclaimable:11929 slab_unreclaimable:113720 [ 1538.391314] mapped:52606 shmem:37656 pagetables:768 bounce:0 [ 1538.391314] free:13950 free_pcp:60 free_cma:0 [ 1538.391330] Node 0 active_anon:56480kB inactive_anon:112736kB active_file:36kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210424kB dirty:0kB writeback:0kB shmem:114216kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1538.409154] Node 0 [ 1538.410048] Node 1 active_anon:2220kB inactive_anon:36136kB active_file:12kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:36408kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1538.419396] DMA: [ 1538.424352] Node 0 [ 1538.442679] 1*4kB [ 1538.446884] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1538.448400] (U) [ 1538.450184] lowmem_reserve[]: [ 1538.467858] 2*8kB [ 1538.472112] 0 [ 1538.488082] (UE) [ 1538.498485] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1538.508946] 2*16kB [ 1538.520564] 2717 [ 1538.531011] (UE) [ 1538.561861] 2718 [ 1538.597160] 1*32kB [ 1538.617643] 2718 [ 1538.630095] (E) [ 1538.649521] 2718 [ 1538.663646] 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 3*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10964kB [ 1538.670002] Node 0 [ 1538.672097] Node 0 DMA32 free:17920kB min:36200kB low:45248kB high:54296kB active_anon:56480kB inactive_anon:112736kB active_file:36kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7360kB pagetables:2584kB bounce:0kB free_pcp:236kB local_pcp:124kB free_cma:0kB [ 1538.672118] lowmem_reserve[]: 0 0 0 0 0 [ 1538.686958] DMA32: [ 1538.731972] 982*4kB (UMEH) 281*8kB (ME) 104*16kB (ME) 31*32kB (UME) 2*64kB (UM) 2*128kB (UM) 34*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17920kB [ 1538.737840] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1538.755769] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1538.791904] lowmem_reserve[]: 0 0 0 0 0 [ 1538.796524] Node 1 [ 1538.800001] Node 1 [ 1538.800004] Normal: 92*4kB (ME) 39*8kB (UME) 25*16kB (UME) 18*32kB (UME) 9*64kB (UME) 8*128kB (UME) 2*256kB (UM) 45*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26808kB [ 1538.816770] Normal free:26776kB min:53696kB low:67120kB high:80544kB active_anon:2220kB inactive_anon:36136kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:488kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1538.830045] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1538.867238] lowmem_reserve[]: 0 0 0 0 0 [ 1538.870022] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1538.880183] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1538.880219] Node 0 [ 1538.890514] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1538.899358] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1538.906004] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1538.912527] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1538.919111] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1538.929819] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1538.938486] 37679 total pagecache pages [ 1538.939613] DMA: [ 1538.947139] 0 pages in swap cache [ 1538.952914] Swap cache stats: add 0, delete 0, find 0/0 [ 1538.953414] 1*4kB [ 1538.958369] Free swap = 0kB [ 1538.958377] Total swap = 0kB [ 1538.970570] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1538.977251] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1538.983816] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1538.993577] 2097051 pages RAM [ 1538.996698] 0 pages HighMem/MovableOnly [ 1539.001842] (U) 2*8kB (UE) 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 3*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10964kB [ 1539.002716] 363849 pages reserved [ 1539.025321] 0 pages cma reserved [ 1539.026825] Node 0 [ 1539.028702] Out of memory (oom_kill_allocating_task): Kill process 17826 (systemd-journal) score 0 or sacrifice child [ 1539.028704] DMA32: 982*4kB [ 1539.031036] Killed process 17826 (systemd-journal) total-vm:46096kB, anon-rss:464kB, file-rss:0kB, shmem-rss:1292kB [ 1539.031761] oom_reaper: reaped process 17826 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1292kB [ 1539.053103] (MEH) [ 1539.079578] oom_reaper: reaped process 17934 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1539.080092] 281*8kB [ 1539.085700] systemd-journal: [ 1539.091986] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1539.104073] page allocation failure: order:0, mode:0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null) [ 1539.116603] (ME) 105*16kB (MEH) 30*32kB (ME) 2*64kB (MH) 2*128kB (MH) 34*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17904kB [ 1539.127684] systemd-journal cpuset=/ mems_allowed=0-1 [ 1539.135168] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1539.156528] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1539.157591] CPU: 1 PID: 17826 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 1539.161839] Node 0 [ 1539.169731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1539.169737] Normal: [ 1539.171946] Call Trace: [ 1539.171965] dump_stack+0x1b2/0x281 [ 1539.171977] warn_alloc.cold+0x96/0x1cc [ 1539.171988] ? zone_watermark_ok_safe+0x220/0x220 [ 1539.190428] syz-executor.3 cpuset= [ 1539.193962] ? usleep_range+0x130/0x130 [ 1539.198795] / [ 1539.202335] ? try_to_free_pages+0x23f/0x6e0 [ 1539.212408] ? _find_next_bit+0xdb/0x100 [ 1539.216470] ? run_timer_softirq+0x5a0/0x5a0 [ 1539.220469] 0*4kB 0*8kB 0*16kB [ 1539.220899] __alloc_pages_nodemask+0x2127/0x2720 [ 1539.220919] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1539.224176] 0*32kB [ 1539.229019] alloc_pages_current+0x155/0x260 [ 1539.240500] filemap_fault+0x11a1/0x1ad0 [ 1539.240505] mems_allowed=0-1 [ 1539.247651] ext4_filemap_fault+0x84/0xb0 [ 1539.251792] __do_fault+0xfa/0x380 [ 1539.255316] __handle_mm_fault+0x2497/0x4620 [ 1539.259706] ? vm_insert_page+0x7c0/0x7c0 [ 1539.260434] 0*64kB 0*128kB [ 1539.263977] ? mark_held_locks+0xa6/0xf0 [ 1539.263990] handle_mm_fault+0x455/0x9c0 [ 1539.267072] 0*256kB [ 1539.271128] __do_page_fault+0x549/0xad0 [ 1539.271139] ? spurious_fault+0x640/0x640 [ 1539.271146] ? do_page_fault+0x60/0x500 [ 1539.271154] ? page_fault+0x2f/0x50 [ 1539.271160] page_fault+0x45/0x50 [ 1539.271167] RIP: 0001:0xffffffffffffffff [ 1539.271170] RSP: 111741e0:00007ffc0c72d600 EFLAGS: 7ffc0c72d410 [ 1539.299871] oom_reaper: reaped process 17922 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1539.307223] CPU: 0 PID: 17922 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1539.307870] systemd-journal invoked oom-killer: gfp_mask=0x0(), nodemask= [ 1539.317765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1539.317769] Call Trace: [ 1539.317787] dump_stack+0x1b2/0x281 [ 1539.317800] warn_alloc.cold+0x96/0x1cc [ 1539.317811] ? zone_watermark_ok_safe+0x220/0x220 [ 1539.317827] ? wait_for_completion_io+0x10/0x10 [ 1539.317839] __alloc_pages_nodemask+0x2127/0x2720 [ 1539.317856] ? lock_acquire+0x170/0x3f0 [ 1539.317871] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1539.317882] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1539.317897] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1539.317906] ? check_preemption_disabled+0x35/0x240 [ 1539.317923] alloc_pages_current+0x155/0x260 [ 1539.334103] (null) [ 1539.342084] ion_page_pool_alloc+0x118/0x1b0 [ 1539.342094] ion_system_heap_allocate+0x133/0x8c0 [ 1539.342103] ? ion_alloc+0x187/0x810 [ 1539.342113] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1539.342121] ? ion_system_contig_heap_create+0x130/0x130 [ 1539.342131] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1539.342143] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1539.342152] ion_alloc+0x204/0x810 [ 1539.342164] ? ion_dma_buf_release+0x40/0x40 [ 1539.348846] , order=0, oom_score_adj=0 [ 1539.352369] ? __might_fault+0x177/0x1b0 [ 1539.352382] ion_ioctl+0xea/0x1f0 [ 1539.352391] ? ion_query_heaps+0x360/0x360 [ 1539.352401] ? ion_query_heaps+0x360/0x360 [ 1539.352411] do_vfs_ioctl+0x75a/0xff0 [ 1539.352422] ? ioctl_preallocate+0x1a0/0x1a0 [ 1539.352432] ? lock_downgrade+0x740/0x740 [ 1539.352444] ? __fget+0x225/0x360 [ 1539.352452] ? do_vfs_ioctl+0xff0/0xff0 [ 1539.352464] ? security_file_ioctl+0x83/0xb0 [ 1539.363351] systemd-journal cpuset= [ 1539.366980] SyS_ioctl+0x7f/0xb0 [ 1539.377715] / [ 1539.380246] ? do_vfs_ioctl+0xff0/0xff0 [ 1539.389341] mems_allowed=0-1 [ 1539.391113] do_syscall_64+0x1d5/0x640 [ 1539.391128] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1539.391136] RIP: 0033:0x4665d9 [ 1539.391140] RSP: 002b:00007f2b808a4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1539.391150] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1539.391155] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1539.391160] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1539.391170] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1539.391175] R13: 00007ffc9b8ba0df R14: 00007f2b808a4300 R15: 0000000000022000 [ 1539.398924] CPU: 0 PID: 17934 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1539.563850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1539.573221] Call Trace: [ 1539.575804] dump_stack+0x1b2/0x281 [ 1539.579419] warn_alloc.cold+0x96/0x1cc [ 1539.583391] ? zone_watermark_ok_safe+0x220/0x220 [ 1539.588231] ? usleep_range+0x130/0x130 [ 1539.592203] ? try_to_free_pages+0x23f/0x6e0 [ 1539.596874] ? _find_next_bit+0xdb/0x100 [ 1539.601032] ? run_timer_softirq+0x5a0/0x5a0 [ 1539.605445] __alloc_pages_nodemask+0x2127/0x2720 [ 1539.610297] ? lock_acquire+0x170/0x3f0 [ 1539.612215] warn_alloc_show_mem: 1 callbacks suppressed [ 1539.612218] Mem-Info: [ 1539.614287] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1539.619730] active_anon:14550 inactive_anon:37218 isolated_anon:0 [ 1539.619730] active_file:15 inactive_file:8 isolated_file:0 [ 1539.619730] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1539.619730] slab_reclaimable:11928 slab_unreclaimable:113726 [ 1539.619730] mapped:52606 shmem:37656 pagetables:768 bounce:0 [ 1539.619730] free:13919 free_pcp:253 free_cma:0 [ 1539.622110] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1539.622125] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1539.622142] alloc_pages_current+0x155/0x260 [ 1539.622154] ion_page_pool_alloc+0x118/0x1b0 [ 1539.622213] ion_system_heap_allocate+0x133/0x8c0 [ 1539.653946] Node 0 active_anon:56080kB inactive_anon:112736kB active_file:36kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210424kB dirty:0kB writeback:0kB shmem:114216kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1539.660347] ? ion_alloc+0x187/0x810 [ 1539.694050] Node 1 active_anon:2120kB inactive_anon:36136kB active_file:24kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:36408kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1539.711796] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1539.711807] ? ion_system_contig_heap_create+0x130/0x130 [ 1539.711815] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1539.711826] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1539.711835] ion_alloc+0x204/0x810 [ 1539.711848] ? ion_dma_buf_release+0x40/0x40 [ 1539.711858] ? __might_fault+0x177/0x1b0 [ 1539.711868] ion_ioctl+0xea/0x1f0 [ 1539.711876] ? ion_query_heaps+0x360/0x360 [ 1539.711888] ? ion_query_heaps+0x360/0x360 [ 1539.711898] do_vfs_ioctl+0x75a/0xff0 [ 1539.711909] ? ioctl_preallocate+0x1a0/0x1a0 [ 1539.711918] ? lock_downgrade+0x740/0x740 [ 1539.711929] ? __fget+0x225/0x360 [ 1539.711937] ? do_vfs_ioctl+0xff0/0xff0 [ 1539.711951] ? security_file_ioctl+0x83/0xb0 [ 1539.753472] Node 0 [ 1539.753955] SyS_ioctl+0x7f/0xb0 [ 1539.758962] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1539.763803] ? do_vfs_ioctl+0xff0/0xff0 [ 1539.763818] do_syscall_64+0x1d5/0x640 [ 1539.763832] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1539.763840] RIP: 0033:0x4665d9 [ 1539.763844] RSP: 002b:00007f37127a1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1539.763853] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1539.763857] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1539.763861] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1539.763867] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1539.763873] R13: 00007ffd8a8e3f3f R14: 00007f37127a1300 R15: 0000000000022000 [ 1539.777023] 0*512kB [ 1539.782310] CPU: 1 PID: 17826 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 1539.789999] 0*1024kB [ 1539.791873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1539.791877] Call Trace: [ 1539.791894] dump_stack+0x1b2/0x281 [ 1539.791909] dump_header+0x178/0x82f [ 1539.796313] 0*2048kB [ 1539.800444] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1539.800451] ? ___ratelimit+0x2cd/0x530 [ 1539.800462] oom_kill_process.cold+0x10/0xa40 [ 1539.800480] out_of_memory+0xe3e/0x1190 [ 1539.804056] 0*4096kB [ 1539.808114] ? pagefault_out_of_memory+0xaa/0xd0 [ 1539.812541] = 0kB [ 1539.814715] ? oom_killer_disable+0x1c0/0x1c0 [ 1539.818079] Node 1 [ 1539.843676] ? mutex_trylock+0x152/0x1a0 [ 1539.843683] ? pagefault_out_of_memory+0xaa/0xd0 [ 1539.843692] pagefault_out_of_memory+0xbb/0xd0 [ 1539.843703] ? out_of_memory+0x1190/0x1190 [ 1539.847657] Normal: [ 1539.851538] ? lock_downgrade+0x740/0x740 [ 1539.851550] mm_fault_error+0xad/0x2c0 [ 1539.851559] __do_page_fault+0x93c/0xad0 [ 1539.856901] 92*4kB [ 1539.860074] ? spurious_fault+0x640/0x640 [ 1539.867843] (ME) [ 1539.875247] ? do_page_fault+0x60/0x500 [ 1539.875256] ? page_fault+0x2f/0x50 [ 1539.875264] page_fault+0x45/0x50 [ 1539.882932] 39*8kB [ 1539.890182] RIP: 0001:0xffffffffffffffff [ 1539.897581] (UME) [ 1539.904784] RSP: 111741e0:00007ffc0c72d600 EFLAGS: 7ffc0c72d410 [ 1539.908627] lowmem_reserve[]: [ 1539.928079] Bluetooth: hci2 command 0x040f tx timeout [ 1539.933458] 0 [ 1539.944356] 25*16kB [ 1539.944853] 2717 [ 1539.948770] (UME) [ 1539.957028] 2718 [ 1539.969008] 18*32kB [ 1539.974945] 2718 [ 1539.983586] (UME) [ 1539.987114] 2718 [ 1540.000299] 9*64kB [ 1540.007913] (UME) [ 1540.008307] Node 0 [ 1540.022709] 8*128kB [ 1540.029445] DMA32 free:18008kB min:36200kB low:45248kB high:54296kB active_anon:55984kB inactive_anon:112736kB active_file:36kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7360kB pagetables:2584kB bounce:0kB free_pcp:784kB local_pcp:600kB free_cma:0kB [ 1540.038975] (UME) [ 1540.044897] Mem-Info: [ 1540.053848] 2*256kB [ 1540.055345] lowmem_reserve[]: [ 1540.057470] (UM) [ 1540.059512] 0 [ 1540.068996] 45*512kB [ 1540.072180] 0 [ 1540.076041] (UM) [ 1540.077017] 0 [ 1540.118116] 0*1024kB [ 1540.121546] active_anon:14506 inactive_anon:37218 isolated_anon:0 [ 1540.121546] active_file:11 inactive_file:12 isolated_file:0 [ 1540.121546] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1540.121546] slab_reclaimable:11928 slab_unreclaimable:113701 [ 1540.121546] mapped:52606 shmem:37656 pagetables:768 bounce:0 [ 1540.121546] free:13945 free_pcp:270 free_cma:0 [ 1540.127838] 0*2048kB [ 1540.129922] Node 0 active_anon:55984kB inactive_anon:112736kB active_file:36kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210424kB dirty:0kB writeback:0kB shmem:114216kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1540.176021] 0*4096kB [ 1540.194990] 0 0 [ 1540.199387] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1540.208069] = 26808kB [ 1540.227098] lowmem_reserve[]: 0 0 [ 1540.227628] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1540.227636] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1540.233079] 0 [ 1540.253076] Node 1 active_anon:2040kB inactive_anon:36136kB active_file:8kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:36408kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1540.259046] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1540.285361] 0 0 [ 1540.292791] Node 1 Normal free:26808kB min:53696kB low:67120kB high:80544kB active_anon:2040kB inactive_anon:36136kB active_file:8kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:488kB bounce:0kB free_pcp:300kB local_pcp:180kB free_cma:0kB [ 1540.302468] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1540.329241] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1540.375874] 37753 total pagecache pages [ 1540.380524] 0 pages in swap cache [ 1540.384734] Swap cache stats: add 0, delete 0, find 0/0 [ 1540.390108] Free swap = 0kB [ 1540.416701] Total swap = 0kB [ 1540.420389] lowmem_reserve[]: 0 0 0 0 0 [ 1540.424515] Node 0 DMA: 1*4kB (U) 2*8kB (UE) 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 3*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10964kB [ 1540.424791] 2097051 pages RAM [ 1540.446060] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1540.470412] Node 0 DMA32 free:95328kB min:36200kB low:45248kB high:54296kB active_anon:55984kB inactive_anon:112736kB active_file:36kB inactive_file:1336kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7392kB pagetables:2584kB bounce:0kB free_pcp:792kB local_pcp:608kB free_cma:0kB [ 1540.490371] 0 pages HighMem/MovableOnly [ 1540.502042] Node 0 DMA32: 455*4kB (MEH) 285*8kB (UME) 105*16kB (MEH) 31*32kB (UME) 2*64kB (MH) 2*128kB (MH) 34*256kB (U) 0*512kB 69*1024kB (U) 4*2048kB (U) 0*4096kB = 94708kB [ 1540.550710] 363849 pages reserved [ 1540.559543] 0 pages cma reserved [ 1540.593824] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1540.604777] lowmem_reserve[]: 0 0 0 0 0 [ 1540.608832] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1540.650379] Node 1 Normal: 2*4kB (E) 7*8kB (UME) 4*16kB (ME) 3*32kB (UE) 2588*64kB (UE) 757*128kB (UME) 546*256kB (UM) 157*512kB (UM) 319*1024kB (U) 19*2048kB (U) 0*4096kB = 848480kB [ 1540.690976] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1540.700249] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1540.732948] lowmem_reserve[]: 0 0 0 0 0 [ 1540.737265] Node 1 Normal free:1068512kB min:53696kB low:67120kB high:80544kB active_anon:2040kB inactive_anon:36136kB active_file:8kB inactive_file:2012kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:488kB bounce:0kB free_pcp:232kB local_pcp:24kB free_cma:0kB [ 1540.777616] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1540.812682] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1540.843446] 40306 total pagecache pages [ 1540.847476] 0 pages in swap cache [ 1540.858215] lowmem_reserve[]: 0 0 0 0 0 [ 1540.871705] Swap cache stats: add 0, delete 0, find 0/0 [ 1540.877377] Free swap = 0kB [ 1540.881292] Node 0 DMA: 1*4kB (U) 2*8kB (UE) 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 3*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10964kB [ 1540.910380] Total swap = 0kB [ 1540.913448] 2097051 pages RAM [ 1540.916545] 0 pages HighMem/MovableOnly [ 1540.928741] Node 0 DMA32: 3486*4kB (UEH) 2770*8kB (UEH) 111*16kB (UMEH) 22*32kB (UE) 206*64kB (UMEH) 15*128kB (UH) 121*256kB (UMH) 2*512kB (U) 20*1024kB (UM) 2*2048kB (U) 0*4096kB = 110264kB [ 1540.950379] 363849 pages reserved [ 1540.964985] 0 pages cma reserved [ 1541.010367] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1541.060387] Node 1 Normal: 2*4kB (E) 7*8kB (UME) 4*16kB (ME) 4*32kB (UE) 3359*64kB (UE) 4660*128kB (UME) 1165*256kB (UM) 318*512kB (UM) 144*1024kB (U) 21*2048kB (U) 0*4096kB = 1463232kB [ 1541.120535] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1541.129413] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1541.180552] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1541.189420] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1541.210517] 40753 total pagecache pages [ 1541.214534] 0 pages in swap cache [ 1541.217996] Swap cache stats: add 0, delete 0, find 0/0 [ 1541.223573] Free swap = 0kB [ 1541.226595] Total swap = 0kB [ 1541.230948] 2097051 pages RAM [ 1541.240729] 0 pages HighMem/MovableOnly [ 1541.244721] 363849 pages reserved [ 1541.248180] 0 pages cma reserved [ 1541.251691] Out of memory (oom_kill_allocating_task): Kill process 17826 (systemd-journal) score 0 or sacrifice child [ 1541.262550] Killed process 17826 (systemd-journal) total-vm:46096kB, anon-rss:0kB, file-rss:0kB, shmem-rss:1292kB [ 1541.336940] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1541.385230] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1541.452579] systemd[1]: Stopped Journal Service. [ 1541.498467] systemd[1]: Starting Journal Service... [ 1541.713698] systemd-journald[18139]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1542.010314] Bluetooth: hci2 command 0x0419 tx timeout [ 1542.125472] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1542.128058] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1542.156886] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1542.166353] CPU: 0 PID: 17923 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1542.172369] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1542.174360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1542.183598] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1542.189868] Call Trace: [ 1542.189890] dump_stack+0x1b2/0x281 [ 1542.202356] warn_alloc.cold+0x96/0x1cc [ 1542.206352] ? zone_watermark_ok_safe+0x220/0x220 [ 1542.210507] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1542.211207] __alloc_pages_nodemask+0x2127/0x2720 [ 1542.220389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1542.221126] ? _raw_spin_unlock_irq+0x5a/0x80 [ 1542.228052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1542.232074] ? finish_task_switch+0x178/0x610 [ 1542.232081] ? finish_task_switch+0x14d/0x610 [ 1542.232093] ? lock_acquire+0x170/0x3f0 [ 1542.232109] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1542.232124] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1542.232139] ? __mutex_unlock_slowpath+0x75/0x770 [ 1542.267107] ? alloc_pages_current+0x84/0x260 [ 1542.271602] alloc_pages_current+0x155/0x260 [ 1542.273124] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1542.276009] ion_page_pool_alloc+0x118/0x1b0 [ 1542.286458] ion_system_heap_allocate+0x133/0x8c0 [ 1542.290436] 8021q: adding VLAN 0 to HW filter on device team0 [ 1542.293230] ? _raw_spin_unlock+0x29/0x40 [ 1542.303247] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1542.308175] ? ion_system_contig_heap_create+0x130/0x130 [ 1542.313633] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1542.318633] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1542.323485] ion_alloc+0x27a/0x810 [ 1542.327040] ? ion_dma_buf_release+0x40/0x40 [ 1542.331459] ? __might_fault+0x177/0x1b0 [ 1542.332191] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1542.335514] ion_ioctl+0xea/0x1f0 [ 1542.345872] ? ion_query_heaps+0x360/0x360 [ 1542.350105] ? ion_query_heaps+0x360/0x360 [ 1542.354349] do_vfs_ioctl+0x75a/0xff0 [ 1542.358155] ? ioctl_preallocate+0x1a0/0x1a0 [ 1542.362573] ? lock_downgrade+0x740/0x740 [ 1542.366811] ? __fget+0x225/0x360 [ 1542.368808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1542.370260] ? do_vfs_ioctl+0xff0/0xff0 [ 1542.370272] ? security_file_ioctl+0x83/0xb0 [ 1542.370282] SyS_ioctl+0x7f/0xb0 [ 1542.370288] ? do_vfs_ioctl+0xff0/0xff0 [ 1542.370300] do_syscall_64+0x1d5/0x640 [ 1542.370313] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1542.378120] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1542.381608] RIP: 0033:0x4665d9 [ 1542.381613] RSP: 002b:00007f3d1f881188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1542.381621] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1542.381626] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1542.381631] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1542.381636] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1542.381641] R13: 00007ffdbbfa296f R14: 00007f3d1f881300 R15: 0000000000022000 [ 1542.461383] CPU: 1 PID: 17922 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1542.469296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1542.478649] Call Trace: [ 1542.481241] dump_stack+0x1b2/0x281 [ 1542.484869] warn_alloc.cold+0x96/0x1cc [ 1542.488851] ? zone_watermark_ok_safe+0x220/0x220 [ 1542.493711] __alloc_pages_nodemask+0x2127/0x2720 [ 1542.498730] ? lock_acquire+0x170/0x3f0 [ 1542.502712] ? lock_acquire+0x170/0x3f0 [ 1542.506686] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1542.511533] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1542.517069] ? __mutex_unlock_slowpath+0x75/0x770 [ 1542.521952] ? free_buffer_page+0x105/0x1b0 [ 1542.526288] alloc_pages_current+0x155/0x260 [ 1542.530701] ion_page_pool_alloc+0x118/0x1b0 [ 1542.535119] ion_system_heap_allocate+0x133/0x8c0 [ 1542.540058] ? _raw_spin_unlock+0x29/0x40 [ 1542.544208] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1542.549137] ? ion_system_contig_heap_create+0x130/0x130 [ 1542.554618] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1542.559649] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1542.564517] ion_alloc+0x27a/0x810 [ 1542.568062] ? ion_dma_buf_release+0x40/0x40 [ 1542.572491] ? __might_fault+0x177/0x1b0 [ 1542.576653] ion_ioctl+0xea/0x1f0 [ 1542.580117] ? ion_query_heaps+0x360/0x360 [ 1542.584364] ? ion_query_heaps+0x360/0x360 [ 1542.588599] do_vfs_ioctl+0x75a/0xff0 [ 1542.592439] ? ioctl_preallocate+0x1a0/0x1a0 [ 1542.596970] ? lock_downgrade+0x740/0x740 [ 1542.601120] ? __fget+0x225/0x360 [ 1542.604576] ? do_vfs_ioctl+0xff0/0xff0 [ 1542.608636] ? security_file_ioctl+0x83/0xb0 [ 1542.613130] SyS_ioctl+0x7f/0xb0 [ 1542.616494] ? do_vfs_ioctl+0xff0/0xff0 [ 1542.620468] do_syscall_64+0x1d5/0x640 [ 1542.624360] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1542.629549] RIP: 0033:0x4665d9 [ 1542.632820] RSP: 002b:00007f2b808a4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1542.640612] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1542.647878] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1542.655289] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1542.662583] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1542.669938] R13: 00007ffc9b8ba0df R14: 00007f2b808a4300 R15: 0000000000022000 [ 1542.689043] bridge0: port 1(bridge_slave_0) entered blocking state [ 1542.695720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1542.708495] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1542.709352] warn_alloc_show_mem: 1 callbacks suppressed [ 1542.709355] Mem-Info: [ 1542.727430] active_anon:14639 inactive_anon:39239 isolated_anon:0 [ 1542.727430] active_file:1487 inactive_file:1276 isolated_file:0 [ 1542.727430] unevictable:0 dirty:15 writeback:0 unstable:0 [ 1542.727430] slab_reclaimable:11917 slab_unreclaimable:114535 [ 1542.727430] mapped:54666 shmem:39688 pagetables:780 bounce:0 [ 1542.727430] free:220610 free_pcp:595 free_cma:0 [ 1542.732897] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1542.764763] Node 0 active_anon:57096kB inactive_anon:120820kB active_file:5864kB inactive_file:5084kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:218628kB dirty:60kB writeback:0kB shmem:122344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1542.798745] Node 1 active_anon:1460kB inactive_anon:36136kB active_file:84kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36kB dirty:0kB writeback:0kB shmem:36408kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1542.826975] Node 0 DMA free:11100kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1542.859088] IPVS: ftp: loaded support on port[0] = 21 [ 1542.865164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1542.880797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1542.891748] Bluetooth: hci5 command 0x0409 tx timeout [ 1542.900493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1542.908197] bridge0: port 2(bridge_slave_1) entered blocking state [ 1542.914626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1542.960226] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1542.965321] Node 0 DMA32 free:616516kB min:36200kB low:45248kB high:54296kB active_anon:57096kB inactive_anon:120820kB active_file:5884kB inactive_file:5120kB unevictable:0kB writepending:160kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7392kB pagetables:2684kB bounce:0kB free_pcp:1008kB local_pcp:304kB free_cma:0kB [ 1542.996119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1543.015417] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1543.050273] lowmem_reserve[]: 0 0 0 0 0 [ 1543.052760] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1543.054338] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1543.118837] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1543.135899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1543.150942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1543.153583] lowmem_reserve[]: 0 0 0 0 0 [ 1543.158780] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1543.169701] systemd[1]: Started Journal Service. [ 1543.194629] Node 1 Normal free:118752kB min:53696kB low:67120kB high:80544kB active_anon:1428kB inactive_anon:36132kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:436kB bounce:0kB free_pcp:1348kB local_pcp:680kB free_cma:0kB [ 1543.210824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1543.240875] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1543.253035] lowmem_reserve[]: 0 0 0 0 0 [ 1543.260714] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1543.261096] Node 0 DMA: 3*4kB (U) 21*8kB (UE) 21*16kB (UE) 13*32kB (UE) 1*64kB (E) 2*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10980kB [ 1543.293878] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1543.296061] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1543.323452] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1543.326766] Node 0 DMA32: 27*4kB (UEH) 4518*8kB (UMEH) 17280*16kB (UMEH) 6691*32kB (UEH) 11*64kB (UH) 2*128kB (H) 2*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 528316kB [ 1543.329112] CPU: 0 PID: 17934 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1543.344532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1543.352442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1543.352447] Call Trace: [ 1543.352465] dump_stack+0x1b2/0x281 [ 1543.352478] warn_alloc.cold+0x96/0x1cc [ 1543.352489] ? zone_watermark_ok_safe+0x220/0x220 [ 1543.352511] __alloc_pages_nodemask+0x2127/0x2720 [ 1543.352522] ? io_schedule_timeout+0x140/0x140 [ 1543.364265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1543.369155] ? lock_acquire+0x170/0x3f0 [ 1543.377954] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1543.379320] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1543.393046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1543.393697] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1543.401785] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1543.405477] ? __mutex_unlock_slowpath+0x75/0x770 [ 1543.413857] Node 0 [ 1543.417338] alloc_pages_current+0x155/0x260 [ 1543.427894] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1543.430130] ion_page_pool_alloc+0x118/0x1b0 [ 1543.430140] ion_system_heap_allocate+0x133/0x8c0 [ 1543.430152] ? _raw_spin_unlock+0x29/0x40 [ 1543.430160] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1543.430168] ? ion_system_contig_heap_create+0x130/0x130 [ 1543.430180] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1543.438526] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1543.443357] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1543.443368] ion_alloc+0x27a/0x810 [ 1543.443380] ? ion_dma_buf_release+0x40/0x40 [ 1543.443391] ? __might_fault+0x177/0x1b0 [ 1543.443402] ion_ioctl+0xea/0x1f0 [ 1543.443410] ? ion_query_heaps+0x360/0x360 [ 1543.443421] ? ion_query_heaps+0x360/0x360 [ 1543.443433] do_vfs_ioctl+0x75a/0xff0 [ 1543.450855] Normal: [ 1543.456678] ? ioctl_preallocate+0x1a0/0x1a0 [ 1543.478416] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1543.481123] ? lock_downgrade+0x740/0x740 [ 1543.481138] ? __fget+0x225/0x360 [ 1543.481147] ? do_vfs_ioctl+0xff0/0xff0 [ 1543.481158] ? security_file_ioctl+0x83/0xb0 [ 1543.481167] SyS_ioctl+0x7f/0xb0 [ 1543.481177] ? do_vfs_ioctl+0xff0/0xff0 [ 1543.486447] 0*4kB [ 1543.492846] do_syscall_64+0x1d5/0x640 [ 1543.492863] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1543.492871] RIP: 0033:0x4665d9 [ 1543.492875] RSP: 002b:00007f37127a1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1543.492884] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1543.492889] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1543.492893] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1543.492898] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1543.492904] R13: 00007ffd8a8e3f3f R14: 00007f37127a1300 R15: 0000000000022000 [ 1543.652430] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1543.658732] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1543.667117] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1543.697471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1543.838197] chnl_net:caif_netlink_parms(): no params data found [ 1543.910514] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1543.919679] Node 1 Normal: 915*4kB (UM) 1221*8kB (UM) 899*16kB (UM) 782*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 52836kB [ 1543.934334] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1543.971129] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1543.979758] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1544.030482] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1544.039098] 42535 total pagecache pages [ 1544.070188] 0 pages in swap cache [ 1544.073699] Swap cache stats: add 0, delete 0, find 0/0 [ 1544.075743] bridge0: port 1(bridge_slave_0) entered blocking state [ 1544.079087] Free swap = 0kB [ 1544.089007] bridge0: port 1(bridge_slave_0) entered disabled state [ 1544.121112] device bridge_slave_0 entered promiscuous mode [ 1544.130719] Total swap = 0kB [ 1544.133781] 2097051 pages RAM [ 1544.134772] bridge0: port 2(bridge_slave_1) entered blocking state [ 1544.137071] 0 pages HighMem/MovableOnly [ 1544.170172] 363849 pages reserved [ 1544.173673] 0 pages cma reserved [ 1544.173853] bridge0: port 2(bridge_slave_1) entered disabled state [ 1544.195554] device bridge_slave_1 entered promiscuous mode [ 1544.253895] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1544.300562] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1544.310831] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1544.318481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1544.331058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1544.364127] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1544.412143] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1544.419454] team0: Port device team_slave_0 added [ 1544.496483] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1544.515253] team0: Port device team_slave_1 added [ 1544.560913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1544.567194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1544.630106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1544.652049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1544.658362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1544.720134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1544.741393] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1544.749792] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1544.771168] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1544.778002] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1544.814220] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1544.864147] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1544.891496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1544.909744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1544.964683] device hsr_slave_0 entered promiscuous mode [ 1544.972480] Bluetooth: hci5 command 0x041b tx timeout [ 1545.003247] device hsr_slave_1 entered promiscuous mode [ 1545.032137] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1545.039251] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1545.073270] device veth0_vlan entered promiscuous mode [ 1545.084822] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1545.111384] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1545.132462] device veth1_vlan entered promiscuous mode [ 1545.138582] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1545.217586] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1545.288536] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1545.312120] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1545.319450] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1545.362432] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1545.371658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1545.379635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1545.413453] device veth0_macvtap entered promiscuous mode [ 1545.419778] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1545.458184] device veth1_macvtap entered promiscuous mode [ 1545.468997] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1545.499074] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1545.531539] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1545.554504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1545.570077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.600021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1545.609771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.650028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1545.659942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.696095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1545.730028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.750691] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1545.757709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1545.798588] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1545.806042] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1545.820383] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1545.854381] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1545.862522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1545.897209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1545.907385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.933287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1545.952522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.963816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1545.976599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1546.001797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1546.020743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1546.041378] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1546.048333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1546.074883] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1546.083471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1546.154773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1546.182446] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1546.192869] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1546.199115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1546.206760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1546.233991] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1546.244692] 8021q: adding VLAN 0 to HW filter on device team0 [ 1546.264622] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1546.286050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1546.294640] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1546.310441] bridge0: port 1(bridge_slave_0) entered blocking state [ 1546.316859] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1546.343097] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1546.360591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1546.367889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1546.380653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1546.390842] bridge0: port 2(bridge_slave_1) entered blocking state [ 1546.397311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1546.432692] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1546.440555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1546.457566] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1546.472293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1546.484764] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1546.498549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1546.507823] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1546.523928] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1546.535534] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1546.543988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1546.561690] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1546.573090] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1546.591575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1546.599521] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1546.615425] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1546.626071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1546.637215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1546.656398] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1546.669394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1546.698347] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1546.713460] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1546.719735] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1546.734610] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1546.749624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1546.873632] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1546.889020] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1546.898131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1546.919044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1547.050390] Bluetooth: hci5 command 0x040f tx timeout [ 1547.056919] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1547.074789] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1547.094024] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1547.124379] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1547.139115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1547.154009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1547.175837] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1547.195302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1547.216953] device