1d923300 R15: 0000000000022000 [ 3007.599106] Mem-Info: [ 3007.600399] CPU: 1 PID: 5873 Comm: syz-executor.4 Not tainted 4.14.230-syzkaller #0 [ 3007.601773] active_anon:80625 inactive_anon:26990 isolated_anon:0 [ 3007.601773] active_file:18 inactive_file:38 isolated_file:0 [ 3007.601773] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3007.601773] slab_reclaimable:15337 slab_unreclaimable:148696 [ 3007.601773] mapped:43946 shmem:29458 pagetables:20559 bounce:0 [ 3007.601773] free:14300 free_pcp:0 free_cma:0 [ 3007.610071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3007.610075] Call Trace: [ 3007.610096] dump_stack+0x1b2/0x281 [ 3007.610108] warn_alloc.cold+0x96/0x1cc [ 3007.610119] ? zone_watermark_ok_safe+0x220/0x220 [ 3007.610140] ? usleep_range+0x130/0x130 [ 3007.643566] Node 0 active_anon:248840kB inactive_anon:83564kB active_file:16kB inactive_file:84kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:159704kB dirty:0kB writeback:0kB shmem:88120kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 178176kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3007.653184] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3007.655917] Node 1 active_anon:73660kB inactive_anon:24396kB active_file:56kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:16080kB dirty:0kB writeback:0kB shmem:29712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3007.659553] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3007.665189] Node 0 [ 3007.670335] ? run_timer_softirq+0x5a0/0x5a0 [ 3007.674480] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3007.704172] __alloc_pages_nodemask+0x2127/0x2720 [ 3007.704190] ? lock_acquire+0x170/0x3f0 [ 3007.704204] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3007.709580] lowmem_reserve[]: [ 3007.738012] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3007.738028] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3007.738047] alloc_pages_current+0x155/0x260 [ 3007.738059] ion_page_pool_alloc+0x118/0x1b0 [ 3007.743631] 0 [ 3007.745829] ion_system_heap_allocate+0x133/0x8c0 [ 3007.750283] 2717 [ 3007.777793] ? _raw_spin_unlock+0x29/0x40 [ 3007.777802] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3007.777810] ? ion_system_contig_heap_create+0x130/0x130 [ 3007.777819] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3007.777832] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3007.783092] 2718 [ 3007.787853] ion_alloc+0x27a/0x810 [ 3007.787868] ? ion_dma_buf_release+0x40/0x40 [ 3007.787880] ? __might_fault+0x177/0x1b0 [ 3007.787890] ion_ioctl+0xea/0x1f0 [ 3007.787900] ? ion_query_heaps+0x360/0x360 [ 3007.792738] 2718 2718 [ 3007.792748] Node 0 DMA32 free:18880kB min:36200kB low:45248kB high:54296kB active_anon:248672kB inactive_anon:83564kB active_file:16kB inactive_file:84kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11456kB pagetables:15100kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3007.792766] lowmem_reserve[]: 0 0 0 0 0 [ 3007.792781] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3007.792799] lowmem_reserve[]: [ 3007.795895] ? SyS_write+0x1b7/0x210 [ 3007.795906] ? ion_query_heaps+0x360/0x360 [ 3007.795915] do_vfs_ioctl+0x75a/0xff0 [ 3007.795930] ? ioctl_preallocate+0x1a0/0x1a0 [ 3007.800591] 0 [ 3007.806440] ? lock_downgrade+0x740/0x740 [ 3007.806454] ? __fget+0x225/0x360 [ 3007.806462] ? do_vfs_ioctl+0xff0/0xff0 [ 3007.806474] ? security_file_ioctl+0x83/0xb0 [ 3007.811119] 0 [ 3007.815529] SyS_ioctl+0x7f/0xb0 [ 3007.815538] ? do_vfs_ioctl+0xff0/0xff0 [ 3007.815551] do_syscall_64+0x1d5/0x640 [ 3007.817789] 0 [ 3007.824186] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3007.824194] RIP: 0033:0x466459 [ 3007.824201] RSP: 002b:00007f61587e7188 EFLAGS: 00000246 [ 3007.826247] 0 [ 3007.830370] ORIG_RAX: 0000000000000010 [ 3007.830378] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3007.835496] 0 [ 3007.841005] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3007.851358] RBP: 00007f61587e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 3007.853426] Node 1 [ 3007.857731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3007.862278] Normal free:27360kB min:53696kB low:67120kB high:80544kB active_anon:73660kB inactive_anon:24396kB active_file:28kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21696kB pagetables:67004kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3007.866773] R13: 00007ffed7f6205f R14: 00007f61587e7300 R15: 0000000000022000 [ 3007.871038] 0 [ 3007.884023] lowmem_reserve[]: [ 3007.913663] 2717 [ 3007.951004] 0 [ 3007.958793] 2718 [ 3007.959075] 0 [ 3007.963633] 2718 2718 [ 3007.963643] Node 0 DMA32 free:18920kB min:36200kB low:45248kB high:54296kB active_anon:248672kB inactive_anon:83564kB active_file:32kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11456kB pagetables:15100kB bounce:0kB free_pcp:48kB local_pcp:32kB free_cma:0kB [ 3007.963666] lowmem_reserve[]: [ 3007.971948] 0 [ 3007.976947] 0 [ 3007.977625] 0 [ 3007.982128] 0 [ 3007.990562] 0 [ 3007.991705] 0 [ 3007.996067] Node 0 DMA: 12*4kB (M) 42*8kB (UME) 53*16kB (UM) 18*32kB (UME) 5*64kB (UME) 5*128kB (UE) [ 3008.001500] 0 [ 3008.010055] 4*256kB [ 3008.012377] 0 [ 3008.014360] (UME) 2*512kB (UE) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 10960kB [ 3008.014390] Node 0 [ 3008.032899] DMA32: [ 3008.039340] Node 0 [ 3008.050340] 846*4kB [ 3008.058539] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3008.097715] (ME) [ 3008.098657] lowmem_reserve[]: [ 3008.100776] 291*8kB [ 3008.102558] 0 [ 3008.109589] (UME) [ 3008.139469] 0 0 0 0 [ 3008.139487] Node 1 Normal free:27452kB min:53696kB low:67120kB high:80544kB active_anon:73660kB inactive_anon:24396kB active_file:20kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21696kB pagetables:67004kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3008.139505] lowmem_reserve[]: 0 0 0 0 0 [ 3008.139524] Node 0 DMA: 12*4kB (M) 42*8kB (UME) 53*16kB (UM) 18*32kB (UME) [ 3008.153251] 192*16kB [ 3008.153845] 5*64kB [ 3008.163146] (UME) [ 3008.164989] (UME) 5*128kB (UE) 4*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 10960kB [ 3008.165029] Node 0 DMA32: 846*4kB (ME) 291*8kB (UME) 192*16kB (UME) 296*32kB (UME) [ 3008.177231] 296*32kB [ 3008.193245] 7*64kB [ 3008.253230] (UME) [ 3008.324955] (U) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18960kB [ 3008.340903] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3008.356479] Node 1 Normal: 2*4kB (UM) 6*8kB (U) 10*16kB (U) 9*32kB (U) 2*64kB (U) 2*128kB (UM) 0*256kB 0*512kB 286*1024kB (UM) 29*2048kB (UM) 0*4096kB = 353144kB [ 3008.363232] 7*64kB (U) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18960kB [ 3008.378788] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3008.390357] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3008.399853] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3008.406546] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3008.423217] Node 1 Normal: 2*4kB (UM) 6*8kB (U) 10*16kB (U) 9*32kB (U) 2*64kB (U) 2*128kB (UM) 0*256kB 0*512kB 286*1024kB (UM) 70*2048kB (UM) 11*4096kB (U) = 482168kB [ 3008.425772] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3008.451912] 30929 total pagecache pages [ 3008.453213] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3008.456096] 