veth0_vlan entered promiscuous mode [ 1547.242196] device veth1_vlan entered promiscuous mode [ 1547.261767] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1547.285280] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1547.368974] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1547.394912] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1547.404775] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1547.427558] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1547.440757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1547.448787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1547.472558] device veth0_macvtap entered promiscuous mode [ 1547.478851] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1547.504228] device veth1_macvtap entered promiscuous mode [ 1547.517626] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1547.540285] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1547.562209] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1547.581170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1547.602671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1547.623692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1547.663688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1547.672903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1547.704012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1547.723783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1547.743807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1547.772387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1547.803657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1547.824907] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1547.832030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1547.839016] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1547.863938] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1547.884073] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1547.892709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1547.906384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1547.930568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1547.939741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1547.969900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1547.979067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1548.010195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1548.019366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1548.044919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1548.068228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1548.096771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 20:07:59 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x7fffffff, 0x23}) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x2401, 0x0) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000040)=0x20) 20:07:59 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x7fffffff, 0x23}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, 0x0, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000080)=0x1) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x4, 0xcf, 0x7ff, 0x8, 0x0, 0x1, 0xb51, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x40) 20:07:59 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x7fffffff, 0x23}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, 0x0, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000080)=0x1) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x4, 0xcf, 0x7ff, 0x8, 0x0, 0x1, 0xb51, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x40) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000001480)={'syztnl1\x00', &(0x7f0000001400)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x1f, 0xffff0000, 0x43, @mcast1, @loopback, 0x20, 0x10, 0x2, 0x1}}) openat$zero(0xffffffffffffff9c, &(0x7f00000014c0), 0x803, 0x0) 20:07:59 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x7fffffff, 0x23}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, 0x0, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000080)=0x1) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x4, 0xcf, 0x7ff, 0x8, 0x0, 0x1, 0xb51, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x40) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000001480)={'syztnl1\x00', &(0x7f0000001400)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x1f, 0xffff0000, 0x43, @mcast1, @loopback, 0x20, 0x10, 0x2, 0x1}}) 20:07:59 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000000)={0xdabe, 0x68e}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x7fffffff, 0x23}) [ 1548.116696] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1548.123792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1548.132163] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1548.140553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1548.842546] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1548.842749] syz-executor.5: [ 1548.855324] syz-executor.4: [ 1548.857302] syz-executor.1: [ 1548.867422] page allocation failure: order:4 [ 1548.867719] syz-executor.2: [ 1548.877297] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1548.878050] page allocation failure: order:4 [ 1548.887145] (null) [ 1548.891230] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1548.897746] syz-executor.3 cpuset= [ 1548.908660] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1548.910529] syz-executor.4 cpuset= [ 1548.917406] (null) [ 1548.923787] / [ 1548.926026] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1548.928691] mems_allowed=0-1 [ 1548.944013] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1548.945058] / [ 1548.949500] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1548.959296] CPU: 0 PID: 18429 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1548.959375] mems_allowed=0-1 [ 1548.967201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1548.967206] Call Trace: [ 1548.967226] dump_stack+0x1b2/0x281 [ 1548.967239] warn_alloc.cold+0x96/0x1cc [ 1548.967251] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1548.967262] ? zone_watermark_ok_safe+0x220/0x220 [ 1548.967284] __alloc_pages_nodemask+0x2127/0x2720 [ 1548.967299] ? lock_acquire+0x170/0x3f0 [ 1548.967313] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1549.013634] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1549.019099] ? __mutex_unlock_slowpath+0x75/0x770 [ 1549.023941] alloc_pages_current+0x155/0x260 [ 1549.028447] ion_page_pool_alloc+0x118/0x1b0 [ 1549.032982] ion_system_heap_allocate+0x133/0x8c0 [ 1549.037842] ? ion_alloc+0x187/0x810 [ 1549.041558] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1549.047005] ? ion_system_contig_heap_create+0x130/0x130 [ 1549.052457] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1549.057728] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1549.062589] ion_alloc+0x204/0x810 [ 1549.066139] ? ion_dma_buf_release+0x40/0x40 [ 1549.070635] ? __might_fault+0x177/0x1b0 [ 1549.074709] ion_ioctl+0xea/0x1f0 [ 1549.078169] ? ion_query_heaps+0x360/0x360 [ 1549.082435] ? ion_query_heaps+0x360/0x360 [ 1549.086658] do_vfs_ioctl+0x75a/0xff0 [ 1549.090456] ? ioctl_preallocate+0x1a0/0x1a0 [ 1549.094864] ? lock_downgrade+0x740/0x740 [ 1549.099023] ? __fget+0x225/0x360 [ 1549.102497] ? do_vfs_ioctl+0xff0/0xff0 [ 1549.106470] ? security_file_ioctl+0x83/0xb0 [ 1549.110966] SyS_ioctl+0x7f/0xb0 [ 1549.114338] ? do_vfs_ioctl+0xff0/0xff0 [ 1549.118317] do_syscall_64+0x1d5/0x640 [ 1549.122287] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1549.127909] RIP: 0033:0x4665d9 [ 1549.131101] RSP: 002b:00007fe35e0b7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1549.138810] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1549.146089] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1549.153381] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1549.160645] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1549.167917] R13: 00007ffefdeab7bf R14: 00007fe35e0b7300 R15: 0000000000022000 [ 1549.176981] CPU: 1 PID: 18408 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1549.184881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1549.194236] Call Trace: [ 1549.196919] dump_stack+0x1b2/0x281 [ 1549.200815] warn_alloc.cold+0x96/0x1cc [ 1549.203114] Bluetooth: hci5 command 0x0419 tx timeout [ 1549.204811] ? zone_watermark_ok_safe+0x220/0x220 [ 1549.204835] __alloc_pages_nodemask+0x2127/0x2720 [ 1549.210671] syz-executor.5 cpuset= [ 1549.214844] ? __schedule+0x893/0x1de0 [ 1549.214862] ? lock_acquire+0x170/0x3f0 [ 1549.214879] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1549.234074] / [ 1549.236264] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1549.240739] mems_allowed=0-1 [ 1549.243416] ? __mutex_unlock_slowpath+0x75/0x770 [ 1549.243432] alloc_pages_current+0x155/0x260 [ 1549.243444] ion_page_pool_alloc+0x118/0x1b0 [ 1549.260569] ion_system_heap_allocate+0x133/0x8c0 [ 1549.266724] ? ion_alloc+0x187/0x810 [ 1549.270423] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1549.275873] ? ion_system_contig_heap_create+0x130/0x130 [ 1549.281514] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1549.286607] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1549.291437] ion_alloc+0x204/0x810 [ 1549.294964] ? ion_dma_buf_release+0x40/0x40 [ 1549.299357] ? __might_fault+0x177/0x1b0 [ 1549.303401] ion_ioctl+0xea/0x1f0 [ 1549.307900] ? ion_query_heaps+0x360/0x360 [ 1549.312145] ? ion_query_heaps+0x360/0x360 [ 1549.316390] do_vfs_ioctl+0x75a/0xff0 [ 1549.320333] ? ioctl_preallocate+0x1a0/0x1a0 [ 1549.324748] ? lock_downgrade+0x740/0x740 [ 1549.329177] ? __fget+0x225/0x360 [ 1549.332730] ? do_vfs_ioctl+0xff0/0xff0 [ 1549.336727] ? security_file_ioctl+0x83/0xb0 [ 1549.341168] SyS_ioctl+0x7f/0xb0 [ 1549.344532] ? do_vfs_ioctl+0xff0/0xff0 [ 1549.348519] do_syscall_64+0x1d5/0x640 [ 1549.352410] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1549.357616] RIP: 0033:0x4665d9 [ 1549.360799] RSP: 002b:00007f2b808a4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1549.368533] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1549.375798] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1549.383413] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1549.390802] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1549.398080] R13: 00007ffc9b8ba0df R14: 00007f2b808a4300 R15: 0000000000022000 [ 1549.405970] CPU: 0 PID: 18402 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1549.414497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1549.424301] Call Trace: [ 1549.426913] dump_stack+0x1b2/0x281 [ 1549.430581] warn_alloc.cold+0x96/0x1cc [ 1549.434661] ? zone_watermark_ok_safe+0x220/0x220 [ 1549.439505] ? try_to_compact_pages+0x411/0x860 [ 1549.444196] __alloc_pages_nodemask+0x2127/0x2720 [ 1549.449053] ? lock_acquire+0x170/0x3f0 [ 1549.453120] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1549.457979] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1549.463439] ? __mutex_unlock_slowpath+0x75/0x770 [ 1549.468456] ? retint_kernel+0x2d/0x2d [ 1549.472474] alloc_pages_current+0x155/0x260 [ 1549.476887] ion_page_pool_alloc+0x118/0x1b0 [ 1549.481320] ion_system_heap_allocate+0x133/0x8c0 [ 1549.486222] ? ion_alloc+0x187/0x810 [ 1549.490222] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1549.496036] ? ion_system_contig_heap_create+0x130/0x130 [ 1549.501797] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1549.507369] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1549.512494] ion_alloc+0x204/0x810 [ 1549.516804] ? ion_dma_buf_release+0x40/0x40 [ 1549.521430] ? __might_fault+0x177/0x1b0 [ 1549.525596] ion_ioctl+0xea/0x1f0 [ 1549.529054] ? ion_query_heaps+0x360/0x360 [ 1549.533393] ? ion_query_heaps+0x360/0x360 [ 1549.537634] do_vfs_ioctl+0x75a/0xff0 [ 1549.541433] ? ioctl_preallocate+0x1a0/0x1a0 [ 1549.546102] ? lock_downgrade+0x740/0x740 [ 1549.550257] ? __fget+0x225/0x360 [ 1549.553732] ? do_vfs_ioctl+0xff0/0xff0 [ 1549.558052] ? security_file_ioctl+0x83/0xb0 [ 1549.562477] SyS_ioctl+0x7f/0xb0 [ 1549.565937] ? do_vfs_ioctl+0xff0/0xff0 [ 1549.569914] do_syscall_64+0x1d5/0x640 [ 1549.573911] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1549.579093] RIP: 0033:0x4665d9 [ 1549.582277] RSP: 002b:00007f3d1f881188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1549.589987] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1549.597341] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1549.604618] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1549.611988] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1549.619272] R13: 00007ffdbbfa296f R14: 00007f3d1f881300 R15: 0000000000022000 [ 1549.626954] CPU: 1 PID: 18410 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1549.634954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1549.644681] Call Trace: [ 1549.647385] dump_stack+0x1b2/0x281 [ 1549.651029] warn_alloc.cold+0x96/0x1cc [ 1549.655009] ? zone_watermark_ok_safe+0x220/0x220 [ 1549.660600] __alloc_pages_nodemask+0x2127/0x2720 [ 1549.665456] ? lock_acquire+0x170/0x3f0 [ 1549.669437] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1549.674324] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1549.679785] ? __mutex_unlock_slowpath+0x75/0x770 [ 1549.685261] alloc_pages_current+0x155/0x260 [ 1549.691018] ion_page_pool_alloc+0x118/0x1b0 [ 1549.695518] ion_system_heap_allocate+0x133/0x8c0 [ 1549.700852] ? ion_alloc+0x187/0x810 [ 1549.704649] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1549.710186] ? ion_system_contig_heap_create+0x130/0x130 [ 1549.715823] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1549.720860] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1549.725722] ion_alloc+0x204/0x810 [ 1549.729888] ? ion_dma_buf_release+0x40/0x40 [ 1549.734524] ? __might_fault+0x177/0x1b0 [ 1549.738592] ion_ioctl+0xea/0x1f0 [ 1549.742464] ? ion_query_heaps+0x360/0x360 [ 1549.746878] ? ion_query_heaps+0x360/0x360 [ 1549.751115] do_vfs_ioctl+0x75a/0xff0 [ 1549.754914] ? ioctl_preallocate+0x1a0/0x1a0 [ 1549.759328] ? lock_downgrade+0x740/0x740 [ 1549.763481] ? __fget+0x225/0x360 [ 1549.766921] ? do_vfs_ioctl+0xff0/0xff0 [ 1549.770891] ? security_file_ioctl+0x83/0xb0 [ 1549.775285] SyS_ioctl+0x7f/0xb0 [ 1549.778656] ? do_vfs_ioctl+0xff0/0xff0 [ 1549.782733] do_syscall_64+0x1d5/0x640 [ 1549.786611] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1549.791799] RIP: 0033:0x4665d9 [ 1549.794977] RSP: 002b:00007f5f77a6d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1549.802673] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1549.804291] warn_alloc_show_mem: 2 callbacks suppressed [ 1549.804295] Mem-Info: [ 1549.810019] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1549.810025] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1549.810030] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1549.810036] R13: 00007ffe82aa5b1f R14: 00007f5f77a6d300 R15: 0000000000022000 [ 1549.867205] CPU: 0 PID: 18407 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1549.875442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1549.884827] Call Trace: [ 1549.887446] dump_stack+0x1b2/0x281 [ 1549.891363] warn_alloc.cold+0x96/0x1cc [ 1549.895360] ? zone_watermark_ok_safe+0x220/0x220 [ 1549.900225] ? uvc_probe_video+0x200/0x5f0 [ 1549.904592] __alloc_pages_nodemask+0x2127/0x2720 [ 1549.909463] ? _raw_spin_unlock_irq+0x5a/0x80 [ 1549.914071] ? finish_task_switch+0x178/0x610 [ 1549.918610] ? finish_task_switch+0x14d/0x610 [ 1549.923120] ? __schedule+0x893/0x1de0 [ 1549.927022] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1549.931891] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1549.936664] ? retint_kernel+0x2d/0x2d [ 1549.940567] ? alloc_pages_current+0x123/0x260 [ 1549.945183] alloc_pages_current+0x155/0x260 [ 1549.949602] ion_page_pool_alloc+0x118/0x1b0 [ 1549.954018] ion_system_heap_allocate+0x133/0x8c0 [ 1549.958867] ? ion_alloc+0x187/0x810 [ 1549.962593] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1549.968163] ? ion_system_contig_heap_create+0x130/0x130 [ 1549.973634] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1549.978666] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1549.983514] ion_alloc+0x204/0x810 [ 1549.987065] ? ion_dma_buf_release+0x40/0x40 [ 1549.991489] ? __might_fault+0x177/0x1b0 [ 1549.995660] ion_ioctl+0xea/0x1f0 [ 1549.999221] ? ion_query_heaps+0x360/0x360 [ 1550.003470] ? ion_query_heaps+0x360/0x360 [ 1550.007804] do_vfs_ioctl+0x75a/0xff0 [ 1550.011664] ? ioctl_preallocate+0x1a0/0x1a0 [ 1550.016088] ? lock_downgrade+0x740/0x740 [ 1550.020254] ? __fget+0x225/0x360 [ 1550.023736] ? do_vfs_ioctl+0xff0/0xff0 [ 1550.027788] ? security_file_ioctl+0x83/0xb0 [ 1550.032244] SyS_ioctl+0x7f/0xb0 [ 1550.035654] ? do_vfs_ioctl+0xff0/0xff0 [ 1550.039664] do_syscall_64+0x1d5/0x640 [ 1550.043579] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1550.048784] RIP: 0033:0x4665d9 [ 1550.051972] RSP: 002b:00007f2b2a1c9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1550.059684] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1550.067225] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1550.074519] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1550.081997] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1550.089287] R13: 00007ffc70377c3f R14: 00007f2b2a1c9300 R15: 0000000000022000 [ 1550.112868] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1550.122538] active_anon:14700 inactive_anon:39251 isolated_anon:0 [ 1550.122538] active_file:2171 inactive_file:2052 isolated_file:0 [ 1550.122538] unevictable:0 dirty:87 writeback:0 unstable:0 [ 1550.122538] slab_reclaimable:11930 slab_unreclaimable:116569 [ 1550.122538] mapped:55636 shmem:39707 pagetables:829 bounce:0 [ 1550.122538] free:111764 free_pcp:0 free_cma:0 [ 1550.137113] syz-executor.0 cpuset= [ 1550.159276] Node 0 active_anon:57392kB inactive_anon:120872kB active_file:8164kB inactive_file:6480kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:220900kB dirty:284kB writeback:0kB shmem:122424kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1550.197600] Node 1 active_anon:1408kB inactive_anon:36132kB active_file:520kB inactive_file:1624kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1444kB dirty:64kB writeback:0kB shmem:36404kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1550.203767] / [ 1550.229520] Node 0 DMA free:11088kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1550.293969] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1550.296042] mems_allowed=0-1 [ 1550.299113] Node 0 DMA32 free:222676kB min:36200kB low:45248kB high:54296kB active_anon:57392kB inactive_anon:120872kB active_file:8364kB inactive_file:6684kB unevictable:0kB writepending:284kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7680kB pagetables:3188kB bounce:0kB free_pcp:240kB local_pcp:8kB free_cma:0kB [ 1550.317376] CPU: 1 PID: 18409 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1550.339827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1550.349213] Call Trace: [ 1550.351823] dump_stack+0x1b2/0x281 [ 1550.355459] warn_alloc.cold+0x96/0x1cc [ 1550.359434] ? zone_watermark_ok_safe+0x220/0x220 [ 1550.364296] __alloc_pages_nodemask+0x2127/0x2720 [ 1550.366746] lowmem_reserve[]: [ 1550.369236] ? io_schedule_timeout+0x140/0x140 [ 1550.369252] ? lock_acquire+0x170/0x3f0 [ 1550.377810] 0 [ 1550.380907] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1550.380923] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1550.380935] ? __mutex_unlock_slowpath+0x75/0x770 [ 1550.385989] 0 [ 1550.387572] alloc_pages_current+0x155/0x260 [ 1550.387586] ion_page_pool_alloc+0x118/0x1b0 [ 1550.400625] 0 [ 1550.404032] ion_system_heap_allocate+0x133/0x8c0 [ 1550.404042] ? ion_alloc+0x187/0x810 [ 1550.411976] 0 [ 1550.415318] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1550.415329] ? ion_system_contig_heap_create+0x130/0x130 [ 1550.429690] 0 [ 1550.432062] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1550.432076] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1550.439164] ion_alloc+0x204/0x810 [ 1550.439178] ? ion_dma_buf_release+0x40/0x40 [ 1550.452233] ? __might_fault+0x177/0x1b0 [ 1550.453780] Node 0 [ 1550.456295] ion_ioctl+0xea/0x1f0 [ 1550.456305] ? ion_query_heaps+0x360/0x360 [ 1550.464200] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1550.466460] ? ion_query_heaps+0x360/0x360 [ 1550.466473] do_vfs_ioctl+0x75a/0xff0 [ 1550.500628] ? ioctl_preallocate+0x1a0/0x1a0 [ 1550.505053] ? lock_downgrade+0x740/0x740 [ 1550.509206] ? __fget+0x225/0x360 [ 1550.512660] ? do_vfs_ioctl+0xff0/0xff0 [ 1550.516640] ? security_file_ioctl+0x83/0xb0 [ 1550.521238] SyS_ioctl+0x7f/0xb0 [ 1550.524633] ? do_vfs_ioctl+0xff0/0xff0 [ 1550.528616] do_syscall_64+0x1d5/0x640 [ 1550.532535] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1550.532594] lowmem_reserve[]: [ 1550.537822] RIP: 0033:0x4665d9 [ 1550.537826] RSP: 002b:00007f37127a1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1550.537836] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1550.537843] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1550.549668] 0 [ 1550.552084] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1550.552090] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1550.552096] R13: 00007ffd8a8e3f3f R14: 00007f37127a1300 R15: 0000000000022000 [ 1550.653041] 0 0 0 0 [ 1550.658544] Node 1 Normal free:64024kB min:53696kB low:67120kB high:80544kB active_anon:1408kB inactive_anon:36132kB active_file:520kB inactive_file:1624kB unevictable:0kB writepending:64kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:128kB bounce:0kB free_pcp:172kB local_pcp:92kB free_cma:0kB [ 1550.707312] lowmem_reserve[]: 0 0 0 0 0 [ 1550.711624] Node 0 DMA: 1*4kB (U) 24*8kB (UE) 25*16kB (UE) 15*32kB (UE) 2*64kB (UE) 1*128kB (E) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11060kB [ 1550.732593] Node 0 DMA32: 532*4kB (UMEH) 149*8kB (UMEH) 89*16kB (UMEH) 991*32kB (UMEH) 6*64kB (H) 0*128kB 2*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 37352kB [ 1550.748949] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1550.767397] Node 1 Normal: 27*4kB (UM) 24*8kB (UM) 400*16kB (UM) 1478*32kB (UME) 4*64kB (M) 2*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54508kB [ 1550.786881] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1550.796498] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1550.810038] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1550.818975] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1550.849326] 40640 total pagecache pages [ 1550.858422] 0 pages in swap cache [ 1550.866663] Swap cache stats: add 0, delete 0, find 0/0 [ 1550.880921] Free swap = 0kB [ 1550.885999] Total swap = 0kB [ 1550.889074] 2097051 pages RAM [ 1550.900453] 0 pages HighMem/MovableOnly [ 1550.904453] 363849 pages reserved [ 1550.907910] 0 pages cma reserved [ 1550.966966] oom_reaper: reaped process 18429 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1551.012773] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1551.014092] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1551.069529] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1551.079028] CPU: 1 PID: 18408 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1551.087035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1551.091720] oom_reaper: reaped process 18407 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1551.096906] Call Trace: [ 1551.109539] dump_stack+0x1b2/0x281 [ 1551.113167] warn_alloc.cold+0x96/0x1cc [ 1551.117146] ? zone_watermark_ok_safe+0x220/0x220 [ 1551.122009] ? wait_for_completion_io+0x10/0x10 [ 1551.126680] __alloc_pages_nodemask+0x2127/0x2720 [ 1551.131525] ? lock_acquire+0x170/0x3f0 [ 1551.135536] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1551.138029] syz-executor.2 cpuset= [ 1551.140389] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1551.140405] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1551.140423] alloc_pages_current+0x155/0x260 [ 1551.158444] ion_page_pool_alloc+0x118/0x1b0 [ 1551.162859] ion_system_heap_allocate+0x133/0x8c0 [ 1551.167699] ? ion_alloc+0x187/0x810 [ 1551.171558] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1551.176398] / [ 1551.177106] ? ion_system_contig_heap_create+0x130/0x130 [ 1551.177110] mems_allowed=0-1 [ 1551.187427] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1551.188065] oom_reaper: reaped process 18410 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1551.192617] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1551.192629] ion_alloc+0x204/0x810 [ 1551.192642] ? ion_dma_buf_release+0x40/0x40 [ 1551.192653] ? __might_fault+0x177/0x1b0 [ 1551.219570] ion_ioctl+0xea/0x1f0 [ 1551.223035] ? ion_query_heaps+0x360/0x360 [ 1551.227271] ? ion_query_heaps+0x360/0x360 [ 1551.231506] do_vfs_ioctl+0x75a/0xff0 [ 1551.235575] ? ioctl_preallocate+0x1a0/0x1a0 [ 1551.239978] ? lock_downgrade+0x740/0x740 [ 1551.244227] ? __fget+0x225/0x360 [ 1551.247774] ? do_vfs_ioctl+0xff0/0xff0 [ 1551.251828] ? security_file_ioctl+0x83/0xb0 [ 1551.256228] SyS_ioctl+0x7f/0xb0 [ 1551.259595] ? do_vfs_ioctl+0xff0/0xff0 [ 1551.263652] do_syscall_64+0x1d5/0x640 [ 1551.267531] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1551.272719] RIP: 0033:0x4665d9 [ 1551.275890] RSP: 002b:00007f2b808a4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1551.283582] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1551.290870] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1551.298130] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1551.305379] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1551.312630] R13: 00007ffc9b8ba0df R14: 00007f2b808a4300 R15: 0000000000022000 [ 1551.319934] CPU: 0 PID: 18402 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1551.328269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1551.333120] warn_alloc_show_mem: 5 callbacks suppressed [ 1551.333123] Mem-Info: [ 1551.337618] Call Trace: [ 1551.348089] dump_stack+0x1b2/0x281 [ 1551.351727] warn_alloc.cold+0x96/0x1cc [ 1551.355829] ? zone_watermark_ok_safe+0x220/0x220 [ 1551.355867] active_anon:14651 inactive_anon:39251 isolated_anon:0 [ 1551.355867] active_file:13 inactive_file:0 isolated_file:0 [ 1551.355867] unevictable:0 dirty:1 writeback:0 unstable:0 [ 1551.355867] slab_reclaimable:11930 slab_unreclaimable:116249 [ 1551.355867] mapped:52674 shmem:39707 pagetables:829 bounce:0 [ 1551.355867] free:13880 free_pcp:54 free_cma:0 [ 1551.360673] ? wait_for_completion_io+0x10/0x10 [ 1551.360686] __alloc_pages_nodemask+0x2127/0x2720 [ 1551.360702] ? lock_acquire+0x170/0x3f0 [ 1551.360715] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1551.360725] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1551.360740] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1551.360757] alloc_pages_current+0x155/0x260 [ 1551.360777] ion_page_pool_alloc+0x118/0x1b0 [ 1551.406422] Node 0 active_anon:57196kB inactive_anon:120872kB active_file:44kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210696kB dirty:4kB writeback:0kB shmem:122424kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1551.407350] ion_system_heap_allocate+0x133/0x8c0 [ 1551.417577] Node 1 active_anon:1408kB inactive_anon:36132kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:36404kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1551.422106] ? ion_alloc+0x187/0x810 [ 1551.422117] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1551.422125] ? ion_system_contig_heap_create+0x130/0x130 [ 1551.422135] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1551.422146] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1551.422157] ion_alloc+0x204/0x810 [ 1551.422170] ? ion_dma_buf_release+0x40/0x40 [ 1551.422183] ? __might_fault+0x177/0x1b0 [ 1551.439059] Node 0 [ 1551.459296] ion_ioctl+0xea/0x1f0 [ 1551.459307] ? ion_query_heaps+0x360/0x360 [ 1551.459317] ? ion_query_heaps+0x360/0x360 [ 1551.459326] do_vfs_ioctl+0x75a/0xff0 [ 1551.459337] ? ioctl_preallocate+0x1a0/0x1a0 [ 1551.459346] ? lock_downgrade+0x740/0x740 [ 1551.459357] ? __fget+0x225/0x360 [ 1551.459365] ? do_vfs_ioctl+0xff0/0xff0 [ 1551.459375] ? security_file_ioctl+0x83/0xb0 [ 1551.459384] SyS_ioctl+0x7f/0xb0 [ 1551.459390] ? do_vfs_ioctl+0xff0/0xff0 [ 1551.459400] do_syscall_64+0x1d5/0x640 [ 1551.459414] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1551.459422] RIP: 0033:0x4665d9 [ 1551.459427] RSP: 002b:00007f3d1f881188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1551.459436] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1551.459440] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1551.459459] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1551.459463] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1551.459468] R13: 00007ffdbbfa296f R14: 00007f3d1f881300 R15: 0000000000022000 [ 1551.471843] syz-executor.0: [ 1551.504110] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1551.506063] syz-executor.1: [ 1551.518217] lowmem_reserve[]: [ 1551.644211] page allocation failure: order:0 [ 1551.672549] oom_reaper: reaped process 18408 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1551.694467] oom_reaper: reaped process 18402 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1551.712342] oom_reaper: reaped process 18409 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1551.725920] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1551.738453] 0 2717 2718 2718 2718 [ 1551.742301] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1551.752183] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1551.756196] Node 0 DMA32 free:60584kB min:36200kB low:45248kB high:54296kB active_anon:57092kB inactive_anon:120872kB active_file:88kB inactive_file:704kB unevictable:0kB writepending:4kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7584kB pagetables:3188kB bounce:0kB free_pcp:1336kB local_pcp:664kB free_cma:0kB [ 1551.787713] syz-executor.1 cpuset= [ 1551.799457] CPU: 1 PID: 18409 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1551.810895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1551.811501] / [ 1551.820243] Call Trace: [ 1551.824546] dump_stack+0x1b2/0x281 [ 1551.828176] warn_alloc.cold+0x96/0x1cc [ 1551.832158] ? zone_watermark_ok_safe+0x220/0x220 [ 1551.837086] ? usleep_range+0x130/0x130 [ 1551.838754] mems_allowed=0-1 [ 1551.841113] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1551.841126] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1551.841136] ? run_timer_softirq+0x5a0/0x5a0 [ 1551.841164] __alloc_pages_nodemask+0x2127/0x2720 [ 1551.863579] ? lock_acquire+0x170/0x3f0 [ 1551.867751] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1551.872610] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1551.877526] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1551.882978] alloc_pages_current+0x155/0x260 [ 1551.887484] ion_page_pool_alloc+0x118/0x1b0 [ 1551.892067] ion_system_heap_allocate+0x133/0x8c0 [ 1551.896892] ? ion_alloc+0x187/0x810 [ 1551.900605] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1551.906087] ? ion_system_contig_heap_create+0x130/0x130 [ 1551.911540] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1551.916562] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1551.921403] ion_alloc+0x204/0x810 [ 1551.924938] ? ion_dma_buf_release+0x40/0x40 [ 1551.929328] ? __might_fault+0x177/0x1b0 [ 1551.933384] ion_ioctl+0xea/0x1f0 [ 1551.936846] ? ion_query_heaps+0x360/0x360 [ 1551.941246] ? ion_query_heaps+0x360/0x360 [ 1551.945721] do_vfs_ioctl+0x75a/0xff0 [ 1551.949502] ? ioctl_preallocate+0x1a0/0x1a0 [ 1551.953898] ? lock_downgrade+0x740/0x740 [ 1551.958068] ? __fget+0x225/0x360 [ 1551.961521] ? do_vfs_ioctl+0xff0/0xff0 [ 1551.965476] ? security_file_ioctl+0x83/0xb0 [ 1551.969982] SyS_ioctl+0x7f/0xb0 [ 1551.973386] ? do_vfs_ioctl+0xff0/0xff0 [ 1551.977458] do_syscall_64+0x1d5/0x640 [ 1551.981359] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1551.989661] RIP: 0033:0x4665d9 [ 1551.992844] RSP: 002b:00007f37127a1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1552.000554] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1552.007823] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1552.015092] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1552.022439] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1552.029882] R13: 00007ffd8a8e3f3f R14: 00007f37127a1300 R15: 0000000000022000 [ 1552.037676] CPU: 0 PID: 18429 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1552.045575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1552.055034] Call Trace: [ 1552.057647] dump_stack+0x1b2/0x281 [ 1552.061368] warn_alloc.cold+0x96/0x1cc [ 1552.065348] ? zone_watermark_ok_safe+0x220/0x220 [ 1552.070193] ? usleep_range+0x130/0x130 [ 1552.074257] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1552.079370] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1552.084513] ? run_timer_softirq+0x5a0/0x5a0 [ 1552.088931] __alloc_pages_nodemask+0x2127/0x2720 [ 1552.093809] ? lock_acquire+0x170/0x3f0 [ 1552.097884] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1552.102730] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1552.107232] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1552.112692] ? alloc_pages_current+0x16/0x260 [ 1552.117192] alloc_pages_current+0x155/0x260 [ 1552.121603] ion_page_pool_alloc+0x118/0x1b0 [ 1552.126013] ion_system_heap_allocate+0x133/0x8c0 [ 1552.130861] ? ion_alloc+0x187/0x810 [ 1552.134576] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1552.139599] lowmem_reserve[]: 0 [ 1552.140022] ? ion_system_contig_heap_create+0x130/0x130 [ 1552.140038] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1552.143323] 0 [ 1552.148758] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1552.160456] ion_alloc+0x204/0x810 [ 1552.164002] ? ion_dma_buf_release+0x40/0x40 [ 1552.168414] ? __might_fault+0x177/0x1b0 [ 1552.172503] ion_ioctl+0xea/0x1f0 [ 1552.175959] ? ion_query_heaps+0x360/0x360 [ 1552.180196] ? ion_query_heaps+0x360/0x360 [ 1552.184430] do_vfs_ioctl+0x75a/0xff0 [ 1552.188234] ? ioctl_preallocate+0x1a0/0x1a0 [ 1552.192665] ? lock_downgrade+0x740/0x740 [ 1552.196819] ? __fget+0x225/0x360 [ 1552.199592] 0 0 [ 1552.200271] ? do_vfs_ioctl+0xff0/0xff0 [ 1552.200283] ? security_file_ioctl+0x83/0xb0 [ 1552.202241] 0 [ 1552.206196] SyS_ioctl+0x7f/0xb0 [ 1552.215771] ? do_vfs_ioctl+0xff0/0xff0 [ 1552.219761] do_syscall_64+0x1d5/0x640 [ 1552.223660] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1552.228868] RIP: 0033:0x4665d9 [ 1552.232178] RSP: 002b:00007fe35e0b7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1552.239977] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1552.247470] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1552.254736] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1552.254743] Node 0 [ 1552.261993] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1552.261998] R13: 00007ffefdeab7bf R14: 00007fe35e0b7300 R15: 0000000000022000 [ 1552.325428] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1552.356766] lowmem_reserve[]: 0 0 0 0 0 [ 1552.363166] Node 1 Normal free:316848kB min:53696kB low:67120kB high:80544kB active_anon:1364kB inactive_anon:36132kB active_file:408kB inactive_file:1988kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:128kB bounce:0kB free_pcp:660kB local_pcp:660kB free_cma:0kB [ 1552.394066] lowmem_reserve[]: 0 0 0 0 0 [ 1552.398658] Node 0 DMA: 7*4kB (U) 14*8kB (UE) 25*16kB (UE) 15*32kB (UE) 2*64kB (UE) 1*128kB (E) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11004kB [ 1552.415280] Node 0 DMA32: 134*4kB (UE) 227*8kB (UME) 816*16kB (UME) 1116*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 51120kB [ 1552.431154] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1552.450400] Node 1 Normal: 6*4kB (M) 1194*8kB (UM) 458*16kB (UM) 774*32kB (UME) 1*64kB (M) 0*128kB 197*256kB (U) 57*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 121352kB [ 1552.526294] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1552.542212] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1552.550947] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1552.560816] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1552.574185] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1552.590263] 39812 total pagecache pages [ 1552.639553] (null), order=0, oom_score_adj=0 [ 1552.644180] systemd-journal cpuset=/ mems_allowed=0-1 [ 1552.659726] 0 pages in swap cache [ 1552.663186] Swap cache stats: add 0, delete 0, find 0/0 [ 1552.668562] Free swap = 0kB [ 1552.690098] CPU: 1 PID: 18139 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 1552.698365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1552.707734] Call Trace: [ 1552.710361] dump_stack+0x1b2/0x281 [ 1552.714005] dump_header+0x178/0x82f [ 1552.717725] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1552.722891] ? ___ratelimit+0x2cd/0x530 [ 1552.726966] oom_kill_process.cold+0x10/0xa40 [ 1552.731535] out_of_memory+0xe3e/0x1190 [ 1552.735514] ? oom_killer_disable+0x1c0/0x1c0 [ 1552.740011] ? mutex_trylock+0x152/0x1a0 [ 1552.744079] __alloc_pages_nodemask+0x23e1/0x2720 [ 1552.748932] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1552.753809] alloc_pages_current+0x155/0x260 [ 1552.758311] filemap_fault+0x11a1/0x1ad0 [ 1552.762484] ext4_filemap_fault+0x84/0xb0 [ 1552.766634] __do_fault+0xfa/0x380 [ 1552.770173] __handle_mm_fault+0x2497/0x4620 [ 1552.774586] ? vm_insert_page+0x7c0/0x7c0 [ 1552.778859] ? mark_held_locks+0xa6/0xf0 [ 1552.779539] warn_alloc_show_mem: 1 callbacks suppressed [ 1552.779543] Mem-Info: [ 1552.782927] handle_mm_fault+0x455/0x9c0 [ 1552.788290] active_anon:14555 inactive_anon:39251 isolated_anon:0 [ 1552.788290] active_file:46 inactive_file:15 isolated_file:0 [ 1552.788290] unevictable:0 dirty:16 writeback:0 unstable:0 [ 1552.788290] slab_reclaimable:11928 slab_unreclaimable:115909 [ 1552.788290] mapped:52755 shmem:39707 pagetables:829 bounce:0 [ 1552.788290] free:231662 free_pcp:1 free_cma:0 [ 1552.790677] __do_page_fault+0x549/0xad0 [ 1552.790688] ? spurious_fault+0x640/0x640 [ 1552.790695] ? do_page_fault+0x60/0x500 [ 1552.790703] ? page_fault+0x2f/0x50 [ 1552.790711] page_fault+0x45/0x50 [ 1552.809746] Node 0 active_anon:56856kB inactive_anon:120872kB active_file:32kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210856kB dirty:60kB writeback:0kB shmem:122424kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1552.827988] RIP: 0001:0xffffffffffffffff [ 1552.827993] RSP: 9faa81e0:00007ffd941c9ed0 EFLAGS: 7ffd941c9cf0 [ 1552.839527] Total swap = 0kB [ 1552.909547] Node 1 active_anon:1364kB inactive_anon:36132kB active_file:88kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:88kB dirty:4kB writeback:0kB shmem:36404kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1552.979537] Node 0 DMA free:12104kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1552.991870] 2097051 pages RAM [ 1553.029548] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1553.034655] Node 0 DMA32 free:214408kB min:36200kB low:45248kB high:54296kB active_anon:56856kB inactive_anon:120872kB active_file:248kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7584kB pagetables:3188kB bounce:0kB free_pcp:620kB local_pcp:512kB free_cma:0kB [ 1553.053160] 0 pages HighMem/MovableOnly [ 1553.099517] 363849 pages reserved [ 1553.103133] 0 pages cma reserved [ 1553.113441] lowmem_reserve[]: 0 0 0 0 0 [ 1553.117478] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1553.159598] lowmem_reserve[]: 0 0 0 0 0 [ 1553.163696] Node 1 Normal free:1462192kB min:53696kB low:67120kB high:80544kB active_anon:1364kB inactive_anon:36132kB active_file:184kB inactive_file:228kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:128kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1553.199538] Mem-Info: [ 1553.202022] active_anon:14555 inactive_anon:39251 isolated_anon:0 [ 1553.202022] active_file:33 inactive_file:13 isolated_file:0 [ 1553.202022] unevictable:0 dirty:18 writeback:0 unstable:0 [ 1553.202022] slab_reclaimable:11928 slab_unreclaimable:115888 [ 1553.202022] mapped:52733 shmem:39707 pagetables:829 bounce:0 [ 1553.202022] free:430560 free_pcp:155 free_cma:0 [ 1553.299507] lowmem_reserve[]: 0 0 0 0 0 [ 1553.303554] Node 0 DMA: 0*4kB 11*8kB (UE) 25*16kB (UE) 15*32kB (UE) 15*64kB (UE) 4*128kB (UE) 4*256kB (UE) 4*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 11656kB [ 1553.329531] Node 0 active_anon:56856kB inactive_anon:120872kB active_file:44kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210844kB dirty:68kB writeback:0kB shmem:122424kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1553.379537] Node 0 DMA32: 1400*4kB (UME) 1928*8kB (UME) 2776*16kB (UME) 542*32kB (UME) 271*64kB (UE) 465*128kB (U) 123*256kB (U) 3*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 192672kB [ 1553.420017] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1553.440002] Node 1 active_anon:1364kB inactive_anon:36132kB active_file:88kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:88kB dirty:4kB writeback:0kB shmem:36404kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1553.492179] Node 1 Normal: 552*4kB (UM) 681*8kB (UM) 444*16kB (UM) 803*32kB (UME) 8785*64kB (UM) 3114*128kB (UM) 1077*256kB (UM) 346*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 1454152kB [ 1553.529835] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1553.538739] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1553.553377] Node 0 DMA free:11144kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1553.632404] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1553.660129] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1553.668761] 40064 total pagecache pages [ 1553.679456] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1553.684715] Node 0 DMA32 free:317544kB min:36200kB low:45248kB high:54296kB active_anon:56856kB inactive_anon:120872kB active_file:248kB inactive_file:1024kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7584kB pagetables:3188kB bounce:0kB free_pcp:976kB local_pcp:740kB free_cma:0kB [ 1553.720614] 0 pages in swap cache [ 1553.727135] Swap cache stats: add 0, delete 0, find 0/0 [ 1553.737584] Free swap = 0kB [ 1553.741095] Total swap = 0kB [ 1553.744551] 2097051 pages RAM [ 1553.747816] 0 pages HighMem/MovableOnly [ 1553.755298] 363849 pages reserved [ 1553.759147] 0 pages cma reserved [ 1553.767263] lowmem_reserve[]: 0 0 0 0 0 [ 1553.792402] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1553.827050] lowmem_reserve[]: 0 0 0 0 0 [ 1553.832063] Node 1 Normal free:700032kB min:53696kB low:67120kB high:80544kB active_anon:1364kB inactive_anon:36132kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:128kB bounce:0kB free_pcp:1304kB local_pcp:684kB free_cma:0kB [ 1553.939455] lowmem_reserve[]: 0 0 0 0 0 [ 1553.943678] Node 0 DMA: 7*4kB (U) 11*8kB (UE) 25*16kB (UE) 15*32kB (UE) 7*64kB (UE) 4*128kB (UE) 4*256kB (UE) 4*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 11172kB [ 1554.009452] Node 0 DMA32: 389*4kB (E) 30*8kB (ME) 7840*16kB (UME) 2027*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 192100kB [ 1554.043766] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1554.055418] Node 1 Normal: 2031*4kB (UM) 1018*8kB (UM) 1028*16kB (UM) 1073*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 67052kB [ 1554.058401] warn_alloc: 7 callbacks suppressed [ 1554.058405] syz-executor.1: [ 1554.069496] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1554.078814] syz-executor.0: [ 1554.093976] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1554.099463] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1554.107784] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1554.130643] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1554.135782] CPU: 0 PID: 18408 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1554.139440] syz-executor.0 cpuset= [ 1554.143681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1554.143687] / [ 1554.147212] Call Trace: [ 1554.160845] dump_stack+0x1b2/0x281 [ 1554.164472] warn_alloc.cold+0x96/0x1cc [ 1554.168622] ? zone_watermark_ok_safe+0x220/0x220 [ 1554.169511] mems_allowed=0-1 [ 1554.173488] __alloc_pages_nodemask+0x2127/0x2720 [ 1554.181456] ? lock_acquire+0x170/0x3f0 [ 1554.185434] ? lock_acquire+0x170/0x3f0 [ 1554.189438] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1554.194284] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1554.199733] ? __mutex_unlock_slowpath+0x75/0x770 [ 1554.204579] alloc_pages_current+0x155/0x260 [ 1554.208996] ion_page_pool_alloc+0x118/0x1b0 [ 1554.213493] ion_system_heap_allocate+0x133/0x8c0 [ 1554.218319] ? _raw_spin_unlock+0x29/0x40 [ 1554.219423] syz-executor.1 cpuset= [ 1554.222468] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1554.222474] / [ 1554.225993] ? ion_system_contig_heap_create+0x130/0x130 [ 1554.238042] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1554.243153] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1554.248094] ion_alloc+0x27a/0x810 [ 1554.251630] ? ion_dma_buf_release+0x40/0x40 [ 1554.256026] ? __might_fault+0x177/0x1b0 [ 1554.259474] mems_allowed=0-1 [ 1554.260077] ion_ioctl+0xea/0x1f0 [ 1554.266761] ? ion_query_heaps+0x360/0x360 [ 1554.270979] ? ion_query_heaps+0x360/0x360 [ 1554.275200] do_vfs_ioctl+0x75a/0xff0 [ 1554.278981] ? ioctl_preallocate+0x1a0/0x1a0 [ 1554.283380] ? lock_downgrade+0x740/0x740 [ 1554.287532] ? __fget+0x225/0x360 [ 1554.290979] ? do_vfs_ioctl+0xff0/0xff0 [ 1554.294988] ? security_file_ioctl+0x83/0xb0 [ 1554.299522] SyS_ioctl+0x7f/0xb0 [ 1554.302881] ? do_vfs_ioctl+0xff0/0xff0 [ 1554.306843] do_syscall_64+0x1d5/0x640 [ 1554.310737] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1554.315927] RIP: 0033:0x4665d9 [ 1554.319119] RSP: 002b:00007f2b808a4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1554.326816] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1554.334066] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1554.341410] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1554.348687] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1554.355958] R13: 00007ffc9b8ba0df R14: 00007f2b808a4300 R15: 0000000000022000 [ 1554.363227] CPU: 1 PID: 18409 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1554.371230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1554.372251] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1554.380589] Call Trace: [ 1554.380607] dump_stack+0x1b2/0x281 [ 1554.380621] warn_alloc.cold+0x96/0x1cc [ 1554.380633] ? zone_watermark_ok_safe+0x220/0x220 [ 1554.404259] __alloc_pages_nodemask+0x2127/0x2720 [ 1554.409090] ? lock_acquire+0x170/0x3f0 [ 1554.409391] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1554.413050] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1554.426694] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1554.432127] ? __mutex_unlock_slowpath+0x75/0x770 [ 1554.437042] alloc_pages_current+0x155/0x260 [ 1554.439385] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1554.441521] ion_page_pool_alloc+0x118/0x1b0 [ 1554.454547] ion_system_heap_allocate+0x133/0x8c0 [ 1554.459382] 40822 total pagecache pages [ 1554.459404] ? _raw_spin_unlock+0x29/0x40 [ 1554.463351] 0 pages in swap cache [ 1554.467480] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1554.475934] ? ion_system_contig_heap_create+0x130/0x130 [ 1554.479390] Swap cache stats: add 0, delete 0, find 0/0 [ 1554.481378] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1554.486818] Free swap = 0kB [ 1554.491964] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1554.491976] ion_alloc+0x27a/0x810 [ 1554.491989] ? ion_dma_buf_release+0x40/0x40 [ 1554.492001] ? __might_fault+0x177/0x1b0 [ 1554.509400] Total swap = 0kB [ 1554.511816] ion_ioctl+0xea/0x1f0 [ 1554.514821] 2097051 pages RAM [ 1554.518258] ? ion_query_heaps+0x360/0x360 [ 1554.525602] ? ion_query_heaps+0x360/0x360 [ 1554.529913] do_vfs_ioctl+0x75a/0xff0 [ 1554.533696] ? ioctl_preallocate+0x1a0/0x1a0 [ 1554.538132] ? lock_downgrade+0x740/0x740 [ 1554.539415] 0 pages HighMem/MovableOnly [ 1554.542272] ? __fget+0x225/0x360 [ 1554.546231] 363849 pages reserved [ 1554.549673] ? do_vfs_ioctl+0xff0/0xff0 [ 1554.549684] ? security_file_ioctl+0x83/0xb0 [ 1554.549694] SyS_ioctl+0x7f/0xb0 [ 1554.549704] ? do_vfs_ioctl+0xff0/0xff0 [ 1554.559471] 0 pages cma reserved [ 1554.561543] do_syscall_64+0x1d5/0x640 [ 1554.564883] Out of memory (oom_kill_allocating_task): Kill process 18139 (systemd-journal) score 0 or sacrifice child [ 1554.568856] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1554.589403] Killed process 18139 (systemd-journal) total-vm:46096kB, anon-rss:468kB, file-rss:4kB, shmem-rss:1808kB [ 1554.592130] RIP: 0033:0x4665d9 [ 1554.605849] RSP: 002b:00007f37127a1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1554.613537] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1554.620798] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1554.628257] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1554.635511] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1554.642772] R13: 00007ffd8a8e3f3f R14: 00007f37127a1300 R15: 0000000000022000 [ 1554.650123] CPU: 0 PID: 18429 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1554.658010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1554.667371] Call Trace: [ 1554.669969] dump_stack+0x1b2/0x281 [ 1554.673603] warn_alloc.cold+0x96/0x1cc [ 1554.677586] ? zone_watermark_ok_safe+0x220/0x220 [ 1554.682555] __alloc_pages_nodemask+0x2127/0x2720 [ 1554.687432] ? lock_acquire+0x170/0x3f0 [ 1554.691453] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1554.696395] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1554.701936] ? __mutex_unlock_slowpath+0x75/0x770 [ 1554.706786] alloc_pages_current+0x155/0x260 [ 1554.711200] ion_page_pool_alloc+0x118/0x1b0 [ 1554.715613] ion_system_heap_allocate+0x133/0x8c0 [ 1554.720477] ? _raw_spin_unlock+0x29/0x40 [ 1554.724630] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1554.729563] ? ion_system_contig_heap_create+0x130/0x130 [ 1554.735200] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1554.740306] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1554.745161] ion_alloc+0x27a/0x810 [ 1554.748701] ? ion_dma_buf_release+0x40/0x40 [ 1554.753141] ? __might_fault+0x177/0x1b0 [ 1554.757222] ion_ioctl+0xea/0x1f0 [ 1554.760678] ? ion_query_heaps+0x360/0x360 [ 1554.765122] ? ion_query_heaps+0x360/0x360 [ 1554.769418] do_vfs_ioctl+0x75a/0xff0 [ 1554.773225] ? ioctl_preallocate+0x1a0/0x1a0 [ 1554.777670] ? lock_downgrade+0x740/0x740 [ 1554.781822] ? __fget+0x225/0x360 [ 1554.785359] ? do_vfs_ioctl+0xff0/0xff0 [ 1554.789364] ? security_file_ioctl+0x83/0xb0 [ 1554.793773] SyS_ioctl+0x7f/0xb0 [ 1554.797137] ? do_vfs_ioctl+0xff0/0xff0 [ 1554.801112] do_syscall_64+0x1d5/0x640 [ 1554.805018] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1554.810209] RIP: 0033:0x4665d9 [ 1554.813396] RSP: 002b:00007fe35e0b7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1554.821104] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1554.828374] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1554.835648] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1554.842919] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1554.850274] R13: 00007ffefdeab7bf R14: 00007fe35e0b7300 R15: 0000000000022000 [ 1554.883870] warn_alloc_show_mem: 1 callbacks suppressed [ 1554.883873] Mem-Info: [ 1554.892182] active_anon:14457 inactive_anon:39251 isolated_anon:0 [ 1554.892182] active_file:23 inactive_file:29 isolated_file:0 [ 1554.892182] unevictable:0 dirty:17 writeback:0 unstable:0 [ 1554.892182] slab_reclaimable:11908 slab_unreclaimable:116013 [ 1554.892182] mapped:52245 shmem:39707 pagetables:755 bounce:0 [ 1554.892182] free:22578 free_pcp:0 free_cma:0 [ 1554.952451] Node 0 active_anon:56464kB inactive_anon:120872kB active_file:88kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208976kB dirty:68kB writeback:0kB shmem:122424kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1554.953565] kworker/u4:9 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask= [ 1555.003568] Node 1 active_anon:1364kB inactive_anon:36132kB active_file:16kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:4kB writeback:0kB shmem:36404kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1555.025052] syz-executor.3: [ 1555.044824] (null) [ 1555.046556] syz-executor.5: [ 1555.047878] , order=3, oom_score_adj=0 [ 1555.050118] syz-executor.0: [ 1555.053119] kworker/u4:9 cpuset= [ 1555.057079] page allocation failure: order:0 [ 1555.064064] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1555.074712] / mems_allowed=0-1 [ 1555.078984] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1555.094920] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1555.096645] CPU: 0 PID: 15447 Comm: kworker/u4:9 Not tainted 4.14.232-syzkaller #0 [ 1555.102584] syz-executor.0 cpuset= [ 1555.110236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1555.110252] Workqueue: events_unbound call_usermodehelper_exec_work [ 1555.110260] Call Trace: [ 1555.113800] syz-executor.5 cpuset= [ 1555.123169] dump_stack+0x1b2/0x281 [ 1555.123181] dump_header+0x178/0x82f [ 1555.123192] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1555.123203] ? ___ratelimit+0x2cd/0x530 [ 1555.129709] syz-executor.3 cpuset= [ 1555.132215] oom_kill_process.cold+0x10/0xa40 [ 1555.135732] / [ 1555.139353] ? lock_downgrade+0x740/0x740 [ 1555.143083] / [ 1555.148131] out_of_memory+0x2dc/0x1190 [ 1555.152200] / [ 1555.155804] ? oom_killer_disable+0x1c0/0x1c0 [ 1555.160303] mems_allowed=0-1 [ 1555.161971] ? mutex_trylock+0x152/0x1a0 [ 1555.169344] mems_allowed=0-1 [ 1555.171752] __alloc_pages_nodemask+0x23e1/0x2720 [ 1555.179360] mems_allowed=0-1 [ 1555.181091] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1555.201040] ? fs_reclaim_release+0xd0/0x110 [ 1555.205444] ? kmem_cache_alloc_node+0x38b/0x410 [ 1555.210185] copy_process.part.0+0x265/0x71c0 [ 1555.214682] ? __lock_acquire+0x5fc/0x3f20 [ 1555.218898] ? cpuacct_charge+0x1ca/0x350 [ 1555.223210] ? static_obj+0x50/0x50 [ 1555.226817] ? lock_downgrade+0x740/0x740 [ 1555.230948] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1555.236377] ? __cleanup_sighand+0x40/0x40 [ 1555.240794] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1555.246229] _do_fork+0x184/0xc80 [ 1555.249665] ? fork_idle+0x270/0x270 [ 1555.253358] ? lock_downgrade+0x740/0x740 [ 1555.257482] ? lock_downgrade+0x740/0x740 [ 1555.261611] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1555.266608] ? process_one_work+0x6c4/0x14a0 [ 1555.271005] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1555.276443] kernel_thread+0x2f/0x40 [ 1555.280142] call_usermodehelper_exec_work+0x1ac/0x2a0 [ 1555.285411] ? call_usermodehelper+0x80/0x80 [ 1555.289811] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1555.295250] process_one_work+0x793/0x14a0 [ 1555.299547] ? work_busy+0x320/0x320 [ 1555.303244] ? worker_thread+0x158/0xff0 [ 1555.307289] ? _raw_spin_unlock_irq+0x24/0x80 [ 1555.311763] worker_thread+0x5cc/0xff0 [ 1555.315637] ? rescuer_thread+0xc80/0xc80 [ 1555.319769] kthread+0x30d/0x420 [ 1555.323340] ? kthread_create_on_node+0xd0/0xd0 [ 1555.327995] ret_from_fork+0x24/0x30 [ 1555.331708] CPU: 1 PID: 18407 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1555.339596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1555.346614] Node 0 [ 1555.348950] Call Trace: [ 1555.348968] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1555.351183] dump_stack+0x1b2/0x281 [ 1555.351197] warn_alloc.cold+0x96/0x1cc [ 1555.351210] ? zone_watermark_ok_safe+0x220/0x220 [ 1555.359324] lowmem_reserve[]: [ 1555.379272] ? usleep_range+0x130/0x130 [ 1555.379281] ? try_to_free_pages+0x23f/0x6e0 [ 1555.379292] ? _find_next_bit+0xdb/0x100 [ 1555.407123] ? run_timer_softirq+0x5a0/0x5a0 [ 1555.409316] 0 2717 2718 [ 1555.411519] __alloc_pages_nodemask+0x2127/0x2720 [ 1555.411525] 2718 [ 1555.414180] ? lock_acquire+0x170/0x3f0 [ 1555.418994] 2718 [ 1555.421048] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1555.421057] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1555.421073] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1555.441773] Node 0 DMA32 free:17604kB min:36200kB low:45248kB high:54296kB active_anon:56400kB inactive_anon:120868kB active_file:176kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7520kB pagetables:2880kB bounce:0kB free_pcp:16kB local_pcp:16kB free_cma:0kB [ 1555.441796] alloc_pages_current+0x155/0x260 [ 1555.441809] ion_page_pool_alloc+0x118/0x1b0 [ 1555.479368] ion_system_heap_allocate+0x133/0x8c0 [ 1555.484193] ? _raw_spin_unlock+0x29/0x40 [ 1555.488320] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1555.493228] ? ion_system_contig_heap_create+0x130/0x130 [ 1555.498834] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1555.499313] lowmem_reserve[]: [ 1555.503842] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1555.503844] 0 0 [ 1555.507030] ion_alloc+0x27a/0x810 [ 1555.517410] ? ion_dma_buf_release+0x40/0x40 [ 1555.521823] ? __might_fault+0x177/0x1b0 [ 1555.525954] ion_ioctl+0xea/0x1f0 [ 1555.529308] 0 0 [ 1555.529391] ? ion_query_heaps+0x360/0x360 [ 1555.529402] ? ion_query_heaps+0x360/0x360 [ 1555.531375] 0 [ 1555.535609] do_vfs_ioctl+0x75a/0xff0 [ 1555.545484] ? ioctl_preallocate+0x1a0/0x1a0 [ 1555.549878] ? lock_downgrade+0x740/0x740 [ 1555.549884] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1555.554022] ? __fget+0x225/0x360 [ 1555.554031] ? do_vfs_ioctl+0xff0/0xff0 [ 1555.587094] ? security_file_ioctl+0x83/0xb0 [ 1555.591485] SyS_ioctl+0x7f/0xb0 [ 1555.594839] ? do_vfs_ioctl+0xff0/0xff0 [ 1555.598804] do_syscall_64+0x1d5/0x640 [ 1555.602680] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1555.607849] RIP: 0033:0x4665d9 [ 1555.609305] lowmem_reserve[]: [ 1555.611026] RSP: 002b:00007f2b2a1c9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1555.614116] 0 [ 1555.621810] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1555.621815] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1555.621820] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1555.621825] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1555.621832] R13: 00007ffc70377c3f R14: 00007f2b2a1c9300 R15: 0000000000022000 [ 1555.639298] 0 [ 1555.651057] CPU: 1 PID: 18408 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1555.669765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1555.679315] 0 [ 1555.679464] Call Trace: [ 1555.679471] 0 [ 1555.681310] dump_stack+0x1b2/0x281 [ 1555.683880] 0 [ 1555.685714] warn_alloc.cold+0x96/0x1cc [ 1555.695057] ? zone_watermark_ok_safe+0x220/0x220 [ 1555.699882] ? usleep_range+0x130/0x130 [ 1555.699885] Node 1 Normal free:26580kB min:53696kB low:67120kB high:80544kB active_anon:1364kB inactive_anon:36132kB active_file:16kB inactive_file:8kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:128kB bounce:0kB free_pcp:240kB local_pcp:120kB free_cma:0kB [ 1555.703928] ? try_to_free_pages+0x23f/0x6e0 [ 1555.737049] ? _find_next_bit+0xdb/0x100 [ 1555.741093] ? run_timer_softirq+0x5a0/0x5a0 [ 1555.745596] __alloc_pages_nodemask+0x2127/0x2720 [ 1555.750430] ? lock_acquire+0x170/0x3f0 [ 1555.754389] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1555.759224] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1555.763711] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1555.769149] alloc_pages_current+0x155/0x260 [ 1555.769299] lowmem_reserve[]: 0 [ 1555.773544] ion_page_pool_alloc+0x118/0x1b0 [ 1555.773553] ion_system_heap_allocate+0x133/0x8c0 [ 1555.776815] 0 [ 1555.781203] ? _raw_spin_unlock+0x29/0x40 [ 1555.781212] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1555.781220] ? ion_system_contig_heap_create+0x130/0x130 [ 1555.781231] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1555.799293] 0 [ 1555.802479] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1555.807468] 0 [ 1555.809277] ion_alloc+0x27a/0x810 [ 1555.809294] ? ion_dma_buf_release+0x40/0x40 [ 1555.823808] ? __might_fault+0x177/0x1b0 [ 1555.827858] ion_ioctl+0xea/0x1f0 [ 1555.829300] Mem-Info: [ 1555.831314] ? ion_query_heaps+0x360/0x360 [ 1555.833720] active_anon:14441 inactive_anon:39250 isolated_anon:0 [ 1555.833720] active_file:41 inactive_file:9 isolated_file:0 [ 1555.833720] unevictable:0 dirty:1 writeback:0 unstable:0 [ 1555.833720] slab_reclaimable:11908 slab_unreclaimable:116013 [ 1555.833720] mapped:52226 shmem:39707 pagetables:752 bounce:0 [ 1555.833720] free:13784 free_pcp:64 free_cma:0 [ 1555.837937] ? ion_query_heaps+0x360/0x360 [ 1555.871020] 0 [ 1555.875202] do_vfs_ioctl+0x75a/0xff0 [ 1555.875215] ? ioctl_preallocate+0x1a0/0x1a0 [ 1555.876990] Node 0 [ 1555.880767] ? lock_downgrade+0x740/0x740 [ 1555.880780] ? __fget+0x225/0x360 [ 1555.880791] ? do_vfs_ioctl+0xff0/0xff0 [ 1555.899016] ? security_file_ioctl+0x83/0xb0 [ 1555.899286] DMA: [ 1555.903411] SyS_ioctl+0x7f/0xb0 [ 1555.903414] 0*4kB 11*8kB [ 1555.905463] ? do_vfs_ioctl+0xff0/0xff0 [ 1555.908811] (UE) [ 1555.911733] do_syscall_64+0x1d5/0x640 [ 1555.911748] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1555.911757] RIP: 0033:0x4665d9 [ 1555.929285] 25*16kB [ 1555.930021] RSP: 002b:00007f2b808a4188 EFLAGS: 00000246 [ 1555.930027] (UE) [ 1555.932330] ORIG_RAX: 0000000000000010 [ 1555.937669] 15*32kB [ 1555.939710] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1555.939715] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1555.939720] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1555.939725] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1555.939731] R13: 00007ffc9b8ba0df R14: 00007f2b808a4300 R15: 0000000000022000 [ 1555.959309] Node 0 active_anon:56400kB inactive_anon:120868kB active_file:148kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208900kB dirty:0kB writeback:0kB shmem:122424kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1555.966063] warn_alloc_show_mem: 2 callbacks suppressed [ 1555.966067] Mem-Info: [ 1555.968058] Node 1 active_anon:1364kB inactive_anon:36132kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:36404kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1555.992680] active_anon:14441 inactive_anon:39250 isolated_anon:0 [ 1555.992680] active_file:27 inactive_file:0 isolated_file:0 20:08:07 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x7fffffff, 0x23}) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x2401, 0x0) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000040)=0x20) 20:08:07 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x7fffffff, 0x23}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, 0x0, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000080)=0x1) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x4, 0xcf, 0x7ff, 0x8, 0x0, 0x1, 0xb51, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x40) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000001480)={'syztnl1\x00', &(0x7f0000001400)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x1f, 0xffff0000, 0x43, @mcast1, @loopback, 0x20, 0x10, 0x2, 0x1}}) [ 1555.992680] unevictable:0 dirty:1 writeback:0 unstable:0 [ 1555.992680] slab_reclaimable:11908 slab_unreclaimable:116013 [ 1555.992680] mapped:52225 shmem:39707 pagetables:752 bounce:0 [ 1555.992680] free:13814 free_pcp:64 free_cma:0 [ 1556.039321] (UE) [ 1556.079419] CPU: 0 PID: 18409 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1556.089390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1556.098750] Call Trace: [ 1556.101344] dump_stack+0x1b2/0x281 [ 1556.104980] warn_alloc.cold+0x96/0x1cc [ 1556.108959] ? zone_watermark_ok_safe+0x220/0x220 [ 1556.113806] ? usleep_range+0x130/0x130 [ 1556.117786] ? try_to_free_pages+0x23f/0x6e0 [ 1556.122310] ? _find_next_bit+0xdb/0x100 [ 1556.126412] ? run_timer_softirq+0x5a0/0x5a0 [ 1556.130835] __alloc_pages_nodemask+0x2127/0x2720 [ 1556.135693] ? lock_acquire+0x170/0x3f0 [ 1556.139676] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1556.144519] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1556.149025] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1556.151124] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1556.154484] alloc_pages_current+0x155/0x260 [ 1556.154499] ion_page_pool_alloc+0x118/0x1b0 [ 1556.170646] ion_system_heap_allocate+0x133/0x8c0 [ 1556.175505] ? _raw_spin_unlock+0x29/0x40 [ 1556.179755] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1556.184684] ? ion_system_contig_heap_create+0x130/0x130 [ 1556.190142] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1556.195165] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1556.196226] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1556.200157] ion_alloc+0x27a/0x810 [ 1556.200170] ? ion_dma_buf_release+0x40/0x40 [ 1556.200181] ? __might_fault+0x177/0x1b0 [ 1556.200191] ion_ioctl+0xea/0x1f0 [ 1556.200198] ? ion_query_heaps+0x360/0x360 [ 1556.200215] ? ion_query_heaps+0x360/0x360 [ 1556.200225] do_vfs_ioctl+0x75a/0xff0 [ 1556.200236] ? ioctl_preallocate+0x1a0/0x1a0 [ 1556.200245] ? lock_downgrade+0x740/0x740 [ 1556.200257] ? __fget+0x225/0x360 [ 1556.200266] ? do_vfs_ioctl+0xff0/0xff0 [ 1556.253057] ? security_file_ioctl+0x83/0xb0 20:08:07 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x7fffffff, 0x23}) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x2401, 0x0) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000040)=0x20) [ 1556.257473] SyS_ioctl+0x7f/0xb0 [ 1556.261109] ? do_vfs_ioctl+0xff0/0xff0 [ 1556.265095] do_syscall_64+0x1d5/0x640 [ 1556.268990] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1556.274176] RIP: 0033:0x4665d9 [ 1556.277365] RSP: 002b:00007f37127a1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1556.283562] systemd[1]: Stopped Journal Service. [ 1556.285155] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1556.285161] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1556.285167] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1556.285173] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1556.285178] R13: 00007ffd8a8e3f3f R14: 00007f37127a1300 R15: 0000000000022000 [ 1556.324283] 4*64kB (UE) 4*128kB (UE) 4*256kB (UE) 4*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10952kB [ 1556.347623] Node 0 DMA free:11052kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1556.359777] Node 0 active_anon:56500kB inactive_anon:120868kB active_file:168kB inactive_file:4264kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:212300kB dirty:0kB writeback:0kB shmem:122424kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1556.389287] Node 0 DMA32: 1955*4kB (UME) 5275*8kB (UME) 175*16kB (UME) 1188*32kB (UE) 3*64kB (UM) 0*128kB 1*256kB (U) 1*512kB (U) 5*1024kB (U) 0*2048kB 0*4096kB = 96916kB [ 1556.429561] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1556.435942] Node 0 DMA32 free:103460kB min:36200kB low:45248kB high:54296kB active_anon:56500kB inactive_anon:120868kB active_file:168kB inactive_file:4264kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7616kB pagetables:3028kB bounce:0kB free_pcp:1380kB local_pcp:648kB free_cma:0kB [ 1556.476066] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1556.499396] Node 1 Normal: 18*4kB (UM) 384*8kB (UM) 296*16kB (UM) 1176*32kB (UME) 0*64kB 1*128kB (M) 19*256kB (U) 6*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 53576kB [ 1556.526177] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1556.539595] lowmem_reserve[]: 0 0 0 0 0 [ 1556.544965] systemd[1]: Starting Journal Service... [ 1556.559352] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1556.577756] Node 1 active_anon:1364kB inactive_anon:36132kB active_file:96kB inactive_file:6020kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4700kB dirty:4kB writeback:0kB shmem:36404kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1556.594797] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1556.631434] Node 0 DMA free:11052kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1556.634003] syz-executor.2: [ 1556.664769] lowmem_reserve[]: 0 0 0 0 0 [ 1556.672360] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1556.695944] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1556.702895] syz-executor.4: [ 1556.706971] Node 1 [ 1556.707504] page allocation failure: order:4 [ 1556.714550] Normal free:53692kB min:53696kB low:67120kB high:80544kB active_anon:1364kB inactive_anon:36132kB active_file:96kB inactive_file:6020kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:128kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1556.715068] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1556.723524] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1556.760968] lowmem_reserve[]: [ 1556.764309] lowmem_reserve[]: 0 0 0 0 0 [ 1556.776896] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1556.779525] Node 0 [ 1556.783812] 0 [ 1556.784323] DMA: 7*4kB (U) 21*8kB (UE) 25*16kB (UE) 15*32kB (UE) 4*64kB (UE) 4*128kB (UE) 4*256kB (UE) 4*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 11060kB [ 1556.793752] 2717 [ 1556.807391] CPU: 1 PID: 18437 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1556.817430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1556.821722] Node 0 [ 1556.826867] Call Trace: [ 1556.826888] dump_stack+0x1b2/0x281 [ 1556.826901] warn_alloc.cold+0x96/0x1cc [ 1556.834672] DMA32: [ 1556.835319] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1556.843725] 1824*4kB [ 1556.846703] ? zone_watermark_ok_safe+0x220/0x220 [ 1556.846725] __alloc_pages_nodemask+0x2127/0x2720 [ 1556.852675] 42844 total pagecache pages [ 1556.854163] ? lock_acquire+0x170/0x3f0 [ 1556.854180] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1556.861251] 0 pages in swap cache [ 1556.863175] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1556.863191] ? __mutex_unlock_slowpath+0x75/0x770 [ 1556.868281] (UME) [ 1556.871973] ? __sanitizer_cov_trace_pc+0x9/0x50 [ 1556.871987] alloc_pages_current+0x155/0x260 [ 1556.872001] ion_page_pool_alloc+0x118/0x1b0 [ 1556.872012] ion_system_heap_allocate+0x133/0x8c0 [ 1556.872021] ? ion_alloc+0x187/0x810 [ 1556.872033] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1556.876704] Swap cache stats: add 0, delete 0, find 0/0 [ 1556.880996] ? ion_system_contig_heap_create+0x130/0x130 [ 1556.881008] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1556.881019] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1556.881029] ion_alloc+0x204/0x810 [ 1556.881041] ? ion_dma_buf_release+0x40/0x40 [ 1556.889531] 5828*8kB [ 1556.892767] ? __might_fault+0x177/0x1b0 [ 1556.892781] ion_ioctl+0xea/0x1f0 [ 1556.892790] ? ion_query_heaps+0x360/0x360 [ 1556.899556] Free swap = 0kB [ 1556.901609] ? ion_query_heaps+0x360/0x360 [ 1556.901620] do_vfs_ioctl+0x75a/0xff0 [ 1556.901631] ? ioctl_preallocate+0x1a0/0x1a0 [ 1556.908712] (UME) [ 1556.910190] ? lock_downgrade+0x740/0x740 [ 1556.910203] ? __fget+0x225/0x360 [ 1556.910213] ? do_vfs_ioctl+0xff0/0xff0 [ 1556.910224] ? security_file_ioctl+0x83/0xb0 [ 1556.910234] SyS_ioctl+0x7f/0xb0 [ 1556.910241] ? do_vfs_ioctl+0xff0/0xff0 [ 1556.910251] do_syscall_64+0x1d5/0x640 [ 1556.916881] Total swap = 0kB [ 1556.921058] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1556.921066] RIP: 0033:0x4665d9 [ 1556.921071] RSP: 002b:00007f3d1f881188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1556.921080] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1556.921085] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1556.921089] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1556.921097] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1556.927705] 12429*16kB [ 1556.931545] R13: 00007ffdbbfa296f R14: 00007f3d1f881300 R15: 0000000000022000 [ 1556.957939] 2718 [ 1556.963192] 2097051 pages RAM [ 1556.979078] 2718 [ 1556.983056] warn_alloc_show_mem: 1 callbacks suppressed [ 1556.983059] Mem-Info: [ 1556.989976] 2718 [ 1557.001634] active_anon:14505 inactive_anon:39250 isolated_anon:0 [ 1557.001634] active_file:433 inactive_file:2754 isolated_file:0 [ 1557.001634] unevictable:0 dirty:49 writeback:0 unstable:0 [ 1557.001634] slab_reclaimable:11905 slab_unreclaimable:115578 [ 1557.001634] mapped:54484 shmem:39707 pagetables:812 bounce:0 [ 1557.001634] free:110350 free_pcp:653 free_cma:0 [ 1557.015719] (null) [ 1557.015890] 0 pages HighMem/MovableOnly [ 1557.034713] (UME) [ 1557.045103] syz-executor.4 cpuset= [ 1557.051033] Node 0 active_anon:56728kB inactive_anon:120868kB active_file:1816kB inactive_file:5452kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:213484kB dirty:76kB writeback:0kB shmem:122424kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1557.056496] Node 0 [ 1557.065103] 2354*32kB [ 1557.072069] / [ 1557.077203] 363849 pages reserved [ 1557.092597] DMA32 free:346348kB min:36200kB low:45248kB high:54296kB active_anon:56928kB inactive_anon:120868kB active_file:2116kB inactive_file:5852kB unevictable:0kB writepending:28kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7680kB pagetables:3120kB bounce:0kB free_pcp:884kB local_pcp:340kB free_cma:0kB [ 1557.121034] Node 1 active_anon:1392kB inactive_anon:36132kB active_file:716kB inactive_file:5128kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4852kB dirty:20kB writeback:0kB shmem:36404kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1557.136050] mems_allowed=0-1 [ 1557.158612] (UME) 12*64kB [ 1557.196815] systemd-journald[18443]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1557.223474] Node 0 DMA free:11080kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1557.223495] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1557.223515] Node 0 DMA32 free:344464kB min:36200kB low:45248kB high:54296kB active_anon:57528kB inactive_anon:120868kB active_file:2116kB inactive_file:6652kB unevictable:0kB writepending:28kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7712kB pagetables:3268kB bounce:0kB free_pcp:696kB local_pcp:480kB free_cma:0kB [ 1557.223534] lowmem_reserve[]: 0 0 0 0 0 [ 1557.223550] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1557.223570] lowmem_reserve[]: [ 1557.237280] lowmem_reserve[]: [ 1557.244787] 0 pages cma reserved [ 1557.292908] CPU: 1 PID: 18441 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1557.308074] 0 [ 1557.309486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1557.309491] Call Trace: [ 1557.309509] dump_stack+0x1b2/0x281 [ 1557.309522] warn_alloc.cold+0x96/0x1cc [ 1557.309533] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1557.309544] ? zone_watermark_ok_safe+0x220/0x220 [ 1557.309569] __alloc_pages_nodemask+0x2127/0x2720 [ 1557.335311] (UM) [ 1557.338235] ? lock_acquire+0x170/0x3f0 [ 1557.338252] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1557.341399] 0*128kB [ 1557.344694] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1557.344709] ? __mutex_unlock_slowpath+0x75/0x770 [ 1557.352620] 0 [ 1557.354358] alloc_pages_current+0x155/0x260 [ 1557.354369] ion_page_pool_alloc+0x118/0x1b0 [ 1557.354379] ion_system_heap_allocate+0x133/0x8c0 [ 1557.363862] 0*256kB [ 1557.366403] ? ion_alloc+0x187/0x810 [ 1557.366426] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1557.366436] ? ion_system_contig_heap_create+0x130/0x130 [ 1557.370090] 0*512kB [ 1557.374014] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1557.374025] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1557.374036] ion_alloc+0x204/0x810 [ 1557.379154] 0*1024kB [ 1557.383971] ? ion_dma_buf_release+0x40/0x40 [ 1557.383985] ? __might_fault+0x177/0x1b0 [ 1557.383996] ion_ioctl+0xea/0x1f0 [ 1557.384005] ? ion_query_heaps+0x360/0x360 [ 1557.388859] 0 [ 1557.390881] ? ion_query_heaps+0x360/0x360 [ 1557.390892] do_vfs_ioctl+0x75a/0xff0 [ 1557.390904] ? ioctl_preallocate+0x1a0/0x1a0 [ 1557.390917] ? lock_downgrade+0x740/0x740 [ 1557.396203] 0 [ 1557.399919] ? __fget+0x225/0x360 [ 1557.399928] ? do_vfs_ioctl+0xff0/0xff0 [ 1557.399938] ? security_file_ioctl+0x83/0xb0 [ 1557.399948] SyS_ioctl+0x7f/0xb0 [ 1557.404681] 0*2048kB [ 1557.407944] ? do_vfs_ioctl+0xff0/0xff0 [ 1557.407957] do_syscall_64+0x1d5/0x640 [ 1557.407971] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1557.413936] 0 [ 1557.414579] RIP: 0033:0x4665d9 [ 1557.428200] RSP: 002b:00007f5f77a6d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1557.428210] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1557.428216] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1557.428221] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1557.428228] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1557.432809] 0*4096kB [ 1557.434241] R13: 00007ffe82aa5b1f R14: 00007f5f77a6d300 R15: 0000000000022000 [ 1557.472753] 0 [ 1557.477230] Node 1 [ 1557.493089] 0 [ 1557.509543] Normal free:82204kB min:53696kB low:67120kB high:80544kB active_anon:1392kB inactive_anon:36132kB active_file:1016kB inactive_file:4928kB unevictable:0kB writepending:20kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:128kB bounce:0kB free_pcp:1388kB local_pcp:668kB free_cma:0kB [ 1557.560051] 0 [ 1557.592373] = 328880kB [ 1557.629572] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1557.653238] lowmem_reserve[]: 0 0 0 0 0 [ 1557.661102] Node 0 DMA: 6*4kB (U) 25*8kB (UE) 25*16kB (UE) 15*32kB (UE) 4*64kB (UE) 4*128kB (UE) 4*256kB (UE) 4*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 11088kB [ 1557.680578] Node 1 Normal: 2025*4kB (UM) 1299*8kB (UM) 1037*16kB (UM) 1258*32kB (UME) 1*64kB (U) 2*128kB (UM) 14*256kB (U) 6*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 82316kB [ 1557.707628] Node 0 DMA32: 1*4kB (M) 0*8kB 7007*16kB (UE) 2865*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 203796kB [ 1557.731449] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1557.736845] 0 [ 1557.745025] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1557.751704] 0 [ 1557.763181] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1557.783662] Node 1 Normal: 2025*4kB (UM) 1299*8kB (UM) 1037*16kB (UM) 1258*32kB (UME) 1*64kB (U) 2*128kB (UM) 14*256kB (U) 6*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 82316kB [ 1557.800569] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1557.818098] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1557.818521] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1557.859221] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1557.883491] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1557.910688] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1557.911507] lowmem_reserve[]: [ 1557.937112] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1557.938453] 0 [ 1557.942543] 45573 total pagecache pages [ 1557.960289] 45573 total pagecache pages [ 1557.983202] 0 0 0 0 [ 1557.983814] 0 pages in swap cache [ 1557.985583] Node 1 Normal free:66940kB min:53696kB low:67120kB high:80544kB active_anon:1388kB inactive_anon:36132kB active_file:2132kB inactive_file:2188kB unevictable:0kB writepending:12kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:128kB bounce:0kB free_pcp:240kB local_pcp:120kB free_cma:0kB [ 1557.985606] lowmem_reserve[]: [ 1557.993481] Swap cache stats: add 0, delete 0, find 0/0 [ 1558.029197] 0 pages in swap cache [ 1558.032669] Swap cache stats: add 0, delete 0, find 0/0 [ 1558.038026] Free swap = 0kB [ 1558.072730] Total swap = 0kB [ 1558.082372] 2097051 pages RAM [ 1558.088813] 0 0 0 0 0 [ 1558.093214] 0 pages HighMem/MovableOnly [ 1558.098103] Node 0 DMA: 1*4kB (U) 24*8kB (UE) 25*16kB (UE) 15*32kB (UE) 4*64kB (UE) 4*128kB (UE) 4*256kB (UE) 4*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 11060kB [ 1558.107816] 363849 pages reserved [ 1558.122577] Free swap = 0kB [ 1558.126854] 0 pages cma reserved [ 1558.136460] Total swap = 0kB [ 1558.151335] Out of memory: Kill process 7960 (syz-fuzzer) score 6 or sacrifice child [ 1558.161301] 2097051 pages RAM [ 1558.164406] 0 pages HighMem/MovableOnly [ 1558.166482] Node 0 [ 1558.168366] 363849 pages reserved [ 1558.168373] DMA32: 949*4kB (ME) 241*8kB (M) 62*16kB (UME) 444*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20924kB [ 1558.179246] Killed process 17936 (syz-executor.1) total-vm:84924kB, anon-rss:68kB, file-rss:0kB, shmem-rss:0kB [ 1558.211428] 0 pages cma reserved [ 1558.263919] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB 20:08:09 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x7fffffff, 0x23}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, 0x0, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000080)=0x1) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x4, 0xcf, 0x7ff, 0x8, 0x0, 0x1, 0xb51, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x40) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000001480)={'syztnl1\x00', &(0x7f0000001400)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x1f, 0xffff0000, 0x43, @mcast1, @loopback, 0x20, 0x10, 0x2, 0x1}}) 20:08:09 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x2}, 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1d, 0xce, 0x40, 0x34, 0x562, r1, 0x64404327, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x4}, 0x40) r2 = syz_open_dev$rtc(&(0x7f00000001c0), 0xfff, 0x20803) ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x793) r3 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000180), 0x248041, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000000)={0x80000002, 0x11, 0x1}) [ 1558.330102] Node 1 Normal: 2*4kB (UM) 0*8kB 1*16kB (U) 25*32kB (UME) 8*64kB (UM) 2*128kB (UM) 15*256kB (UM) 6*512kB (U) 383*1024kB (U) 4*2048kB (U) 0*4096kB = 408888kB [ 1558.417308] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1558.459186] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1558.479747] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1558.510901] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1558.540139] 44561 total pagecache pages [ 1558.557638] 0 pages in swap cache [ 1558.570342] Swap cache stats: add 0, delete 0, find 0/0 [ 1558.587743] Free swap = 0kB [ 1558.597410] Total swap = 0kB [ 1558.607141] 2097051 pages RAM [ 1558.615872] 0 pages HighMem/MovableOnly [ 1558.628609] 363849 pages reserved [ 1558.639194] 0 pages cma reserved [ 1559.808032] syz-executor.0 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1559.833202] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1559.838582] CPU: 0 PID: 17615 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1559.846465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1559.855944] Call Trace: [ 1559.858537] dump_stack+0x1b2/0x281 [ 1559.862183] dump_header+0x178/0x82f [ 1559.865906] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1559.869105] syz-executor.1: page allocation failure: order:0 [ 1559.871020] ? ___ratelimit+0x2cd/0x530 [ 1559.871035] oom_kill_process.cold+0x10/0xa40 [ 1559.876822] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1559.880790] out_of_memory+0xe3e/0x1190 [ 1559.880802] ? oom_killer_disable+0x1c0/0x1c0 [ 1559.880811] ? mutex_trylock+0x152/0x1a0 [ 1559.880825] __alloc_pages_nodemask+0x23e1/0x2720 [ 1559.880843] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1559.880871] alloc_pages_current+0x155/0x260 [ 1559.889059] (null) [ 1559.892557] filemap_fault+0x11a1/0x1ad0 [ 1559.896601] syz-executor.1 cpuset= [ 1559.901095] ext4_filemap_fault+0x84/0xb0 [ 1559.901105] __do_fault+0xfa/0x380 [ 1559.901114] __handle_mm_fault+0x2497/0x4620 [ 1559.901123] ? vm_insert_page+0x7c0/0x7c0 [ 1559.901130] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 1559.901137] ? nanosleep_copyout+0x100/0x100 [ 1559.901153] ? mark_held_locks+0xa6/0xf0 [ 1559.905226] / [ 1559.910022] handle_mm_fault+0x455/0x9c0 [ 1559.922005] mems_allowed=0-1 [ 1559.925426] __do_page_fault+0x549/0xad0 [ 1559.971090] ? spurious_fault+0x640/0x640 [ 1559.975247] ? do_page_fault+0x60/0x500 [ 1559.979209] ? page_fault+0x2f/0x50 [ 1559.982827] page_fault+0x45/0x50 [ 1559.986264] RIP: 17cb87:0x9 [ 1559.989180] RSP: 0009:00007ffd8a8e41fc EFLAGS: 00000032 [ 1559.995057] CPU: 1 PID: 18429 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1560.000932] syz-executor.0: [ 1560.008395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1560.008403] page allocation failure: order:4 [ 1560.011397] Call Trace: [ 1560.011417] dump_stack+0x1b2/0x281 [ 1560.011431] warn_alloc.cold+0x96/0x1cc [ 