0 pages in swap cache [ 3008.472882] Swap cache stats: add 0, delete 0, find 0/0 [ 3008.479121] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3008.479128] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3008.479133] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3008.479137] 30929 total pagecache pages [ 3008.479146] 0 pages in swap cache [ 3008.479150] Swap cache stats: add 0, delete 0, find 0/0 [ 3008.479153] Free swap = 0kB [ 3008.479156] Total swap = 0kB [ 3008.479162] 2097051 pages RAM [ 3008.479165] 0 pages HighMem/MovableOnly [ 3008.479168] 363848 pages reserved [ 3008.479171] 0 pages cma reserved [ 3008.550046] Free swap = 0kB [ 3008.554421] Total swap = 0kB [ 3008.558289] 2097051 pages RAM [ 3008.563024] 0 pages HighMem/MovableOnly [ 3008.569856] 363848 pages reserved [ 3008.574023] 0 pages cma reserved [ 3008.577573] Out of memory (oom_kill_allocating_task): Kill process 5918 (systemd-journal) score 0 or sacrifice child [ 3008.591954] Killed process 5918 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:0kB, shmem-rss:1588kB [ 3008.611491] oom_reaper: reaped process 5918 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1588kB [ 3008.717274] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 3008.742960] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 3008.776976] systemd[1]: Stopped Journal Service. [ 3008.803009] systemd[1]: Starting Journal Service... 23:46:53 executing program 1: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f00000000c0)=0x8) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000036c0)='/dev/dlm_plock\x00', 0x0, 0x0) getsockname$ax25(r1, 0x0, 0x0) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000280)=0x8) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000000)={0xda4, 0x64, "b40898b2b470daccb9f25672af68ca98fa23a0fd443fbd8edf5b578b8f8c78a41985fc13b8ab685ae18202a17b2a94bfa160df2f0dbb312251d5467fe8cca9ec78cd2a286844b6b95b55ed511df17a3a4e4dc4a6bfe7e43642c6c6fdfa6912abb1cf2b06"}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000180)={0x0, 0x3, 0x4, 0xe000, 0x6, {r3, r4/1000+10000}, {0x5, 0x2, 0x3f, 0x8, 0xb2, 0x4, "02e23691"}, 0x0, 0x1, @userptr=0x228, 0x3, 0x0, r1}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000200)={0x6, 0x3, 0x4, 0x40, 0x1, {0x0, 0x2710}, {0x3, 0x0, 0x9, 0x0, 0x7, 0x41, "3a8caf54"}, 0x8, 0x1, @offset, 0x101, 0x0, r5}) [ 3008.914534] systemd-journald[5932]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. 23:46:53 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000006, 0x27}) 23:46:53 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900)='802.15.4 MAC\x00', r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="40040000", @ANYRES16=0x0, @ANYBLOB="040028bd7000fedbdf25040000000800020003000000080008000a01010114000600fe8000000000000000000000000000aa080004000100000008000c00010000000800020005000000"], 0x50}, 0x1, 0x0, 0x0, 0x24004000}, 0x4008000) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000006, 0x27}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000080)={0x10000, 0x2, 0x4, 0x400, 0x10000, {}, {0x1, 0xc, 0x4, 0x80, 0x8, 0x3, "dc2cdceb"}, 0x5, 0x2, @offset=0x875, 0x20000000}) 23:46:53 executing program 4: semctl$GETZCNT(0x0, 0x2, 0xf, &(0x7f00000000c0)=""/34) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) accept4$rose(r0, &(0x7f0000000140)=@full={0xb, @remote, @null, 0x0, [@remote, @null, @default, @remote, @null, @null]}, &(0x7f0000000180)=0x40, 0x80800) ioctl$SIOCRSGCAUSE(r0, 0x89e0, 0x0) accept4$rose(r0, &(0x7f0000000080)=@full={0xb, @dev, @remote, 0x0, [@netrom, @rose, @bcast, @netrom, @null, @netrom]}, 0x0, 0x1800) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r2 = semget(0x0, 0x1, 0x480) semctl$SEM_STAT_ANY(r2, 0x3, 0x14, &(0x7f0000000100)=""/2) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x80000006, 0x27}) 23:46:53 executing program 1: setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000000)=0x9b, 0x8) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x781100, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f00000000c0)=0x8) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) 23:46:53 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000006, 0x27}) 23:46:53 executing program 3: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGCAUSE(r0, 0x89e0, 0x0) ioctl$SIOCRSACCEPT(r0, 0x89e3) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000080)=0xffff7fff) 23:46:53 executing program 1: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x2d0d41, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f00000000c0)=0x8) r1 = gettid() getpgid(r1) r2 = getpgrp(r1) perf_event_open(&(0x7f0000000140)={0x3, 0x70, 0x2, 0x5, 0x63, 0x3f, 0x0, 0x4768, 0x404, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0x7, 0x4}, 0x18814, 0x2, 0x38b3, 0x0, 0x9, 0x2, 0x3}, 0x0, 0xa, 0xffffffffffffffff, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r2, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000100)='\x0es36i\xd4\xa9*\x19\x0f'}, 0x30) 23:46:53 executing program 1: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x14b000, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000080)) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000100)=0xfd73) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1000}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004010}, 0x4040000) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f00000000c0)=0x8) [ 3010.099234] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3010.104173] syz-executor.4: [ 3010.112662] systemd[1]: Started Journal Service. [ 3010.122317] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3010.128566] syz-executor.0: [ 3010.135698] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3010.143741] page allocation failure: order:4 [ 3010.161063] syz-executor.4 cpuset= [ 3010.166311] syz-executor.2 cpuset= [ 3010.171049] syz-executor.2 cpuset= [ 3010.177124] page allocation failure: order:4 [ 3010.179147] / [ 3010.185547] syz-executor.5: [ 3010.186199] / [ 3010.191627] / [ 3010.194230] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 3010.197374] mems_allowed=0-1 [ 3010.198062] page allocation failure: order:4 [ 3010.205671] mems_allowed=0-1 [ 3010.209118] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 3010.215092] mems_allowed=0-1 [ 3010.218618] (null) [ 3010.229831] CPU: 0 PID: 5964 Comm: syz-executor.2 Not tainted 4.14.230-syzkaller #0 [ 3010.234860] syz-executor.4 cpuset= [ 3010.237782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3010.237787] Call Trace: [ 3010.237807] dump_stack+0x1b2/0x281 [ 3010.237820] warn_alloc.cold+0x96/0x1cc [ 3010.244970] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 3010.251552] ? zone_watermark_ok_safe+0x220/0x220 [ 3010.251575] __alloc_pages_nodemask+0x2127/0x2720 [ 3010.254520] (null) [ 3010.258399] ? lock_acquire+0x170/0x3f0 [ 3010.258416] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3010.262576] / [ 3010.269906] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3010.283101] syz-executor.0 cpuset= [ 3010.286464] ? __mutex_unlock_slowpath+0x75/0x770 [ 3010.291294] / [ 3010.293002] alloc_pages_current+0x155/0x260 [ 3010.301997] (null) [ 3010.302461] ion_page_pool_alloc+0x118/0x1b0 [ 3010.302475] ion_system_heap_allocate+0x133/0x8c0 [ 3010.316131] syz-executor.5 cpuset= [ 3010.320289] ? ion_alloc+0x187/0x810 [ 3010.320303] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3010.325829] mems_allowed=0-1 [ 3010.328913] ? ion_system_contig_heap_create+0x130/0x130 [ 3010.328923] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3010.328935] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3010.342113] mems_allowed=0-1 [ 3010.348284] ion_alloc+0x204/0x810 [ 3010.348297] ? ion_dma_buf_release+0x40/0x40 [ 3010.348309] ? __might_fault+0x177/0x1b0 [ 3010.348318] ion_ioctl+0xea/0x1f0 [ 3010.348327] ? ion_query_heaps+0x360/0x360 [ 3010.365608] / [ 3010.365651] ? SyS_send+0x40/0x40 [ 3010.380605] mems_allowed=0-1 [ 3010.382304] ? vm_insert_page+0x7c0/0x7c0 [ 3010.382318] ? ion_query_heaps+0x360/0x360 [ 3010.399122] do_vfs_ioctl+0x75a/0xff0 [ 3010.402957] ? ioctl_preallocate+0x1a0/0x1a0 [ 3010.407536] ? lock_downgrade+0x740/0x740 [ 3010.411778] ? __fget+0x225/0x360 [ 3010.415222] ? do_vfs_ioctl+0xff0/0xff0 [ 3010.419371] ? security_file_ioctl+0x83/0xb0 [ 3010.423810] SyS_ioctl+0x7f/0xb0 [ 3010.427314] ? do_vfs_ioctl+0xff0/0xff0 [ 3010.431555] do_syscall_64+0x1d5/0x640 [ 3010.435637] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3010.441079] RIP: 0033:0x466459 [ 3010.444259] RSP: 002b:00007fa81d8e1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3010.452342] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 3010.459776] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3010.467489] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3010.475099] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 3010.482536] R13: 00007ffc23c68c0f R14: 00007fa81d8e1300 R15: 0000000000022000 [ 3010.489997] CPU: 1 PID: 5966 Comm: syz-executor.4 Not tainted 4.14.230-syzkaller #0 [ 3010.497813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3010.507564] Call Trace: [ 3010.510259] dump_stack+0x1b2/0x281 [ 3010.513987] warn_alloc.cold+0x96/0x1cc [ 3010.518064] ? zone_watermark_ok_safe+0x220/0x220 [ 3010.523174] __alloc_pages_nodemask+0x2127/0x2720 [ 3010.528321] ? _raw_spin_unlock_irq+0x24/0x80 [ 3010.532928] ? lock_acquire+0x170/0x3f0 [ 3010.537513] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3010.542620] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3010.548440] ? __mutex_unlock_slowpath+0x75/0x770 [ 3010.553294] alloc_pages_current+0x155/0x260 [ 3010.557885] ion_page_pool_alloc+0x118/0x1b0 [ 3010.562420] ion_system_heap_allocate+0x133/0x8c0 [ 3010.567442] ? ion_alloc+0x187/0x810 [ 3010.571456] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3010.577205] ? ion_system_contig_heap_create+0x130/0x130 [ 3010.582868] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3010.588196] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3010.593130] ion_alloc+0x204/0x810 [ 3010.596828] ? ion_dma_buf_release+0x40/0x40 [ 3010.601774] ? __might_fault+0x177/0x1b0 [ 3010.605949] ion_ioctl+0xea/0x1f0 [ 3010.609585] ? ion_query_heaps+0x360/0x360 [ 3010.614027] ? msg_exit_ns+0x40/0x40 [ 3010.617749] ? ion_query_heaps+0x360/0x360 [ 3010.622257] do_vfs_ioctl+0x75a/0xff0 [ 3010.626066] ? ioctl_preallocate+0x1a0/0x1a0 [ 3010.630851] ? lock_downgrade+0x740/0x740 [ 3010.635181] ? __fget+0x225/0x360 [ 3010.638645] ? do_vfs_ioctl+0xff0/0xff0 [ 3010.642657] ? security_file_ioctl+0x83/0xb0 [ 3010.647288] SyS_ioctl+0x7f/0xb0 [ 3010.650936] ? do_vfs_ioctl+0xff0/0xff0 [ 3010.654927] do_syscall_64+0x1d5/0x640 [ 3010.658908] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3010.667200] RIP: 0033:0x466459 [ 3010.671156] RSP: 002b:00007f61587a5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3010.678985] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 3010.686528] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3010.694173] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3010.702152] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 3010.709821] R13: 00007ffed7f6205f R14: 00007f61587a5300 R15: 0000000000022000 [ 3010.717359] CPU: 0 PID: 5949 Comm: syz-executor.4 Not tainted 4.14.230-syzkaller #0 [ 3010.725626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3010.735343] Call Trace: [ 3010.738240] dump_stack+0x1b2/0x281 [ 3010.741965] warn_alloc.cold+0x96/0x1cc [ 3010.746055] ? zone_watermark_ok_safe+0x220/0x220 [ 3010.751253] __alloc_pages_nodemask+0x2127/0x2720 [ 3010.756322] ? __schedule+0x893/0x1de0 [ 3010.760676] ? lock_acquire+0x170/0x3f0 [ 3010.764917] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3010.770033] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3010.775674] ? __mutex_unlock_slowpath+0x75/0x770 [ 3010.781068] alloc_pages_current+0x155/0x260 [ 3010.785613] ion_page_pool_alloc+0x118/0x1b0 [ 3010.790333] ion_system_heap_allocate+0x133/0x8c0 [ 3010.795434] ? ion_alloc+0x187/0x810 [ 3010.799409] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3010.805122] ? ion_system_contig_heap_create+0x130/0x130 [ 3010.811226] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3010.816948] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3010.822174] ion_alloc+0x204/0x810 [ 3010.826262] ? ion_dma_buf_release+0x40/0x40 [ 3010.830674] ? __might_fault+0x177/0x1b0 [ 3010.834831] ion_ioctl+0xea/0x1f0 [ 3010.838584] ? ion_query_heaps+0x360/0x360 [ 3010.843276] ? msg_exit_ns+0x40/0x40 [ 3010.847020] ? ion_query_heaps+0x360/0x360 [ 3010.851344] do_vfs_ioctl+0x75a/0xff0 [ 3010.855335] ? ioctl_preallocate+0x1a0/0x1a0 [ 3010.859844] ? lock_downgrade+0x740/0x740 [ 3010.864181] ? __fget+0x225/0x360 [ 3010.867646] ? do_vfs_ioctl+0xff0/0xff0 [ 3010.871866] ? security_file_ioctl+0x83/0xb0 [ 3010.876954] SyS_ioctl+0x7f/0xb0 [ 3010.880631] ? do_vfs_ioctl+0xff0/0xff0 [ 3010.884706] do_syscall_64+0x1d5/0x640 [ 3010.889040] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3010.895003] RIP: 0033:0x466459 [ 3010.899994] RSP: 002b:00007f61587e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3010.908864] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3010.917010] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3010.924848] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3010.933090] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3010.941125] R13: 00007ffed7f6205f R14: 00007f61587e7300 R15: 0000000000022000 [ 3010.949306] CPU: 1 PID: 5943 Comm: syz-executor.2 Not tainted 4.14.230-syzkaller #0 [ 3010.958241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3010.969287] Call Trace: [ 3010.972213] dump_stack+0x1b2/0x281 [ 3010.976960] warn_alloc.cold+0x96/0x1cc [ 3010.981072] ? zone_watermark_ok_safe+0x220/0x220 [ 3010.986463] __alloc_pages_nodemask+0x2127/0x2720 [ 3010.992033] ? lock_acquire+0x170/0x3f0 [ 3010.996462] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3011.001333] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3011.007514] ? __mutex_unlock_slowpath+0x75/0x770 [ 3011.012810] alloc_pages_current+0x155/0x260 [ 3011.017674] ion_page_pool_alloc+0x118/0x1b0 [ 3011.022587] ion_system_heap_allocate+0x133/0x8c0 [ 3011.028751] ? ion_alloc+0x187/0x810 [ 3011.033740] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3011.039499] ? ion_system_contig_heap_create+0x130/0x130 [ 