1560.032902] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1560.035336] ? zone_watermark_ok_safe+0x220/0x220 [ 1560.035348] ? usleep_range+0x130/0x130 [ 1560.042978] syz-executor.0 cpuset= [ 1560.047800] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1560.051777] / [ 1560.055278] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1560.060410] mems_allowed=0-1 [ 1560.062111] ? run_timer_softirq+0x5a0/0x5a0 [ 1560.074586] __alloc_pages_nodemask+0x2127/0x2720 [ 1560.079424] ? lock_acquire+0x170/0x3f0 [ 1560.083390] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1560.088217] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1560.092700] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1560.098153] alloc_pages_current+0x155/0x260 [ 1560.102545] ion_page_pool_alloc+0x118/0x1b0 [ 1560.106935] ion_system_heap_allocate+0x133/0x8c0 [ 1560.111760] ? _raw_spin_unlock+0x29/0x40 [ 1560.115887] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1560.120935] ? ion_system_contig_heap_create+0x130/0x130 [ 1560.126381] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1560.129008] Mem-Info: [ 1560.131383] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1560.133787] active_anon:15137 inactive_anon:41283 isolated_anon:0 [ 1560.133787] active_file:12 inactive_file:12 isolated_file:0 [ 1560.133787] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1560.133787] slab_reclaimable:11891 slab_unreclaimable:118280 [ 1560.133787] mapped:43904 shmem:41755 pagetables:730 bounce:0 [ 1560.133787] free:14071 free_pcp:0 free_cma:0 [ 1560.138654] ion_alloc+0x27a/0x810 [ 1560.175310] ? ion_dma_buf_release+0x40/0x40 [ 1560.179706] ? __might_fault+0x177/0x1b0 [ 1560.183750] ion_ioctl+0xea/0x1f0 [ 1560.187198] ? ion_query_heaps+0x360/0x360 [ 1560.191432] ? ion_query_heaps+0x360/0x360 [ 1560.195699] do_vfs_ioctl+0x75a/0xff0 [ 1560.199484] ? ioctl_preallocate+0x1a0/0x1a0 [ 1560.203872] ? lock_downgrade+0x740/0x740 [ 1560.208002] ? __fget+0x225/0x360 [ 1560.209010] Node 0 active_anon:59156kB inactive_anon:129004kB active_file:20kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175616kB dirty:0kB writeback:0kB shmem:130620kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1560.211455] ? do_vfs_ioctl+0xff0/0xff0 [ 1560.243245] ? security_file_ioctl+0x83/0xb0 [ 1560.247987] SyS_ioctl+0x7f/0xb0 [ 1560.251338] ? do_vfs_ioctl+0xff0/0xff0 [ 1560.255298] do_syscall_64+0x1d5/0x640 [ 1560.259174] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1560.264345] RIP: 0033:0x4665d9 [ 1560.267519] RSP: 002b:00007fe35e0b7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1560.275296] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1560.279005] Node 1 active_anon:1392kB inactive_anon:36128kB active_file:28kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:36400kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1560.282666] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1560.282673] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1560.324905] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1560.332156] R13: 00007ffefdeab7bf R14: 00007fe35e0b7300 R15: 0000000000022000 [ 1560.338988] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1560.352205] warn_alloc_show_mem: 2 callbacks suppressed [ 1560.352208] Mem-Info: [ 1560.374414] CPU: 0 PID: 18450 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1560.382313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1560.382526] active_anon:15137 inactive_anon:41283 isolated_anon:0 [ 1560.382526] active_file:12 inactive_file:12 isolated_file:0 [ 1560.382526] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1560.382526] slab_reclaimable:11891 slab_unreclaimable:118280 [ 1560.382526] mapped:43904 shmem:41755 pagetables:730 bounce:0 [ 1560.382526] free:14071 free_pcp:0 free_cma:0 [ 1560.391763] Call Trace: [ 1560.391781] dump_stack+0x1b2/0x281 [ 1560.391794] warn_alloc.cold+0x96/0x1cc [ 1560.391824] ? zone_watermark_ok_safe+0x220/0x220 [ 1560.391846] __alloc_pages_nodemask+0x2127/0x2720 [ 1560.391863] ? lock_acquire+0x170/0x3f0 [ 1560.391877] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1560.391892] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1560.391904] ? __mutex_unlock_slowpath+0x75/0x770 [ 1560.391919] alloc_pages_current+0x155/0x260 [ 1560.391931] ion_page_pool_alloc+0x118/0x1b0 [ 1560.391940] ion_system_heap_allocate+0x133/0x8c0 [ 1560.391950] ? ion_alloc+0x187/0x810 [ 1560.391959] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1560.391967] ? ion_system_contig_heap_create+0x130/0x130 [ 1560.391976] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1560.391985] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1560.392004] ion_alloc+0x204/0x810 [ 1560.433988] Node 0 active_anon:59156kB inactive_anon:129004kB active_file:20kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175616kB dirty:0kB writeback:0kB shmem:130620kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1560.435299] ? ion_dma_buf_release+0x40/0x40 [ 1560.443631] Node 1 active_anon:1392kB inactive_anon:36128kB active_file:28kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:36400kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1560.445146] ? __might_fault+0x177/0x1b0 [ 1560.454531] Node 0 [ 1560.459471] ion_ioctl+0xea/0x1f0 [ 1560.459481] ? ion_query_heaps+0x360/0x360 [ 1560.459492] ? ion_query_heaps+0x360/0x360 [ 1560.459502] do_vfs_ioctl+0x75a/0xff0 [ 1560.459512] ? ioctl_preallocate+0x1a0/0x1a0 [ 1560.459522] ? lock_downgrade+0x740/0x740 [ 1560.459535] ? __fget+0x225/0x360 [ 1560.459543] ? do_vfs_ioctl+0xff0/0xff0 [ 1560.459553] ? security_file_ioctl+0x83/0xb0 [ 1560.459563] SyS_ioctl+0x7f/0xb0 [ 1560.467787] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1560.468780] ? do_vfs_ioctl+0xff0/0xff0 [ 1560.478498] lowmem_reserve[]: [ 1560.481705] do_syscall_64+0x1d5/0x640 [ 1560.481720] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1560.481728] RIP: 0033:0x4665d9 [ 1560.481732] RSP: 002b:00007f37127a1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1560.481742] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1560.481748] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1560.481753] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1560.481758] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1560.481763] R13: 00007ffd8a8e3f3f R14: 00007f37127a1300 R15: 0000000000022000 [ 1560.492717] lowmem_reserve[]: [ 1560.498641] 0 [ 1560.513726] 0 [ 1560.544579] 2717 [ 1560.571027] 2717 [ 1560.582943] 2718 [ 1560.587852] 2718 [ 1560.587910] 2718 [ 1560.594328] 2718 [ 1560.606008] 2718 [ 1560.612105] 2718 [ 1560.658809] Node 0 [ 1560.675399] Node 0 [ 1560.683955] DMA32 free:18256kB min:36200kB low:45248kB high:54296kB active_anon:59156kB inactive_anon:129004kB active_file:20kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7488kB pagetables:2792kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1560.697955] DMA32 free:18256kB min:36200kB low:45248kB high:54296kB active_anon:59156kB inactive_anon:129004kB active_file:20kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7488kB pagetables:2792kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1560.706180] lowmem_reserve[]: [ 1560.715966] lowmem_reserve[]: [ 1560.717765] 0 0 [ 1560.723950] 0 [ 1560.727623] 0 [ 1560.728503] 0 [ 1560.730775] 0 0 [ 1560.730786] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1560.730804] lowmem_reserve[]: 0 0 0 0 0 [ 1560.730822] Node 1 Normal free:27068kB min:53696kB low:67120kB high:80544kB active_anon:1392kB inactive_anon:36128kB active_file:28kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:128kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1560.730842] lowmem_reserve[]: [ 1560.771477] 0 [ 1560.791371] 0 [ 1560.806188] 0 [ 1560.832317] 0 [ 1560.845325] 0 [ 1560.864741] 0 0 0 [ 1560.875668] Node 0 DMA: 0*4kB 2*8kB (UE) 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 4*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10960kB [ 1560.898122] Node 0 DMA32: 950*4kB (ME) 255*8kB (UME) 69*16kB (ME) 26*32kB (ME) 14*64kB (UME) 3*128kB (M) 34*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 18272kB [ 1560.903063] Node 0 [ 1560.917342] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1560.926427] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1560.934474] Node 1 Normal: 25*4kB (UM) 17*8kB (UM) 20*16kB (UM) 10*32kB (ME) 6*64kB (UM) 4*128kB (M) 3*256kB (UM) 46*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 27116kB [ 1560.966311] lowmem_reserve[]: [ 1560.987460] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1560.990237] 0 [ 1560.990669] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1561.008659] 0 0 0 0 [ 1561.012388] Node 1 Normal free:27068kB min:53696kB low:67120kB high:80544kB active_anon:1392kB inactive_anon:36128kB active_file:28kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:128kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1561.017083] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1561.050136] lowmem_reserve[]: 0 0 0 0 0 [ 1561.054164] Node 0 DMA: 0*4kB 2*8kB (UE) 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 4*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10960kB [ 1561.058519] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1561.084881] 41779 total pagecache pages [ 1561.088873] 0 pages in swap cache [ 1561.089171] Node 0 DMA32: 966*4kB (UME) 263*8kB (UME) 71*16kB (UME) 26*32kB (ME) 14*64kB (UME) 3*128kB (M) 34*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 18432kB [ 1561.093167] Swap cache stats: add 0, delete 0, find 0/0 [ 1561.117400] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1561.120704] Free swap = 0kB [ 1561.132092] Node 1 Normal: 26*4kB (UM) 17*8kB (UM) 20*16kB (UM) 10*32kB (ME) 6*64kB (UM) 4*128kB (M) 3*256kB (UM) 46*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 27120kB [ 1561.134834] Total swap = 0kB [ 1561.155501] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1561.158114] 2097051 pages RAM [ 1561.167500] 0 pages HighMem/MovableOnly [ 1561.168171] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1561.178402] 363849 pages reserved [ 1561.184183] 0 pages cma reserved [ 1561.187544] Out of memory (oom_kill_allocating_task): Kill process 17615 (syz-executor.0) score 0 or sacrifice child [ 1561.189318] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1561.205238] Killed process 18450 (syz-executor.0) total-vm:93384kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 1561.226939] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1561.228050] oom_reaper: reaped process 18450 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1561.240978] 41779 total pagecache pages [ 1561.256061] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1561.283937] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1561.288851] CPU: 0 PID: 7966 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 1561.296489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1561.305841] Call Trace: [ 1561.308438] dump_stack+0x1b2/0x281 [ 1561.312062] dump_header+0x178/0x82f [ 1561.315776] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1561.320875] ? ___ratelimit+0x2cd/0x530 [ 1561.324855] oom_kill_process.cold+0x10/0xa40 [ 1561.329398] out_of_memory+0xe3e/0x1190 [ 1561.333373] ? oom_killer_disable+0x1c0/0x1c0 [ 1561.337858] ? mutex_trylock+0x152/0x1a0 [ 1561.341920] __alloc_pages_nodemask+0x23e1/0x2720 [ 1561.346774] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1561.351630] alloc_pages_current+0x155/0x260 [ 1561.356218] filemap_fault+0x11a1/0x1ad0 [ 1561.358993] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1561.360305] ext4_filemap_fault+0x84/0xb0 [ 1561.360316] __do_fault+0xfa/0x380 [ 1561.379227] __handle_mm_fault+0x2497/0x4620 [ 1561.383646] ? vm_insert_page+0x7c0/0x7c0 [ 1561.387804] ? mark_held_locks+0xa6/0xf0 [ 1561.391863] handle_mm_fault+0x455/0x9c0 [ 1561.392284] (null) [ 1561.395951] __do_page_fault+0x549/0xad0 [ 1561.398088] syz-executor.0 cpuset= [ 1561.402132] ? spurious_fault+0x640/0x640 [ 1561.402139] ? do_page_fault+0x60/0x500 [ 1561.402147] ? page_fault+0x2f/0x50 [ 1561.402154] page_fault+0x45/0x50 [ 1561.402160] RIP: aad80:0x947847 [ 1561.402164] RSP: 0158:000000c00003be40 EFLAGS: 00000003 [ 1561.410127] 0 pages in swap cache [ 1561.410132] Swap cache stats: add 0, delete 0, find 0/0 [ 1561.410136] Free swap = 0kB [ 1561.410139] Total swap = 0kB [ 1561.410145] 2097051 pages RAM [ 1561.410148] 0 pages HighMem/MovableOnly [ 1561.410151] 363849 pages reserved [ 1561.410154] 0 pages cma reserved [ 1561.467801] / mems_allowed=0-1 [ 1561.472097] CPU: 1 PID: 18450 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1561.480155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1561.489505] Call Trace: [ 1561.492098] dump_stack+0x1b2/0x281 [ 1561.495773] warn_alloc.cold+0x96/0x1cc [ 1561.499746] ? zone_watermark_ok_safe+0x220/0x220 [ 1561.504595] ? usleep_range+0x130/0x130 [ 1561.508567] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1561.513671] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1561.518690] ? run_timer_softirq+0x5a0/0x5a0 [ 1561.523102] __alloc_pages_nodemask+0x2127/0x2720 [ 1561.527959] ? lock_acquire+0x170/0x3f0 [ 1561.532027] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1561.536871] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1561.541375] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1561.546838] alloc_pages_current+0x155/0x260 [ 1561.551337] ion_page_pool_alloc+0x118/0x1b0 [ 1561.555745] ion_system_heap_allocate+0x133/0x8c0 [ 1561.560583] ? ion_alloc+0x187/0x810 [ 1561.564296] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1561.569787] ? ion_system_contig_heap_create+0x130/0x130 [ 1561.575247] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1561.580263] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1561.585102] ion_alloc+0x204/0x810 [ 1561.588650] ? ion_dma_buf_release+0x40/0x40 [ 1561.593057] ? __might_fault+0x177/0x1b0 [ 1561.597114] ion_ioctl+0xea/0x1f0 [ 1561.600565] ? ion_query_heaps+0x360/0x360 [ 1561.604803] ? ion_query_heaps+0x360/0x360 [ 1561.609033] do_vfs_ioctl+0x75a/0xff0 [ 1561.612837] ? ioctl_preallocate+0x1a0/0x1a0 [ 1561.617237] ? lock_downgrade+0x740/0x740 [ 1561.621383] ? __fget+0x225/0x360 [ 1561.624828] ? do_vfs_ioctl+0xff0/0xff0 [ 1561.628801] ? security_file_ioctl+0x83/0xb0 [ 1561.633201] SyS_ioctl+0x7f/0xb0 [ 1561.636561] ? do_vfs_ioctl+0xff0/0xff0 [ 1561.640546] do_syscall_64+0x1d5/0x640 [ 1561.644434] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1561.649712] RIP: 0033:0x4665d9 [ 1561.652905] RSP: 002b:00007f37127a1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1561.660841] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1561.668112] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1561.675385] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1561.682669] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1561.690205] R13: 00007ffd8a8e3f3f R14: 00007f37127a1300 R15: 0000000000022000 [ 1561.710848] warn_alloc_show_mem: 1 callbacks suppressed [ 1561.710852] Mem-Info: [ 1561.726130] Mem-Info: [ 1561.730882] active_anon:14606 inactive_anon:41283 isolated_anon:0 [ 1561.730882] active_file:12 inactive_file:1062 isolated_file:0 [ 1561.730882] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1561.730882] slab_reclaimable:11891 slab_unreclaimable:118254 [ 1561.730882] mapped:44579 shmem:41755 pagetables:730 bounce:0 [ 1561.730882] free:87801 free_pcp:541 free_cma:0 [ 1561.731788] active_anon:14606 inactive_anon:41283 isolated_anon:0 [ 1561.731788] active_file:12 inactive_file:1087 isolated_file:0 [ 1561.731788] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1561.731788] slab_reclaimable:11891 slab_unreclaimable:118254 [ 1561.731788] mapped:44579 shmem:41755 pagetables:730 bounce:0 [ 1561.731788] free:87825 free_pcp:540 free_cma:0 [ 1561.808937] Node 0 active_anon:57032kB inactive_anon:129004kB active_file:20kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175616kB dirty:0kB writeback:0kB shmem:130620kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1561.859120] Node 1 active_anon:1392kB inactive_anon:36128kB active_file:1028kB inactive_file:4768kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4400kB dirty:0kB writeback:0kB shmem:36400kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1561.918929] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1561.958949] Node 0 active_anon:57016kB inactive_anon:129004kB active_file:28kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175664kB dirty:4kB writeback:0kB shmem:130620kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1561.989018] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1561.994076] Node 0 DMA32 free:38152kB min:36200kB low:45248kB high:54296kB active_anon:57016kB inactive_anon:129004kB active_file:28kB inactive_file:16kB unevictable:0kB writepending:4kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7488kB pagetables:2788kB bounce:0kB free_pcp:752kB local_pcp:624kB free_cma:0kB [ 1562.048967] Node 1 active_anon:1464kB inactive_anon:36128kB active_file:1124kB inactive_file:5084kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4568kB dirty:108kB writeback:0kB shmem:36400kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1562.110199] lowmem_reserve[]: 0 0 0 0 0 [ 1562.114208] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1562.139824] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1562.169966] lowmem_reserve[]: 0 0 0 0 0 [ 1562.174365] Node 1 Normal free:53452kB min:53696kB low:67120kB high:80544kB active_anon:1464kB inactive_anon:36128kB active_file:2132kB inactive_file:2376kB unevictable:0kB writepending:108kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:128kB bounce:0kB free_pcp:672kB local_pcp:556kB free_cma:0kB [ 1562.203624] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1562.203793] Node 0 DMA32 free:36276kB min:36200kB low:45248kB high:54296kB active_anon:57016kB inactive_anon:129004kB active_file:28kB inactive_file:16kB unevictable:0kB writepending:4kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7488kB pagetables:2788kB bounce:0kB free_pcp:236kB local_pcp:0kB free_cma:0kB [ 1562.203813] lowmem_reserve[]: 0 0 0 0 0 [ 1562.203833] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1562.203851] lowmem_reserve[]: 0 0 [ 1562.213122] lowmem_reserve[]: 0 0 0 0 0 [ 1562.279778] Node 0 DMA: 0*4kB 2*8kB (UE) 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 4*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10960kB [ 1562.297052] 0 0 0 [ 1562.305951] Node 1 Normal free:53748kB min:53696kB low:67120kB high:80544kB active_anon:1464kB inactive_anon:36128kB active_file:1012kB inactive_file:1296kB unevictable:0kB writepending:108kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:128kB bounce:0kB free_pcp:1108kB local_pcp:708kB free_cma:0kB [ 1562.306815] Node 0 DMA32: 921*4kB (UME) 250*8kB (ME) 65*16kB (ME) 26*32kB (UME) 175*64kB (UME) 63*128kB (UM) 26*256kB (UM) 1*512kB (M) 0*1024kB 1*2048kB (M) 0*4096kB = 36036kB [ 1562.353928] lowmem_reserve[]: 0 0 0 0 0 [ 1562.358726] Node 0 [ 1562.361185] Node 0 [ 1562.362711] Normal: [ 1562.363606] DMA: [ 1562.365729] 0*4kB [ 1562.368329] 0*4kB [ 1562.371961] 0*8kB [ 1562.372553] 2*8kB [ 1562.374405] 0*16kB [ 1562.376826] (UE) [ 1562.378680] 0*32kB [ 1562.381244] 2*16kB [ 1562.384717] 0*64kB [ 1562.385619] (UE) [ 1562.387467] 0*128kB [ 1562.390045] 1*32kB [ 1562.393598] 0*256kB [ 1562.394394] (E) [ 1562.396400] 0*512kB [ 1562.399178] 2*64kB [ 1562.402952] 0*1024kB [ 1562.403359] (UE) [ 1562.405243] 0*2048kB [ 1562.407847] 2*128kB (UE) 1*256kB (E) 4*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10960kB [ 1562.414839] 0*4096kB [ 1562.423717] Node 0 DMA32: 950*4kB (ME) 250*8kB (ME) 65*16kB (ME) 26*32kB (UME) 175*64kB (UME) 63*128kB (UM) 26*256kB (UM) 1*512kB (M) 0*1024kB 1*2048kB (M) 0*4096kB = 36152kB [ 1562.438897] = 0kB [ 1562.444478] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB [ 1562.446303] Node 1 [ 1562.447244] 0*256kB [ 1562.456214] Normal: 1*4kB (M) 5*8kB (UM) 33*16kB (M) 27*32kB (ME) 14*64kB (M) 7*128kB (UM) 4*256kB (UM) 46*512kB (UM) 21*1024kB (UM) 2*2048kB (U) 0*4096kB = 53404kB [ 1562.463729] 0*512kB [ 1562.473787] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1562.477919] 0*1024kB [ 1562.485139] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1562.485147] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1562.487848] 0*2048kB [ 1562.496248] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1562.505160] 0*4096kB [ 1562.511005] 41808 total pagecache pages [ 1562.516222] = 0kB [ 1562.518612] 0 pages in swap cache [ 1562.522779] Node 1 Normal: 1*4kB (M) 5*8kB (UM) 33*16kB (M) 27*32kB (ME) [ 1562.525965] Swap cache stats: add 0, delete 0, find 0/0 [ 1562.528304] 14*64kB (M) [ 1562.538135] Free swap = 0kB [ 1562.540719] 7*128kB [ 1562.544477] Total swap = 0kB [ 1562.546335] (UM) [ 1562.548684] 2097051 pages RAM [ 1562.551734] 4*256kB (UM) 46*512kB (UM) 21*1024kB (UM) 2*2048kB (U) 0*4096kB = 53404kB [ 1562.551769] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1562.551775] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1562.551781] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1562.551786] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1562.551791] 41808 total pagecache pages [ 1562.556510] 0 pages HighMem/MovableOnly [ 1562.557090] 0 pages in swap cache [ 1562.575522] 363849 pages reserved [ 1562.594364] Swap cache stats: add 0, delete 0, find 0/0 [ 1562.603917] 0 pages cma reserved [ 1562.604438] Free swap = 0kB [ 1562.608392] Out of memory (oom_kill_allocating_task): Kill process 7966 (syz-fuzzer) score 0 or sacrifice child [ 1562.611866] Total swap = 0kB [ 1562.611872] 2097051 pages RAM [ 1562.611875] 0 pages HighMem/MovableOnly [ 1562.611878] 363849 pages reserved [ 1562.611881] 0 pages cma reserved [ 1562.654981] Killed process 17110 (syz-executor.3) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1562.685213] oom_reaper: reaped process 17110 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1562.895145] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1562.905464] oom_reaper: reaped process 18441 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1562.932028] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1562.937296] CPU: 0 PID: 18450 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1562.945260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1562.950811] systemd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1562.954605] Call Trace: [ 1562.954606] (null), order=0, oom_score_adj=0 [ 1562.964046] dump_stack+0x1b2/0x281 [ 1562.964059] warn_alloc.cold+0x96/0x1cc [ 1562.964069] ? zone_watermark_ok_safe+0x220/0x220 [ 1562.964088] __alloc_pages_nodemask+0x2127/0x2720 [ 1562.964106] ? lock_acquire+0x170/0x3f0 [ 1562.984411] systemd cpuset= [ 1562.988407] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1563.000146] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1563.004195] / mems_allowed=0-1 [ 1563.005868] ? __mutex_unlock_slowpath+0x75/0x770 [ 1563.005880] ? __list_del_entry_valid+0xbc/0xf0 [ 1563.018597] alloc_pages_current+0x155/0x260 [ 1563.023006] ion_page_pool_alloc+0x118/0x1b0 [ 1563.027399] ion_system_heap_allocate+0x133/0x8c0 [ 1563.032230] ? _raw_spin_unlock+0x29/0x40 [ 1563.036377] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1563.038868] syz-executor.4: page allocation failure: order:0 [ 1563.041291] ? ion_system_contig_heap_create+0x130/0x130 [ 1563.041303] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1563.047107] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1563.052559] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1563.052568] ion_alloc+0x27a/0x810 [ 1563.052581] ? ion_dma_buf_release+0x40/0x40 [ 1563.052593] ? __might_fault+0x177/0x1b0 [ 1563.052604] ion_ioctl+0xea/0x1f0 [ 1563.052611] ? ion_query_heaps+0x360/0x360 [ 1563.052621] ? ion_query_heaps+0x360/0x360 [ 1563.052632] do_vfs_ioctl+0x75a/0xff0 [ 1563.069580] (null) [ 1563.073242] ? ioctl_preallocate+0x1a0/0x1a0 [ 1563.077654] syz-executor.4 cpuset= [ 1563.081696] ? lock_downgrade+0x740/0x740 [ 1563.081709] ? __fget+0x225/0x360 [ 1563.081716] ? do_vfs_ioctl+0xff0/0xff0 [ 1563.081727] ? security_file_ioctl+0x83/0xb0 [ 1563.081736] SyS_ioctl+0x7f/0xb0 [ 1563.081743] ? do_vfs_ioctl+0xff0/0xff0 [ 1563.081753] do_syscall_64+0x1d5/0x640 [ 1563.081768] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1563.110585] / [ 1563.112017] RIP: 0033:0x4665d9 [ 1563.115463] mems_allowed=0-1 [ 1563.119420] RSP: 002b:00007f37127a1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1563.119429] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1563.119434] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1563.119438] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1563.119442] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1563.119447] R13: 00007ffd8a8e3f3f R14: 00007f37127a1300 R15: 0000000000022000 [ 1563.136950] Mem-Info: [ 1563.144177] CPU: 1 PID: 1 Comm: systemd Not tainted 4.14.232-syzkaller #0 [ 1563.153207] active_anon:14582 inactive_anon:41283 isolated_anon:0 [ 1563.153207] active_file:16 inactive_file:38 isolated_file:0 [ 1563.153207] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1563.153207] slab_reclaimable:11888 slab_unreclaimable:117768 [ 1563.153207] mapped:35230 shmem:41755 pagetables:658 bounce:0 [ 1563.153207] free:13889 free_pcp:0 free_cma:0 [ 1563.156436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1563.163757] Node 0 active_anon:56872kB inactive_anon:129004kB active_file:40kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:140920kB dirty:0kB writeback:0kB shmem:130620kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1563.171040] Call Trace: [ 1563.171059] dump_stack+0x1b2/0x281 [ 1563.171076] dump_header+0x178/0x82f [ 1563.178337] Node 1 active_anon:1456kB inactive_anon:36128kB active_file:24kB inactive_file:100kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:36400kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1563.185587] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1563.185596] ? ___ratelimit+0x2cd/0x530 [ 1563.185606] oom_kill_process.cold+0x10/0xa40 [ 1563.192873] Node 0 [ 1563.195366] ? lock_downgrade+0x740/0x740 [ 1563.202560] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1563.235941] out_of_memory+0x2dc/0x1190 [ 1563.235955] ? oom_killer_disable+0x1c0/0x1c0 [ 1563.235963] ? mutex_trylock+0x152/0x1a0 [ 1563.235975] __alloc_pages_nodemask+0x23e1/0x2720 [ 1563.245565] lowmem_reserve[]: [ 1563.273514] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1563.273536] alloc_pages_current+0x155/0x260 [ 1563.276096] 0 [ 1563.279793] filemap_fault+0x11a1/0x1ad0 [ 1563.279814] ext4_filemap_fault+0x84/0xb0 [ 1563.283499] 2717 [ 1563.310469] __do_fault+0xfa/0x380 [ 1563.310479] __handle_mm_fault+0x2497/0x4620 [ 1563.310488] ? vm_insert_page+0x7c0/0x7c0 [ 1563.310505] ? mark_held_locks+0xa6/0xf0 [ 1563.315577] 2718 [ 1563.319536] handle_mm_fault+0x455/0x9c0 [ 1563.319548] __do_page_fault+0x549/0xad0 [ 1563.319560] ? spurious_fault+0x640/0x640 [ 1563.324201] 2718 [ 1563.326264] ? do_page_fault+0x60/0x500 [ 1563.330408] 2718 [ 1563.355989] ? page_fault+0x2f/0x50 [ 1563.355996] page_fault+0x45/0x50 [ 1563.356003] RIP: 0001:0x1 [ 1563.356007] RSP: 96cdd080:00007ffeef432fc0 EFLAGS: 7ffeef432d00 [ 1563.361432] CPU: 1 PID: 18441 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1563.399019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1563.399023] Call Trace: [ 1563.399042] dump_stack+0x1b2/0x281 [ 1563.399057] warn_alloc.cold+0x96/0x1cc [ 1563.402602] Node 0 [ 1563.406995] ? zone_watermark_ok_safe+0x220/0x220 [ 1563.411150] DMA32 free:18148kB min:36200kB low:45248kB high:54296kB active_anon:56872kB inactive_anon:129004kB active_file:40kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7360kB pagetables:2504kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1563.415185] ? usleep_range+0x130/0x130 [ 1563.417219] lowmem_reserve[]: [ 1563.421277] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1563.421289] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1563.421297] ? run_timer_softirq+0x5a0/0x5a0 [ 1563.421314] __alloc_pages_nodemask+0x2127/0x2720 [ 1563.425349] 0 [ 1563.429483] ? lock_acquire+0x170/0x3f0 [ 1563.429498] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1563.431534] 0 [ 1563.435491] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1563.437544] 0 [ 1563.441156] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1563.441175] alloc_pages_current+0x155/0x260 [ 1563.444598] 0 [ 1563.447426] ion_page_pool_alloc+0x118/0x1b0 [ 1563.453471] 0 [ 1563.461317] ion_system_heap_allocate+0x133/0x8c0 [ 1563.461326] ? ion_alloc+0x187/0x810 [ 1563.461337] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1563.473297] ? ion_system_contig_heap_create+0x130/0x130 [ 1563.476902] Node 0 [ 1563.480868] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1563.480880] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1563.480891] ion_alloc+0x204/0x810 [ 1563.483116] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1563.487934] ? ion_dma_buf_release+0x40/0x40 [ 1563.516334] lowmem_reserve[]: [ 1563.520272] ? __might_fault+0x177/0x1b0 [ 1563.520286] ion_ioctl+0xea/0x1f0 [ 1563.520299] ? ion_query_heaps+0x360/0x360 [ 1563.523391] 0 [ 1563.528596] ? ion_query_heaps+0x360/0x360 [ 1563.533626] 0 [ 1563.537988] do_vfs_ioctl+0x75a/0xff0 [ 1563.542823] 0 [ 1563.544615] ? ioctl_preallocate+0x1a0/0x1a0 [ 1563.548565] 0 [ 1563.553417] ? lock_downgrade+0x740/0x740 [ 1563.553430] ? __fget+0x225/0x360 [ 1563.553438] ? do_vfs_ioctl+0xff0/0xff0 [ 1563.553449] ? security_file_ioctl+0x83/0xb0 [ 1563.555238] 0 [ 1563.559722] SyS_ioctl+0x7f/0xb0 [ 1563.559730] ? do_vfs_ioctl+0xff0/0xff0 [ 1563.559740] do_syscall_64+0x1d5/0x640 [ 1563.559755] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1563.566976] RIP: 0033:0x4665d9 [ 1563.571382] Node 1 [ 1563.573146] RSP: 002b:00007f5f77a6d188 EFLAGS: 00000246 [ 1563.577539] Normal free:26448kB min:53696kB low:67120kB high:80544kB active_anon:1456kB inactive_anon:36128kB active_file:24kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:128kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1563.579308] ORIG_RAX: 0000000000000010 [ 1563.579314] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1563.579320] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1563.579325] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1563.579331] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1563.584236] lowmem_reserve[]: [ 1563.587931] R13: 00007ffe82aa5b1f R14: 00007f5f77a6d300 R15: 0000000000022000 [ 1563.593379] 0 [ 1563.603121] Mem-Info: [ 1563.608396] 0 [ 1563.611127] active_anon:14582 inactive_anon:41283 isolated_anon:0 [ 1563.611127] active_file:16 inactive_file:11 isolated_file:0 [ 1563.611127] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1563.611127] slab_reclaimable:11888 slab_unreclaimable:117768 [ 1563.611127] mapped:35230 shmem:41755 pagetables:658 bounce:0 [ 1563.611127] free:13889 free_pcp:1 free_cma:0 [ 1563.611142] Node 0 active_anon:56872kB inactive_anon:129004kB active_file:40kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:140920kB dirty:0kB writeback:0kB shmem:130620kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1563.611155] Node 1 active_anon:1456kB inactive_anon:36128kB active_file:24kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:36400kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1563.611159] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1563.611175] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1563.611193] Node 0 DMA32 free:18148kB min:36200kB low:45248kB high:54296kB active_anon:56872kB inactive_anon:129004kB active_file:40kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7360kB pagetables:2504kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1563.611209] lowmem_reserve[]: 0 0 0 0 0 [ 1563.611228] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1563.611245] lowmem_reserve[]: 0 0 0 0 0 [ 1563.611262] Node 1 Normal free:26448kB min:53696kB low:67120kB high:80544kB active_anon:1456kB inactive_anon:36128kB active_file:24kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:128kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1563.611279] lowmem_reserve[]: 0 0 0 0 0 [ 1563.611295] Node 0 DMA: 0*4kB [ 1563.627583] 0 [ 1563.643984] 2*8kB [ 1563.648490] 0 [ 1563.651970] (UE) 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 4*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10960kB [ 1563.652028] Node 0 DMA32: 776*4kB (UME) 1073*8kB (UME) 343*16kB (UME) 31*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18168kB [ 1563.652083] Node 0 Normal: 0*4kB 0*8kB 0*16kB [ 1563.667024] 0 [ 1563.670549] 0*32kB [ 1563.684366] 0*64kB [ 1563.687108] Node 0 [ 1563.692836] 0*128kB [ 1563.712113] DMA: [ 1563.717329] 0*256kB [ 1563.733893] 0*4kB [ 1563.774516] 0*512kB [ 1563.784147] 2*8kB [ 1563.786132] 0*1024kB [ 1563.792575] (UE) [ 1563.796568] 0*2048kB [ 1563.800702] 2*16kB [ 1563.838773] 0*4096kB [ 1563.891184] (UE) 1*32kB (E) [ 1563.917998] = 0kB [ 1563.978777] 2*64kB [ 1564.062221] Node 1 [ 1564.075266] (UE) [ 1564.100147] Normal: 30*4kB (U) 42*8kB (UM) 352*16kB (UM) 371*32kB (UME) 1287*64kB (UM) 58*128kB (UM) 57*256kB (UM) 37*512kB (U) 2*1024kB (UM) 1*2048kB (M) 0*4096kB = 145384kB [ 1564.105644] 2*128kB (UE) 1*256kB (E) 4*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10960kB [ 1564.134009] Node 0 DMA32: 749*4kB (UME) 1254*8kB (UME) 715*16kB (UME) 644*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 45076kB [ 1564.155522] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1564.155891] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1564.194842] Node 1 Normal: 141*4kB (U) 141*8kB (UM) 457*16kB (U) 469*32kB (UME) 1514*64kB (U) 59*128kB (UM) 88*256kB (UM) 37*512kB (U) 2*1024kB (UM) 1*2048kB (M) 0*4096kB = 174028kB [ 1564.210966] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1564.258218] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1564.267358] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1564.277469] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1564.294542] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1564.309692] 43095 total pagecache pages [ 1564.329512] 0 pages in swap cache [ 1564.333360] Swap cache stats: add 0, delete 0, find 0/0 [ 1564.338867] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1564.338990] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1564.338994] 43169 total pagecache pages [ 1564.339003] 0 pages in swap cache [ 1564.339008] Swap cache stats: add 0, delete 0, find 0/0 [ 1564.339011] Free swap = 0kB [ 1564.339014] Total swap = 0kB [ 1564.339021] 2097051 pages RAM [ 1564.339024] 0 pages HighMem/MovableOnly [ 1564.339027] 363849 pages reserved [ 1564.339030] 0 pages cma reserved [ 1564.408888] Free swap = 0kB [ 1564.412037] Total swap = 0kB [ 1564.415098] 2097051 pages RAM [ 1564.428746] 0 pages HighMem/MovableOnly [ 1564.432774] 363849 pages reserved [ 1564.437019] 0 pages cma reserved [ 1564.451651] Out of memory: Kill process 18435 (syz-executor.2) score 1004 or sacrifice child [ 1564.462347] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1564.478775] Killed process 18437 (syz-executor.2) total-vm:93384kB, anon-rss:156kB, file-rss:34820kB, shmem-rss:0kB [ 1564.503686] batman_adv: batadv0: Removing interface: batadv_slave_0 20:08:15 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x7fffffff, 0x23}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, 0x0, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000080)=0x1) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) 20:08:15 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, r2, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x10, 0x3, @udp='udp:syz0\x00'}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x4000) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x7fffffff, 0x23}) 20:08:15 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x7fffffff, 0x23}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, 0x0, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000080)=0x1) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) [ 1564.525561] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1564.525937] oom_reaper: reaped process 18437 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1564.543609] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1564.585208] device bridge_slave_1 left promiscuous mode [ 1564.594855] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 1564.599140] bridge0: port 2(bridge_slave_1) entered disabled state [ 1564.634622] device bridge_slave_0 left promiscuous mode [ 1564.641664] bridge0: port 1(bridge_slave_0) entered disabled state [ 1564.668913] device veth1_macvtap left promiscuous mode [ 1564.688029] systemd[1]: Started Journal Service. [ 1564.708932] device veth0_macvtap left promiscuous mode [ 1564.714297] device veth1_vlan left promiscuous mode [ 1564.743000] device veth0_vlan left promiscuous mode [ 1564.902628] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1564.951193] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1564.997108] CPU: 0 PID: 18470 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1565.005022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1565.014365] Call Trace: [ 1565.016940] dump_stack+0x1b2/0x281 [ 1565.020554] warn_alloc.cold+0x96/0x1cc [ 1565.024510] ? zone_watermark_ok_safe+0x220/0x220 [ 1565.029340] __alloc_pages_nodemask+0x2127/0x2720 [ 1565.034166] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1565.039168] ? lock_acquire+0x170/0x3f0 [ 1565.043139] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1565.047969] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1565.053451] ? __mutex_unlock_slowpath+0x75/0x770 [ 1565.058277] alloc_pages_current+0x155/0x260 [ 1565.062682] ion_page_pool_alloc+0x118/0x1b0 [ 1565.067070] ion_system_heap_allocate+0x133/0x8c0 [ 1565.071890] ? ion_alloc+0x187/0x810 [ 1565.075582] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1565.081015] ? ion_system_contig_heap_create+0x130/0x130 [ 1565.086458] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1565.091459] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1565.096292] ion_alloc+0x204/0x810 [ 1565.099817] ? ion_dma_buf_release+0x40/0x40 [ 1565.104208] ? __might_fault+0x177/0x1b0 [ 1565.108339] ion_ioctl+0xea/0x1f0 [ 1565.111786] ? ion_query_heaps+0x360/0x360 [ 1565.116002] ? ion_query_heaps+0x360/0x360 [ 1565.120219] do_vfs_ioctl+0x75a/0xff0 [ 1565.124009] ? ioctl_preallocate+0x1a0/0x1a0 [ 1565.128400] ? lock_downgrade+0x740/0x740 [ 1565.132541] ? __fget+0x225/0x360 [ 1565.135973] ? do_vfs_ioctl+0xff0/0xff0 [ 1565.139929] ? security_file_ioctl+0x83/0xb0 [ 1565.144327] SyS_ioctl+0x7f/0xb0 [ 1565.147688] ? do_vfs_ioctl+0xff0/0xff0 [ 1565.151644] do_syscall_64+0x1d5/0x640 [ 1565.155516] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1565.160699] RIP: 0033:0x4665d9 [ 1565.163869] RSP: 002b:00007f2b2a1c9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1565.171559] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1565.178832] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1565.186166] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1565.193502] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1565.200751] R13: 00007ffc70377c3f R14: 00007f2b2a1c9300 R15: 0000000000022000 20:08:16 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x7fffffff, 0x23}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, 0x0, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000080)=0x1) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x4, 0xcf, 0x7ff, 0x8, 0x0, 0x1, 0xb51, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x40) [ 1565.386790] device hsr_slave_1 left promiscuous mode [ 1565.431513] device hsr_slave_0 left promiscuous mode [ 1565.517051] team0 (unregistering): Port device team_slave_1 removed [ 1565.554804] team0 (unregistering): Port device team_slave_0 removed [ 1565.577993] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1565.594446] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1565.616802] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1565.633234] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1565.640598] CPU: 0 PID: 18475 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1565.648593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1565.657953] Call Trace: [ 1565.660548] dump_stack+0x1b2/0x281 [ 1565.664202] warn_alloc.cold+0x96/0x1cc [ 1565.668207] ? zone_watermark_ok_safe+0x220/0x220 [ 1565.673076] __alloc_pages_nodemask+0x2127/0x2720 [ 1565.677932] ? _raw_spin_unlock_irq+0x24/0x80 [ 1565.682413] ? lock_acquire+0x170/0x3f0 [ 1565.686400] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1565.691245] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1565.696689] ? __mutex_unlock_slowpath+0x75/0x770 [ 1565.701525] alloc_pages_current+0x155/0x260 [ 1565.706007] ion_page_pool_alloc+0x118/0x1b0 [ 1565.710399] ion_system_heap_allocate+0x133/0x8c0 [ 1565.715255] ? ion_alloc+0x187/0x810 [ 1565.718961] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1565.724491] ? ion_system_contig_heap_create+0x130/0x130 [ 1565.729920] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1565.734930] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1565.739753] ion_alloc+0x204/0x810 [ 1565.743363] ? ion_dma_buf_release+0x40/0x40 [ 1565.747819] ? __might_fault+0x177/0x1b0 [ 1565.751866] ion_ioctl+0xea/0x1f0 [ 1565.755311] ? ion_query_heaps+0x360/0x360 [ 1565.759530] ? ion_query_heaps+0x360/0x360 [ 1565.763930] do_vfs_ioctl+0x75a/0xff0 [ 1565.767712] ? ioctl_preallocate+0x1a0/0x1a0 [ 1565.772104] ? lock_downgrade+0x740/0x740 [ 1565.776245] ? __fget+0x225/0x360 [ 1565.779680] ? do_vfs_ioctl+0xff0/0xff0 [ 1565.783646] ? security_file_ioctl+0x83/0xb0 [ 1565.788123] SyS_ioctl+0x7f/0xb0 [ 1565.791482] ? do_vfs_ioctl+0xff0/0xff0 [ 1565.795448] do_syscall_64+0x1d5/0x640 [ 1565.799330] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1565.804497] RIP: 0033:0x4665d9 [ 1565.807665] RSP: 002b:00007f37127a1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1565.815593] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1565.822938] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1565.830278] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1565.837531] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1565.845058] R13: 00007ffd8a8e3f3f R14: 00007f37127a1300 R15: 0000000000022000 [ 1565.875650] warn_alloc_show_mem: 1 callbacks suppressed [ 1565.875654] Mem-Info: [ 1565.886302] active_anon:14607 inactive_anon:41284 isolated_anon:0 [ 1565.886302] active_file:1686 inactive_file:2235 isolated_file:32 [ 1565.886302] unevictable:0 dirty:33 writeback:25 unstable:0 [ 1565.886302] slab_reclaimable:11888 slab_unreclaimable:117584 [ 1565.886302] mapped:38332 shmem:41756 pagetables:698 bounce:0 [ 1565.886302] free:35766 free_pcp:418 free_cma:0 [ 1565.955746] Node 0 active_anon:56128kB inactive_anon:128992kB active_file:3080kB inactive_file:5680kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:147020kB dirty:4kB writeback:0kB shmem:130600kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1566.016377] bond0 (unregistering): Released all slaves [ 1566.068684] Node 1 active_anon:2144kB inactive_anon:36128kB active_file:3088kB inactive_file:3072kB unevictable:0kB isolated(anon):0kB isolated(file):68kB mapped:5576kB dirty:20kB writeback:0kB shmem:36392kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1566.178636] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1566.288607] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1566.293692] Node 0 DMA32 free:17972kB min:36200kB low:45248kB high:54296kB active_anon:56128kB inactive_anon:128992kB active_file:3080kB inactive_file:5176kB unevictable:0kB writepending:4kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7392kB pagetables:2528kB bounce:0kB free_pcp:84kB local_pcp:0kB free_cma:0kB [ 1566.297440] oom_reaper: reaped process 18475 (syz-executor.0), now anon-rss:0kB, file-rss:12kB, shmem-rss:0kB [ 1566.347390] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1566.373017] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1566.378429] CPU: 1 PID: 18483 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1566.386315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1566.395671] Call Trace: [ 1566.398254] dump_stack+0x1b2/0x281 [ 1566.401881] warn_alloc.cold+0x96/0x1cc [ 1566.405842] ? zone_watermark_ok_safe+0x220/0x220 [ 1566.410677] __alloc_pages_nodemask+0x2127/0x2720 [ 1566.415790] ? lock_acquire+0x170/0x3f0 [ 1566.419754] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1566.424582] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1566.430023] ? __mutex_unlock_slowpath+0x75/0x770 [ 1566.434859] alloc_pages_current+0x155/0x260 [ 1566.439249] ion_page_pool_alloc+0x118/0x1b0 [ 1566.443636] ion_system_heap_allocate+0x133/0x8c0 [ 1566.448482] ? ion_alloc+0x187/0x810 [ 1566.452185] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1566.459168] ? ion_system_contig_heap_create+0x130/0x130 [ 1566.464607] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1566.469614] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1566.474438] ion_alloc+0x204/0x810 [ 1566.477963] ? ion_dma_buf_release+0x40/0x40 [ 1566.482380] ? __might_fault+0x177/0x1b0 [ 1566.486423] ion_ioctl+0xea/0x1f0 [ 1566.489868] ? ion_query_heaps+0x360/0x360 [ 1566.494181] ? ion_query_heaps+0x360/0x360 [ 1566.498394] do_vfs_ioctl+0x75a/0xff0 [ 1566.502188] ? ioctl_preallocate+0x1a0/0x1a0 [ 1566.506611] ? lock_downgrade+0x740/0x740 [ 1566.510741] ? __fget+0x225/0x360 [ 1566.514179] ? do_vfs_ioctl+0xff0/0xff0 [ 1566.518161] ? security_file_ioctl+0x83/0xb0 [ 1566.522554] SyS_ioctl+0x7f/0xb0 [ 1566.525899] ? do_vfs_ioctl+0xff0/0xff0 [ 1566.529876] do_syscall_64+0x1d5/0x640 [ 1566.533747] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1566.538916] RIP: 0033:0x4665d9 [ 1566.542084] RSP: 002b:00007f2b2a187188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1566.549791] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 00000000004665d9 [ 1566.557053] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1566.564344] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1566.571695] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 1566.578945] R13: 00007ffc70377c3f R14: 00007f2b2a187300 R15: 0000000000022000 [ 1566.642991] lowmem_reserve[]: 0 0 0 0 0 [ 1566.655814] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1566.772029] lowmem_reserve[]: 0 0 0 0 0 [ 1566.809758] Node 1 Normal free:41112kB min:53696kB low:67120kB high:80544kB active_anon:2144kB inactive_anon:36128kB active_file:232kB inactive_file:664kB unevictable:0kB writepending:20kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:304kB bounce:0kB free_pcp:272kB local_pcp:0kB free_cma:0kB [ 1566.832579] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1566.941568] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1566.958519] CPU: 1 PID: 18441 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1566.966615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1566.976058] Call Trace: [ 1566.978648] dump_stack+0x1b2/0x281 [ 1566.981792] lowmem_reserve[]: 0 0 0 0 [ 1566.982295] warn_alloc.cold+0x96/0x1cc [ 1566.982296] 0 [ 1566.986094] ? zone_watermark_ok_safe+0x220/0x220 [ 1566.996698] __alloc_pages_nodemask+0x2127/0x2720 [ 1567.001546] ? io_schedule_timeout+0x140/0x140 [ 1567.006135] ? lock_acquire+0x170/0x3f0 [ 1567.010115] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1567.012078] Node 0 DMA: 2*4kB [ 1567.015047] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1567.015060] ? __mutex_unlock_slowpath+0x75/0x770 [ 1567.018233] (M) [ 1567.023669] alloc_pages_current+0x155/0x260 [ 1567.023681] ion_page_pool_alloc+0x118/0x1b0 [ 1567.023690] ion_system_heap_allocate+0x133/0x8c0 [ 1567.023702] ? _raw_spin_unlock+0x29/0x40 [ 1567.023710] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1567.023720] ? ion_system_contig_heap_create+0x130/0x130 [ 1567.058801] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1567.064074] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1567.068912] ion_alloc+0x27a/0x810 [ 1567.072460] ? ion_dma_buf_release+0x40/0x40 [ 1567.076870] ? __might_fault+0x177/0x1b0 [ 1567.080934] ion_ioctl+0xea/0x1f0 [ 1567.084384] ? ion_query_heaps+0x360/0x360 [ 1567.088551] 3*8kB (ME) [ 1567.088614] ? ion_query_heaps+0x360/0x360 [ 1567.088616] 4*16kB (UME) [ 1567.091209] do_vfs_ioctl+0x75a/0xff0 [ 1567.091221] ? ioctl_preallocate+0x1a0/0x1a0 [ 1567.091231] ? lock_downgrade+0x740/0x740 [ 1567.095486] 3*32kB [ 1567.098206] ? __fget+0x225/0x360 [ 1567.116220] ? do_vfs_ioctl+0xff0/0xff0 [ 1567.120227] ? security_file_ioctl+0x83/0xb0 [ 1567.124636] SyS_ioctl+0x7f/0xb0 [ 1567.128016] ? do_vfs_ioctl+0xff0/0xff0 [ 1567.131985] do_syscall_64+0x1d5/0x640 [ 1567.135903] (ME) 6*64kB (UME) [ 1567.135957] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1567.135965] RIP: 0033:0x4665d9 [ 1567.139259] 3*128kB [ 1567.144514] RSP: 002b:00007f5f77a6d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1567.157856] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1567.165144] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1567.172434] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1567.178137] (UME) [ 1567.179695] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1567.179700] R13: 00007ffe82aa5b1f R14: 00007f5f77a6d300 R15: 0000000000022000 [ 1567.227361] 1*256kB (E) 5*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10944kB [ 1567.257956] warn_alloc_show_mem: 1 callbacks suppressed [ 1567.257960] Mem-Info: [ 1567.272561] active_anon:14634 inactive_anon:41280 isolated_anon:0 [ 1567.272561] active_file:339 inactive_file:880 isolated_file:5 [ 1567.272561] unevictable:0 dirty:7 writeback:1 unstable:0 [ 1567.272561] slab_reclaimable:11884 slab_unreclaimable:116882 [ 1567.272561] mapped:36253 shmem:41748 pagetables:708 bounce:0 [ 1567.272561] free:73087 free_pcp:462 free_cma:0 [ 1567.280206] Node 0 DMA32: 736*4kB (UME) 239*8kB (UME) 66*16kB (UME) 31*32kB (ME) 13*64kB (UM) 65*128kB (UM) 3*256kB (M) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 17848kB [ 1567.408394] Node 0 active_anon:56036kB inactive_anon:128992kB active_file:264kB inactive_file:180kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141496kB dirty:28kB writeback:0kB shmem:130600kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1567.470865] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1567.517095] Node 1 active_anon:2500kB inactive_anon:36128kB active_file:1192kB inactive_file:3340kB unevictable:0kB isolated(anon):0kB isolated(file):20kB mapped:73216kB dirty:0kB writeback:4kB shmem:36392kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1567.522294] Node 1 [ 1567.554669] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:52kB inactive_file:88kB unevictable:0kB writepending:8kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1567.609921] Normal: 54*4kB (UM) 24*8kB (UM) 3*16kB (M) 2*32kB (UE) 2*64kB (M) 815*128kB (UM) 637*256kB (UM) 57*512kB (U) 1*1024kB (M) 5*2048kB (U) 2*4096kB (U) = 316680kB [ 1567.653671] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1567.657140] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1567.671574] Node 0 DMA32 free:44836kB min:36200kB low:45248kB high:54296kB active_anon:56036kB inactive_anon:128992kB active_file:168kB inactive_file:220kB unevictable:0kB writepending:20kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7328kB pagetables:2528kB bounce:0kB free_pcp:792kB local_pcp:120kB free_cma:0kB [ 1567.688547] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1567.737409] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1567.770432] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1567.775911] lowmem_reserve[]: 0 0 0 0 0 [ 1567.803093] 43017 total pagecache pages [ 1567.806067] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1567.815851] 0 pages in swap cache [ 1567.878503] Swap cache stats: add 0, delete 0, find 0/0 [ 1567.883917] Free swap = 0kB [ 1567.886929] Total swap = 0kB [ 1567.908547] 2097051 pages RAM [ 1567.911683] 0 pages HighMem/MovableOnly [ 1567.915658] 363849 pages reserved [ 1567.935511] lowmem_reserve[]: 0 0 0 0 0 [ 1567.951488] 0 pages cma reserved [ 1567.952751] Node 1 Normal free:282332kB min:53696kB low:67120kB high:80544kB active_anon:2512kB inactive_anon:36128kB active_file:1276kB inactive_file:3416kB unevictable:0kB writepending:40kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:612kB bounce:0kB free_pcp:740kB local_pcp:108kB free_cma:0kB [ 1568.058387] lowmem_reserve[]: 0 0 0 0 0 [ 1568.066839] Node 0 DMA: 6*4kB (UM) 5*8kB (UME) 4*16kB (UME) 2*32kB (ME) 3*64kB (ME) 2*128kB (ME) 3*256kB (UE) 5*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11136kB [ 1568.094796] Node 0 DMA32: 783*4kB (ME) 248*8kB (ME) 57*16kB (ME) 19*32kB (ME) 14*64kB (UME) 189*128kB (UM) 42*256kB (UM) 1*512kB (M) 2*1024kB (M) 0*2048kB 0*4096kB = 45036kB [ 1568.158489] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1568.178748] Node 1 Normal: 54*4kB (UM) 24*8kB (UM) 4*16kB (UM) 1*32kB (E) 3*64kB (UM) 8*128kB (M) 552*256kB (UM) 58*512kB (U) 1*1024kB (M) 5*2048kB (U) 2*4096kB (U) = 192184kB [ 1568.216795] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1568.249208] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1568.257801] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1568.284071] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1568.338734] 43402 total pagecache pages [ 1568.342753] 0 pages in swap cache [ 1568.346203] Swap cache stats: add 0, delete 0, find 0/0 [ 1568.379037] Free swap = 0kB [ 1568.382098] Total swap = 0kB [ 1568.385114] 2097051 pages RAM [ 1568.388347] 0 pages HighMem/MovableOnly [ 1568.431498] 363849 pages reserved [ 1568.463877] 0 pages cma reserved [ 1568.468077] rs:main Q:Reg invoked oom-killer: gfp_mask=0x1c200ca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), nodemask=(null), order=0, oom_score_adj=0 [ 1568.510993] rs:main Q:Reg cpuset=/ mems_allowed=0-1 [ 1568.516117] CPU: 0 PID: 17523 Comm: rs:main Q:Reg Not tainted 4.14.232-syzkaller #0 [ 1568.523912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1568.533264] Call Trace: [ 1568.535858] dump_stack+0x1b2/0x281 [ 1568.539512] dump_header+0x178/0x82f [ 1568.543333] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1568.548426] ? ___ratelimit+0x2cd/0x530 [ 1568.552387] oom_kill_process.cold+0x10/0xa40 [ 1568.556869] out_of_memory+0xe3e/0x1190 [ 1568.560834] ? oom_killer_disable+0x1c0/0x1c0 [ 1568.565398] ? mutex_trylock+0x152/0x1a0 [ 1568.569442] __alloc_pages_nodemask+0x23e1/0x2720 [ 1568.574521] ? trace_hardirqs_on+0x10/0x10 [ 1568.578750] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1568.583595] ? __radix_tree_lookup+0x1b5/0x2e0 [ 1568.588170] alloc_pages_current+0x155/0x260 [ 1568.592997] pagecache_get_page+0x3f5/0xab0 [ 1568.597509] grab_cache_page_write_begin+0x63/0x90 [ 1568.602434] ext4_da_write_begin+0x249/0xe70 [ 1568.606911] ? ext4_write_begin+0x1260/0x1260 [ 1568.611393] generic_perform_write+0x1c9/0x420 [ 1568.615959] ? __mnt_drop_write_file+0x5f/0x90 [ 1568.620538] ? filemap_page_mkwrite+0x2d0/0x2d0 [ 1568.625215] ? current_time+0xb0/0xb0 [ 1568.629009] ? ext4_file_write_iter+0x1cc/0xd20 [ 1568.633662] __generic_file_write_iter+0x227/0x590 [ 1568.638576] ext4_file_write_iter+0x276/0xd20 [ 1568.643051] ? aa_file_perm+0x304/0xab0 [ 1568.647015] ? ext4_file_read_iter+0x330/0x330 [ 1568.651583] ? trace_hardirqs_on+0x10/0x10 [ 1568.655897] ? iov_iter_init+0xa6/0x1c0 [ 1568.659942] __vfs_write+0x44c/0x630 [ 1568.663637] ? kernel_read+0x110/0x110 [ 1568.667519] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1568.672530] vfs_write+0x17f/0x4d0 [ 1568.676053] SyS_write+0xf2/0x210 [ 1568.679487] ? SyS_read+0x210/0x210 [ 1568.683097] ? __do_page_fault+0x159/0xad0 [ 1568.687342] ? do_syscall_64+0x4c/0x640 [ 1568.691299] ? SyS_read+0x210/0x210 [ 1568.695641] do_syscall_64+0x1d5/0x640 [ 1568.699516] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1568.704686] RIP: 0033:0x7fe0f5fe21cd [ 1568.708379] RSP: 002b:00007fe0f359d590 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1568.716118] RAX: ffffffffffffffda RBX: 00007fe0e80284a0 RCX: 00007fe0f5fe21cd [ 1568.723385] RDX: 0000000000000047 RSI: 00007fe0e80284a0 RDI: 0000000000000009 [ 1568.730811] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1568.738407] R10: 0000000000000000 R11: 0000000000000293 R12: 00007fe0e8028220 [ 1568.745675] R13: 00007fe0f359d5b0 R14: 000055e4ccb85800 R15: 0000000000000047 [ 1568.826962] Mem-Info: [ 1568.835198] active_anon:14637 inactive_anon:41280 isolated_anon:0 [ 1568.835198] active_file:22 inactive_file:0 isolated_file:0 [ 1568.835198] unevictable:0 dirty:16 writeback:0 unstable:0 [ 1568.835198] slab_reclaimable:11884 slab_unreclaimable:117331 [ 1568.835198] mapped:52740 shmem:41748 pagetables:785 bounce:0 [ 1568.835198] free:13824 free_pcp:104 free_cma:0 [ 1568.888651] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1568.904718] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1568.919671] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1568.924827] CPU: 0 PID: 18437 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1568.932705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1568.942058] Call Trace: [ 1568.944658] dump_stack+0x1b2/0x281 [ 1568.947343] Node 0 active_anon:56036kB inactive_anon:128992kB active_file:28kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141284kB dirty:40kB writeback:0kB shmem:130600kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1568.948318] warn_alloc.cold+0x96/0x1cc [ 1568.980135] ? zone_watermark_ok_safe+0x220/0x220 [ 1568.984987] ? usleep_range+0x130/0x130 [ 1568.988961] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1568.994067] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1568.999178] ? run_timer_softirq+0x5a0/0x5a0 [ 1569.003617] __alloc_pages_nodemask+0x2127/0x2720 [ 1569.008467] ? lock_acquire+0x170/0x3f0 [ 1569.012505] Node 1 active_anon:2568kB inactive_anon:36128kB active_file:56kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:69684kB dirty:52kB writeback:0kB shmem:36392kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1569.012552] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1569.044620] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1569.049123] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1569.051527] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1569.054579] alloc_pages_current+0x155/0x260 [ 1569.054592] ion_page_pool_alloc+0x118/0x1b0 [ 1569.089679] ion_system_heap_allocate+0x133/0x8c0 [ 1569.092484] lowmem_reserve[]: 0 [ 1569.094515] ? ion_alloc+0x187/0x810 [ 1569.094527] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1569.097785] 2717 [ 1569.101496] ? ion_system_contig_heap_create+0x130/0x130 [ 1569.101505] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1569.101516] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1569.101525] ion_alloc+0x204/0x810 [ 1569.101537] ? ion_dma_buf_release+0x40/0x40 [ 1569.101548] ? __might_fault+0x177/0x1b0 [ 1569.101559] ion_ioctl+0xea/0x1f0 [ 1569.101567] ? ion_query_heaps+0x360/0x360 [ 1569.101578] ? ion_query_heaps+0x360/0x360 [ 1569.101588] do_vfs_ioctl+0x75a/0xff0 [ 1569.101599] ? ioctl_preallocate+0x1a0/0x1a0 [ 1569.101608] ? lock_downgrade+0x740/0x740 [ 1569.101620] ? __fget+0x225/0x360 [ 1569.101629] ? do_vfs_ioctl+0xff0/0xff0 [ 1569.117101] 2718 [ 1569.119553] ? security_file_ioctl+0x83/0xb0 [ 1569.119564] SyS_ioctl+0x7f/0xb0 [ 1569.119571] ? do_vfs_ioctl+0xff0/0xff0 [ 1569.119582] do_syscall_64+0x1d5/0x640 [ 1569.119597] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1569.119606] RIP: 0033:0x4665d9 [ 1569.124433] 2718 [ 1569.127956] RSP: 002b:00007f3d1f881188 EFLAGS: 00000246 [ 1569.144327] 2718 [ 1569.148270] ORIG_RAX: 0000000000000010 [ 1569.156471] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1569.172232] Node 0 [ 1569.174443] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1569.177811] DMA32 free:17832kB min:36200kB low:45248kB high:54296kB active_anon:56036kB inactive_anon:128992kB active_file:80kB inactive_file:68kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7328kB pagetables:2528kB bounce:0kB free_pcp:24kB local_pcp:24kB free_cma:0kB [ 1569.181751] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1569.181756] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1569.181761] R13: 00007ffdbbfa296f R14: 00007f3d1f881300 R15: 0000000000022000 [ 1569.188823] syz-executor.0: [ 1569.199770] lowmem_reserve[]: [ 1569.205490] syz-executor.4 cpuset= [ 1569.217693] 0 [ 1569.228052] page allocation failure: order:0 [ 1569.264557] 0 [ 1569.270247] / [ 1569.287102] 0 [ 1569.293669] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1569.297805] 0 [ 1569.303792] mems_allowed=0-1 [ 1569.303820] CPU: 0 PID: 18441 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1569.303826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1569.303829] Call Trace: [ 1569.303847] dump_stack+0x1b2/0x281 [ 1569.303859] warn_alloc.cold+0x96/0x1cc [ 1569.303869] ? zone_watermark_ok_safe+0x220/0x220 [ 1569.303879] ? usleep_range+0x130/0x130 [ 1569.314485] 0 [ 1569.316641] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1569.328545] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1569.328556] ? run_timer_softirq+0x5a0/0x5a0 [ 1569.328575] __alloc_pages_nodemask+0x2127/0x2720 [ 1569.328598] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1569.328610] ? migrate_swap_stop+0x880/0x880 [ 1569.328619] ? lock_acquire+0x170/0x3f0 [ 1569.341003] Node 0 [ 1569.341054] alloc_pages_current+0x155/0x260 [ 1569.345012] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1569.346800] ion_page_pool_alloc+0x118/0x1b0 [ 1569.355389] lowmem_reserve[]: [ 1569.356886] ion_system_heap_allocate+0x133/0x8c0 [ 1569.366570] 0 [ 1569.370951] ? _raw_spin_unlock+0x29/0x40 [ 1569.370961] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1569.370969] ? ion_system_contig_heap_create+0x130/0x130 [ 1569.370979] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1569.370991] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1569.371002] ion_alloc+0x27a/0x810 [ 1569.371015] ? ion_dma_buf_release+0x40/0x40 [ 1569.371026] ? __might_fault+0x177/0x1b0 [ 1569.371035] ion_ioctl+0xea/0x1f0 [ 1569.371045] ? ion_query_heaps+0x360/0x360 [ 1569.414494] 0 [ 1569.415512] ? ion_query_heaps+0x360/0x360 [ 1569.427674] 0 [ 1569.429370] do_vfs_ioctl+0x75a/0xff0 [ 1569.429384] ? ioctl_preallocate+0x1a0/0x1a0 [ 1569.429393] ? lock_downgrade+0x740/0x740 [ 1569.429405] ? __fget+0x225/0x360 [ 1569.429415] ? do_vfs_ioctl+0xff0/0xff0 [ 1569.429426] ? security_file_ioctl+0x83/0xb0 [ 1569.429435] SyS_ioctl+0x7f/0xb0 [ 1569.429442] ? do_vfs_ioctl+0xff0/0xff0 [ 1569.429453] do_syscall_64+0x1d5/0x640 [ 1569.451160] 0 [ 1569.453692] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1569.458079] 0 [ 1569.462158] RIP: 0033:0x4665d9 [ 1569.462162] RSP: 002b:00007f5f77a6d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1569.462171] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1569.462176] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1569.462181] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1569.462185] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1569.462190] R13: 00007ffe82aa5b1f R14: 00007f5f77a6d300 R15: 0000000000022000 [ 1569.468882] syz-executor.0 cpuset= [ 1569.503112] / [ 1569.524548] Node 1 [ 1569.535927] mems_allowed=0-1 [ 1569.567357] Normal free:26748kB min:53696kB low:67120kB high:80544kB active_anon:2612kB inactive_anon:36128kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:656kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1569.579857] CPU: 0 PID: 18475 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1569.606771] lowmem_reserve[]: [ 1569.608694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1569.608699] Call Trace: [ 1569.608718] dump_stack+0x1b2/0x281 [ 1569.608731] warn_alloc.cold+0x96/0x1cc [ 1569.608741] ? zone_watermark_ok_safe+0x220/0x220 [ 1569.608749] ? usleep_range+0x130/0x130 [ 1569.608757] ? try_to_free_pages+0x23f/0x6e0 [ 1569.608767] ? _find_next_bit+0xdb/0x100 [ 1569.608778] ? run_timer_softirq+0x5a0/0x5a0 [ 1569.608795] __alloc_pages_nodemask+0x2127/0x2720 [ 1569.608810] ? lock_acquire+0x170/0x3f0 [ 1569.608825] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1569.608834] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1569.608849] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1569.608866] alloc_pages_current+0x155/0x260 [ 1569.608876] ion_page_pool_alloc+0x118/0x1b0 [ 1569.608886] ion_system_heap_allocate+0x133/0x8c0 [ 1569.608895] ? ion_alloc+0x187/0x810 [ 1569.608904] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1569.608911] ? ion_system_contig_heap_create+0x130/0x130 [ 1569.608919] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1569.608928] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1569.608938] ion_alloc+0x204/0x810 [ 1569.608951] ? ion_dma_buf_release+0x40/0x40 [ 1569.608962] ? __might_fault+0x177/0x1b0 [ 1569.608972] ion_ioctl+0xea/0x1f0 [ 1569.608978] ? ion_query_heaps+0x360/0x360 [ 1569.608987] ? ion_query_heaps+0x360/0x360 [ 1569.608998] do_vfs_ioctl+0x75a/0xff0 [ 1569.609010] ? ioctl_preallocate+0x1a0/0x1a0 [ 1569.609018] ? lock_downgrade+0x740/0x740 [ 1569.609031] ? __fget+0x225/0x360 [ 1569.609040] ? do_vfs_ioctl+0xff0/0xff0 [ 1569.609052] ? security_file_ioctl+0x83/0xb0 [ 1569.609062] SyS_ioctl+0x7f/0xb0 [ 1569.609069] ? do_vfs_ioctl+0xff0/0xff0 [ 1569.609082] do_syscall_64+0x1d5/0x640 [ 1569.609096] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1569.609104] RIP: 0033:0x4665d9 [ 1569.609109] RSP: 002b:00007f37127a1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1569.609118] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1569.609123] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1569.609128] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1569.609132] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1569.609137] R13: 00007ffd8a8e3f3f R14: 00007f37127a1300 R15: 0000000000022000 [ 1569.624013] warn_alloc_show_mem: 1 callbacks suppressed [ 1569.624016] Mem-Info: [ 1569.817303] 0 0 0 0 0 [ 1569.948607] Node 0 DMA: 1*4kB (U) 1*8kB (E) 1*16kB (E) 2*32kB (UE) 3*64kB (UE) 2*128kB (UE) 1*256kB (E) 4*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11036kB [ 1570.002558] Node 0 DMA32: 836*4kB (UME) 458*8kB (UME) 75*16kB (UME) 20*32kB (UME) 23*64kB (UME) 8*128kB (UM) 38*256kB (UM) 2*512kB (UM) 9*1024kB (UM) 0*2048kB 0*4096kB = 31312kB [ 1570.088694] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1570.128431] Node 1 Normal: 5*4kB (UM) 4*8kB (UM) 4*16kB (UM) 2*32kB (ME) 1658*64kB (UM) 218*128kB (UM) 203*256kB (UM) 71*512kB (U) 267*1024kB (U) 23*2048kB (U) 2*4096kB (U) = 551220kB [ 1570.169461] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1570.191619] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1570.238366] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1570.247327] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1570.281324] active_anon:14671 inactive_anon:41280 isolated_anon:0 [ 1570.281324] active_file:840 inactive_file:1155 isolated_file:0 [ 1570.281324] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1570.281324] slab_reclaimable:11884 slab_unreclaimable:117685 [ 1570.281324] mapped:54284 shmem:41748 pagetables:759 bounce:0 [ 1570.281324] free:128691 free_pcp:337 free_cma:0 [ 1570.318409] 43736 total pagecache pages [ 1570.322412] 0 pages in swap cache [ 1570.325941] Swap cache stats: add 0, delete 0, find 0/0 [ 1570.348797] Free swap = 0kB [ 1570.351939] Total swap = 0kB [ 1570.354951] 2097051 pages RAM [ 1570.358057] 0 pages HighMem/MovableOnly [ 1570.378377] 363849 pages reserved [ 1570.381853] 0 pages cma reserved [ 1570.385231] Out of memory (oom_kill_allocating_task): Kill process 17523 (rs:main Q:Reg) score 0 or sacrifice child [ 1570.408357] Node 0 active_anon:56040kB inactive_anon:128992kB active_file:20kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141344kB dirty:0kB writeback:0kB shmem:130600kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1570.414939] Killed process 17153 (rsyslogd) total-vm:254332kB, anon-rss:984kB, file-rss:284kB, shmem-rss:0kB [ 1570.436447] Node 1 active_anon:2644kB inactive_anon:36128kB active_file:3340kB inactive_file:4600kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:75792kB dirty:0kB writeback:0kB shmem:36392kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 20:08:21 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x7fffffff, 0x23}) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x2401, 0x0) ioctl$RNDZAPENTCNT(r1, 0x5204, 0x0) [ 1570.488508] Node 0 DMA free:11036kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1570.600875] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1570.611227] Node 0 DMA32 free:45116kB min:36200kB low:45248kB high:54296kB active_anon:56040kB inactive_anon:128992kB active_file:524kB inactive_file:3044kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7328kB pagetables:2528kB bounce:0kB free_pcp:196kB local_pcp:148kB free_cma:0kB [ 1570.643118] lowmem_reserve[]: 0 0 0 0 0 20:08:22 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x7fffffff, 0x23}) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x2401, 0x0) ioctl$RNDZAPENTCNT(r1, 0x5204, 0x0) [ 1570.647324] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1570.741542] lowmem_reserve[]: 0 0 0 0 0 [ 1570.750749] Node 1 Normal free:576328kB min:53696kB low:67120kB high:80544kB active_anon:2044kB inactive_anon:36128kB active_file:3840kB inactive_file:6900kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:656kB bounce:0kB free_pcp:540kB local_pcp:356kB free_cma:0kB [ 1570.866044] lowmem_reserve[]: 0 0 0 0 0 [ 1570.886600] Node 0 DMA: 1*4kB (U) 1*8kB (E) 1*16kB (E) 2*32kB (UE) 3*64kB (UE) 2*128kB (UE) 1*256kB (E) 4*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11036kB [ 1570.936357] Node 0 DMA32: 171*4kB (E) 102*8kB (UME) 36*16kB (E) 15*32kB (UME) 16*64kB (UME) 16*128kB (UM) 8*256kB (UM) 4*512kB (UM) 34*1024kB (UM) 0*2048kB 0*4096kB = 44540kB [ 1570.971096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1570.977965] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1571.016802] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1571.018095] Node 0 [ 1571.026871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1571.042461] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1571.054090] device bridge_slave_1 left promiscuous mode [ 1571.059851] bridge0: port 2(bridge_slave_1) entered disabled state [ 1571.082949] Node 1 Normal: 1*4kB (M) 0*8kB 2*16kB (UM) 2*32kB (ME) 2304*64kB (U) 378*128kB (UM) 425*256kB (UM) 75*512kB (U) 1*1024kB (U) 0*2048kB 1*4096kB (U) = 348260kB [ 1571.101810] device bridge_slave_0 left promiscuous mode [ 1571.107835] bridge0: port 1(bridge_slave_0) entered disabled state [ 1571.148316] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1571.171729] device veth1_macvtap left promiscuous mode [ 1571.177114] device veth0_macvtap left promiscuous mode [ 1571.181318] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1571.214673] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1571.215810] device veth1_vlan left promiscuous mode [ 1571.232934] device veth0_vlan left promiscuous mode [ 1571.249242] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1571.273882] 44907 total pagecache pages [ 1571.282295] 0 pages in swap cache [ 1571.295216] Swap cache stats: add 0, delete 0, find 0/0 [ 1571.313865] Free swap = 0kB [ 1571.321291] Total swap = 0kB [ 1571.333159] 2097051 pages RAM [ 1571.342812] 0 pages HighMem/MovableOnly [ 1571.348503] 363849 pages reserved [ 1571.366717] 0 pages cma reserved [ 1571.567091] device hsr_slave_1 left promiscuous mode [ 1571.597284] device hsr_slave_0 left promiscuous mode [ 1571.626815] team0 (unregistering): Port device team_slave_1 removed [ 1571.654210] team0 (unregistering): Port device team_slave_0 removed [ 1571.675314] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1571.734652] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1571.845928] bond0 (unregistering): Released all slaves [ 1572.258307] Bluetooth: hci3 command 0x0409 tx timeout [ 1572.386610] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1572.443716] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1572.460100] CPU: 1 PID: 18509 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1572.468004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1572.477457] Call Trace: [ 1572.480057] dump_stack+0x1b2/0x281 [ 1572.483686] warn_alloc.cold+0x96/0x1cc [ 1572.487673] ? zone_watermark_ok_safe+0x220/0x220 [ 1572.492551] __alloc_pages_nodemask+0x2127/0x2720 [ 1572.497401] ? lock_acquire+0x170/0x3f0 [ 1572.501379] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1572.506226] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1572.511681] ? __mutex_unlock_slowpath+0x75/0x770 [ 1572.513319] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1572.516534] ? retint_kernel+0x2d/0x2d [ 1572.516540] (null) [ 1572.526750] alloc_pages_current+0x155/0x260 [ 1572.526763] ion_page_pool_alloc+0x118/0x1b0 [ 1572.526773] ion_system_heap_allocate+0x133/0x8c0 [ 1572.526784] ? ion_alloc+0x187/0x810 [ 1572.548184] , order=0, oom_score_adj=0 [ 1572.550122] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1572.554079] systemd-journal cpuset= [ 1572.559515] ? ion_system_contig_heap_create+0x130/0x130 [ 1572.559524] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1572.559535] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1572.559545] ion_alloc+0x204/0x810 [ 1572.559557] ? ion_dma_buf_release+0x40/0x40 [ 1572.559569] ? __might_fault+0x177/0x1b0 [ 1572.585581] / [ 1572.586361] ion_ioctl+0xea/0x1f0 [ 1572.595549] ? ion_query_heaps+0x360/0x360 [ 1572.599802] ? ion_query_heaps+0x360/0x360 [ 1572.604035] do_vfs_ioctl+0x75a/0xff0 [ 1572.607830] ? ioctl_preallocate+0x1a0/0x1a0 [ 1572.608172] mems_allowed=0-1 [ 1572.612312] ? lock_downgrade+0x740/0x740 [ 1572.612324] ? __fget+0x225/0x360 [ 1572.622989] ? do_vfs_ioctl+0xff0/0xff0 [ 1572.626962] ? security_file_ioctl+0x83/0xb0 [ 1572.631463] SyS_ioctl+0x7f/0xb0 [ 1572.634814] ? do_vfs_ioctl+0xff0/0xff0 [ 1572.638778] do_syscall_64+0x1d5/0x640 [ 1572.642666] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1572.647849] RIP: 0033:0x4665d9 [ 1572.651031] RSP: 002b:00007f5f77a6d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1572.658750] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1572.666164] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1572.673432] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1572.680697] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1572.687973] R13: 00007ffe82aa5b1f R14: 00007f5f77a6d300 R15: 0000000000022000 [ 1572.695250] CPU: 0 PID: 18443 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 1572.700193] syz-executor.0: [ 1572.703221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1572.703225] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1572.706229] Call Trace: [ 1572.728214] dump_stack+0x1b2/0x281 [ 1572.732101] dump_header+0x178/0x82f [ 1572.735809] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1572.740908] ? ___ratelimit+0x2cd/0x530 [ 1572.744882] oom_kill_process.cold+0x10/0xa40 [ 1572.749385] out_of_memory+0xe3e/0x1190 [ 1572.753357] ? oom_killer_disable+0x1c0/0x1c0 [ 1572.757880] ? mutex_trylock+0x152/0x1a0 [ 1572.761944] __alloc_pages_nodemask+0x23e1/0x2720 [ 1572.766804] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1572.770051] (null) [ 1572.771658] alloc_pages_current+0x155/0x260 [ 1572.773795] syz-executor.0 cpuset= [ 1572.778203] filemap_fault+0x11a1/0x1ad0 [ 1572.778220] ext4_filemap_fault+0x84/0xb0 [ 1572.778229] __do_fault+0xfa/0x380 [ 1572.778238] __handle_mm_fault+0x2497/0x4620 [ 1572.778248] ? vm_insert_page+0x7c0/0x7c0 [ 1572.802026] ? mark_held_locks+0xa6/0xf0 [ 1572.805968] / mems_allowed=0-1 [ 1572.806083] handle_mm_fault+0x455/0x9c0 [ 1572.806097] __do_page_fault+0x549/0xad0 [ 1572.817382] ? spurious_fault+0x640/0x640 [ 1572.821531] ? do_page_fault+0x60/0x500 [ 1572.825499] ? page_fault+0x2f/0x50 [ 1572.829114] page_fault+0x45/0x50 [ 1572.832550] RIP: 0001:0xffffffffffffffff [ 1572.836587] RSP: 569201e0:00007ffff5442cc0 EFLAGS: 7ffff5442ad0 [ 1572.836606] CPU: 1 PID: 18475 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1572.841918] syz-executor.2: [ 1572.842671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1572.862895] Call Trace: [ 1572.865582] dump_stack+0x1b2/0x281 [ 1572.869210] warn_alloc.cold+0x96/0x1cc [ 1572.873180] ? zone_watermark_ok_safe+0x220/0x220 [ 1572.878033] __alloc_pages_nodemask+0x2127/0x2720 [ 1572.882897] ? lock_acquire+0x170/0x3f0 [ 1572.886873] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1572.891722] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1572.895577] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1572.897170] ? __mutex_unlock_slowpath+0x75/0x770 [ 1572.897183] alloc_pages_current+0x155/0x260 [ 1572.916324] ion_page_pool_alloc+0x118/0x1b0 [ 1572.920735] ion_system_heap_allocate+0x133/0x8c0 [ 1572.925594] ? _raw_spin_unlock+0x29/0x40 [ 1572.929742] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1572.934665] ? ion_system_contig_heap_create+0x130/0x130 [ 1572.940112] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1572.945144] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1572.950334] ion_alloc+0x27a/0x810 [ 1572.953885] ? ion_dma_buf_release+0x40/0x40 [ 1572.958293] ? __might_fault+0x177/0x1b0 [ 1572.962352] ion_ioctl+0xea/0x1f0 [ 1572.965820] ? ion_query_heaps+0x360/0x360 [ 1572.966933] (null) [ 1572.970049] ? ion_query_heaps+0x360/0x360 [ 1572.970060] do_vfs_ioctl+0x75a/0xff0 [ 1572.970072] ? ioctl_preallocate+0x1a0/0x1a0 [ 1572.984686] ? lock_downgrade+0x740/0x740 [ 1572.988848] ? __fget+0x225/0x360 [ 1572.992302] ? do_vfs_ioctl+0xff0/0xff0 [ 1572.993042] syz-executor.2 cpuset= [ 1572.996267] ? security_file_ioctl+0x83/0xb0 [ 1572.996269] / mems_allowed=0-1 [ 1572.999796] SyS_ioctl+0x7f/0xb0 [ 1572.999804] ? do_vfs_ioctl+0xff0/0xff0 [ 1572.999815] do_syscall_64+0x1d5/0x640 [ 1572.999828] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1573.023906] RIP: 0033:0x4665d9 [ 1573.027089] RSP: 002b:00007f37127a1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1573.034789] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1573.042047] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1573.049307] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1573.056566] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1573.063821] R13: 00007ffd8a8e3f3f R14: 00007f37127a1300 R15: 0000000000022000 [ 1573.121341] CPU: 0 PID: 18437 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1573.128267] warn_alloc_show_mem: 2 callbacks suppressed [ 1573.128270] Mem-Info: [ 1573.129260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1573.134722] active_anon:15089 inactive_anon:41283 isolated_anon:0 [ 1573.134722] active_file:32 inactive_file:0 isolated_file:8 [ 1573.134722] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1573.134722] slab_reclaimable:11931 slab_unreclaimable:116919 [ 1573.134722] mapped:52759 shmem:41754 pagetables:775 bounce:0 [ 1573.134722] free:25139 free_pcp:0 free_cma:0 [ 1573.137105] Call Trace: [ 1573.146516] Node 0 active_anon:58064kB inactive_anon:128988kB active_file:64kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):32kB mapped:141404kB dirty:0kB writeback:0kB shmem:130596kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1573.179682] dump_stack+0x1b2/0x281 [ 1573.179696] warn_alloc.cold+0x96/0x1cc [ 1573.179708] ? zone_watermark_ok_safe+0x220/0x220 [ 1573.179735] __alloc_pages_nodemask+0x2127/0x2720 [ 1573.209250] Node 1 active_anon:2292kB inactive_anon:36144kB active_file:64kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:69632kB dirty:0kB writeback:0kB shmem:36420kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1573.210353] ? lock_acquire+0x170/0x3f0 [ 1573.213978] Node 0 [ 1573.218060] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1573.238592] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1573.254798] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1573.254811] ? __mutex_unlock_slowpath+0x75/0x770 [ 1573.254829] alloc_pages_current+0x155/0x260 [ 1573.271619] lowmem_reserve[]: [ 1573.291451] ion_page_pool_alloc+0x118/0x1b0 [ 1573.291462] ion_system_heap_allocate+0x133/0x8c0 [ 1573.291474] ? _raw_spin_unlock+0x29/0x40 [ 1573.291481] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1573.291489] ? ion_system_contig_heap_create+0x130/0x130 [ 1573.291498] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1573.291508] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1573.291517] ion_alloc+0x27a/0x810 [ 1573.291529] ? ion_dma_buf_release+0x40/0x40 [ 1573.291540] ? __might_fault+0x177/0x1b0 [ 1573.297013] 0 [ 1573.301814] ion_ioctl+0xea/0x1f0 [ 1573.301822] ? ion_query_heaps+0x360/0x360 [ 1573.301833] ? ion_query_heaps+0x360/0x360 [ 1573.301843] do_vfs_ioctl+0x75a/0xff0 [ 1573.301855] ? ioctl_preallocate+0x1a0/0x1a0 [ 1573.306337] 2717 [ 1573.309521] ? lock_downgrade+0x740/0x740 [ 1573.309535] ? __fget+0x225/0x360 [ 1573.309543] ? do_vfs_ioctl+0xff0/0xff0 [ 1573.309553] ? security_file_ioctl+0x83/0xb0 [ 1573.309563] SyS_ioctl+0x7f/0xb0 [ 1573.313963] 2718 [ 1573.318792] ? do_vfs_ioctl+0xff0/0xff0 [ 1573.318804] do_syscall_64+0x1d5/0x640 [ 1573.318819] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1573.318828] RIP: 0033:0x4665d9 [ 1573.322952] 2718 [ 1573.327864] RSP: 002b:00007f3d1f881188 EFLAGS: 00000246 [ 1573.333758] 2718 [ 1573.338397] ORIG_RAX: 0000000000000010 [ 1573.338402] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1573.338407] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1573.338412] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1573.338417] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1573.338422] R13: 00007ffdbbfa296f R14: 00007f3d1f881300 R15: 0000000000022000 [ 1573.487434] Node 0 DMA32 free:18092kB min:36200kB low:45248kB high:54296kB active_anon:58064kB inactive_anon:128988kB active_file:64kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7296kB pagetables:2452kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1573.517966] lowmem_reserve[]: 0 0 0 0 0 [ 1573.522028] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1573.547929] lowmem_reserve[]: 0 0 0 0 0 [ 1573.552207] Node 1 Normal free:26916kB min:53696kB low:67120kB high:80544kB active_anon:2292kB inactive_anon:36144kB active_file:64kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:648kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1573.576269] Mem-Info: [ 1573.580750] lowmem_reserve[]: 0 0 0 0 0 [ 1573.583312] active_anon:15089 inactive_anon:41283 isolated_anon:0 [ 1573.583312] active_file:32 inactive_file:0 isolated_file:8 [ 1573.583312] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1573.583312] slab_reclaimable:11931 slab_unreclaimable:116919 [ 1573.583312] mapped:52759 shmem:41754 pagetables:775 bounce:0 [ 1573.583312] free:13965 free_pcp:32 free_cma:0 [ 1573.587133] Node 0 [ 1573.620763] Node 0 active_anon:58064kB inactive_anon:128988kB active_file:64kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):32kB mapped:141404kB dirty:0kB writeback:0kB shmem:130596kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1573.642081] DMA: 0*4kB 22*8kB (UE) 7*16kB (UE) 4*32kB (UE) 1*64kB (E) 2*128kB (UE) 2*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10976kB [ 1573.689575] Node 1 active_anon:2292kB inactive_anon:36144kB active_file:64kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:69632kB dirty:0kB writeback:0kB shmem:36420kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1573.701180] Node 0 DMA32: 758*4kB (UME) 138*8kB (UME) 44*16kB (ME) 415*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18120kB [ 1573.720024] Node 0 [ 1573.734478] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1573.748162] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1573.751051] Node 1 Normal: 22*4kB (M) 14*8kB (UM) 10*16kB (UM) 827*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26824kB [ 1573.798091] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1573.824133] Node 0 DMA32 free:18092kB min:36200kB low:45248kB high:54296kB active_anon:58064kB inactive_anon:128988kB active_file:64kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7296kB pagetables:2452kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1573.828336] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1573.855493] lowmem_reserve[]: 0 0 0 0 0 [ 1573.862030] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1573.867084] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1573.898091] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1573.913692] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1573.920487] lowmem_reserve[]: 0 0 0 0 0 [ 1573.922376] 41786 total pagecache pages [ 1573.926272] Node 1 [ 1573.931141] 0 pages in swap cache [ 1573.936836] Swap cache stats: add 0, delete 0, find 0/0 [ 1573.942475] Free swap = 0kB [ 1573.945575] Total swap = 0kB [ 1573.949267] 2097051 pages RAM [ 1573.952367] 0 pages HighMem/MovableOnly [ 1573.956344] 363849 pages reserved [ 1573.959850] 0 pages cma reserved [ 1573.966484] Normal free:26824kB min:53696kB low:67120kB high:80544kB active_anon:2292kB inactive_anon:36144kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:648kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1573.981229] IPVS: ftp: loaded support on port[0] = 21 [ 1574.006571] lowmem_reserve[]: 0 0 0 0 0 [ 1574.012882] Node 0 DMA: 0*4kB 22*8kB (UE) 7*16kB (UE) 4*32kB (UE) 1*64kB (E) 2*128kB (UE) 2*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10976kB [ 1574.030274] Node 0 DMA32: 758*4kB (UME) 199*8kB (UME) 48*16kB (UME) 417*32kB (UME) 2*64kB (U) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19120kB [ 1574.045302] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1574.058450] Node 1 Normal: 22*4kB (M) 14*8kB (UM) 10*16kB (UM) 827*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26824kB [ 1574.071784] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1574.083029] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1574.091980] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1574.103164] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1574.111799] 41786 total pagecache pages [ 1574.116118] 0 pages in swap cache [ 1574.121791] Swap cache stats: add 0, delete 0, find 0/0 [ 1574.127150] Free swap = 0kB [ 1574.141698] Total swap = 0kB [ 1574.144735] 2097051 pages RAM [ 1574.147833] 0 pages HighMem/MovableOnly [ 1574.155467] 363849 pages reserved [ 1574.162507] 0 pages cma reserved [ 1574.165877] Out of memory (oom_kill_allocating_task): Kill process 18443 (systemd-journal) score 0 or sacrifice child [ 1574.184206] Killed process 18443 (systemd-journal) total-vm:46096kB, anon-rss:468kB, file-rss:0kB, shmem-rss:1968kB [ 1574.195650] oom_reaper: reaped process 18443 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1968kB [ 1574.208199] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1574.220099] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1574.230061] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1574.249493] in:imklog cpuset=/ mems_allowed=0-1 [ 1574.254190] CPU: 1 PID: 18512 Comm: in:imklog Not tainted 4.14.232-syzkaller #0 [ 1574.260026] syz-executor.2 cpuset= [ 1574.261799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1574.261806] / [ 1574.265357] Call Trace: [ 1574.274831] syz-executor.0 cpuset= [ 1574.276497] dump_stack+0x1b2/0x281 [ 1574.283121] / mems_allowed=0-1 [ 1574.286313] dump_header+0x178/0x82f [ 1574.286324] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1574.298330] ? ___ratelimit+0x2cd/0x530 [ 1574.302301] oom_kill_process.cold+0x10/0xa40 [ 1574.306782] out_of_memory+0xe3e/0x1190 [ 1574.310751] ? oom_killer_disable+0x1c0/0x1c0 [ 1574.311910] mems_allowed=0-1 [ 1574.315236] ? mutex_trylock+0x152/0x1a0 [ 1574.322375] __alloc_pages_nodemask+0x23e1/0x2720 [ 1574.327213] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1574.332052] alloc_pages_current+0x155/0x260 [ 1574.336464] filemap_fault+0x11a1/0x1ad0 [ 1574.340544] ext4_filemap_fault+0x84/0xb0 [ 1574.344674] __do_fault+0xfa/0x380 [ 1574.348194] __handle_mm_fault+0x2497/0x4620 [ 1574.352673] ? vm_insert_page+0x7c0/0x7c0 [ 1574.356802] ? lock_downgrade+0x740/0x740 [ 1574.360935] ? mark_held_locks+0xa6/0xf0 [ 1574.365001] handle_mm_fault+0x455/0x9c0 [ 1574.369153] __do_page_fault+0x549/0xad0 [ 1574.373281] ? spurious_fault+0x640/0x640 [ 1574.377407] ? do_page_fault+0x60/0x500 [ 1574.381368] ? page_fault+0x2f/0x50 [ 1574.384972] page_fault+0x45/0x50 [ 1574.388405] RIP: 1fa0:0x1f9f [ 1574.391402] RSP: 0000:00005589742a09d0 EFLAGS: 7f22241b4da0 [ 1574.391421] CPU: 0 PID: 18437 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1574.405005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1574.414460] Call Trace: [ 1574.417048] dump_stack+0x1b2/0x281 [ 1574.420670] warn_alloc.cold+0x96/0x1cc [ 1574.424626] ? zone_watermark_ok_safe+0x220/0x220 [ 1574.429543] ? usleep_range+0x130/0x130 [ 1574.433513] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1574.438612] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1574.443621] ? run_timer_softirq+0x5a0/0x5a0 [ 1574.448018] __alloc_pages_nodemask+0x2127/0x2720 [ 1574.452856] ? lock_acquire+0x170/0x3f0 [ 1574.456841] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1574.461704] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1574.466280] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1574.471831] alloc_pages_current+0x155/0x260 [ 1574.476233] ion_page_pool_alloc+0x118/0x1b0 [ 1574.480710] ion_system_heap_allocate+0x133/0x8c0 [ 1574.485537] ? _raw_spin_unlock+0x29/0x40 [ 1574.489731] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1574.494652] ? ion_system_contig_heap_create+0x130/0x130 [ 1574.500098] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1574.505116] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1574.509953] ion_alloc+0x27a/0x810 [ 1574.513488] ? ion_dma_buf_release+0x40/0x40 [ 1574.517906] ? __might_fault+0x177/0x1b0 [ 1574.521968] ion_ioctl+0xea/0x1f0 [ 1574.525406] ? ion_query_heaps+0x360/0x360 [ 1574.529632] ? ion_query_heaps+0x360/0x360 [ 1574.533874] do_vfs_ioctl+0x75a/0xff0 [ 1574.537661] ? ioctl_preallocate+0x1a0/0x1a0 [ 1574.542074] ? lock_downgrade+0x740/0x740 [ 1574.546210] ? __fget+0x225/0x360 [ 1574.549659] ? do_vfs_ioctl+0xff0/0xff0 [ 1574.553625] ? security_file_ioctl+0x83/0xb0 [ 1574.558116] SyS_ioctl+0x7f/0xb0 [ 1574.561473] ? do_vfs_ioctl+0xff0/0xff0 [ 1574.565445] do_syscall_64+0x1d5/0x640 [ 1574.569330] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1574.574509] RIP: 0033:0x4665d9 [ 1574.577683] RSP: 002b:00007f3d1f881188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1574.585371] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1574.592628] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1574.598069] Mem-Info: [ 1574.599880] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1574.599887] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1574.602297] active_anon:14989 inactive_anon:41283 isolated_anon:0 [ 1574.602297] active_file:16 inactive_file:16 isolated_file:0 [ 1574.602297] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1574.602297] slab_reclaimable:11931 slab_unreclaimable:116460 [ 1574.602297] mapped:52759 shmem:41754 pagetables:775 bounce:0 [ 1574.602297] free:14009 free_pcp:128 free_cma:0 [ 1574.609538] R13: 00007ffdbbfa296f R14: 00007f3d1f881300 R15: 0000000000022000 [ 1574.609855] systemd-journal: [ 1574.616989] CPU: 1 PID: 18475 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1574.661388] Bluetooth: hci3 command 0x041b tx timeout [ 1574.668699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1574.668703] Call Trace: [ 1574.668722] dump_stack+0x1b2/0x281 [ 1574.668736] warn_alloc.cold+0x96/0x1cc [ 1574.680899] page allocation failure: order:0 [ 1574.683265] ? zone_watermark_ok_safe+0x220/0x220 [ 1574.685829] , mode:0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1574.689540] ? usleep_range+0x130/0x130 [ 1574.689550] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1574.689563] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1574.689574] ? run_timer_softirq+0x5a0/0x5a0 [ 1574.693541] (null) [ 1574.697937] __alloc_pages_nodemask+0x2127/0x2720 [ 1574.702776] systemd-journal cpuset= [ 1574.709581] ? lock_acquire+0x170/0x3f0 [ 1574.709597] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1574.713552] / [ 1574.718636] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1574.723647] mems_allowed=0-1 [ 1574.728024] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1574.728044] alloc_pages_current+0x155/0x260 [ 1574.766879] ion_page_pool_alloc+0x118/0x1b0 [ 1574.771267] ion_system_heap_allocate+0x133/0x8c0 [ 1574.776190] ? _raw_spin_unlock+0x29/0x40 [ 1574.780337] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1574.785245] ? ion_system_contig_heap_create+0x130/0x130 [ 1574.790682] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1574.795680] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1574.800505] ion_alloc+0x27a/0x810 [ 1574.804035] ? ion_dma_buf_release+0x40/0x40 [ 1574.808427] ? __might_fault+0x177/0x1b0 [ 1574.812467] ion_ioctl+0xea/0x1f0 [ 1574.815899] ? ion_query_heaps+0x360/0x360 [ 1574.820128] ? ion_query_heaps+0x360/0x360 [ 1574.824351] do_vfs_ioctl+0x75a/0xff0 [ 1574.828140] ? ioctl_preallocate+0x1a0/0x1a0 [ 1574.832626] ? lock_downgrade+0x740/0x740 [ 1574.836768] ? __fget+0x225/0x360 [ 1574.840206] ? do_vfs_ioctl+0xff0/0xff0 [ 1574.844170] ? security_file_ioctl+0x83/0xb0 [ 1574.848559] SyS_ioctl+0x7f/0xb0 [ 1574.851914] ? do_vfs_ioctl+0xff0/0xff0 [ 1574.855868] do_syscall_64+0x1d5/0x640 [ 1574.859743] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1574.864922] RIP: 0033:0x4665d9 [ 1574.868019] warn_alloc_show_mem: 2 callbacks suppressed [ 1574.868022] Mem-Info: [ 1574.868184] RSP: 002b:00007f37127a1188 EFLAGS: 00000246 [ 1574.873647] active_anon:14989 inactive_anon:41283 isolated_anon:0 [ 1574.873647] active_file:16 inactive_file:16 isolated_file:0 [ 1574.873647] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1574.873647] slab_reclaimable:11931 slab_unreclaimable:116460 [ 1574.873647] mapped:52759 shmem:41754 pagetables:775 bounce:0 [ 1574.873647] free:14009 free_pcp:128 free_cma:0 [ 1574.876023] ORIG_RAX: 0000000000000010 [ 1574.888039] Node 0 active_anon:57664kB inactive_anon:128988kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141404kB dirty:0kB writeback:0kB shmem:130596kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1574.914969] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1574.914974] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1574.914979] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1574.914984] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1574.914988] R13: 00007ffd8a8e3f3f R14: 00007f37127a1300 R15: 0000000000022000 [ 1574.917119] Node 0 active_anon:57600kB inactive_anon:128988kB active_file:0kB inactive_file:80kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141404kB dirty:0kB writeback:0kB shmem:130596kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1574.936358] CPU: 0 PID: 18443 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 1574.947295] Node 1 active_anon:2288kB inactive_anon:36144kB active_file:56kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:69632kB dirty:0kB writeback:0kB shmem:36420kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1574.954572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1574.954576] Call Trace: [ 1574.954593] dump_stack+0x1b2/0x281 [ 1574.954605] warn_alloc.cold+0x96/0x1cc [ 1574.954614] ? qat_dh_compute_value+0xfb0/0x3e10 [ 1574.954622] ? zone_watermark_ok_safe+0x220/0x220 [ 1574.954629] ? usleep_range+0x130/0x130 [ 1574.954639] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1574.961923] Node 0 [ 1574.969153] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1574.969162] ? run_timer_softirq+0x5a0/0x5a0 [ 1574.969177] __alloc_pages_nodemask+0x2127/0x2720 [ 1574.976448] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1574.983704] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1574.983730] alloc_pages_current+0x155/0x260 [ 1575.011494] lowmem_reserve[]: [ 1575.019433] filemap_fault+0x11a1/0x1ad0 [ 1575.019453] ext4_filemap_fault+0x84/0xb0 [ 1575.047236] 0 [ 1575.056018] __do_fault+0xfa/0x380 [ 1575.056028] __handle_mm_fault+0x2497/0x4620 [ 1575.056040] ? vm_insert_page+0x7c0/0x7c0 [ 1575.058632] 2717 [ 1575.062256] ? mark_held_locks+0xa6/0xf0 [ 1575.066196] 2718 [ 1575.070935] handle_mm_fault+0x455/0x9c0 [ 1575.070947] __do_page_fault+0x549/0xad0 [ 1575.070958] ? spurious_fault+0x640/0x640 [ 1575.070966] ? do_page_fault+0x60/0x500 [ 1575.075783] 2718 [ 1575.079751] ? page_fault+0x2f/0x50 [ 1575.079759] page_fault+0x45/0x50 [ 1575.079767] RIP: 0001:0xffffffffffffffff [ 1575.079771] RSP: 569201e0:00007ffff5442cc0 EFLAGS: 7ffff5442ad0 [ 1575.095270] Node 1 active_anon:2288kB inactive_anon:36144kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:69632kB dirty:0kB writeback:0kB shmem:36420kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1575.098463] 2718 [ 1575.112359] Node 0 [ 1575.147442] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1575.147711] Node 0 [ 1575.155690] lowmem_reserve[]: [ 1575.158028] DMA32 free:18368kB min:36200kB low:45248kB high:54296kB active_anon:57600kB inactive_anon:128988kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7296kB pagetables:2452kB bounce:0kB free_pcp:532kB local_pcp:532kB free_cma:0kB [ 1575.170652] 0 [ 1575.176101] lowmem_reserve[]: [ 1575.191296] 2717 [ 1575.193824] 0 [ 1575.195437] 2718 [ 1575.199524] 0 0 0 0 [ 1575.199537] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1575.199554] lowmem_reserve[]: 0 0 0 0 0 [ 1575.199574] Node 1 Normal free:26824kB min:53696kB low:67120kB high:80544kB active_anon:2288kB inactive_anon:36144kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:648kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1575.199590] lowmem_reserve[]: 0 0 0 0 0 [ 1575.199608] Node 0 DMA: 0*4kB 22*8kB (UE) [ 1575.216651] 2718 [ 1575.235050] 7*16kB [ 1575.249099] 2718 [ 1575.272701] (UE) [ 1575.507653] 4*32kB (UE) 1*64kB (E) 2*128kB (UE) 2*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10976kB [ 1575.544659] Node 0 DMA32 free:35652kB min:36200kB low:45248kB high:54296kB active_anon:57600kB inactive_anon:128988kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7296kB pagetables:2452kB bounce:0kB free_pcp:1156kB local_pcp:624kB free_cma:0kB [ 1575.570899] Node 0 DMA32: 1966*4kB (UME) 1056*8kB (UME) 208*16kB (UME) 477*32kB (UME) 3*64kB (U) 3*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35736kB [ 1575.615915] lowmem_reserve[]: 0 0 0 0 0 [ 1575.635143] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1575.644569] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1575.759140] lowmem_reserve[]: 0 0 0 0 0 [ 1575.763159] Node 1 Normal free:53668kB min:53696kB low:67120kB high:80544kB active_anon:2288kB inactive_anon:36144kB active_file:132kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:648kB bounce:0kB free_pcp:124kB local_pcp:120kB free_cma:0kB [ 1575.807070] Node 1 Normal: 23*4kB (M) 755*8kB (UM) 931*16kB (UM) 836*32kB (UME) 22*64kB (UM) 9*128kB (U) 13*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53668kB [ 1575.829700] lowmem_reserve[]: 0 0 0 0 0 [ 1575.833721] Node 0 DMA: 1*4kB (U) 24*8kB (UE) 7*16kB (UE) 4*32kB (UE) 2*64kB (UE) 2*128kB (UE) 2*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11060kB [ 1575.881006] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1575.922562] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1575.927589] Node 0 DMA32: 1966*4kB (UME) 1057*8kB (UME) 209*16kB (UME) 477*32kB (UME) 3*64kB (U) 3*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35760kB [ 1575.971360] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1575.995234] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1576.002396] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1576.060589] 41786 total pagecache pages [ 1576.064599] 0 pages in swap cache [ 1576.068160] Node 1 Normal: 23*4kB (M) 755*8kB (UM) 931*16kB (UM) 836*32kB (UME) 22*64kB (UM) 9*128kB (U) 13*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53668kB [ 1576.080279] Swap cache stats: add 0, delete 0, find 0/0 [ 1576.104662] Free swap = 0kB [ 1576.107709] Total swap = 0kB [ 1576.135030] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1576.140250] 2097051 pages RAM [ 1576.147000] 0 pages HighMem/MovableOnly [ 1576.179510] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1576.204315] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1576.205992] 363849 pages reserved [ 1576.213229] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1576.261734] 41786 total pagecache pages [ 1576.262949] 0 pages cma reserved [ 1576.265745] 0 pages in swap cache [ 1576.306370] Out of memory (oom_kill_allocating_task): Kill process 18512 (in:imklog) score 0 or sacrifice child [ 1576.306800] Swap cache stats: add 0, delete 0, find 0/0 [ 1576.362858] Killed process 18505 (rsyslogd) total-vm:254332kB, anon-rss:416kB, file-rss:0kB, shmem-rss:0kB [ 1576.387287] Free swap = 0kB [ 1576.397011] Total swap = 0kB [ 1576.401172] 2097051 pages RAM [ 1576.404334] 0 pages HighMem/MovableOnly [ 1576.437959] 363849 pages reserved [ 1576.441448] 0 pages cma reserved [ 1576.648516] Bluetooth: hci3 command 0x040f tx timeout [ 1576.911025] systemd-udevd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=-1000 [ 1577.032934] systemd-udevd cpuset=/ mems_allowed=0-1 [ 1577.078835] CPU: 1 PID: 4629 Comm: systemd-udevd Not tainted 4.14.232-syzkaller #0 [ 1577.086576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1577.095929] Call Trace: [ 1577.098517] dump_stack+0x1b2/0x281 [ 1577.102146] dump_header+0x178/0x82f [ 1577.105870] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1577.111077] ? ___ratelimit+0x2cd/0x530 [ 1577.115044] oom_kill_process.cold+0x10/0xa40 [ 1577.119533] ? lock_downgrade+0x740/0x740 [ 1577.123768] out_of_memory+0x2dc/0x1190 [ 1577.127754] ? oom_killer_disable+0x1c0/0x1c0 [ 1577.132246] ? mutex_trylock+0x152/0x1a0 [ 1577.136336] __alloc_pages_nodemask+0x23e1/0x2720 [ 1577.141299] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1577.146243] alloc_pages_current+0x155/0x260 [ 1577.150649] filemap_fault+0x11a1/0x1ad0 [ 1577.154715] ext4_filemap_fault+0x84/0xb0 [ 1577.158857] __do_fault+0xfa/0x380 [ 1577.162414] __handle_mm_fault+0x2497/0x4620 [ 1577.166925] ? vm_insert_page+0x7c0/0x7c0 [ 1577.171066] ? retint_kernel+0x2d/0x2d [ 1577.174953] ? mark_held_locks+0xa6/0xf0 [ 1577.179011] handle_mm_fault+0x455/0x9c0 [ 1577.183080] __do_page_fault+0x549/0xad0 [ 1577.187143] ? spurious_fault+0x640/0x640 [ 1577.191292] ? do_page_fault+0x60/0x500 [ 1577.195262] ? page_fault+0x2f/0x50 [ 1577.198881] page_fault+0x45/0x50 [ 1577.202336] RIP: 0001:0x1 [ 1577.205260] RSP: 1b2b7600:00007ffc2eb53ed0 EFLAGS: 7ffc2eb53d60 [ 1577.315999] Mem-Info: [ 1577.324546] active_anon:14821 inactive_anon:41282 isolated_anon:0 [ 1577.324546] active_file:54 inactive_file:0 isolated_file:0 [ 1577.324546] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1577.324546] slab_reclaimable:11946 slab_unreclaimable:116545 [ 1577.324546] mapped:52225 shmem:41754 pagetables:670 bounce:0 [ 1577.324546] free:25095 free_pcp:4 free_cma:0 [ 1577.398457] Node 0 active_anon:57468kB inactive_anon:128984kB active_file:100kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139268kB dirty:0kB writeback:0kB shmem:130596kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1577.568100] Node 1 active_anon:1816kB inactive_anon:36144kB active_file:80kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:69632kB dirty:0kB writeback:0kB shmem:36420kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1577.748914] Node 0 DMA free:11072kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1577.925593] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1577.948330] Node 0 DMA32 free:36184kB min:36200kB low:45248kB high:54296kB active_anon:57468kB inactive_anon:128984kB active_file:12kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7264kB pagetables:2120kB bounce:0kB free_pcp:112kB local_pcp:0kB free_cma:0kB [ 1578.017020] lowmem_reserve[]: 0 0 0 0 0 [ 1578.021139] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1578.058080] lowmem_reserve[]: 0 0 0 0 0 [ 1578.062083] Node 1 Normal free:53220kB min:53696kB low:67120kB high:80544kB active_anon:1816kB inactive_anon:36144kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:560kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1578.100887] lowmem_reserve[]: 0 0 0 0 0 [ 1578.104948] Node 0 DMA: 1*4kB (U) 16*8kB (UE) 7*16kB (UE) 4*32kB (UE) 3*64kB (UE) 2*128kB (UE) 2*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11060kB [ 1578.130244] Node 0 DMA32: 1138*4kB (UME) 1196*8kB (UME) 218*16kB (UME) 506*32kB (UE) 8*64kB (UM) 10*128kB (U) 2*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36104kB [ 1578.155548] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1578.176598] Node 1 Normal: 39*4kB (UME) 371*8kB (UM) 994*16kB (UME) 865*32kB (UME) 58*64kB (UM) 16*128kB (U) 3*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53236kB [ 1578.202089] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1578.216919] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1578.235913] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1578.244955] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1578.263638] 41787 total pagecache pages [ 1578.267646] 0 pages in swap cache [ 1578.275496] Swap cache stats: add 0, delete 0, find 0/0 [ 1578.286496] Free swap = 0kB [ 1578.293738] Total swap = 0kB [ 1578.296759] 2097051 pages RAM [ 1578.306102] 0 pages HighMem/MovableOnly [ 1578.314169] 363849 pages reserved [ 1578.317638] 0 pages cma reserved [ 1578.327103] Out of memory: Kill process 18506 (syz-executor.4) score 1005 or sacrifice child [ 1578.346456] Killed process 18509 (syz-executor.4) total-vm:93384kB, anon-rss:2196kB, file-rss:34820kB, shmem-rss:0kB [ 1578.397438] oom_reaper: reaped process 18509 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1578.430427] systemd-udevd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=-1000 [ 1578.462539] systemd-udevd cpuset=/ mems_allowed=0-1 [ 1578.467625] CPU: 1 PID: 4629 Comm: systemd-udevd Not tainted 4.14.232-syzkaller #0 [ 1578.475502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1578.484849] Call Trace: [ 1578.487550] dump_stack+0x1b2/0x281 [ 1578.491190] dump_header+0x178/0x82f [ 1578.494907] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1578.500064] ? ___ratelimit+0x2cd/0x530 [ 1578.504043] oom_kill_process.cold+0x10/0xa40 [ 1578.508565] ? lock_downgrade+0x740/0x740 [ 1578.512731] out_of_memory+0x2dc/0x1190 [ 1578.516726] ? oom_killer_disable+0x1c0/0x1c0 [ 1578.521223] ? mutex_trylock+0x152/0x1a0 [ 1578.525271] __alloc_pages_nodemask+0x23e1/0x2720 [ 1578.530103] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1578.534937] alloc_pages_current+0x155/0x260 [ 1578.539438] filemap_fault+0x11a1/0x1ad0 [ 1578.543503] ext4_filemap_fault+0x84/0xb0 [ 1578.547643] __do_fault+0xfa/0x380 [ 1578.551191] __handle_mm_fault+0x2497/0x4620 [ 1578.555584] ? vm_insert_page+0x7c0/0x7c0 [ 1578.559812] ? retint_kernel+0x2d/0x2d [ 1578.563688] ? mark_held_locks+0xa6/0xf0 [ 1578.567732] handle_mm_fault+0x455/0x9c0 [ 1578.571787] __do_page_fault+0x549/0xad0 [ 1578.575840] ? spurious_fault+0x640/0x640 [ 1578.579978] ? do_page_fault+0x60/0x500 [ 1578.584628] ? page_fault+0x2f/0x50 [ 1578.588235] page_fault+0x45/0x50 [ 1578.591672] RIP: 0001:0x1 [ 1578.594418] RSP: 1b2b7600:00007ffc2eb53ed0 EFLAGS: 7ffc2eb53d60 [ 1578.599470] Mem-Info: [ 1578.607609] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1578.609776] active_anon:14309 inactive_anon:41282 isolated_anon:0 [ 1578.609776] active_file:39 inactive_file:12 isolated_file:0 [ 1578.609776] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1578.609776] slab_reclaimable:11946 slab_unreclaimable:116519 [ 1578.609776] mapped:52225 shmem:41754 pagetables:670 bounce:0 [ 1578.609776] free:13961 free_pcp:114 free_cma:0 [ 1578.638143] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1578.658776] Node 0 active_anon:55420kB inactive_anon:128984kB active_file:20kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139268kB dirty:0kB writeback:0kB shmem:130596kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1578.680820] CPU: 0 PID: 18509 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1578.691894] Node 1 active_anon:1816kB inactive_anon:36144kB active_file:136kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:69632kB dirty:0kB writeback:0kB shmem:36420kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1578.696063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1578.727001] Node 0 [ 1578.732648] Call Trace: [ 1578.732669] dump_stack+0x1b2/0x281 [ 1578.732683] warn_alloc.cold+0x96/0x1cc [ 1578.732694] ? zone_watermark_ok_safe+0x220/0x220 [ 1578.732703] ? usleep_range+0x130/0x130 [ 1578.732715] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1578.735442] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:16kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1578.737532] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1578.746064] lowmem_reserve[]: [ 1578.746603] ? run_timer_softirq+0x5a0/0x5a0 [ 1578.751463] 0 [ 1578.755400] __alloc_pages_nodemask+0x2127/0x2720 [ 1578.764061] 2717 [ 1578.786678] ? lock_acquire+0x170/0x3f0 [ 1578.786695] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1578.786705] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1578.786721] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1578.786741] alloc_pages_current+0x155/0x260 [ 1578.795227] 2718 [ 1578.799250] ion_page_pool_alloc+0x118/0x1b0 [ 1578.799260] ion_system_heap_allocate+0x133/0x8c0 [ 1578.799269] ? ion_alloc+0x187/0x810 [ 1578.799278] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1578.799287] ? ion_system_contig_heap_create+0x130/0x130 [ 1578.799297] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1578.801094] 2718 [ 1578.805920] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1578.811588] 2718 [ 1578.811951] ion_alloc+0x204/0x810 [ 1578.816770] Node 0 [ 1578.821366] ? ion_dma_buf_release+0x40/0x40 [ 1578.821378] ? __might_fault+0x177/0x1b0 [ 1578.821388] ion_ioctl+0xea/0x1f0 [ 1578.821396] ? ion_query_heaps+0x360/0x360 [ 1578.821407] ? ion_query_heaps+0x360/0x360 [ 1578.821416] do_vfs_ioctl+0x75a/0xff0 [ 1578.831849] DMA32 free:18064kB min:36200kB low:45248kB high:54296kB active_anon:55420kB inactive_anon:128984kB active_file:12kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7264kB pagetables:2120kB bounce:0kB free_pcp:244kB local_pcp:4kB free_cma:0kB [ 1578.832740] ? ioctl_preallocate+0x1a0/0x1a0 [ 1578.834806] lowmem_reserve[]: [ 1578.839198] ? lock_downgrade+0x740/0x740 [ 1578.839211] ? __fget+0x225/0x360 [ 1578.839219] ? do_vfs_ioctl+0xff0/0xff0 [ 1578.839230] ? security_file_ioctl+0x83/0xb0 [ 1578.839239] SyS_ioctl+0x7f/0xb0 [ 1578.839249] ? do_vfs_ioctl+0xff0/0xff0 [ 1578.844109] 0 [ 1578.847807] do_syscall_64+0x1d5/0x640 [ 1578.847822] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1578.847830] RIP: 0033:0x4665d9 [ 1578.847834] RSP: 002b:00007f5f77a6d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1578.847844] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1578.847849] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1578.847858] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1578.847865] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1578.856206] 0 [ 1578.858718] R13: 00007ffe82aa5b1f R14: 00007f5f77a6d300 R15: 0000000000022000 [ 1578.878448] Bluetooth: hci3 command 0x0419 tx timeout [ 1578.881814] 0 [ 1578.906154] warn_alloc_show_mem: 2 callbacks suppressed [ 1578.906157] Mem-Info: [ 1578.935443] 0 [ 1578.954198] active_anon:14286 inactive_anon:41282 isolated_anon:0 [ 1578.954198] active_file:30 inactive_file:0 isolated_file:0 [ 1578.954198] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1578.954198] slab_reclaimable:11946 slab_unreclaimable:116519 [ 1578.954198] mapped:52225 shmem:41754 pagetables:669 bounce:0 [ 1578.954198] free:13962 free_pcp:114 free_cma:0 [ 1578.958735] 0 [ 1578.975411] Node 0 active_anon:55416kB inactive_anon:128984kB active_file:48kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139268kB dirty:0kB writeback:0kB shmem:130596kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1578.993964] Node 1 active_anon:1728kB inactive_anon:36144kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:69632kB dirty:0kB writeback:0kB shmem:36420kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1579.002601] Node 0 [ 1579.024086] Node 0 [ 1579.032270] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1579.052495] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1579.076686] lowmem_reserve[]: [ 1579.121350] lowmem_reserve[]: [ 1579.133438] 0 [ 1579.153276] 0 [ 1579.163445] 0 0 0 0 [ 1579.201793] Node 1 Normal free:26824kB min:53696kB low:67120kB high:80544kB active_anon:1728kB inactive_anon:36144kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:556kB bounce:0kB free_pcp:212kB local_pcp:92kB free_cma:0kB [ 1579.206212] 2717 [ 1579.234889] lowmem_reserve[]: 0 0 0 0 0 [ 1579.241005] Node 0 DMA: 0*4kB 4*8kB (UE) 7*16kB (UE) 4*32kB (UE) 3*64kB (UE) 2*128kB (UE) 2*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10960kB [ 1579.251114] 2718 2718 2718 [ 1579.259666] Node 0 DMA32: 738*4kB (ME) 258*8kB (UME) 73*16kB (UME) 236*32kB (UE) 8*64kB (UM) 10*128kB (U) 2*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 18088kB [ 1579.274915] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1579.277239] Node 0 [ 1579.290634] Node 1 Normal: 22*4kB (UME) 22*8kB (M) 24*16kB (UME) 614*32kB (UME) 58*64kB (UM) 16*128kB (U) 3*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26824kB [ 1579.304987] DMA32 free:18064kB min:36200kB low:45248kB high:54296kB active_anon:55416kB inactive_anon:128984kB active_file:28kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7264kB pagetables:2124kB bounce:0kB free_pcp:244kB local_pcp:240kB free_cma:0kB [ 1579.311450] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1579.349817] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1579.358440] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1579.363285] lowmem_reserve[]: [ 1579.367338] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1579.367345] 0 [ 1579.374134] 41787 total pagecache pages [ 1579.385076] 0 pages in swap cache [ 1579.392615] 0 0 0 0 [ 1579.394965] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1579.398187] Swap cache stats: add 0, delete 0, find 0/0 [ 1579.434798] lowmem_reserve[]: 0 0 0 0 0 [ 1579.436297] Free swap = 0kB [ 1579.442336] Total swap = 0kB [ 1579.444570] Node 1 Normal free:26824kB min:53696kB low:67120kB high:80544kB active_anon:1728kB inactive_anon:36144kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:556kB bounce:0kB free_pcp:212kB local_pcp:120kB free_cma:0kB [ 1579.445440] 2097051 pages RAM [ 1579.445446] 0 pages HighMem/MovableOnly [ 1579.490959] lowmem_reserve[]: 0 0 0 0 0 [ 1579.492466] 363849 pages reserved [ 1579.495006] Node 0 [ 1579.502662] 0 pages cma reserved [ 1579.508325] DMA: 0*4kB 4*8kB (UE) 7*16kB (UE) 4*32kB (UE) 3*64kB (UE) 2*128kB (UE) 2*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10960kB [ 1579.514265] Out of memory: Kill process 18469 (syz-executor.5) score 1004 or sacrifice child [ 1579.536359] Node 0 DMA32: 738*4kB (ME) 258*8kB (UME) 73*16kB (UME) 236*32kB (UE) 8*64kB (UM) 10*128kB (U) 2*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 18088kB [ 1579.540883] Killed process 18470 (syz-executor.5) total-vm:93516kB, anon-rss:160kB, file-rss:34820kB, shmem-rss:0kB [ 1579.581007] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1579.607569] Node 1 Normal: 22*4kB (UME) 22*8kB (M) 24*16kB (UME) 614*32kB (UME) 58*64kB (UM) 16*128kB (U) 3*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26824kB [ 1579.629769] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1579.662821] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1579.666532] syz-fuzzer cpuset= [ 1579.676617] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1579.681727] syz-executor.5: [ 1579.694780] syz-executor.5: [ 1579.695891] / [ 1579.701395] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1579.705043] page allocation failure: order:0 [ 1579.723793] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1579.724731] mems_allowed=0-1 [ 1579.731869] syz-executor.5 cpuset= [ 1579.746125] CPU: 1 PID: 23230 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 1579.746382] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1579.749681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1579.749685] Call Trace: [ 1579.749703] dump_stack+0x1b2/0x281 [ 1579.749714] dump_header+0x178/0x82f [ 1579.757220] 41787 total pagecache pages [ 1579.765776] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1579.765785] ? ___ratelimit+0x2cd/0x530 [ 1579.765794] oom_kill_process.cold+0x10/0xa40 [ 1579.765811] out_of_memory+0xe3e/0x1190 [ 1579.775182] / [ 1579.777735] ? oom_killer_disable+0x1c0/0x1c0 [ 1579.781448] mems_allowed=0-1 [ 1579.785121] ? mutex_trylock+0x152/0x1a0 [ 1579.807685] 0 pages in swap cache [ 1579.808198] __alloc_pages_nodemask+0x23e1/0x2720 [ 1579.812671] Swap cache stats: add 0, delete 0, find 0/0 [ 1579.815774] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1579.827689] Free swap = 0kB [ 1579.828109] alloc_pages_current+0x155/0x260 [ 1579.833438] Total swap = 0kB [ 1579.838288] filemap_fault+0x11a1/0x1ad0 [ 1579.838307] ext4_filemap_fault+0x84/0xb0 [ 1579.856836] __do_fault+0xfa/0x380 [ 1579.857679] 2097051 pages RAM [ 1579.860360] __handle_mm_fault+0x2497/0x4620 [ 1579.863527] 0 pages HighMem/MovableOnly [ 1579.867925] ? vm_insert_page+0x7c0/0x7c0 [ 1579.867934] ? __fsnotify_inode_delete+0x20/0x20 [ 1579.867945] ? setup_sigcontext+0x820/0x820 [ 1579.885060] ? mark_held_locks+0xa6/0xf0 [ 1579.887670] 363849 pages reserved [ 1579.889104] handle_mm_fault+0x455/0x9c0 [ 1579.892529] 0 pages cma reserved [ 1579.896580] __do_page_fault+0x549/0xad0 [ 1579.903962] ? spurious_fault+0x640/0x640 [ 1579.908095] ? do_page_fault+0x60/0x500 [ 1579.912059] ? page_fault+0x2f/0x50 [ 1579.915673] page_fault+0x45/0x50 [ 1579.919112] RIP: 0001:0x177fa17e396 [ 1579.922714] RSP: 0000:000000c000a63788 EFLAGS: 0004b683 [ 1579.922733] CPU: 0 PID: 18483 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1579.936416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1579.943708] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1579.945875] Call Trace: [ 1579.945892] dump_stack+0x1b2/0x281 [ 1579.945906] warn_alloc.cold+0x96/0x1cc [ 1579.945918] ? zone_watermark_ok_safe+0x220/0x220 [ 1579.945928] ? usleep_range+0x130/0x130 [ 1579.945939] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1579.977390] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1579.982424] ? run_timer_softirq+0x5a0/0x5a0 [ 1579.986843] __alloc_pages_nodemask+0x2127/0x2720 [ 1579.987409] (null) [ 1579.991773] ? lock_acquire+0x170/0x3f0 [ 1579.991788] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1579.991797] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1579.991813] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1580.012777] alloc_pages_current+0x155/0x260 [ 1580.017190] ion_page_pool_alloc+0x118/0x1b0 [ 1580.022804] ion_system_heap_allocate+0x133/0x8c0 [ 1580.027715] syz-executor.5 cpuset= [ 1580.028652] ? ion_alloc+0x187/0x810 [ 1580.028663] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1580.028673] ? ion_system_contig_heap_create+0x130/0x130 [ 1580.032237] / [ 1580.035911] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1580.053619] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1580.058467] ion_alloc+0x204/0x810 [ 1580.062007] ? ion_dma_buf_release+0x40/0x40 [ 1580.064044] mems_allowed=0-1 [ 1580.066414] ? __might_fault+0x177/0x1b0 [ 1580.073582] ion_ioctl+0xea/0x1f0 [ 1580.077026] ? ion_query_heaps+0x360/0x360 [ 1580.081250] ? ion_query_heaps+0x360/0x360 [ 1580.085484] do_vfs_ioctl+0x75a/0xff0 [ 1580.089285] ? ioctl_preallocate+0x1a0/0x1a0 [ 1580.093691] ? lock_downgrade+0x740/0x740 [ 1580.097839] ? __fget+0x225/0x360 [ 1580.101296] ? do_vfs_ioctl+0xff0/0xff0 [ 1580.105270] ? security_file_ioctl+0x83/0xb0 [ 1580.109677] SyS_ioctl+0x7f/0xb0 [ 1580.113632] ? do_vfs_ioctl+0xff0/0xff0 [ 1580.117598] do_syscall_64+0x1d5/0x640 [ 1580.121486] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1580.126669] RIP: 0033:0x4665d9 [ 1580.129879] RSP: 002b:00007f2b2a187188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1580.137580] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 00000000004665d9 [ 1580.144843] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1580.152107] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1580.159377] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 1580.166779] R13: 00007ffc70377c3f R14: 00007f2b2a187300 R15: 0000000000022000 [ 1580.178684] CPU: 1 PID: 18470 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1580.186585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1580.196480] Call Trace: [ 1580.199086] dump_stack+0x1b2/0x281 [ 1580.202733] warn_alloc.cold+0x96/0x1cc [ 1580.206726] ? zone_watermark_ok_safe+0x220/0x220 [ 1580.211592] ? usleep_range+0x130/0x130 [ 1580.215570] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1580.220690] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1580.225723] ? run_timer_softirq+0x5a0/0x5a0 [ 1580.230151] __alloc_pages_nodemask+0x2127/0x2720 [ 1580.235005] ? lock_acquire+0x170/0x3f0 [ 1580.238995] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1580.243860] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1580.248370] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1580.253837] alloc_pages_current+0x155/0x260 [ 1580.258265] ion_page_pool_alloc+0x118/0x1b0 [ 1580.262688] ion_system_heap_allocate+0x133/0x8c0 [ 1580.267547] ? ion_alloc+0x187/0x810 [ 1580.271274] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1580.276723] ? ion_system_contig_heap_create+0x130/0x130 [ 1580.282269] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1580.287393] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1580.292253] ion_alloc+0x204/0x810 [ 1580.295805] ? ion_dma_buf_release+0x40/0x40 [ 1580.300251] ? __might_fault+0x177/0x1b0 [ 1580.304332] ion_ioctl+0xea/0x1f0 [ 1580.307898] ? ion_query_heaps+0x360/0x360 [ 1580.312133] ? ion_query_heaps+0x360/0x360 [ 1580.316366] do_vfs_ioctl+0x75a/0xff0 [ 1580.320236] ? ioctl_preallocate+0x1a0/0x1a0 [ 1580.324761] ? lock_downgrade+0x740/0x740 [ 1580.328920] ? __fget+0x225/0x360 [ 1580.332384] ? do_vfs_ioctl+0xff0/0xff0 [ 1580.336370] ? security_file_ioctl+0x83/0xb0 [ 1580.340822] SyS_ioctl+0x7f/0xb0 [ 1580.344202] ? do_vfs_ioctl+0xff0/0xff0 [ 1580.348190] do_syscall_64+0x1d5/0x640 [ 1580.352103] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1580.357287] RIP: 0033:0x4665d9 [ 1580.360478] RSP: 002b:00007f2b2a1c9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1580.368280] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1580.375544] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1580.382959] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1580.390495] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1580.397768] R13: 00007ffc70377c3f R14: 00007f2b2a1c9300 R15: 0000000000022000 [ 1580.414166] Mem-Info: [ 1580.417429] active_anon:14286 inactive_anon:41282 isolated_anon:0 [ 1580.417429] active_file:92 inactive_file:667 isolated_file:0 [ 1580.417429] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1580.417429] slab_reclaimable:11946 slab_unreclaimable:116500 [ 1580.417429] mapped:52626 shmem:41754 pagetables:670 bounce:0 [ 1580.417429] free:158173 free_pcp:373 free_cma:0 [ 1580.452347] Node 0 active_anon:55416kB inactive_anon:128984kB active_file:20kB inactive_file:452kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139568kB dirty:0kB writeback:0kB shmem:130596kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1580.573057] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1580.635923] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 1580.659455] chnl_net:caif_netlink_parms(): no params data found [ 1580.660081] Node 1 active_anon:1628kB inactive_anon:36144kB active_file:2048kB inactive_file:7484kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:41236kB dirty:0kB writeback:0kB shmem:36420kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1580.667802] Mem-Info: [ 1580.709503] systemd[1]: rsyslog.service: Unit entered failed state. [ 1580.733897] systemd[1]: rsyslog.service: Failed with result 'signal'. [ 1580.772474] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1580.778378] active_anon:14461 inactive_anon:41282 isolated_anon:0 [ 1580.778378] active_file:1042 inactive_file:2262 isolated_file:0 [ 1580.778378] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1580.778378] slab_reclaimable:11971 slab_unreclaimable:117182 [ 1580.778378] mapped:45826 shmem:41754 pagetables:670 bounce:0 [ 1580.778378] free:40949 free_pcp:502 free_cma:0 [ 1580.783134] Node 0 DMA free:11116kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:0kB active_file:24kB inactive_file:20kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1580.881440] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 1580.899220] systemd[1]: Stopped Journal Service. [ 1580.919427] Node 0 active_anon:55348kB inactive_anon:128980kB active_file:456kB inactive_file:624kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:140240kB dirty:8kB writeback:0kB shmem:130592kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1580.950961] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1580.964581] Node 0 DMA32 free:44820kB min:36200kB low:45248kB high:54296kB active_anon:55376kB inactive_anon:128980kB active_file:424kB inactive_file:592kB unevictable:0kB writepending:8kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7200kB pagetables:2096kB