3011.045791] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3011.051184] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3011.056306] ion_alloc+0x204/0x810 [ 3011.062823] ? ion_dma_buf_release+0x40/0x40 [ 3011.067511] ? __might_fault+0x177/0x1b0 [ 3011.071866] ion_ioctl+0xea/0x1f0 [ 3011.075600] ? ion_query_heaps+0x360/0x360 [ 3011.079970] ? ion_query_heaps+0x360/0x360 [ 3011.084394] do_vfs_ioctl+0x75a/0xff0 [ 3011.088215] ? ioctl_preallocate+0x1a0/0x1a0 [ 3011.093944] ? lock_downgrade+0x740/0x740 [ 3011.099167] ? __fget+0x225/0x360 [ 3011.102840] ? do_vfs_ioctl+0xff0/0xff0 [ 3011.107365] ? security_file_ioctl+0x83/0xb0 [ 3011.112484] SyS_ioctl+0x7f/0xb0 [ 3011.116234] ? do_vfs_ioctl+0xff0/0xff0 [ 3011.120492] do_syscall_64+0x1d5/0x640 [ 3011.124504] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3011.130073] RIP: 0033:0x466459 [ 3011.133738] RSP: 002b:00007fa81d923188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3011.143281] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3011.150745] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3011.152462] warn_alloc_show_mem: 1 callbacks suppressed [ 3011.152465] Mem-Info: [ 3011.158135] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3011.158140] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3011.158145] R13: 00007ffc23c68c0f R14: 00007fa81d923300 R15: 0000000000022000 [ 3011.166116] CPU: 1 PID: 5941 Comm: syz-executor.5 Not tainted 4.14.230-syzkaller #0 [ 3011.186521] active_anon:80721 inactive_anon:29021 isolated_anon:0 [ 3011.186521] active_file:1928 inactive_file:5037 isolated_file:0 [ 3011.186521] unevictable:0 dirty:9 writeback:0 unstable:0 [ 3011.186521] slab_reclaimable:15302 slab_unreclaimable:149105 [ 3011.186521] mapped:48581 shmem:31505 pagetables:20590 bounce:0 [ 3011.186521] free:172125 free_pcp:715 free_cma:0 [ 3011.189520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3011.189525] Call Trace: [ 3011.189547] dump_stack+0x1b2/0x281 [ 3011.189562] warn_alloc.cold+0x96/0x1cc [ 3011.189574] ? zone_watermark_ok_safe+0x220/0x220 [ 3011.189596] __alloc_pages_nodemask+0x2127/0x2720 [ 3011.212969] Node 0 active_anon:249464kB inactive_anon:91688kB active_file:4904kB inactive_file:17872kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174328kB dirty:36kB writeback:0kB shmem:96308kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 178176kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3011.233195] ? __schedule+0x893/0x1de0 [ 3011.233212] ? lock_acquire+0x170/0x3f0 [ 3011.233230] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3011.233244] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3011.233254] ? __mutex_unlock_slowpath+0x75/0x770 [ 3011.233262] ? retint_kernel+0x2d/0x2d [ 3011.233274] alloc_pages_current+0x155/0x260 [ 3011.265598] Node 1 active_anon:73420kB inactive_anon:24396kB active_file:2808kB inactive_file:2276kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:19996kB dirty:0kB writeback:0kB shmem:29712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3011.293118] ion_page_pool_alloc+0x118/0x1b0 [ 3011.293128] ion_system_heap_allocate+0x133/0x8c0 [ 3011.293138] ? ion_alloc+0x187/0x810 [ 3011.293150] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3011.293157] ? ion_system_contig_heap_create+0x130/0x130 [ 3011.293165] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3011.293177] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3011.293186] ion_alloc+0x204/0x810 [ 3011.293198] ? ion_dma_buf_release+0x40/0x40 [ 3011.333174] Node 0 [ 3011.356819] ? __might_fault+0x177/0x1b0 [ 3011.356833] ion_ioctl+0xea/0x1f0 [ 3011.356843] ? ion_query_heaps+0x360/0x360 [ 3011.356855] ? ion_query_heaps+0x360/0x360 [ 3011.356864] do_vfs_ioctl+0x75a/0xff0 [ 3011.356874] ? ioctl_preallocate+0x1a0/0x1a0 [ 3011.356883] ? lock_downgrade+0x740/0x740 [ 3011.356895] ? __fget+0x225/0x360 [ 3011.416150] DMA free:11148kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:0kB active_file:0kB inactive_file:20kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3011.418333] ? do_vfs_ioctl+0xff0/0xff0 [ 3011.418351] ? security_file_ioctl+0x83/0xb0 [ 3011.418361] SyS_ioctl+0x7f/0xb0 [ 3011.428668] lowmem_reserve[]: [ 3011.431311] ? do_vfs_ioctl+0xff0/0xff0 [ 3011.431325] do_syscall_64+0x1d5/0x640 [ 3011.431345] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3011.453630] 0 [ 3011.469158] RIP: 0033:0x466459 [ 3011.469164] RSP: 002b:00007f81c679f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3011.469175] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3011.469180] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3011.469186] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3011.469190] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3011.469194] R13: 00007ffd3cef7c7f R14: 00007f81c679f300 R15: 0000000000022000 [ 3011.471173] CPU: 1 PID: 5948 Comm: syz-executor.0 Not tainted 4.14.230-syzkaller #0 [ 3011.526819] 2717 [ 3011.531318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3011.531323] Call Trace: [ 3011.531344] dump_stack+0x1b2/0x281 [ 3011.531358] warn_alloc.cold+0x96/0x1cc [ 3011.531371] ? zone_watermark_ok_safe+0x220/0x220 [ 3011.531392] __alloc_pages_nodemask+0x2127/0x2720 [ 3011.566779] 2718 [ 3011.575776] ? mark_held_locks+0xa6/0xf0 [ 3011.575791] ? lock_acquire+0x170/0x3f0 [ 3011.575806] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3011.575823] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3011.575834] ? __mutex_unlock_slowpath+0x75/0x770 [ 3011.601558] 2718 [ 3011.603415] ? alloc_pages_current+0x37/0x260 [ 3011.603428] alloc_pages_current+0x155/0x260 [ 3011.603443] ion_page_pool_alloc+0x118/0x1b0 [ 3011.603453] ion_system_heap_allocate+0x133/0x8c0 [ 3011.603461] ? ion_alloc+0x187/0x810 [ 3011.603471] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3011.603480] ? ion_system_contig_heap_create+0x130/0x130 [ 3011.603493] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3011.611197] 2718 [ 3011.613019] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3011.613031] ion_alloc+0x204/0x810 [ 3011.613045] ? ion_dma_buf_release+0x40/0x40 [ 3011.613056] ? __might_fault+0x177/0x1b0 [ 3011.613066] ion_ioctl+0xea/0x1f0 [ 3011.613076] ? ion_query_heaps+0x360/0x360 [ 3011.627597] ? ion_query_heaps+0x360/0x360 [ 3011.627610] do_vfs_ioctl+0x75a/0xff0 [ 3011.627622] ? ioctl_preallocate+0x1a0/0x1a0 [ 3011.627632] ? lock_downgrade+0x740/0x740 [ 3011.627646] ? __fget+0x225/0x360 [ 3011.634954] Node 0 [ 3011.636806] ? do_vfs_ioctl+0xff0/0xff0 [ 3011.636819] ? security_file_ioctl+0x83/0xb0 [ 3011.636830] SyS_ioctl+0x7f/0xb0 [ 3011.647591] DMA32 free:304600kB min:36200kB low:45248kB high:54296kB active_anon:249296kB inactive_anon:91688kB active_file:4904kB inactive_file:17852kB unevictable:0kB writepending:36kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11488kB pagetables:15296kB bounce:0kB free_pcp:1336kB local_pcp:648kB free_cma:0kB [ 3011.651110] ? do_vfs_ioctl+0xff0/0xff0 [ 3011.651125] do_syscall_64+0x1d5/0x640 [ 3011.651140] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3011.682856] lowmem_reserve[]: [ 3011.686703] RIP: 0033:0x466459 [ 3011.686708] RSP: 002b:00007f96795e9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3011.686717] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3011.686722] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3011.686727] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3011.686733] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3011.686738] R13: 00007ffcc734291f R14: 00007f96795e9300 R15: 0000000000022000 [ 3011.839143] 0 0 0 0 0 [ 3011.844744] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3011.873075] lowmem_reserve[]: 0 0 0 0 0 [ 3011.883130] Node 1 Normal free:555592kB min:53696kB low:67120kB high:80544kB active_anon:73420kB inactive_anon:24396kB active_file:2808kB inactive_file:2276kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21760kB pagetables:66932kB bounce:0kB free_pcp:1400kB local_pcp:716kB free_cma:0kB 23:46:56 executing program 1: openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000036c0)='/dev/dlm_plock\x00', 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) accept4$ax25(r1, 0x0, 0x0, 0x0) getsockname$ax25(r1, 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000080)=0x4) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rxrpc_improper_term\x00'}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) [ 3011.947547] lowmem_reserve[]: 0 0 0 0 0 [ 3011.957390] Node 0 DMA: 36*4kB (UM) 58*8kB (UME) 55*16kB (UM) 20*32kB (UME) 5*64kB (UME) 4*128kB (UE) 4*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 11152kB [ 3011.983964] Node 0 DMA32: 193*4kB (UME) 4733*8kB (UME) 4161*16kB (UME) 2269*32kB (UME) 1497*64kB (UM) 7*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 274524kB [ 3012.041667] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB 23:46:56 executing program 1: sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x88, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, [], 0x28}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '/dev/urandom\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x4000054) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f00000000c0)=0x8) [ 3012.084158] Node 1 Normal: 16335*4kB (UM) 11895*8kB (UM) 8900*16kB (UM) 5146*32kB (U) 1232*64kB (U) 39*128kB (U) 9*256kB (U) 1*512kB (U) 2*1024kB (U) 0*2048kB 0*4096kB = 556276kB [ 3012.101056] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3012.112148] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3012.122875] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3012.144661] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3012.170790] 38580 total pagecache pages [ 3012.190080] 0 pages in swap cache 23:46:56 executing program 1: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f00000000c0)=0x8) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000036c0)='/dev/dlm_plock\x00', 0x0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r2, 0x80047453, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000200)={0xf239, 0x4e, "b63c4c96bef962ea25e626c49a5551036aea7b6c08e325afc8233e84e0f55d71d82229fbde8afd0058f3d841dcc67329a8737ef9163fc893af0e2e597858d27e94c1987dcdbc717a3a565e0d07bb"}) ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f0000000080)=0x4) getsockname$ax25(r1, 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0x1, 0x2) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000100)={0x6, 0xf2, "671064a42ea5519d35800bb854b3bd2b07d99f3d72f9e0e29ffed777767c538856dd812a8bad114e51a60ad7aaf8b4ebed581a2e348b56d57d4831df7414689cd33f59b42d5ce4257ff8295c50e8edcf75e5ced2655a950615318fcd1f74305fe0c800d4f04b29a8e41e21226848a0805c36a6e82df81003f22578d2a661f9ec723c4279917f71ec923aacae7e6eecd45e7dfe2a7d5e8da90f2c09923d90711d65111b494163cbf0202e19b4f0671a9957a8da0c688d92159bb9186bf968c763888f7eafb89eb383ab0b4abbb930906498134b98b4754681d649713ffcd7715271f01cb48c4232c02d983493219c0d1c95a0"}) openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x690040, 0x0) [ 3012.197259] Swap cache stats: add 0, delete 0, find 0/0 [ 3012.224217] Free swap = 0kB [ 3012.233689] Total swap = 0kB [ 3012.245029] 2097051 pages RAM [ 3012.248314] 0 pages HighMem/MovableOnly 23:46:56 executing program 1: openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f00000000c0)=0x8) [ 3012.272829] 363848 pages reserved [ 3012.279642] 0 pages cma reserved [ 3013.208098] oom_reaper: reaped process 5943 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3013.304428] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 3013.320501] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 3013.329939] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3013.342925] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3013.355373] CPU: 0 PID: 10767 Comm: syz-fuzzer Not tainted 4.14.230-syzkaller #0 [ 3013.355379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3013.355382] Call Trace: [ 3013.355402] dump_stack+0x1b2/0x281 [ 3013.355413] dump_header+0x178/0x82f [ 3013.355424] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3013.355432] ? ___ratelimit+0x2cd/0x530 [ 3013.355441] oom_kill_process.cold+0x10/0xa40 [ 3013.355459] out_of_memory+0xe3e/0x1190 [ 3013.404437] ? oom_killer_disable+0x1c0/0x1c0 [ 3013.409374] ? mutex_trylock+0x152/0x1a0 [ 3013.413965] __alloc_pages_nodemask+0x23e1/0x2720 [ 3013.419419] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3013.424384] alloc_pages_current+0x155/0x260 [ 3013.429588] filemap_fault+0x11a1/0x1ad0 [ 3013.434171] ext4_filemap_fault+0x84/0xb0 [ 3013.438311] __do_fault+0xfa/0x380 [ 3013.442034] __handle_mm_fault+0x2497/0x4620 [ 3013.446619] ? vm_insert_page+0x7c0/0x7c0 [ 3013.450887] ? setup_sigcontext+0x820/0x820 [ 3013.455370] ? mark_held_locks+0xa6/0xf0 [ 3013.459429] handle_mm_fault+0x455/0x9c0 [ 3013.463486] __do_page_fault+0x549/0xad0 [ 3013.467946] ? spurious_fault+0x640/0x640 [ 3013.472362] ? do_page_fault+0x60/0x500 [ 3013.476485] ? page_fault+0x2f/0x50 [ 3013.480929] page_fault+0x45/0x50 [ 3013.485834] RIP: 0001:0x2bdaeacc560 [ 3013.490272] RSP: 0000:000000c00150b5b8 EFLAGS: 2bdaeacc560 [ 3013.497649] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 3013.503897] syz-executor.2 cpuset= [ 3013.508649] CPU: 1 PID: 5964 Comm: syz-executor.2 Not tainted 4.14.230-syzkaller #0 [ 3013.508651] / mems_allowed=0-1 [ 3013.512179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3013.533327] Call Trace: [ 3013.535910] dump_stack+0x1b2/0x281 [ 3013.539617] warn_alloc.cold+0x96/0x1cc [ 3013.543594] ? zone_watermark_ok_safe+0x220/0x220 [ 3013.548628] ? usleep_range+0x130/0x130 [ 3013.553046] ? try_to_free_pages+0x23f/0x6e0 [ 3013.557553] ? _find_next_bit+0xdb/0x100 [ 3013.561916] ? run_timer_softirq+0x5a0/0x5a0 [ 3013.566538] __alloc_pages_nodemask+0x2127/0x2720 [ 3013.571839] ? lock_acquire+0x170/0x3f0 [ 3013.576137] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3013.581253] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3013.586174] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3013.591996] alloc_pages_current+0x155/0x260 [ 3013.596490] ion_page_pool_alloc+0x118/0x1b0 [ 3013.601674] ion_system_heap_allocate+0x133/0x8c0 [ 3013.606981] ? ion_alloc+0x187/0x810 [ 3013.611219] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3013.617266] ? ion_system_contig_heap_create+0x130/0x130 [ 3013.623136] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3013.628491] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3013.633635] ion_alloc+0x204/0x810 [ 