bounce:0kB free_pcp:932kB local_pcp:208kB free_cma:0kB [ 1580.998351] systemd[1]: Starting Journal Service... [ 1581.040667] systemd[1]: rsyslog.service: Service hold-off time over, scheduling restart. [ 1581.050739] Node 1 active_anon:1960kB inactive_anon:36148kB active_file:5496kB inactive_file:6944kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:43016kB dirty:24kB writeback:0kB shmem:36424kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1581.093776] bridge0: port 1(bridge_slave_0) entered blocking state [ 1581.100687] systemd[1]: Stopped System Logging Service. [ 1581.106563] lowmem_reserve[]: 0 0 0 0 0 [ 1581.117377] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1581.143886] bridge0: port 1(bridge_slave_0) entered disabled state [ 1581.181579] device bridge_slave_0 entered promiscuous mode [ 1581.191790] Node 0 DMA free:11036kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1581.208812] bridge0: port 2(bridge_slave_1) entered blocking state [ 1581.235201] lowmem_reserve[]: 0 0 0 0 0 [ 1581.245929] Node 1 Normal free:115892kB min:53696kB low:67120kB high:80544kB active_anon:1760kB inactive_anon:36148kB active_file:5496kB inactive_file:7056kB unevictable:0kB writepending:24kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:704kB bounce:0kB free_pcp:1272kB local_pcp:652kB free_cma:0kB [ 1581.275751] bridge0: port 2(bridge_slave_1) entered disabled state [ 1581.276700] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1581.313086] Node 0 DMA32 free:64508kB min:36200kB low:45248kB high:54296kB active_anon:55880kB inactive_anon:128980kB active_file:424kB inactive_file:1096kB unevictable:0kB writepending:8kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7200kB pagetables:2096kB bounce:0kB free_pcp:836kB local_pcp:208kB free_cma:0kB [ 1581.317696] device bridge_slave_1 entered promiscuous mode [ 1581.344122] lowmem_reserve[]: [ 1581.355446] systemd-journald[18637]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1581.387676] 0 0 0 0 0 [ 1581.390323] Node 0 DMA: 3*4kB (UM) 14*8kB (U) 8*16kB (UM) 7*32kB (UME) 9*64kB (UE) 4*128kB (UME) 3*256kB (UME) 5*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 11036kB [ 1581.419195] Node 0 DMA32: 449*4kB (UME) 562*8kB (UME) 2129*16kB (UE) 661*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 61508kB [ 1581.447883] lowmem_reserve[]: 0 0 0 0 0 [ 1581.452116] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1581.510802] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1581.515208] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1581.537972] Node 1 Normal: 1628*4kB (UME) 1420*8kB (UM) 2096*16kB (UE) 1922*32kB (UE) 454*64kB (U) 184*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 166288kB [ 1581.560452] systemd-journald[18637]: /dev/kmsg buffer overrun, some messages lost. [ 1581.564564] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1581.571234] lowmem_reserve[]: 0 0 0 0 0 [ 1581.587615] Node 1 Normal free:174732kB min:53696kB low:67120kB high:80544kB active_anon:1660kB inactive_anon:36148kB active_file:5496kB inactive_file:7056kB unevictable:0kB writepending:24kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:704kB bounce:0kB free_pcp:1332kB local_pcp:652kB free_cma:0kB [ 1581.627690] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1581.647627] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1581.656331] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1581.689685] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1581.694938] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1581.707497] lowmem_reserve[]: 0 0 0 0 0 [ 1581.717249] Node 0 DMA: 3*4kB (UM) 14*8kB (U) 8*16kB (UM) 7*32kB (UME) 9*64kB (UE) 4*128kB (UME) 3*256kB (UME) 5*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 11036kB [ 1581.737792] 47672 total pagecache pages [ 1581.741888] 0 pages in swap cache [ 1581.745424] Swap cache stats: add 0, delete 0, find 0/0 [ 1581.755066] team0: Port device team_slave_0 added [ 1581.777597] Node 0 DMA32: 4449*4kB (U) 1690*8kB (UE) 2225*16kB (UE) 703*32kB (UE) 3*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 89604kB [ 1581.796024] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1581.797031] Free swap = 0kB [ 1581.812395] Total swap = 0kB [ 1581.831293] 2097051 pages RAM [ 1581.836060] team0: Port device team_slave_1 added [ 1581.841897] 0 pages HighMem/MovableOnly [ 1581.846764] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1581.862636] 363849 pages reserved [ 1581.884004] 0 pages cma reserved [ 1581.887404] Out of memory (oom_kill_allocating_task): Kill process 23230 (syz-fuzzer) score 0 or sacrifice child [ 1581.910858] Node 1 Normal: 3246*4kB (UME) 1598*8kB (UM) 2195*16kB (UME) 2045*32kB (UME) 0*64kB 98*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 138872kB [ 1581.969333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1581.975692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1582.004515] Killed process 18485 (syz-executor.1) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1582.015426] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1582.044187] oom_reaper: reaped process 18470 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1582.054477] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1582.087657] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1582.096625] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1582.127591] 48817 total pagecache pages [ 1582.137581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1582.142118] 0 pages in swap cache [ 1582.170242] Swap cache stats: add 0, delete 0, find 0/0 [ 1582.197790] Free swap = 0kB [ 1582.201086] Total swap = 0kB [ 1582.204112] 2097051 pages RAM [ 1582.207214] 0 pages HighMem/MovableOnly [ 1582.231367] 363849 pages reserved 20:08:33 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x7fffffff, 0x23}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, 0x0, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000080)=0x1) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x4, 0xcf, 0x7ff, 0x8, 0x0, 0x1, 0xb51, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x40) 20:08:33 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x7fffffff, 0x23}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, 0x0, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000080)=0x1) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x4, 0xcf, 0x7ff, 0x8, 0x0, 0x1, 0xb51, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x40) [ 1582.248169] 0 pages cma reserved [ 1582.273050] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1582.288496] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1582.301338] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1582.307802] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1582.313886] CPU: 0 PID: 18509 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1582.321882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1582.335836] Call Trace: [ 1582.338436] dump_stack+0x1b2/0x281 [ 1582.342080] warn_alloc.cold+0x96/0x1cc [ 1582.346058] ? zone_watermark_ok_safe+0x220/0x220 [ 1582.350930] __alloc_pages_nodemask+0x2127/0x2720 [ 1582.355779] ? _raw_spin_unlock_irq+0x5a/0x80 [ 1582.360275] ? finish_task_switch+0x178/0x610 [ 1582.364797] ? finish_task_switch+0x14d/0x610 [ 1582.369297] ? lock_acquire+0x170/0x3f0 [ 1582.373282] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1582.378135] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1582.383682] ? __mutex_unlock_slowpath+0x75/0x770 [ 1582.388532] ? alloc_pages_current+0x84/0x260 [ 1582.393030] alloc_pages_current+0x155/0x260 [ 1582.397441] ion_page_pool_alloc+0x118/0x1b0 [ 1582.401859] ion_system_heap_allocate+0x133/0x8c0 [ 1582.406715] ? _raw_spin_unlock+0x29/0x40 [ 1582.411039] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1582.416025] ? ion_system_contig_heap_create+0x130/0x130 [ 1582.421484] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1582.426512] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1582.431360] ion_alloc+0x27a/0x810 [ 1582.434903] ? ion_dma_buf_release+0x40/0x40 [ 1582.439402] ? __might_fault+0x177/0x1b0 [ 1582.443500] ion_ioctl+0xea/0x1f0 [ 1582.447056] ? ion_query_heaps+0x360/0x360 [ 1582.451301] ? ion_query_heaps+0x360/0x360 [ 1582.455537] do_vfs_ioctl+0x75a/0xff0 [ 1582.459343] ? ioctl_preallocate+0x1a0/0x1a0 [ 1582.463754] ? lock_downgrade+0x740/0x740 [ 1582.468002] ? __fget+0x225/0x360 [ 1582.471463] ? do_vfs_ioctl+0xff0/0xff0 [ 1582.475440] ? security_file_ioctl+0x83/0xb0 [ 1582.479854] SyS_ioctl+0x7f/0xb0 [ 1582.483309] ? do_vfs_ioctl+0xff0/0xff0 [ 1582.487293] do_syscall_64+0x1d5/0x640 [ 1582.491186] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1582.496373] RIP: 0033:0x4665d9 [ 1582.499569] RSP: 002b:00007f5f77a6d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1582.507280] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1582.514909] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1582.522397] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1582.529678] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1582.536954] R13: 00007ffe82aa5b1f R14: 00007f5f77a6d300 R15: 0000000000022000 [ 1582.544956] CPU: 0 PID: 18483 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1582.552875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1582.562232] Call Trace: [ 1582.564828] dump_stack+0x1b2/0x281 [ 1582.568529] warn_alloc.cold+0x96/0x1cc [ 1582.572512] ? zone_watermark_ok_safe+0x220/0x220 [ 1582.577380] __alloc_pages_nodemask+0x2127/0x2720 [ 1582.582364] ? lock_acquire+0x170/0x3f0 [ 1582.586345] ? lock_acquire+0x170/0x3f0 [ 1582.590343] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1582.595196] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1582.600685] ? __mutex_unlock_slowpath+0x75/0x770 [ 1582.605531] ? alloc_pages_current+0x123/0x260 [ 1582.610113] alloc_pages_current+0x155/0x260 [ 1582.614522] ion_page_pool_alloc+0x118/0x1b0 [ 1582.618936] ion_system_heap_allocate+0x133/0x8c0 20:08:34 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x7fffffff, 0x23}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, 0x0, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000080)=0x1) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x4, 0xcf, 0x7ff, 0x8, 0x0, 0x1, 0xb51, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x40) [ 1582.623783] ? _raw_spin_unlock+0x29/0x40 [ 1582.627933] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1582.632954] ? ion_system_contig_heap_create+0x130/0x130 [ 1582.638607] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1582.643628] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1582.648532] ion_alloc+0x27a/0x810 [ 1582.652175] ? ion_dma_buf_release+0x40/0x40 [ 1582.656586] ? __might_fault+0x177/0x1b0 [ 1582.660657] ion_ioctl+0xea/0x1f0 [ 1582.664111] ? ion_query_heaps+0x360/0x360 [ 1582.668498] ? ion_query_heaps+0x360/0x360 [ 1582.672756] do_vfs_ioctl+0x75a/0xff0 [ 1582.676572] ? ioctl_preallocate+0x1a0/0x1a0 [ 1582.681065] ? lock_downgrade+0x740/0x740 [ 1582.685228] ? __fget+0x225/0x360 [ 1582.688686] ? do_vfs_ioctl+0xff0/0xff0 [ 1582.692665] ? security_file_ioctl+0x83/0xb0 [ 1582.697073] SyS_ioctl+0x7f/0xb0 [ 1582.700438] ? do_vfs_ioctl+0xff0/0xff0 [ 1582.704413] do_syscall_64+0x1d5/0x640 [ 1582.708393] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1582.713713] RIP: 0033:0x4665d9 [ 1582.716914] RSP: 002b:00007f2b2a187188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 20:08:34 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x7fffffff, 0x23}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, 0x0, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000080)=0x1) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x4, 0xcf, 0x7ff, 0x8, 0x0, 0x1, 0xb51, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x40) [ 1582.724721] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 00000000004665d9 [ 1582.731989] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1582.739513] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1582.746780] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 1582.754142] R13: 00007ffc70377c3f R14: 00007f2b2a187300 R15: 0000000000022000 [ 1582.775016] warn_alloc_show_mem: 1 callbacks suppressed [ 1582.775020] Mem-Info: [ 1582.811651] active_anon:14617 inactive_anon:43314 isolated_anon:0 [ 1582.811651] active_file:2113 inactive_file:4957 isolated_file:12 [ 1582.811651] unevictable:0 dirty:8 writeback:0 unstable:0 [ 1582.811651] slab_reclaimable:12081 slab_unreclaimable:119044 [ 1582.811651] mapped:39991 shmem:43799 pagetables:696 bounce:0 [ 1582.811651] free:116636 free_pcp:555 free_cma:0 [ 1582.964381] Node 0 active_anon:57640kB inactive_anon:137116kB active_file:2264kB inactive_file:14268kB unevictable:0kB isolated(anon):0kB isolated(file):64kB mapped:151548kB dirty:84kB writeback:0kB shmem:138788kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1583.026068] Node 1 active_anon:1128kB inactive_anon:36124kB active_file:6648kB inactive_file:4380kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8580kB dirty:4kB writeback:16kB shmem:36396kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1583.165533] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1583.166094] syz-executor.2: [ 1583.191866] Node 0 [ 1583.200594] syz-executor.0 cpuset= [ 1583.202899] DMA free:11064kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:4kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1583.226532] page allocation failure: order:4 [ 1583.247706] / [ 1583.250949] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1583.265961] mems_allowed=0-1 [ 1583.283953] CPU: 0 PID: 18684 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1583.290527] syz-executor.2 cpuset= [ 1583.291866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1583.291871] Call Trace: [ 1583.291888] dump_stack+0x1b2/0x281 [ 1583.291902] warn_alloc.cold+0x96/0x1cc [ 1583.299847] / [ 1583.304779] ? zone_watermark_ok_safe+0x220/0x220 [ 1583.321476] __alloc_pages_nodemask+0x2127/0x2720 [ 1583.322777] mems_allowed=0-1 [ 1583.326426] ? lock_acquire+0x170/0x3f0 [ 1583.326445] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1583.338351] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1583.343953] ? __mutex_unlock_slowpath+0x75/0x770 [ 1583.348893] alloc_pages_current+0x155/0x260 [ 1583.353313] ion_page_pool_alloc+0x118/0x1b0 [ 1583.357735] ion_system_heap_allocate+0x133/0x8c0 [ 1583.362579] ? ion_alloc+0x187/0x810 [ 1583.366297] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1583.371752] ? ion_system_contig_heap_create+0x130/0x130 [ 1583.377217] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1583.382250] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1583.387289] ion_alloc+0x204/0x810 [ 1583.390853] ? ion_dma_buf_release+0x40/0x40 [ 1583.395264] ? __might_fault+0x177/0x1b0 [ 1583.399421] ion_ioctl+0xea/0x1f0 [ 1583.402874] ? ion_query_heaps+0x360/0x360 [ 1583.407126] ? ion_query_heaps+0x360/0x360 [ 1583.411537] do_vfs_ioctl+0x75a/0xff0 [ 1583.415386] ? ioctl_preallocate+0x1a0/0x1a0 [ 1583.420046] ? lock_downgrade+0x740/0x740 [ 1583.424280] ? __fget+0x225/0x360 [ 1583.427737] ? do_vfs_ioctl+0xff0/0xff0 [ 1583.431712] ? security_file_ioctl+0x83/0xb0 [ 1583.436116] SyS_ioctl+0x7f/0xb0 [ 1583.439581] ? do_vfs_ioctl+0xff0/0xff0 [ 1583.443648] do_syscall_64+0x1d5/0x640 [ 1583.447559] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1583.452849] RIP: 0033:0x4665d9 [ 1583.456024] RSP: 002b:00007f37127a1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1583.463897] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1583.471207] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1583.478473] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1583.485745] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1583.493029] R13: 00007ffd8a8e3f3f R14: 00007f37127a1300 R15: 0000000000022000 [ 1583.501795] CPU: 1 PID: 18686 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1583.509693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1583.519047] Call Trace: [ 1583.521637] dump_stack+0x1b2/0x281 [ 1583.525272] warn_alloc.cold+0x96/0x1cc [ 1583.528842] lowmem_reserve[]: 0 [ 1583.529238] ? zone_watermark_ok_safe+0x220/0x220 [ 1583.529258] __alloc_pages_nodemask+0x2127/0x2720 [ 1583.536955] 2717 [ 1583.537375] ? lock_acquire+0x170/0x3f0 [ 1583.547962] 2718 2718 2718 [ 1583.548278] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1583.551202] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1583.551216] ? __mutex_unlock_slowpath+0x75/0x770 [ 1583.564789] Node 0 [ 1583.566313] alloc_pages_current+0x155/0x260 [ 1583.566328] ion_page_pool_alloc+0x118/0x1b0 [ 1583.571856] DMA32 free:206300kB min:36200kB low:45248kB high:54296kB active_anon:57620kB inactive_anon:137120kB active_file:2304kB inactive_file:14288kB unevictable:0kB writepending:104kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7680kB pagetables:2704kB bounce:0kB free_pcp:888kB local_pcp:104kB free_cma:0kB [ 1583.572952] ion_system_heap_allocate+0x133/0x8c0 [ 1583.572962] ? ion_alloc+0x187/0x810 [ 1583.578716] lowmem_reserve[]: [ 1583.606514] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1583.606526] ? ion_system_contig_heap_create+0x130/0x130 [ 1583.606535] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1583.606545] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1583.606555] ion_alloc+0x204/0x810 [ 1583.606569] ? ion_dma_buf_release+0x40/0x40 [ 1583.606582] ? __might_fault+0x177/0x1b0 [ 1583.647436] 0 0 0 [ 1583.651483] ion_ioctl+0xea/0x1f0 [ 1583.651492] ? ion_query_heaps+0x360/0x360 [ 1583.661293] ? ion_query_heaps+0x360/0x360 [ 1583.663775] 0 0 [ 1583.665548] do_vfs_ioctl+0x75a/0xff0 [ 1583.665560] ? ioctl_preallocate+0x1a0/0x1a0 [ 1583.671421] ? lock_downgrade+0x740/0x740 [ 1583.671436] ? __fget+0x225/0x360 [ 1583.683493] ? do_vfs_ioctl+0xff0/0xff0 [ 1583.686107] Node 0 [ 1583.687467] ? security_file_ioctl+0x83/0xb0 [ 1583.687478] SyS_ioctl+0x7f/0xb0 [ 1583.687488] ? do_vfs_ioctl+0xff0/0xff0 [ 1583.689723] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1583.694193] do_syscall_64+0x1d5/0x640 [ 1583.717469] lowmem_reserve[]: [ 1583.726418] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1583.726429] RIP: 0033:0x4665d9 [ 1583.737671] 0 [ 1583.738756] RSP: 002b:00007f3d1f881188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1583.747419] 0 [ 1583.751405] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1583.751411] 0 [ 1583.753199] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1583.753204] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1583.753209] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1583.753214] R13: 00007ffdbbfa296f R14: 00007f3d1f881300 R15: 0000000000022000 [ 1583.813644] 0 0 [ 1583.815869] Node 1 Normal free:351044kB min:53696kB low:67120kB high:80544kB active_anon:1128kB inactive_anon:36124kB active_file:6648kB inactive_file:4380kB unevictable:0kB writepending:20kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:300kB bounce:0kB free_pcp:680kB local_pcp:0kB free_cma:0kB [ 1583.866252] lowmem_reserve[]: 0 0 0 0 0 [ 1583.887467] Node 0 DMA: 21*4kB (UM) 18*8kB (U) 10*16kB (UM) 7*32kB (UME) 7*64kB (UE) 5*128kB (UME) 3*256kB (UME) 5*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 11172kB [ 1583.907141] warn_alloc_show_mem: 1 callbacks suppressed [ 1583.907144] Mem-Info: [ 1583.916110] Node 0 DMA32: 8500*4kB (UME) 3910*8kB (UME) 4649*16kB (UME) 1529*32kB (UME) 44*64kB (U) 22*128kB (U) 7*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 196016kB 20:08:35 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x7fffffff, 0x23}) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x2401, 0x0) ioctl$RNDZAPENTCNT(r1, 0x5204, 0x0) [ 1583.939999] active_anon:14595 inactive_anon:43311 isolated_anon:0 [ 1583.939999] active_file:2216 inactive_file:4751 isolated_file:0 [ 1583.939999] unevictable:0 dirty:32 writeback:0 unstable:0 [ 1583.939999] slab_reclaimable:12076 slab_unreclaimable:120625 [ 1583.939999] mapped:48826 shmem:43796 pagetables:754 bounce:0 [ 1583.939999] free:143328 free_pcp:210 free_cma:0 [ 1583.995658] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1584.026753] Node 1 Normal: 19467*4kB (UME) 4644*8kB (UM) 3432*16kB (UME) 3604*32kB (UE) 925*64kB (U) 39*128kB (U) 56*256kB (U) 16*512kB (U) 246*1024kB (U) 0*2048kB 0*4096kB = 623884kB [ 1584.060041] Node 0 active_anon:59628kB inactive_anon:137124kB active_file:2604kB inactive_file:15212kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:187108kB dirty:96kB writeback:0kB shmem:138800kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1584.091362] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1584.117481] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1584.126138] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1584.159043] Node 1 active_anon:940kB inactive_anon:36120kB active_file:6260kB inactive_file:3992kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8296kB dirty:32kB writeback:0kB shmem:36384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1584.190084] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1584.210304] 50748 total pagecache pages [ 1584.214334] 0 pages in swap cache [ 1584.225451] Swap cache stats: add 0, delete 0, find 0/0 [ 1584.240790] Free swap = 0kB [ 1584.243860] Total swap = 0kB [ 1584.257028] Node 0 DMA free:11128kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:4kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1584.287083] 2097051 pages RAM [ 1584.293913] 0 pages HighMem/MovableOnly [ 1584.304028] 363849 pages reserved [ 1584.314104] 0 pages cma reserved [ 1584.334313] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1584.362532] Node 0 DMA32 free:186172kB min:36200kB low:45248kB high:54296kB active_anon:59516kB inactive_anon:137124kB active_file:2572kB inactive_file:15484kB unevictable:0kB writepending:92kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7584kB pagetables:2716kB bounce:0kB free_pcp:276kB local_pcp:68kB free_cma:0kB [ 1584.470231] lowmem_reserve[]: 0 0 0 0 0 [ 1584.474283] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1584.567392] lowmem_reserve[]: 0 0 0 0 0 [ 1584.571485] Node 1 Normal free:336460kB min:53696kB low:67120kB high:80544kB active_anon:940kB inactive_anon:36120kB active_file:6260kB inactive_file:3992kB unevictable:0kB writepending:32kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:152kB bounce:0kB free_pcp:716kB local_pcp:0kB free_cma:0kB [ 1584.680326] lowmem_reserve[]: 0 0 0 0 0 [ 1584.688494] Node 0 DMA: 22*4kB (UM) 24*8kB (U) 10*16kB (UM) 8*32kB (UME) 3*64kB (UE) 5*128kB (UME) 3*256kB (UME) 5*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 11000kB [ 1584.752363] Node 0 DMA32: 20*4kB (UME) 4*8kB (UM) 23*16kB (UE) 1395*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 45120kB [ 1584.807722] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1584.823579] Node 1 [ 1584.826130] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1584.845079] Normal: 9246*4kB (UME) 4672*8kB (UM) 3440*16kB (UME) 3634*32kB (UME) 28*64kB (U) 1*128kB (U) 14*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 251704kB [ 1584.880296] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1584.885566] CPU: 0 PID: 18470 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1584.893450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1584.902820] Call Trace: [ 1584.905445] dump_stack+0x1b2/0x281 [ 1584.909165] warn_alloc.cold+0x96/0x1cc [ 1584.913143] ? zone_watermark_ok_safe+0x220/0x220 [ 1584.917999] __alloc_pages_nodemask+0x2127/0x2720 [ 1584.922926] ? __schedule+0x893/0x1de0 [ 1584.926837] ? lock_acquire+0x170/0x3f0 [ 1584.930814] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1584.935663] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1584.941150] ? __mutex_unlock_slowpath+0x75/0x770 [ 1584.945999] ? retint_kernel+0x2d/0x2d [ 1584.949893] alloc_pages_current+0x155/0x260 [ 1584.954394] ion_page_pool_alloc+0x118/0x1b0 [ 1584.958807] ion_system_heap_allocate+0x133/0x8c0 [ 1584.963660] ? _raw_spin_unlock+0x29/0x40 [ 1584.967813] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1584.972743] ? ion_system_contig_heap_create+0x130/0x130 [ 1584.978191] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1584.983210] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1584.988053] ion_alloc+0x27a/0x810 [ 1584.991602] ? ion_dma_buf_release+0x40/0x40 [ 1584.996010] ? __might_fault+0x177/0x1b0 [ 1585.000096] ion_ioctl+0xea/0x1f0 [ 1585.003650] ? ion_query_heaps+0x360/0x360 [ 1585.007890] ? ion_query_heaps+0x360/0x360 [ 1585.012125] do_vfs_ioctl+0x75a/0xff0 [ 1585.015931] ? ioctl_preallocate+0x1a0/0x1a0 [ 1585.020339] ? lock_downgrade+0x740/0x740 [ 1585.024491] ? __fget+0x225/0x360 [ 1585.027952] ? do_vfs_ioctl+0xff0/0xff0 [ 1585.032013] ? security_file_ioctl+0x83/0xb0 [ 1585.036419] SyS_ioctl+0x7f/0xb0 [ 1585.039780] ? do_vfs_ioctl+0xff0/0xff0 [ 1585.043748] do_syscall_64+0x1d5/0x640 [ 1585.047642] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1585.052830] RIP: 0033:0x4665d9 [ 1585.056013] RSP: 002b:00007f2b2a1c9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1585.063731] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1585.071005] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1585.072217] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1585.078350] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1585.078356] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1585.078362] R13: 00007ffc70377c3f R14: 00007f2b2a1c9300 R15: 0000000000022000 [ 1585.143544] warn_alloc_show_mem: 1 callbacks suppressed [ 1585.143548] Mem-Info: [ 1585.163057] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1585.187808] active_anon:15151 inactive_anon:43312 isolated_anon:0 [ 1585.187808] active_file:1466 inactive_file:4695 isolated_file:0 [ 1585.187808] unevictable:0 dirty:22 writeback:0 unstable:0 [ 1585.187808] slab_reclaimable:12075 slab_unreclaimable:121024 [ 1585.187808] mapped:56945 shmem:43796 pagetables:799 bounce:0 [ 1585.187808] free:58800 free_pcp:404 free_cma:0 [ 1585.192218] syz-executor.4 cpuset= [ 1585.245864] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1585.263414] Node 0 active_anon:59664kB inactive_anon:137132kB active_file:2612kB inactive_file:15544kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:221980kB dirty:48kB writeback:0kB shmem:138804kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1585.283123] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1585.306439] / mems_allowed=0-1 [ 1585.314136] CPU: 1 PID: 18704 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1585.322044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1585.331399] Call Trace: [ 1585.333992] dump_stack+0x1b2/0x281 [ 1585.337646] warn_alloc.cold+0x96/0x1cc [ 1585.341621] ? zone_watermark_ok_safe+0x220/0x220 [ 1585.346487] __alloc_pages_nodemask+0x2127/0x2720 [ 1585.351348] ? lock_acquire+0x170/0x3f0 [ 1585.355334] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1585.359696] Node 1 active_anon:940kB inactive_anon:36116kB active_file:3252kB inactive_file:3236kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:5800kB dirty:40kB writeback:0kB shmem:36380kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1585.360184] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1585.393420] ? __mutex_unlock_slowpath+0x75/0x770 [ 1585.398368] alloc_pages_current+0x155/0x260 [ 1585.402788] ion_page_pool_alloc+0x118/0x1b0 [ 1585.407312] ion_system_heap_allocate+0x133/0x8c0 [ 1585.412158] ? ion_alloc+0x187/0x810 [ 1585.415871] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1585.421331] ? ion_system_contig_heap_create+0x130/0x130 [ 1585.426788] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1585.431817] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1585.436805] ion_alloc+0x204/0x810 [ 1585.440669] ? ion_dma_buf_release+0x40/0x40 [ 1585.445135] ? __might_fault+0x177/0x1b0 [ 1585.449200] ion_ioctl+0xea/0x1f0 [ 1585.452655] ? ion_query_heaps+0x360/0x360 [ 1585.453124] Node 0 [ 1585.456906] ? ion_query_heaps+0x360/0x360 [ 1585.456917] do_vfs_ioctl+0x75a/0xff0 [ 1585.456931] ? ioctl_preallocate+0x1a0/0x1a0 [ 1585.456939] ? lock_downgrade+0x740/0x740 [ 1585.456952] ? __fget+0x225/0x360 [ 1585.479193] ? do_vfs_ioctl+0xff0/0xff0 [ 1585.483296] ? security_file_ioctl+0x83/0xb0 [ 1585.485099] DMA free:11112kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:4kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1585.487706] SyS_ioctl+0x7f/0xb0 [ 1585.487716] ? do_vfs_ioctl+0xff0/0xff0 [ 1585.487728] do_syscall_64+0x1d5/0x640 [ 1585.487746] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1585.530254] RIP: 0033:0x4665d9 [ 1585.533454] RSP: 002b:00007f5f77a6d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1585.541171] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1585.548445] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1585.555735] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1585.563067] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1585.570331] R13: 00007ffe82aa5b1f R14: 00007f5f77a6d300 R15: 0000000000022000 [ 1585.592250] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1585.598126] lowmem_reserve[]: [ 1585.609846] 48401 total pagecache pages [ 1585.612825] 0 [ 1585.616302] 0 pages in swap cache [ 1585.625800] Swap cache stats: add 0, delete 0, find 0/0 [ 1585.631208] 2717 2718 2718 2718 [ 1585.631225] Node 0 DMA32 free:46220kB min:36200kB low:45248kB high:54296kB active_anon:59652kB inactive_anon:137132kB active_file:3084kB inactive_file:13332kB unevictable:0kB writepending:144kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7552kB pagetables:2996kB bounce:0kB free_pcp:720kB local_pcp:76kB free_cma:0kB [ 1585.631243] lowmem_reserve[]: 0 0 [ 1585.640339] Free swap = 0kB [ 1585.702082] 0 0 0 [ 1585.709387] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1585.756937] Total swap = 0kB [ 1585.763442] 2097051 pages RAM [ 1585.775208] 0 pages HighMem/MovableOnly [ 1585.785010] 363849 pages reserved [ 1585.789719] lowmem_reserve[]: 0 0 0 0 0 [ 1585.795879] 0 pages cma reserved [ 1585.802455] Node 1 Normal free:57472kB min:53696kB low:67120kB high:80544kB active_anon:940kB inactive_anon:36116kB active_file:788kB inactive_file:308kB unevictable:0kB writepending:40kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:200kB bounce:0kB free_pcp:812kB local_pcp:84kB free_cma:0kB [ 1585.859131] lowmem_reserve[]: 0 0 0 0 0 [ 1585.876032] Node 0 DMA: 15*4kB (UM) 25*8kB (U) 11*16kB (UM) 8*32kB (UME) 4*64kB (UE) 5*128kB (UME) 3*256kB (UME) 5*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 11060kB [ 1585.892968] Node 0 DMA32: 66*4kB (UME) 19*8kB (UM) 34*16kB (UME) 1000*32kB (UME) 10*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 33600kB [ 1585.952911] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1585.987367] Node 1 Normal: 4*4kB (UME) 0*8kB 21*16kB (ME) 20*32kB (ME) 482*64kB (UM) 142*128kB (UM) 26*256kB (UM) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 57696kB [ 1586.034921] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1586.064044] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1586.093189] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1586.123056] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1586.151020] 45963 total pagecache pages [ 1586.164423] 0 pages in swap cache [ 1586.176774] Swap cache stats: add 0, delete 0, find 0/0 [ 1586.220354] Free swap = 0kB [ 1586.231192] Total swap = 0kB [ 1586.240826] 2097051 pages RAM [ 1586.247286] 0 pages HighMem/MovableOnly [ 1586.255707] 363849 pages reserved [ 1586.264900] 0 pages cma reserved [ 1586.307282] Mem-Info: [ 1586.309825] active_anon:15217 inactive_anon:43312 isolated_anon:0 [ 1586.309825] active_file:46 inactive_file:45 isolated_file:0 [ 1586.309825] unevictable:0 dirty:3 writeback:0 unstable:0 [ 1586.309825] slab_reclaimable:12073 slab_unreclaimable:120322 [ 1586.309825] mapped:52721 shmem:43796 pagetables:799 bounce:0 [ 1586.309825] free:15944 free_pcp:216 free_cma:0 [ 1586.357133] oom_reaper: reaped process 18684 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1586.422667] syz-executor.4 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1586.426294] Node 0 active_anon:59664kB inactive_anon:137132kB active_file:76kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210884kB dirty:12kB writeback:0kB shmem:138804kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1586.460310] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1586.465609] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1586.486196] CPU: 0 PID: 13060 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1586.494183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1586.503537] Call Trace: [ 1586.504397] syz-executor.0 cpuset=/ [ 1586.506128] dump_stack+0x1b2/0x281 [ 1586.506140] dump_header+0x178/0x82f [ 1586.517448] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1586.520525] mems_allowed=0-1 [ 1586.522540] ? ___ratelimit+0x2cd/0x530 [ 1586.529651] oom_kill_process.cold+0x10/0xa40 [ 1586.534323] out_of_memory+0xe3e/0x1190 [ 1586.538330] ? oom_killer_disable+0x1c0/0x1c0 [ 1586.543020] ? mutex_trylock+0x152/0x1a0 [ 1586.547063] __alloc_pages_nodemask+0x23e1/0x2720 [ 1586.551929] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1586.556328] Node 1 active_anon:1204kB inactive_anon:36116kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:36380kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1586.556774] alloc_pages_current+0x155/0x260 [ 1586.588058] filemap_fault+0x11a1/0x1ad0 [ 1586.592133] ext4_filemap_fault+0x84/0xb0 [ 1586.596270] __do_fault+0xfa/0x380 [ 1586.599801] __handle_mm_fault+0x2497/0x4620 [ 1586.604200] ? vm_insert_page+0x7c0/0x7c0 [ 1586.608339] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 1586.612746] ? nanosleep_copyout+0x100/0x100 [ 1586.617146] ? mark_held_locks+0xa6/0xf0 [ 1586.621193] handle_mm_fault+0x455/0x9c0 [ 1586.625325] __do_page_fault+0x549/0xad0 [ 1586.627309] syz-executor.5: page allocation failure: order:0 [ 1586.629371] ? spurious_fault+0x640/0x640 [ 1586.629380] ? do_page_fault+0x60/0x500 [ 1586.635262] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1586.639386] ? page_fault+0x2f/0x50 [ 1586.639393] page_fault+0x45/0x50 [ 1586.639399] RIP: 182f88:0x4 [ 1586.639403] RSP: 0071:00007ffe82aa5ddc EFLAGS: 00000032 [ 1586.653798] Mem-Info: [ 1586.658229] CPU: 1 PID: 18684 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1586.671791] active_anon:15217 inactive_anon:43312 isolated_anon:0 [ 1586.671791] active_file:21 inactive_file:0 isolated_file:0 [ 1586.671791] unevictable:0 dirty:3 writeback:0 unstable:0 [ 1586.671791] slab_reclaimable:12073 slab_unreclaimable:119906 [ 1586.671791] mapped:52721 shmem:43796 pagetables:799 bounce:0 [ 1586.671791] free:13799 free_pcp:30 free_cma:0 [ 1586.676479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1586.709690] Node 0 active_anon:59664kB inactive_anon:137132kB active_file:76kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210884kB dirty:12kB writeback:0kB shmem:138804kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1586.719072] Call Trace: [ 1586.719091] dump_stack+0x1b2/0x281 [ 1586.719106] warn_alloc.cold+0x96/0x1cc [ 1586.757259] Node 1 active_anon:1204kB inactive_anon:36116kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:36380kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1586.757527] ? zone_watermark_ok_safe+0x220/0x220 [ 1586.784175] Node 0 [ 1586.788971] ? usleep_range+0x130/0x130 [ 1586.788981] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1586.788994] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1586.791228] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1586.795282] ? run_timer_softirq+0x5a0/0x5a0 [ 1586.800376] lowmem_reserve[]: [ 1586.805386] __alloc_pages_nodemask+0x2127/0x2720 [ 1586.831819] 0 [ 1586.836264] ? lock_acquire+0x170/0x3f0 [ 1586.839353] 2717 [ 1586.844183] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1586.845954] 2718 [ 1586.849911] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1586.849927] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1586.849947] alloc_pages_current+0x155/0x260 [ 1586.851980] 2718 [ 1586.857088] ion_page_pool_alloc+0x118/0x1b0 [ 1586.859147] 2718 [ 1586.863784] ion_system_heap_allocate+0x133/0x8c0 [ 1586.873742] ? ion_alloc+0x187/0x810 [ 1586.875789] Node 0 [ 1586.880204] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1586.880215] ? ion_system_contig_heap_create+0x130/0x130 [ 1586.880223] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1586.880234] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1586.880244] ion_alloc+0x204/0x810 [ 1586.880258] ? ion_dma_buf_release+0x40/0x40 [ 1586.882327] DMA32 free:17852kB min:36200kB low:45248kB high:54296kB active_anon:59652kB inactive_anon:137132kB active_file:80kB inactive_file:4kB unevictable:0kB writepending:12kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7552kB pagetables:2996kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1586.887144] ? __might_fault+0x177/0x1b0 [ 1586.890863] lowmem_reserve[]: [ 1586.893063] ion_ioctl+0xea/0x1f0 [ 1586.898510] 0 [ 1586.903922] ? ion_query_heaps+0x360/0x360 [ 1586.909020] 0 [ 1586.913847] ? ion_query_heaps+0x360/0x360 [ 1586.917380] 0 [ 1586.921757] do_vfs_ioctl+0x75a/0xff0 [ 1586.949962] 0 [ 1586.954011] ? ioctl_preallocate+0x1a0/0x1a0 [ 1586.957084] 0 [ 1586.960525] ? lock_downgrade+0x740/0x740 [ 1586.960539] ? __fget+0x225/0x360 [ 1586.960550] ? do_vfs_ioctl+0xff0/0xff0 [ 1586.962335] Node 0 [ 1586.966553] ? security_file_ioctl+0x83/0xb0 [ 1586.968363] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1586.972549] SyS_ioctl+0x7f/0xb0 [ 1586.974338] lowmem_reserve[]: [ 1586.978225] ? do_vfs_ioctl+0xff0/0xff0 [ 1586.978238] do_syscall_64+0x1d5/0x640 [ 1586.978253] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1586.978260] RIP: 0033:0x4665d9 [ 1586.978267] RSP: 002b:00007f37127a1188 EFLAGS: 00000246 [ 1586.980055] 0 [ 1586.984528] ORIG_RAX: 0000000000000010 [ 1586.986352] 0 [ 1586.990494] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1586.990499] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1586.990504] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1586.990508] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1586.990513] R13: 00007ffd8a8e3f3f R14: 00007f37127a1300 R15: 0000000000022000 [ 1586.995822] Node 0 [ 1587.002767] syz-executor.5: [ 1587.004736] DMA free:10980kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1587.042227] 0 [ 1587.048450] lowmem_reserve[]: [ 1587.059213] (null) [ 1587.060112] 0 [ 1587.064001] syz-executor.5 cpuset= [ 1587.065802] 2717 [ 1587.083082] 0 [ 1587.091492] 2718 [ 1587.102808] 0 [ 1587.104936] 2718 [ 1587.117686] page allocation failure: order:0 [ 1587.141677] 2718 [ 1587.149765] / [ 1587.152541] mems_allowed=0-1 [ 1587.154320] Node 0 [ 1587.165997] DMA32 free:18356kB min:36200kB low:45248kB high:54296kB active_anon:59556kB inactive_anon:137132kB active_file:28kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7552kB pagetables:2996kB bounce:0kB free_pcp:252kB local_pcp:232kB free_cma:0kB [ 1587.175939] CPU: 0 PID: 18470 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1587.206584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1587.208195] lowmem_reserve[]: [ 1587.216035] Call Trace: [ 1587.216043] 0 [ 1587.219141] dump_stack+0x1b2/0x281 [ 1587.219153] warn_alloc.cold+0x96/0x1cc [ 1587.219166] ? zone_watermark_ok_safe+0x220/0x220 [ 1587.219175] ? usleep_range+0x130/0x130 [ 1587.219183] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1587.219194] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1587.219203] ? run_timer_softirq+0x5a0/0x5a0 [ 1587.219217] __alloc_pages_nodemask+0x2127/0x2720 [ 1587.219230] ? lock_acquire+0x170/0x3f0 [ 1587.219244] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1587.219253] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1587.219268] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1587.219286] alloc_pages_current+0x155/0x260 [ 1587.219299] ion_page_pool_alloc+0x118/0x1b0 [ 1587.229439] 0 [ 1587.231310] ion_system_heap_allocate+0x133/0x8c0 [ 1587.236128] 0 [ 1587.240095] ? _raw_spin_unlock+0x29/0x40 [ 1587.240103] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1587.240111] ? ion_system_contig_heap_create+0x130/0x130 [ 1587.240119] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1587.240130] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1587.240139] ion_alloc+0x27a/0x810 [ 1587.240151] ? ion_dma_buf_release+0x40/0x40 [ 1587.240161] ? __might_fault+0x177/0x1b0 [ 1587.240172] ion_ioctl+0xea/0x1f0 [ 1587.240180] ? ion_query_heaps+0x360/0x360 [ 1587.240193] ? ion_query_heaps+0x360/0x360 [ 1587.251796] 0 [ 1587.254775] do_vfs_ioctl+0x75a/0xff0 [ 1587.260359] 0 [ 1587.263555] ? ioctl_preallocate+0x1a0/0x1a0 [ 1587.278280] ? lock_downgrade+0x740/0x740 [ 1587.278295] ? __fget+0x225/0x360 [ 1587.278304] ? do_vfs_ioctl+0xff0/0xff0 [ 1587.278316] ? security_file_ioctl+0x83/0xb0 [ 1587.278325] SyS_ioctl+0x7f/0xb0 [ 1587.278333] ? do_vfs_ioctl+0xff0/0xff0 [ 1587.284572] Node 0 [ 1587.287223] do_syscall_64+0x1d5/0x640 [ 1587.287237] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1587.287245] RIP: 0033:0x4665d9 [ 1587.287249] RSP: 002b:00007f2b2a1c9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1587.287259] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1587.287264] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1587.287269] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1587.287274] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1587.287279] R13: 00007ffc70377c3f R14: 00007f2b2a1c9300 R15: 0000000000022000 [ 1587.296696] Node 1 [ 1587.307127] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1587.318922] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1587.328084] lowmem_reserve[]: [ 1587.336895] Normal free:26584kB min:53696kB low:67120kB high:80544kB active_anon:1216kB inactive_anon:36116kB active_file:20kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:200kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1587.345851] 0 [ 1587.346418] (null) [ 1587.352031] 