3013.637276] ? ion_dma_buf_release+0x40/0x40 [ 3013.641935] ? __might_fault+0x177/0x1b0 [ 3013.642854] Mem-Info: [ 3013.646077] ion_ioctl+0xea/0x1f0 [ 3013.648684] active_anon:80388 inactive_anon:29021 isolated_anon:0 [ 3013.648684] active_file:7 inactive_file:10 isolated_file:0 [ 3013.648684] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3013.648684] slab_reclaimable:15294 slab_unreclaimable:148574 [ 3013.648684] mapped:43915 shmem:31505 pagetables:20590 bounce:0 [ 3013.648684] free:13837 free_pcp:85 free_cma:0 [ 3013.652296] ? ion_query_heaps+0x360/0x360 [ 3013.695097] ? SyS_send+0x40/0x40 [ 3013.698641] ? vm_insert_page+0x7c0/0x7c0 [ 3013.702864] ? ion_query_heaps+0x360/0x360 [ 3013.707392] do_vfs_ioctl+0x75a/0xff0 [ 3013.711444] ? ioctl_preallocate+0x1a0/0x1a0 [ 3013.716020] ? lock_downgrade+0x740/0x740 [ 3013.720416] ? __fget+0x225/0x360 [ 3013.724120] ? do_vfs_ioctl+0xff0/0xff0 [ 3013.728206] ? security_file_ioctl+0x83/0xb0 [ 3013.732697] SyS_ioctl+0x7f/0xb0 [ 3013.732865] Node 0 active_anon:248208kB inactive_anon:91688kB active_file:16kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:159668kB dirty:0kB writeback:0kB shmem:96308kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 178176kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3013.736143] ? do_vfs_ioctl+0xff0/0xff0 [ 3013.769421] do_syscall_64+0x1d5/0x640 [ 3013.773571] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3013.779039] RIP: 0033:0x466459 [ 3013.782541] RSP: 002b:00007fa81d8e1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3013.790823] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 3013.798772] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3013.802889] Node 1 active_anon:73344kB inactive_anon:24396kB active_file:12kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:15992kB dirty:0kB writeback:0kB shmem:29712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3013.806323] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3013.842840] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 3013.850691] R13: 00007ffc23c68c0f R14: 00007fa81d8e1300 R15: 0000000000022000 [ 3013.858627] CPU: 0 PID: 5943 Comm: syz-executor.2 Not tainted 4.14.230-syzkaller #0 [ 3013.863596] warn_alloc_show_mem: 5 callbacks suppressed [ 3013.863599] Mem-Info: [ 3013.866690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3013.872573] active_anon:80388 inactive_anon:29021 isolated_anon:0 [ 3013.872573] active_file:8 inactive_file:17 isolated_file:0 [ 3013.872573] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3013.872573] slab_reclaimable:15294 slab_unreclaimable:148574 [ 3013.872573] mapped:43922 shmem:31505 pagetables:20590 bounce:0 [ 3013.872573] free:13837 free_pcp:85 free_cma:0 [ 3013.875058] Call Trace: [ 3013.875078] dump_stack+0x1b2/0x281 [ 3013.875091] warn_alloc.cold+0x96/0x1cc [ 3013.875102] ? zone_watermark_ok_safe+0x220/0x220 [ 3013.875110] ? usleep_range+0x130/0x130 [ 3013.875119] ? try_to_free_pages+0x23f/0x6e0 [ 3013.875128] ? _find_next_bit+0xdb/0x100 [ 3013.875138] ? run_timer_softirq+0x5a0/0x5a0 [ 3013.875154] __alloc_pages_nodemask+0x2127/0x2720 [ 3013.890003] Node 0 active_anon:248208kB inactive_anon:91688kB active_file:48kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:159696kB dirty:0kB writeback:0kB shmem:96308kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 178176kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3013.920622] ? lock_acquire+0x170/0x3f0 [ 3013.920637] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3013.920646] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3013.920661] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3013.920679] alloc_pages_current+0x155/0x260 [ 3013.920688] ion_page_pool_alloc+0x118/0x1b0 [ 3013.920697] ion_system_heap_allocate+0x133/0x8c0 [ 3013.920707] ? ion_alloc+0x187/0x810 [ 3013.920717] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3013.920728] ? ion_system_contig_heap_create+0x130/0x130 [ 3013.928751] Node 1 active_anon:73344kB inactive_anon:24396kB active_file:0kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:15992kB dirty:0kB writeback:0kB shmem:29712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3013.931176] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3013.936239] Node 0 [ 3013.940431] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3013.950158] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3013.953627] ion_alloc+0x204/0x810 [ 3013.953642] ? ion_dma_buf_release+0x40/0x40 [ 3013.953654] ? __might_fault+0x177/0x1b0 [ 3013.953665] ion_ioctl+0xea/0x1f0 [ 3013.953674] ? ion_query_heaps+0x360/0x360 [ 3013.958982] lowmem_reserve[]: [ 3013.987483] ? ion_query_heaps+0x360/0x360 [ 3013.987493] do_vfs_ioctl+0x75a/0xff0 [ 3013.987504] ? ioctl_preallocate+0x1a0/0x1a0 [ 3013.987513] ? lock_downgrade+0x740/0x740 [ 3013.987524] ? __fget+0x225/0x360 [ 3013.987533] ? do_vfs_ioctl+0xff0/0xff0 [ 3013.987544] ? security_file_ioctl+0x83/0xb0 [ 3013.987553] SyS_ioctl+0x7f/0xb0 [ 3013.987560] ? do_vfs_ioctl+0xff0/0xff0 [ 3013.987570] do_syscall_64+0x1d5/0x640 [ 3013.987583] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3013.987591] RIP: 0033:0x466459 [ 3013.987595] RSP: 002b:00007fa81d923188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3013.987605] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3013.987610] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3013.987615] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3013.987620] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3013.987626] R13: 00007ffc23c68c0f R14: 00007fa81d923300 R15: 0000000000022000 [ 3014.157382] Node 0 [ 3014.172212] 0 [ 3014.208705] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3014.216716] 2717 [ 3014.250314] lowmem_reserve[]: [ 3014.280173] 2718 2718 2718 [ 3014.297049] 0 2717 2718 2718 2718 [ 3014.300912] Node 0 DMA32 free:35916kB min:36200kB low:45248kB high:54296kB active_anon:248040kB inactive_anon:91688kB active_file:784kB inactive_file:1232kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11488kB pagetables:15296kB bounce:0kB free_pcp:680kB local_pcp:388kB free_cma:0kB [ 3014.301164] Node 0 DMA32 free:35916kB min:36200kB low:45248kB high:54296kB active_anon:248040kB inactive_anon:91688kB active_file:784kB inactive_file:1232kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11488kB pagetables:15296kB bounce:0kB free_pcp:680kB local_pcp:0kB free_cma:0kB [ 3014.351032] lowmem_reserve[]: [ 3014.364369] lowmem_reserve[]: [ 3014.366576] 0 [ 3014.367563] 0 [ 3014.370682] 0 0 0 0 [ 3014.370697] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3014.370713] lowmem_reserve[]: 0 0 0 0 0 [ 3014.370729] Node 1 Normal free:27468kB min:53696kB low:67120kB high:80544kB active_anon:73336kB inactive_anon:24396kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21760kB pagetables:66932kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3014.370747] lowmem_reserve[]: [ 3014.373038] 0 0 0 0 [ 3014.373053] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3014.375050] 0 [ 3014.377559] lowmem_reserve[]: [ 3014.411171] 0 [ 3014.425468] 0 [ 3014.475119] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3014.608235] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 3014.638817] CPU: 0 PID: 5943 Comm: syz-executor.2 Not tainted 4.14.230-syzkaller #0 [ 3014.646864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3014.656518] Call Trace: [ 3014.659023] 0 0 0 [ 3014.659333] dump_stack+0x1b2/0x281 [ 3014.659339] 0 [ 3014.663633] warn_alloc.cold+0x96/0x1cc [ 3014.663646] ? zone_watermark_ok_safe+0x220/0x220 [ 3014.663666] __alloc_pages_nodemask+0x2127/0x2720 [ 3014.663676] ? lock_acquire+0x170/0x3f0 [ 3014.663687] ? lock_acquire+0x170/0x3f0 [ 3014.663705] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3014.670240] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3014.705229] ? __mutex_unlock_slowpath+0x75/0x770 [ 3014.710542] alloc_pages_current+0x155/0x260 [ 3014.715232] ion_page_pool_alloc+0x118/0x1b0 [ 3014.720341] ion_system_heap_allocate+0x133/0x8c0 [ 3014.722847] Node 1 Normal free:26500kB min:53696kB low:67120kB high:80544kB active_anon:73336kB inactive_anon:24396kB active_file:116kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21760kB pagetables:66932kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3014.725308] ? _raw_spin_unlock+0x29/0x40 [ 3014.725320] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3014.764703] ? ion_system_contig_heap_create+0x130/0x130 [ 3014.770486] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3014.775672] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3014.780793] ion_alloc+0x27a/0x810 [ 3014.784383] ? ion_dma_buf_release+0x40/0x40 [ 3014.789250] ? __might_fault+0x177/0x1b0 [ 3014.793664] ion_ioctl+0xea/0x1f0 [ 3014.798696] ? ion_query_heaps+0x360/0x360 [ 3014.803581] ? ion_query_heaps+0x360/0x360 [ 3014.808005] do_vfs_ioctl+0x75a/0xff0 [ 3014.813261] ? ioctl_preallocate+0x1a0/0x1a0 [ 3014.817763] ? lock_downgrade+0x740/0x740 [ 3014.821920] ? __fget+0x225/0x360 [ 3014.825665] ? do_vfs_ioctl+0xff0/0xff0 [ 3014.829814] ? security_file_ioctl+0x83/0xb0 [ 3014.834473] SyS_ioctl+0x7f/0xb0 [ 3014.838039] ? do_vfs_ioctl+0xff0/0xff0 [ 3014.842114] do_syscall_64+0x1d5/0x640 [ 3014.846222] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3014.851507] RIP: 0033:0x466459 [ 3014.855250] RSP: 002b:00007fa81d923188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3014.862965] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3014.871179] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3014.878711] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3014.886068] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3014.893426] R13: 00007ffc23c68c0f R14: 00007fa81d923300 R15: 0000000000022000 [ 3014.905780] lowmem_reserve[]: 0 0 0 0 0 [ 3014.907397] 0 0 0 [ 3014.911986] Node 0 DMA: 19*4kB (UM) 46*8kB (UME) 55*16kB (UM) 20*32kB (UME) 5*64kB (UME) 4*128kB (UE) 4*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 10988kB [ 3014.914101] Node 0 DMA: 19*4kB (UM) 46*8kB (UME) 55*16kB (UM) 20*32kB (UME) 5*64kB (UME) 4*128kB (UE) 4*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 10988kB [ 3014.939230] Node 0 [ 3014.961127] Node 0 [ 3014.962142] DMA32: [ 3014.963443] DMA32: [ 3014.966331] 972*4kB [ 3014.968090] 972*4kB [ 3014.970571] (UME) 226*8kB [ 3014.982571] (UME) [ 3014.985436] (UME) [ 3014.985561] 226*8kB [ 3014.987771] 187*16kB [ 3014.989923] (UME) [ 3014.992241] (ME) [ 3015.004969] 187*16kB (ME) 857*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36112kB [ 3015.008414] 857*32kB [ 3015.023683] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3015.033348] (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36112kB [ 3015.041143] Node 1 Normal: 2857*4kB (UM) 522*8kB (UM) 129*16kB (UM) 92*32kB (UM) 8*64kB (M) 4*128kB (UM) 5*256kB (UM) 5*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 26500kB [ 3015.059337] Node 0 [ 3015.071387] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3015.079251] Normal: [ 3015.090329] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3015.091888] 0*4kB [ 3015.093184] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3015.093191] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3015.093196] 31525 total pagecache pages [ 3015.093205] 0 pages in swap cache [ 3015.093209] Swap cache stats: add 0, delete 0, find 0/0 [ 3015.093212] Free swap = 0kB [ 3015.093215] Total swap = 0kB [ 3015.093221] 2097051 pages RAM [ 3015.093224] 0 pages HighMem/MovableOnly [ 3015.093227] 363848 pages reserved [ 3015.093230] 0 pages cma reserved [ 3015.230891] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3015.322944] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 3015.328225] CPU: 1 PID: 5964 Comm: syz-executor.2 Not tainted 4.14.230-syzkaller #0 [ 3015.336547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3015.346686] Call Trace: [ 3015.349527] dump_stack+0x1b2/0x281 [ 3015.353347] warn_alloc.cold+0x96/0x1cc [ 3015.356266] 0*8kB 0*16kB [ 3015.357755] ? zone_watermark_ok_safe+0x220/0x220 [ 3015.357775] __alloc_pages_nodemask+0x2127/0x2720 [ 3015.360624] 0*32kB [ 3015.365658] ? lock_acquire+0x170/0x3f0 [ 3015.365670] ? lock_acquire+0x170/0x3f0 [ 3015.365685] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3015.365702] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3015.365714] ? __mutex_unlock_slowpath+0x75/0x770 [ 3015.370732] 0*64kB [ 3015.372965] alloc_pages_current+0x155/0x260 [ 3015.372979] ion_page_pool_alloc+0x118/0x1b0 [ 3015.372989] ion_system_heap_allocate+0x133/0x8c0 [ 3015.377577] 0*128kB [ 3015.381635] ? _raw_spin_unlock+0x29/0x40 [ 3015.386847] 0*256kB [ 3015.392526] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3015.397563] 0*512kB [ 3015.400575] ? ion_system_contig_heap_create+0x130/0x130 [ 3015.405489] 0*1024kB [ 3015.410206] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3015.415153] 0*2048kB [ 3015.417441] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3015.421956] 0*4096kB [ 3015.425120] ion_alloc+0x27a/0x810 [ 3015.425134] ? ion_dma_buf_release+0x40/0x40 [ 3015.425158] ? __might_fault+0x177/0x1b0 [ 3015.430065] = 0kB [ 3015.432560] ion_ioctl+0xea/0x1f0 [ 3015.438032] Node 1 [ 3015.440483] ? ion_query_heaps+0x360/0x360 [ 3015.445507] Normal: [ 3015.447894] ? SyS_send+0x40/0x40 [ 3015.452818] 2601*4kB [ 3015.455194] ? vm_insert_page+0x7c0/0x7c0 [ 3015.458804] (UM) [ 3015.463591] ? ion_query_heaps+0x360/0x360 [ 3015.463601] do_vfs_ioctl+0x75a/0xff0 [ 3015.463613] ? ioctl_preallocate+0x1a0/0x1a0 [ 3015.463624] ? lock_downgrade+0x740/0x740 [ 3015.468313] 996*8kB [ 3015.470679] ? __fget+0x225/0x360 [ 3015.474639] (UM) [ 3015.476864] ? do_vfs_ioctl+0xff0/0xff0 [ 3015.481173] 275*16kB (UM) [ 3015.483489] ? security_file_ioctl+0x83/0xb0 [ 3015.483499] SyS_ioctl+0x7f/0xb0 [ 3015.483507] ? do_vfs_ioctl+0xff0/0xff0 [ 3015.483523] do_syscall_64+0x1d5/0x640 [ 3015.487320] 522*32kB [ 3015.489842] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3015.494004] (U) [ 3015.496338] RIP: 0033:0x466459 [ 3015.500919] 0*64kB [ 3015.504970] RSP: 002b:00007fa81d8e1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3015.504979] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 3015.504985] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3015.504989] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3015.504997] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 3015.509586] 0*128kB [ 3015.513973] R13: 00007ffc23c68c0f R14: 00007fa81d8e1300 