0 [ 1587.360501] lowmem_reserve[]: [ 1587.369280] 0 [ 1587.381110] syz-executor.5 cpuset= [ 1587.389329] 0 [ 1587.396033] 0 [ 1587.406252] 0 [ 1587.417928] / [ 1587.439704] 0 [ 1587.442745] Node 1 [ 1587.474186] mems_allowed=0-1 [ 1587.483247] Mem-Info: [ 1587.512537] 0 [ 1587.537647] CPU: 0 PID: 18483 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1587.547333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1587.556685] Call Trace: [ 1587.559288] dump_stack+0x1b2/0x281 [ 1587.562919] warn_alloc.cold+0x96/0x1cc [ 1587.566899] ? zone_watermark_ok_safe+0x220/0x220 [ 1587.568498] Normal free:131032kB min:53696kB low:67120kB high:80544kB active_anon:1216kB inactive_anon:36116kB active_file:20kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:200kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1587.571853] ? usleep_range+0x130/0x130 [ 1587.571862] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1587.571874] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1587.571883] ? run_timer_softirq+0x5a0/0x5a0 [ 1587.571900] __alloc_pages_nodemask+0x2127/0x2720 [ 1587.571913] ? lock_acquire+0x170/0x3f0 [ 1587.571927] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1587.627214] active_anon:15196 inactive_anon:43312 isolated_anon:0 [ 1587.627214] active_file:12 inactive_file:386 isolated_file:0 [ 1587.627214] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1587.627214] slab_reclaimable:12073 slab_unreclaimable:119786 [ 1587.627214] mapped:52960 shmem:43796 pagetables:799 bounce:0 [ 1587.627214] free:76501 free_pcp:121 free_cma:0 [ 1587.632034] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1587.670150] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1587.675705] alloc_pages_current+0x155/0x260 [ 1587.680129] ion_page_pool_alloc+0x118/0x1b0 [ 1587.684542] ion_system_heap_allocate+0x133/0x8c0 [ 1587.689388] ? _raw_spin_unlock+0x29/0x40 [ 1587.693536] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1587.698466] ? ion_system_contig_heap_create+0x130/0x130 [ 1587.703929] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1587.707212] lowmem_reserve[]: [ 1587.708965] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1587.708978] ion_alloc+0x27a/0x810 [ 1587.712083] 0 [ 1587.716915] ? ion_dma_buf_release+0x40/0x40 [ 1587.726616] ? __might_fault+0x177/0x1b0 [ 1587.730694] ion_ioctl+0xea/0x1f0 [ 1587.734146] ? ion_query_heaps+0x360/0x360 [ 1587.738386] ? ion_query_heaps+0x360/0x360 [ 1587.742622] do_vfs_ioctl+0x75a/0xff0 [ 1587.746423] ? ioctl_preallocate+0x1a0/0x1a0 [ 1587.747203] 0 [ 1587.750825] ? lock_downgrade+0x740/0x740 [ 1587.750831] 0 [ 1587.752619] ? __fget+0x225/0x360 [ 1587.756757] 0 [ 1587.758539] ? do_vfs_ioctl+0xff0/0xff0 [ 1587.758550] ? security_file_ioctl+0x83/0xb0 [ 1587.758560] SyS_ioctl+0x7f/0xb0 [ 1587.758567] ? do_vfs_ioctl+0xff0/0xff0 [ 1587.758580] do_syscall_64+0x1d5/0x640 [ 1587.767205] Node 0 active_anon:59568kB inactive_anon:137132kB active_file:28kB inactive_file:1528kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211840kB dirty:0kB writeback:0kB shmem:138804kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1587.767886] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1587.772282] Node 1 active_anon:1216kB inactive_anon:36116kB active_file:20kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:36380kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1587.775630] RIP: 0033:0x4665d9 [ 1587.807218] Node 0 [ 1587.811549] RSP: 002b:00007f2b2a187188 EFLAGS: 00000246 [ 1587.816739] DMA free:11236kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1587.843603] ORIG_RAX: 0000000000000010 [ 1587.843609] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 00000000004665d9 [ 1587.843613] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1587.843617] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1587.843622] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 1587.843639] R13: 00007ffc70377c3f R14: 00007f2b2a187300 R15: 0000000000022000 [ 1587.867176] 0 [ 1587.880946] 0 [ 1587.910812] 0 [ 1587.945695] Node 0 DMA: 0*4kB 2*8kB (UM) 10*16kB (UM) 8*32kB (UME) 9*64kB (UE) 5*128kB (UME) 3*256kB (UME) 5*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 11120kB [ 1587.962232] Node 0 DMA32: 56*4kB (UME) 3*8kB (UME) 19*16kB (E) 15*32kB (UME) 9*64kB (ME) [ 1587.968013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1587.977165] Node 0 DMA: 0*4kB 2*8kB (UM) 10*16kB (UM) 8*32kB (UME) 9*64kB (UE) 5*128kB (UME) 3*256kB (UME) 5*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 11120kB [ 1587.987170] 45*128kB [ 1588.014312] device bridge_slave_1 left promiscuous mode [ 1588.022279] Node 0 DMA32: 56*4kB (UME) 5*8kB (UME) 21*16kB (ME) 14*32kB (ME) 10*64kB (UME) 35*128kB (U) 13*256kB (U) 1*512kB (U) 33*1024kB (U) 0*2048kB 0*4096kB = 43800kB [ 1588.022495] (U) [ 1588.052742] bridge0: port 2(bridge_slave_1) entered disabled state [ 1588.059761] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1588.077616] 13*256kB (U) 1*512kB (U) 33*1024kB (U) 0*2048kB 0*4096kB = 45000kB [ 1588.085169] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1588.087168] Node 1 Normal: 2*4kB (ME) 1*8kB (U) 7*16kB (UME) 3*32kB [ 1588.104418] lowmem_reserve[]: [ 1588.107298] (UME) [ 1588.115219] device bridge_slave_0 left promiscuous mode [ 1588.123066] 0 2717 2718 2718 2718 [ 1588.126018] bridge0: port 1(bridge_slave_0) entered disabled state [ 1588.133110] Node 0 DMA32 free:43256kB min:36200kB low:45248kB high:54296kB active_anon:59580kB inactive_anon:137132kB active_file:824kB inactive_file:1872kB unevictable:0kB writepending:4kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7552kB pagetables:2996kB bounce:0kB free_pcp:968kB local_pcp:728kB free_cma:0kB [ 1588.137159] 2742*64kB [ 1588.169830] Node 1 Normal: 3*4kB (UME) 1*8kB (U) 6*16kB (UE) 2*32kB (UE) 2491*64kB (U) 853*128kB (UM) 362*256kB (UM) 42*512kB (U) 154*1024kB (U) 16*2048kB (U) 0*4096kB = 573428kB [ 1588.193906] (UM) 852*128kB (U) 362*256kB (UM) 43*512kB (UM) 154*1024kB (U) 16*2048kB (U) 0*4096kB = 589920kB [ 1588.204491] team0 (unregistering): Port device team_slave_1 removed [ 1588.220562] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1588.227601] team0 (unregistering): Port device team_slave_0 removed [ 1588.238024] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1588.247145] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1588.255963] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1588.257898] lowmem_reserve[]: 0 0 0 0 0 [ 1588.272723] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1588.273062] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1588.294346] 45727 total pagecache pages [ 1588.294667] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1588.305924] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1588.322822] 0 pages in swap cache [ 1588.336531] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1588.343964] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1588.360779] Swap cache stats: add 0, delete 0, find 0/0 [ 1588.366983] Free swap = 0kB [ 1588.367172] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1588.377605] Total swap = 0kB [ 1588.379486] lowmem_reserve[]: 0 0 0 0 0 [ 1588.385826] Node 1 Normal free:491588kB min:53696kB low:67120kB high:80544kB active_anon:1016kB inactive_anon:36116kB active_file:820kB inactive_file:3944kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:200kB bounce:0kB free_pcp:524kB local_pcp:440kB free_cma:0kB [ 1588.386275] 2097051 pages RAM [ 1588.428826] 45838 total pagecache pages [ 1588.448553] 0 pages in swap cache [ 1588.457723] 0 pages HighMem/MovableOnly [ 1588.461724] 363849 pages reserved [ 1588.465176] 0 pages cma reserved [ 1588.465315] bond0 (unregistering): Released all slaves [ 1588.476813] Swap cache stats: add 0, delete 0, find 0/0 [ 1588.477594] Out of memory (oom_kill_allocating_task): Kill process 13060 (syz-executor.4) score 0 or sacrifice child [ 1588.489961] Free swap = 0kB [ 1588.502599] Total swap = 0kB [ 1588.505642] 2097051 pages RAM [ 1588.510390] 0 pages HighMem/MovableOnly [ 1588.514375] 363849 pages reserved [ 1588.517199] Killed process 18704 (syz-executor.4) total-vm:93384kB, anon-rss:2196kB, file-rss:34820kB, shmem-rss:0kB [ 1588.521153] lowmem_reserve[]: [ 1588.529838] 0 pages cma reserved [ 1588.565588] 0 0 0 0 0 [ 1588.568654] oom_reaper: reaped process 18704 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1588.582398] Node 0 DMA: 0*4kB 2*8kB (UM) 10*16kB (UM) 8*32kB (UME) 9*64kB (UE) 5*128kB (UME) 3*256kB (UME) 5*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 11120kB [ 1588.584984] warn_alloc_show_mem: 1 callbacks suppressed [ 1588.584987] Mem-Info: [ 1588.619405] active_anon:14575 inactive_anon:43312 isolated_anon:0 [ 1588.619405] active_file:997 inactive_file:1101 isolated_file:0 [ 1588.619405] unevictable:0 dirty:1 writeback:0 unstable:0 [ 1588.619405] slab_reclaimable:12059 slab_unreclaimable:120397 [ 1588.619405] mapped:53854 shmem:43796 pagetables:762 bounce:0 [ 1588.619405] free:103176 free_pcp:447 free_cma:0 [ 1588.701551] Node 0 DMA32: 320*4kB (UME) 24*8kB (ME) 25*16kB (UME) 41*32kB (UME) 11*64kB (UME) 10*128kB (U) 13*256kB (U) 1*512kB (U) 33*1024kB (U) 1*2048kB (M) 0*4096kB = 44848kB [ 1588.711931] Node 0 active_anon:57484kB inactive_anon:137132kB active_file:840kB inactive_file:552kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:212344kB dirty:4kB writeback:0kB shmem:138804kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1588.780743] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1588.838613] Node 1 Normal: 1*4kB (E) 1*8kB (M) 7*16kB (UME) 1*32kB (E) 1*64kB (U) 2*128kB (UM) 195*256kB (UM) 43*512kB (UM) 155*1024kB (UM) 13*2048kB (U) 0*4096kB = 257756kB [ 1588.847129] Node 1 active_anon:1516kB inactive_anon:36116kB active_file:4120kB inactive_file:4744kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:5672kB dirty:0kB writeback:0kB shmem:36380kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1588.918466] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1588.928690] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1588.957125] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1588.966029] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1589.019526] Node 0 DMA free:11112kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:4kB active_file:0kB inactive_file:24kB unevictable:0kB writepending:4kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1589.052548] 46351 total pagecache pages [ 1589.056566] 0 pages in swap cache [ 1589.078021] Swap cache stats: add 0, delete 0, find 0/0 [ 1589.083420] Free swap = 0kB [ 1589.086436] Total swap = 0kB [ 1589.097351] 2097051 pages RAM [ 1589.100566] 0 pages HighMem/MovableOnly [ 1589.104619] 363849 pages reserved [ 1589.108402] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1589.113545] Node 0 DMA32 free:44372kB min:36200kB low:45248kB high:54296kB active_anon:57296kB inactive_anon:137132kB active_file:12kB inactive_file:4kB unevictable:0kB writepending:4kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7584kB pagetables:2992kB bounce:0kB free_pcp:952kB local_pcp:308kB free_cma:0kB [ 1589.127113] 0 pages cma reserved [ 1589.199886] lowmem_reserve[]: 0 0 0 0 0 [ 1589.203942] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1589.299694] lowmem_reserve[]: 0 0 0 0 0 [ 1589.303818] Node 1 Normal free:57176kB min:53696kB low:67120kB high:80544kB active_anon:1644kB inactive_anon:36124kB active_file:5432kB inactive_file:3056kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:212kB bounce:0kB free_pcp:1160kB local_pcp:636kB free_cma:0kB [ 1589.360401] oom_reaper: reaped process 18686 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1589.431843] lowmem_reserve[]: 0 0 0 0 0 [ 1589.436117] Node 0 DMA: 2*4kB (UM) 1*8kB (M) 2*16kB (M) 7*32kB (UE) 9*64kB (UME) 5*128kB (UME) 3*256kB (UME) 5*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10960kB [ 1589.456420] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1589.468729] Node 0 DMA32: 524*4kB (UME) 121*8kB (UME) 38*16kB (ME) 17*32kB (ME) 14*64kB (ME) 1*128kB (U) 1*256kB (U) 0*512kB 10*1024kB (U) 1*2048kB (M) 0*4096kB = 17784kB [ 1589.486462] systemd-journal cpuset=/ mems_allowed=0-1 [ 1589.491747] CPU: 0 PID: 18637 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 1589.499793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1589.509159] Call Trace: [ 1589.511745] dump_stack+0x1b2/0x281 [ 1589.515367] dump_header+0x178/0x82f [ 1589.519075] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1589.524166] ? ___ratelimit+0x2cd/0x530 [ 1589.528133] oom_kill_process.cold+0x10/0xa40 [ 1589.532638] out_of_memory+0xe3e/0x1190 [ 1589.533032] syz-executor.0: page allocation failure: order:4 [ 1589.536607] ? oom_killer_disable+0x1c0/0x1c0 [ 1589.536612] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1589.542403] ? mutex_trylock+0x152/0x1a0 [ 1589.542413] __alloc_pages_nodemask+0x23e1/0x2720 [ 1589.542430] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1589.542438] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1589.542455] ? cache_grow_begin+0x3f/0x700 [ 1589.542464] cache_grow_begin+0x91/0x700 [ 1589.542476] fallback_alloc+0x207/0x2c0 [ 1589.553262] Node 0 [ 1589.554576] kmem_cache_alloc+0x1e5/0x3c0 [ 1589.583023] syz-executor.0 cpuset= [ 1589.585893] getname_flags+0xc8/0x550 [ 1589.592417] Normal: [ 1589.595782] user_path_at_empty+0x2a/0x50 [ 1589.606006] SyS_faccessat+0x21b/0x680 [ 1589.606472] / [ 1589.609888] ? SyS_fallocate+0x80/0x80 [ 1589.615476] ? do_syscall_64+0x4c/0x640 [ 1589.619453] ? SyS_faccessat+0x680/0x680 [ 1589.623513] do_syscall_64+0x1d5/0x640 [ 1589.624215] mems_allowed=0-1 [ 1589.627443] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1589.627450] RIP: 0033:0x7ff24922a9c7 [ 1589.627454] RSP: 002b:00007ffd5f5a86b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 1589.627463] RAX: ffffffffffffffda RBX: 00007ffd5f5ab5d0 RCX: 00007ff24922a9c7 [ 1589.627467] RDX: 00007ff249c9ba00 RSI: 0000000000000000 RDI: 000055c5858a89a3 [ 1589.627471] RBP: 00007ffd5f5a86f0 R08: 0000000000000000 R09: 0000000000000000 [ 1589.627475] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 1589.627479] R13: 0000000000000000 R14: 00007ffd5f5ab5d0 R15: 00007ffd5f5a8be0 [ 1589.649455] 0*4kB [ 1589.689154] Mem-Info: [ 1589.693748] active_anon:14688 inactive_anon:43315 isolated_anon:0 [ 1589.693748] active_file:43 inactive_file:19 isolated_file:0 [ 1589.693748] unevictable:0 dirty:7 writeback:1 unstable:0 [ 1589.693748] slab_reclaimable:12080 slab_unreclaimable:120317 [ 1589.693748] mapped:52749 shmem:43800 pagetables:801 bounce:0 [ 1589.693748] free:13825 free_pcp:0 free_cma:0 [ 1589.707073] syz-executor.2: [ 1589.731263] CPU: 1 PID: 18684 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1589.742146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1589.751519] Call Trace: [ 1589.754112] dump_stack+0x1b2/0x281 [ 1589.757741] warn_alloc.cold+0x96/0x1cc [ 1589.759670] 0*8kB 0*16kB [ 1589.761710] ? zone_watermark_ok_safe+0x220/0x220 [ 1589.761729] __alloc_pages_nodemask+0x2127/0x2720 [ 1589.764464] 0*32kB [ 1589.769306] ? lock_acquire+0x170/0x3f0 [ 1589.769317] ? lock_acquire+0x170/0x3f0 [ 1589.769342] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1589.769359] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1589.774191] Node 0 active_anon:57108kB inactive_anon:137136kB active_file:12kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210904kB dirty:4kB writeback:4kB shmem:138812kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1589.776482] ? __mutex_unlock_slowpath+0x75/0x770 [ 1589.780485] Node 1 active_anon:1644kB inactive_anon:36124kB active_file:28kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:92kB dirty:24kB writeback:0kB shmem:36388kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1589.784409] alloc_pages_current+0x155/0x260 [ 1589.789288] 0*64kB [ 1589.794700] ion_page_pool_alloc+0x118/0x1b0 [ 1589.822694] Node 0 [ 1589.827671] ion_system_heap_allocate+0x133/0x8c0 [ 1589.827685] ? _raw_spin_unlock+0x29/0x40 [ 1589.854768] 0*128kB [ 1589.859136] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1589.859146] ? ion_system_contig_heap_create+0x130/0x130 [ 1589.859158] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1589.861367] 0*256kB [ 1589.865849] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1589.868180] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:4kB active_file:0kB inactive_file:24kB unevictable:0kB writepending:4kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1589.873063] ion_alloc+0x27a/0x810 [ 1589.877205] lowmem_reserve[]: [ 1589.879498] ? ion_dma_buf_release+0x40/0x40 [ 1589.884397] 0 [ 1589.889830] ? __might_fault+0x177/0x1b0 [ 1589.889842] ion_ioctl+0xea/0x1f0 [ 1589.889851] ? ion_query_heaps+0x360/0x360 [ 1589.894852] 0*512kB [ 1589.897156] ? ion_query_heaps+0x360/0x360 [ 1589.897165] do_vfs_ioctl+0x75a/0xff0 [ 1589.897177] ? ioctl_preallocate+0x1a0/0x1a0 [ 1589.902017] 0*1024kB [ 1589.927676] ? lock_downgrade+0x740/0x740 [ 1589.927689] ? __fget+0x225/0x360 [ 1589.927697] ? do_vfs_ioctl+0xff0/0xff0 [ 1589.927710] ? security_file_ioctl+0x83/0xb0 [ 1589.931237] 2717 [ 1589.934316] SyS_ioctl+0x7f/0xb0 [ 1589.934324] ? do_vfs_ioctl+0xff0/0xff0 [ 1589.938728] 2718 [ 1589.940495] do_syscall_64+0x1d5/0x640 [ 1589.944524] 2718 [ 1589.947978] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1589.947986] RIP: 0033:0x4665d9 [ 1589.947992] RSP: 002b:00007f37127a1188 EFLAGS: 00000246 [ 1589.952222] 0*2048kB [ 1589.954511] ORIG_RAX: 0000000000000010 [ 1589.954518] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1589.958770] 2718 [ 1589.962524] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1589.962530] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1589.969309] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1589.969314] R13: 00007ffd8a8e3f3f R14: 00007f37127a1300 R15: 0000000000022000 [ 1590.062017] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1590.083464] 0*4096kB = 0kB [ 1590.086326] Node 1 Normal: 62*4kB (ME) 57*8kB (M) 54*16kB (ME) 34*32kB (ME) 30*64kB (M) 44*128kB (UM) 28*256kB (UM) 17*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 27104kB [ 1590.097565] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1590.106681] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1590.122181] CPU: 0 PID: 18704 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1590.130077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1590.137012] syz-executor.2 cpuset= [ 1590.139508] Call Trace: [ 1590.139510] / mems_allowed=0-1 [ 1590.143045] dump_stack+0x1b2/0x281 [ 1590.152400] warn_alloc.cold+0x96/0x1cc [ 1590.156457] ? zone_watermark_ok_safe+0x220/0x220 [ 1590.161295] ? usleep_range+0x130/0x130 [ 1590.165275] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1590.170382] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1590.175473] ? run_timer_softirq+0x5a0/0x5a0 [ 1590.179878] __alloc_pages_nodemask+0x2127/0x2720 [ 1590.184704] ? lock_acquire+0x170/0x3f0 [ 1590.188674] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1590.193691] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1590.198226] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1590.203763] ? policy_node+0x35/0x110 [ 1590.207560] alloc_pages_current+0x155/0x260 [ 1590.212045] ion_page_pool_alloc+0x118/0x1b0 [ 1590.216435] ion_system_heap_allocate+0x133/0x8c0 [ 1590.221258] ? ion_alloc+0x187/0x810 [ 1590.224973] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1590.230412] ? ion_system_contig_heap_create+0x130/0x130 [ 1590.235851] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1590.240874] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1590.245712] ion_alloc+0x204/0x810 [ 1590.249253] ? ion_dma_buf_release+0x40/0x40 [ 1590.253658] ? __might_fault+0x177/0x1b0 [ 1590.257707] ion_ioctl+0xea/0x1f0 [ 1590.261142] ? ion_query_heaps+0x360/0x360 [ 1590.265373] ? ion_query_heaps+0x360/0x360 [ 1590.269598] do_vfs_ioctl+0x75a/0xff0 [ 1590.273484] ? ioctl_preallocate+0x1a0/0x1a0 [ 1590.277886] ? lock_downgrade+0x740/0x740 [ 1590.282029] ? __fget+0x225/0x360 [ 1590.285563] ? do_vfs_ioctl+0xff0/0xff0 [ 1590.289531] ? security_file_ioctl+0x83/0xb0 [ 1590.293929] SyS_ioctl+0x7f/0xb0 [ 1590.297280] ? do_vfs_ioctl+0xff0/0xff0 [ 1590.301236] do_syscall_64+0x1d5/0x640 [ 1590.305109] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1590.310288] RIP: 0033:0x4665d9 [ 1590.313469] RSP: 002b:00007f5f77a6d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1590.321198] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1590.328468] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1590.335727] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1590.342980] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1590.350240] R13: 00007ffe82aa5b1f R14: 00007f5f77a6d300 R15: 0000000000022000 [ 1590.357514] CPU: 1 PID: 18686 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1590.362089] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1590.365506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1590.374353] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1590.383671] Call Trace: [ 1590.383689] dump_stack+0x1b2/0x281 [ 1590.383705] warn_alloc.cold+0x96/0x1cc [ 1590.392278] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1590.394825] ? zone_watermark_ok_safe+0x220/0x220 [ 1590.398450] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1590.402400] ? usleep_range+0x130/0x130 [ 1590.411231] 43836 total pagecache pages [ 1590.416047] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1590.424623] 0 pages in swap cache [ 1590.428561] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1590.428574] ? run_timer_softirq+0x5a0/0x5a0 [ 1590.432530] Swap cache stats: add 0, delete 0, find 0/0 [ 1590.437623] __alloc_pages_nodemask+0x2127/0x2720 [ 1590.437638] ? lock_acquire+0x170/0x3f0 [ 1590.441082] Node 0 [ 1590.446085] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1590.450500] Free swap = 0kB [ 1590.455835] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1590.460685] DMA32 free:17784kB min:36200kB low:45248kB high:54296kB active_anon:57100kB inactive_anon:137128kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7584kB pagetables:2992kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1590.464614] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1590.466819] lowmem_reserve[]: [ 1590.471650] alloc_pages_current+0x155/0x260 [ 1590.471665] ion_page_pool_alloc+0x118/0x1b0 [ 1590.475101] Total swap = 0kB [ 1590.479582] ion_system_heap_allocate+0x133/0x8c0 [ 1590.479592] ? ion_alloc+0x187/0x810 [ 1590.479605] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1590.507444] 0 [ 1590.512911] ? ion_system_contig_heap_create+0x130/0x130 [ 1590.516007] 0 [ 1590.520519] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1590.520531] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1590.520541] ion_alloc+0x204/0x810 [ 1590.520553] ? ion_dma_buf_release+0x40/0x40 [ 1590.520564] ? __might_fault+0x177/0x1b0 [ 1590.524975] 0 [ 1590.527993] ion_ioctl+0xea/0x1f0 [ 1590.528002] ? ion_query_heaps+0x360/0x360 [ 1590.528015] ? ion_query_heaps+0x360/0x360 [ 1590.532939] 2097051 pages RAM [ 1590.536628] do_vfs_ioctl+0x75a/0xff0 [ 1590.542084] 0 [ 1590.543862] ? ioctl_preallocate+0x1a0/0x1a0 [ 1590.549311] 0 pages HighMem/MovableOnly [ 1590.551070] ? lock_downgrade+0x740/0x740 [ 1590.556054] 363849 pages reserved [ 1590.560879] ? __fget+0x225/0x360 [ 1590.560888] ? do_vfs_ioctl+0xff0/0xff0 [ 1590.560901] ? security_file_ioctl+0x83/0xb0 [ 1590.564416] 0 [ 1590.568802] SyS_ioctl+0x7f/0xb0 [ 1590.568810] ? do_vfs_ioctl+0xff0/0xff0 [ 1590.568822] do_syscall_64+0x1d5/0x640 [ 1590.574650] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1590.578094] 0 pages cma reserved [ 1590.582309] RIP: 0033:0x4665d9 [ 1590.586972] Node 0 [ 1590.589620] RSP: 002b:00007f3d1f881188 EFLAGS: 00000246 [ 1590.593437] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1590.595211] ORIG_RAX: 0000000000000010 [ 1590.606984] lowmem_reserve[]: [ 1590.607689] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1590.611119] 0 [ 1590.614546] RDX: 0000000020000140 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1590.614552] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1590.636992] 0 [ 1590.641034] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1590.644386] 0 [ 1590.647558] R13: 00007ffdbbfa296f R14: 00007f3d1f881300 R15: 0000000000022000 [ 1590.680389] Mem-Info: [ 1590.737185] Bluetooth: hci3 command 0x0409 tx timeout [ 1590.759405] 0 0 [ 1590.761426] Node 1 Normal free:177196kB min:53696kB low:67120kB high:80544kB active_anon:1584kB inactive_anon:36132kB active_file:60kB inactive_file:2160kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:204kB bounce:0kB free_pcp:232kB local_pcp:104kB free_cma:0kB [ 1590.785497] active_anon:14674 inactive_anon:43316 isolated_anon:0 [ 1590.785497] active_file:16 inactive_file:541 isolated_file:0 [ 1590.785497] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1590.785497] slab_reclaimable:12087 slab_unreclaimable:120310 [ 1590.785497] mapped:53048 shmem:43804 pagetables:799 bounce:0 [ 1590.785497] free:64720 free_pcp:58 free_cma:0 [ 1590.849690] lowmem_reserve[]: 0 0 0 0 0 [ 1590.853741] Node 0 DMA: 1*4kB (U) 2*8kB (UM) 0*16kB 7*32kB (UME) 12*64kB (UME) 5*128kB (UE) 3*256kB (UME) 5*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 12148kB [ 1590.916985] Node 0 active_anon:57112kB inactive_anon:137132kB active_file:4kB inactive_file:404kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211092kB dirty:0kB writeback:0kB shmem:138812kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1590.916987] Node 0 DMA32: 431*4kB (UME) 123*8kB (UME) 38*16kB (ME) 17*32kB (ME) 415*64kB (UME) 10*128kB (U) 9*256kB (U) 0*512kB 9*1024kB (U) 1*2048kB (M) 0*4096kB = 45268kB [ 1591.007039] Node 1 active_anon:1584kB inactive_anon:36132kB active_file:60kB inactive_file:2228kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1544kB dirty:4kB writeback:0kB shmem:36404kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1591.026966] Node 0 [ 1591.049763] Bluetooth: hci5 command 0x0409 tx timeout [ 1591.067302] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1591.078085] IPVS: ftp: loaded support on port[0] = 21 [ 1591.099478] Node 1 Normal: 1698*4kB (UE) 39*8kB (UM) 54*16kB (UME) 47*32kB (UME) 3026*64kB (UM) 479*128kB (UM) 119*256kB (UM) 23*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 306688kB [ 1591.100991] Node 0 [ 1591.127064] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1591.147462] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1591.156086] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1591.162253] DMA free:11124kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:4kB active_file:0kB inactive_file:136kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1591.186952] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1591.213566] 44498 total pagecache pages [ 1591.217923] 0 pages in swap cache [ 1591.221384] Swap cache stats: add 0, delete 0, find 0/0 [ 1591.226740] Free swap = 0kB [ 1591.238405] IPVS: ftp: loaded support on port[0] = 21 [ 1591.249629] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1591.256102] Node 0 DMA32 free:45100kB min:36200kB low:45248kB high:54296kB active_anon:57108kB inactive_anon:137128kB active_file:4kB inactive_file:524kB unevictable:0kB writepending:84kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7584kB pagetables:2992kB bounce:0kB free_pcp:964kB local_pcp:824kB free_cma:0kB [ 1591.257042] Total swap = 0kB [ 1591.326981] 2097051 pages RAM [ 1591.330111] 0 pages HighMem/MovableOnly [ 1591.334111] 363849 pages reserved [ 1591.347007] 0 pages cma reserved [ 1591.356965] Out of memory (oom_kill_allocating_task): Kill process 18637 (systemd-journal) score 0 or sacrifice child [ 1591.360346] lowmem_reserve[]: [ 1591.376993] Killed process 18637 (systemd-journal) total-vm:46096kB, anon-rss:464kB, file-rss:0kB, shmem-rss:1984kB [ 1591.389459] 0 0 0 0 0 [ 1591.400115] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1591.437217] lowmem_reserve[]: 0 0 0 0 0 [ 1591.489034] Node 1 Normal free:157516kB min:53696kB low:67120kB high:80544kB active_anon:1584kB inactive_anon:36132kB active_file:260kB inactive_file:5928kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:960kB pagetables:56kB bounce:0kB free_pcp:1480kB local_pcp:784kB free_cma:0kB [ 1591.521593] systemd[1]: systemd-journald.service: Failed with result 'signal'. 20:08:42 executing program 5: ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)={0x6, 0x6, 0x792, 0x9, 0x8, "85bead48835f2604"}) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x7fffffff, 0x23}) ioctl$VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x6) [ 1591.590005] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1591.596244] lowmem_reserve[]: 0 0 0 0 0 [ 1591.625847] systemd[1]: Stopped Journal Service. [ 1591.628902] Node 0 DMA: 33*4kB (UM) 2*8kB (U) 0*16kB 5*32kB (UME) 11*64kB (UME) 5*128kB (UE) 3*256kB (UME) 5*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 11124kB [ 1591.637502] chnl_net:caif_netlink_parms(): no params data found [ 1591.691638] Node 0 DMA32: 7349*4kB (UME) 3052*8kB (UM) 881*16kB (UE) 99*32kB (UME) 184*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 82852kB [ 1591.692225] systemd[1]: Starting Journal Service... [ 1591.791908] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1591.846934] Node 1 Normal: 22326*4kB (UME) 3090*8kB (U) 795*16kB (UME) 533*32kB (UE) 507*64kB (UM) 207*128kB (U) 56*256kB (U) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 217592kB [ 1591.909357] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1591.942982] chnl_net:caif_netlink_parms(): no params data found [ 1591.967968] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1591.977355] syz-executor.1: page allocation failure: order:5, mode:0x1084020(GFP_ATOMIC|__GFP_COMP), nodemask=(null) [ 1591.988150] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1591.993377] CPU: 0 PID: 18708 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1592.001348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1592.010703] Call Trace: [ 1592.013299] dump_stack+0x1b2/0x281 [ 1592.017024] warn_alloc.cold+0x96/0x1cc [ 1592.021012] ? zone_watermark_ok_safe+0x220/0x220 [ 1592.025859] ? wake_all_kswapds+0x175/0x360 [ 1592.030187] __alloc_pages_nodemask+0x2127/0x2720 [ 1592.031163] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1592.035023] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1592.035033] ? __alloc_pages_nodemask+0x1a6e/0x2720 [ 1592.035049] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1592.058738] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1592.063585] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1592.068992] ? cache_alloc_refill+0x2fa/0x350 [ 1592.073494] ? ____cache_alloc_node+0x156/0x1d0 [ 1592.078169] cache_grow_begin+0x91/0x700 [ 1592.082239] fallback_alloc+0x207/0x2c0 [ 1592.086217] __kmalloc+0x213/0x400 [ 1592.089755] ? batadv_hash_new+0xaa/0x270 [ 1592.093905] batadv_hash_new+0xaa/0x270 [ 1592.097879] ? queue_delayed_work_on+0xfc/0x1d0 [ 1592.102554] batadv_tt_init+0x260/0x390 [ 1592.106525] batadv_mesh_init+0x478/0x630 [ 1592.110695] batadv_softif_init_late+0xa26/0xc90 [ 1592.115450] ? batadv_get_strings+0x40/0x40 [ 1592.119766] ? dev_valid_name+0x1a0/0x1a0 [ 1592.123974] ? batadv_get_strings+0x40/0x40 [ 1592.128320] register_netdevice+0x291/0xe40 [ 1592.132647] ? netdev_change_features+0xa0/0xa0 [ 1592.134600] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1592.137317] ? rtnl_create_link+0x129/0x890 [ 1592.137329] rtnl_newlink+0x14ff/0x1860 [ 1592.137335] ? rtnl_newlink+0x43d/0x1860 [ 1592.137343] ? __lock_acquire+0x5fc/0x3f20 [ 1592.137357] ? trace_hardirqs_on+0x10/0x10 [ 1592.137363] ? rtnl_dellink+0x6a0/0x6a0 [ 1592.137369] ? trace_hardirqs_on+0x10/0x10 [ 1592.137378] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 1592.137386] ? deref_stack_reg+0x124/0x1a0 [ 1592.137420] ? lock_acquire+0x170/0x3f0 [ 1592.165247] 47385 total pagecache pages [ 1592.166771] ? lock_downgrade+0x740/0x740 [ 1592.166784] ? rtnl_dellink+0x6a0/0x6a0 [ 1592.201095] rtnetlink_rcv_msg+0x3be/0xb10 [ 1592.204083] 0 pages in swap cache [ 1592.205369] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1592.205379] ? __netlink_lookup+0x345/0x5d0 [ 1592.205392] netlink_rcv_skb+0x125/0x390 [ 1592.221719] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1592.226248] ? netlink_ack+0x9a0/0x9a0 [ 1592.230148] netlink_unicast+0x437/0x610 [ 1592.234230] ? netlink_sendskb+0xd0/0xd0 [ 1592.236824] Swap cache stats: add 0, delete 0, find 0/0 [ 1592.238316] ? __check_object_size+0x179/0x230 [ 1592.238328] netlink_sendmsg+0x62e/0xb80 [ 1592.238340] ? nlmsg_notify+0x170/0x170 [ 1592.244933] Free swap = 0kB [ 1592.248283] ? security_socket_sendmsg+0x83/0xb0 [ 1592.248292] ? nlmsg_notify+0x170/0x170 [ 1592.248300] sock_sendmsg+0xb5/0x100 [ 1592.248308] SyS_sendto+0x1c7/0x2c0 [ 1592.248315] ? SyS_getpeername+0x220/0x220 [ 1592.248322] ? vm_insert_page+0x7c0/0x7c0 [ 1592.248346] ? up_read+0x17/0x30 [ 1592.248355] ? __do_page_fault+0x159/0xad0 [ 1592.248363] ? do_syscall_64+0x4c/0x640 [ 1592.248369] ? SyS_getpeername+0x220/0x220 [ 1592.248376] do_syscall_64+0x1d5/0x640 [ 1592.248389] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1592.248396] RIP: 0033:0x41956c [ 1592.248400] RSP: 002b:00007fff1e084e60 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1592.275253] Total swap = 0kB [ 1592.275546] RAX: ffffffffffffffda RBX: 00000000014a4320 RCX: 000000000041956c [ 1592.313024] 2097051 pages RAM [ 1592.319641] RDX: 000000000000003c RSI: 00000000014a4370 RDI: 0000000000000003 [ 1592.319647] RBP: 0000000000000000 R08: 00007fff1e084eb4 R09: 000000000000000c [ 1592.319652] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1592.319656] R13: 00000000014a4370 R14: 0000000000000003 R15: 0000000000000000 [ 1592.319734] warn_alloc_show_mem: 2 callbacks suppressed [ 1592.319736] Mem-Info: [ 1592.361284] 0 pages HighMem/MovableOnly [ 1592.363132] active_anon:14671 inactive_anon:43315 isolated_anon:0 [ 1592.363132] active_file:615 inactive_file:2962 isolated_file:0 [ 1592.363132] unevictable:0 dirty:39 writeback:0 unstable:0 [ 1592.363132] slab_reclaimable:12147 slab_unreclaimable:120417 [ 1592.363132] mapped:54493 shmem:43804 pagetables:815 bounce:0 [ 1592.363132] free:126505 free_pcp:657 free_cma:0 [ 1592.363149] Node 0 active_anon:57100kB inactive_anon:137128kB active_file:748kB inactive_file:5212kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211596kB dirty:92kB writeback:0kB shmem:138812kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1592.412067] 363849 pages reserved [ 1592.436923] Node 1 active_anon:1584kB inactive_anon:36132kB active_file:1712kB inactive_file:6636kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:6376kB dirty:64kB writeback:0kB shmem:36404kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1592.436928] Node 0 DMA free:11024kB min:204kB low:252kB high:300kB active_anon:16kB inactive_anon:4kB active_file:4kB inactive_file:132kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1592.436942] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1592.436956] Node 0 DMA32 free:169336kB min:36200kB low:45248kB high:54296kB active_anon:57084kB inactive_anon:137124kB active_file:644kB inactive_file:5180kB unevictable:0kB writepending:92kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:8000kB pagetables:3160kB bounce:0kB free_pcp:1300kB local_pcp:680kB free_cma:0kB [ 1592.436970] lowmem_reserve[]: 0 0 0 0 0 [ 1592.436984] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1592.436999] lowmem_reserve[]: 0 0 0 0 0 [ 1592.437014] Node 1 Normal free:296080kB min:53696kB low:67120kB high:80544kB active_anon:1584kB inactive_anon:36132kB active_file:1712kB inactive_file:6636kB unevictable:0kB writepending:64kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:100kB bounce:0kB free_pcp:1320kB local_pcp:648kB free_cma:0kB [ 1592.437032] lowmem_reserve[]: [ 1592.586782] 0 pages cma reserved [ 1592.593595] 0 0 0 0 0 [ 1592.593609] Node 0 DMA: 69*4kB (UMH) 5*8kB (UH) 1*16kB (H) 5*32kB (UMEH) 10*64kB (UME) 4*128kB (UE) 3*256kB (UME) 5*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 11116kB [ 1592.618348] Node 0 DMA32: 9778*4kB (UME) 5726*8kB (UME) 5388*16kB (UE) 836*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 197880kB [ 1592.632300] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1592.643126] Node 1 Normal: 25025*4kB (UE) 7893*8kB (U) 4133*16kB (UE) 3274*32kB (UE) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 334204kB [ 1592.657418] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1592.666257] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1592.674835] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1592.683671] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1592.692248] 47360 total pagecache pages [ 1592.696746] 0 pages in swap cache [ 1592.700192] Swap cache stats: add 0, delete 0, find 0/0 [ 1592.705548] Free swap = 0kB [ 1592.708645] Total swap = 0kB [ 1592.711864] 2097051 pages RAM [ 1592.714959] 0 pages HighMem/MovableOnly [ 1592.718926] 363849 pages reserved [ 1592.722392] 0 pages cma reserved [ 1592.757205] ODEBUG: assert_init not available (active state 0) object type: timer_list hint: (null) [ 1592.767750] ------------[ cut here ]------------ [ 1592.772538] WARNING: CPU: 0 PID: 18708 at lib/debugobjects.c:287 debug_print_object.cold+0xa7/0xdb [ 1592.781633] Kernel panic - not syncing: panic_on_warn set ... [ 1592.781633] [ 1592.789003] CPU: 0 PID: 18708 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1592.796880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1592.806233] Call Trace: [ 1592.808833] dump_stack+0x1b2/0x281 [ 1592.812551] panic+0x1f9/0x42d [ 1592.815741] ? add_taint.cold+0x16/0x16 [ 1592.819717] ? debug_print_object.cold+0xa7/0xdb [ 1592.824603] ? debug_print_object.cold+0xa7/0xdb [ 1592.829354] __warn.cold+0x20/0x44 [ 1592.832894] ? ist_end_non_atomic+0x10/0x10 [ 1592.837215] ? debug_print_object.cold+0xa7/0xdb [ 1592.841966] report_bug+0x208/0x250 [ 1592.845593] do_error_trap+0x195/0x2d0 [ 1592.849481] ? math_error+0x2d0/0x2d0 [ 1592.853286] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1592.858126] invalid_op+0x1b/0x40 [ 1592.861572] RIP: 0010:debug_print_object.cold+0xa7/0xdb [ 1592.866929] RSP: 0018:ffff88803aa2f248 EFLAGS: 00010086 [ 1592.872320] RAX: 0000000000000061 RBX: 0000000000000005 RCX: 0000000000000000 [ 1592.879590] RDX: 0000000000000000 RSI: ffffffff878bbbc0 RDI: ffffed1007545e3f [ 1592.886855] RBP: ffffffff878b6e80 R08: 0000000000000061 R09: 0000000000000001 [ 1592.894210] R10: 0000000000000000 R11: ffff88805b75c080 R12: 0000000000000000 [ 1592.901484] R13: 0000000000000000 R14: ffff888048a9a670 R15: 1ffff11007545e52 [ 1592.908772] ? debug_print_object.cold+0xa7/0xdb [ 1592.913621] debug_object_assert_init+0x1d3/0x2d0 [ 1592.918475] ? debug_object_active_state+0x330/0x330 [ 1592.923678] ? rtnl_newlink+0x14ff/0x1860 [ 1592.927834] ? rtnetlink_rcv_msg+0x3be/0xb10 [ 1592.932242] ? netlink_rcv_skb+0x125/0x390 [ 1592.936482] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1592.941855] del_timer+0x5d/0xe0 [ 1592.945235] ? process_timeout+0x20/0x20 [ 1592.949424] try_to_grab_pending+0x243/0x610 [ 1592.953832] __cancel_work_timer+0x90/0x460 [ 1592.958156] ? work_on_cpu_safe+0x70/0x70 [ 1592.962313] ? batadv_tvlv_handler_get+0x1db/0x2b0 [ 1592.967257] batadv_nc_mesh_free+0x41/0x120 [ 1592.971579] batadv_mesh_free+0x70/0x150 [ 1592.975637] batadv_mesh_init+0x561/0x630 [ 1592.979784] batadv_softif_init_late+0xa26/0xc90 [ 1592.984735] ? batadv_get_strings+0x40/0x40 [ 1592.989058] ? dev_valid_name+0x1a0/0x1a0 [ 1592.993301] ? batadv_get_strings+0x40/0x40 [ 1592.997708] register_netdevice+0x291/0xe40 [ 1593.002039] ? netdev_change_features+0xa0/0xa0 [ 1593.006801] ? rtnl_create_link+0x129/0x890 [ 1593.011318] rtnl_newlink+0x14ff/0x1860 [ 1593.015395] ? rtnl_newlink+0x43d/0x1860 [ 1593.019457] ? __lock_acquire+0x5fc/0x3f20 [ 1593.023699] ? trace_hardirqs_on+0x10/0x10 [ 1593.027931] ? rtnl_dellink+0x6a0/0x6a0 [ 1593.031909] ? trace_hardirqs_on+0x10/0x10 [ 1593.036143] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 1593.042056] ? deref_stack_reg+0x124/0x1a0 [ 1593.046316] ? lock_acquire+0x170/0x3f0 [ 1593.050286] ? lock_downgrade+0x740/0x740 [ 1593.054430] ? rtnl_dellink+0x6a0/0x6a0 [ 1593.058399] rtnetlink_rcv_msg+0x3be/0xb10 [ 1593.062765] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1593.067255] ? __netlink_lookup+0x345/0x5d0 [ 1593.071585] netlink_rcv_skb+0x125/0x390 [ 1593.075677] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1593.080177] ? netlink_ack+0x9a0/0x9a0 [ 1593.084090] netlink_unicast+0x437/0x610 [ 1593.088152] ? netlink_sendskb+0xd0/0xd0 [ 1593.092213] ? __check_object_size+0x179/0x230 [ 1593.096793] netlink_sendmsg+0x62e/0xb80 [ 1593.100856] ? nlmsg_notify+0x170/0x170 [ 1593.104837] ? security_socket_sendmsg+0x83/0xb0 [ 1593.109591] ? nlmsg_notify+0x170/0x170 [ 1593.113562] sock_sendmsg+0xb5/0x100 [ 1593.117274] SyS_sendto+0x1c7/0x2c0 [ 1593.120930] ? SyS_getpeername+0x220/0x220 [ 1593.125159] ? vm_insert_page+0x7c0/0x7c0 [ 1593.129440] ? up_read+0x17/0x30 [ 1593.132807] ? __do_page_fault+0x159/0xad0 [ 1593.137037] ? do_syscall_64+0x4c/0x640 [ 1593.141006] ? SyS_getpeername+0x220/0x220 [ 1593.145237] do_syscall_64+0x1d5/0x640 [ 1593.149125] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1593.154308] RIP: 0033:0x41956c [ 1593.157495] RSP: 002b:00007fff1e084e60 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1593.165391] RAX: ffffffffffffffda RBX: 00000000014a4320 RCX: 000000000041956c [ 1593.172665] RDX: 000000000000003c RSI: 00000000014a4370 RDI: 0000000000000003 [ 1593.179936] RBP: 0000000000000000 R08: 00007fff1e084eb4 R09: 000000000000000c [ 1593.187198] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1593.194476] R13: 00000000014a4370 R14: 0000000000000003 R15: 0000000000000000 [ 1593.203537] Kernel Offset: disabled [ 1593.207426] Rebooting in 86400 seconds..