R15: 0000000000022000 [ 3015.544818] warn_alloc_show_mem: 1 callbacks suppressed [ 3015.544822] Mem-Info: [ 3015.788729] 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 39476kB [ 3015.831996] active_anon:80387 inactive_anon:29021 isolated_anon:0 [ 3015.831996] active_file:10 inactive_file:26 isolated_file:0 [ 3015.831996] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3015.831996] slab_reclaimable:15294 slab_unreclaimable:148542 [ 3015.831996] mapped:43898 shmem:31505 pagetables:20590 bounce:0 [ 3015.831996] free:21563 free_pcp:128 free_cma:0 [ 3015.837003] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3015.926454] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3015.928472] Node 0 active_anon:248212kB inactive_anon:91688kB active_file:28kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:159600kB dirty:0kB writeback:0kB shmem:96308kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 178176kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3015.939176] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3015.980015] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3015.989031] 31525 total pagecache pages [ 3015.999205] 0 pages in swap cache [ 3016.005249] Swap cache stats: add 0, delete 0, find 0/0 [ 3016.011068] Free swap = 0kB [ 3016.020218] Total swap = 0kB [ 3016.025631] 2097051 pages RAM [ 3016.028989] 0 pages HighMem/MovableOnly [ 3016.039104] 363848 pages reserved [ 3016.044955] 0 pages cma reserved [ 3016.048347] Out of memory (oom_kill_allocating_task): Kill process 10767 (syz-fuzzer) score 0 or sacrifice child [ 3016.068238] Killed process 5528 (syz-executor.1) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 3016.078953] Node 1 active_anon:73336kB inactive_anon:24396kB active_file:12kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:15992kB dirty:0kB writeback:0kB shmem:29712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3016.090873] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 3016.137121] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3016.149976] syz-fuzzer cpuset= [ 3016.169430] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3016.181266] / [ 3016.191436] lowmem_reserve[]: [ 3016.194414] mems_allowed=0-1 [ 3016.196920] 0 [ 3016.198486] CPU: 0 PID: 10767 Comm: syz-fuzzer Not tainted 4.14.230-syzkaller #0 [ 3016.201862] 2717 2718 [ 3016.203748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3016.203751] Call Trace: [ 3016.203770] dump_stack+0x1b2/0x281 [ 3016.203781] dump_header+0x178/0x82f [ 3016.203791] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3016.203799] ? ___ratelimit+0x2cd/0x530 [ 3016.203808] oom_kill_process.cold+0x10/0xa40 [ 3016.203827] out_of_memory+0xe3e/0x1190 [ 3016.216254] 2718 [ 3016.223812] ? oom_killer_disable+0x1c0/0x1c0 [ 3016.223823] ? mutex_trylock+0x152/0x1a0 [ 3016.223833] __alloc_pages_nodemask+0x23e1/0x2720 [ 3016.223852] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3016.226428] syz-executor.2 cpuset= [ 3016.230128] alloc_pages_current+0x155/0x260 [ 3016.238247] / [ 3016.239056] filemap_fault+0x11a1/0x1ad0 [ 3016.243322] mems_allowed=0-1 [ 3016.248356] ext4_filemap_fault+0x84/0xb0 [ 3016.258438] 2718 [ 3016.259786] __do_fault+0xfa/0x380 [ 3016.269194] __handle_mm_fault+0x2497/0x4620 [ 3016.298006] Node 0 [ 3016.298697] ? vm_insert_page+0x7c0/0x7c0 [ 3016.302397] DMA32 free:17764kB min:36200kB low:45248kB high:54296kB active_anon:248044kB inactive_anon:91688kB active_file:28kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11488kB pagetables:15296kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 3016.306986] ? setup_sigcontext+0x820/0x820 [ 3016.306999] ? mark_held_locks+0xa6/0xf0 [ 3016.307009] handle_mm_fault+0x455/0x9c0 [ 3016.307021] __do_page_fault+0x549/0xad0 [ 3016.307032] ? spurious_fault+0x640/0x640 [ 3016.307039] ? do_page_fault+0x60/0x500 [ 3016.307049] ? page_fault+0x2f/0x50 [ 3016.317976] lowmem_reserve[]: [ 3016.342852] page_fault+0x45/0x50 [ 3016.342861] RIP: 0001:0x2bdaeacc560 [ 3016.342865] RSP: 0000:000000c00150b5b8 EFLAGS: 2bdaeacc560 [ 3016.367634] Mem-Info: [ 3016.369904] CPU: 1 PID: 5964 Comm: syz-executor.2 Not tainted 4.14.230-syzkaller #0 [ 3016.385267] active_anon:80387 inactive_anon:29021 isolated_anon:0 [ 3016.385267] active_file:10 inactive_file:0 isolated_file:0 [ 3016.385267] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3016.385267] slab_reclaimable:15294 slab_unreclaimable:148542 [ 3016.385267] mapped:43898 shmem:31505 pagetables:20590 bounce:0 [ 3016.385267] free:13883 free_pcp:60 free_cma:0 [ 3016.390848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3016.393585] Node 0 active_anon:248212kB inactive_anon:91688kB active_file:28kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:159600kB dirty:0kB writeback:0kB shmem:96308kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 178176kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3016.402129] Call Trace: [ 3016.437841] Node 1 active_anon:73336kB inactive_anon:24396kB active_file:12kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:15992kB dirty:0kB writeback:0kB shmem:29712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3016.448047] dump_stack+0x1b2/0x281 [ 3016.448064] warn_alloc.cold+0x96/0x1cc [ 3016.477195] Node 0 [ 3016.479918] ? zone_watermark_ok_safe+0x220/0x220 [ 3016.508296] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3016.512488] ? usleep_range+0x130/0x130 [ 3016.516749] lowmem_reserve[]: [ 3016.518986] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3016.524266] 0 [ 3016.551235] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3016.551245] ? run_timer_softirq+0x5a0/0x5a0 [ 3016.551262] __alloc_pages_nodemask+0x2127/0x2720 [ 3016.555252] 2717 [ 3016.558565] ? lock_acquire+0x170/0x3f0 [ 3016.564446] 2718 [ 3016.566290] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3016.571280] 2718 [ 3016.576120] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3016.576137] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3016.576156] alloc_pages_current+0x155/0x260 [ 3016.580973] 2718 [ 3016.583032] ion_page_pool_alloc+0x118/0x1b0 [ 3016.583042] ion_system_heap_allocate+0x133/0x8c0 [ 3016.583054] ? _raw_spin_unlock+0x29/0x40 [ 3016.589517] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3016.594571] Node 0 [ 3016.596731] ? ion_system_contig_heap_create+0x130/0x130 [ 3016.601402] DMA32 free:17764kB min:36200kB low:45248kB high:54296kB active_anon:248044kB inactive_anon:91688kB active_file:28kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11488kB pagetables:15296kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 3016.607398] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3016.607410] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3016.607420] ion_alloc+0x27a/0x810 [ 3016.611939] lowmem_reserve[]: [ 3016.614426] ? ion_dma_buf_release+0x40/0x40 [ 3016.614446] ? __might_fault+0x177/0x1b0 [ 3016.614457] ion_ioctl+0xea/0x1f0 [ 3016.614467] ? ion_query_heaps+0x360/0x360 [ 3016.618909] 0 [ 3016.623865] ? SyS_send+0x40/0x40 [ 3016.623873] ? vm_insert_page+0x7c0/0x7c0 [ 3016.623881] ? ion_query_heaps+0x360/0x360 [ 3016.623890] do_vfs_ioctl+0x75a/0xff0 [ 3016.623902] ? ioctl_preallocate+0x1a0/0x1a0 [ 3016.628226] 0 [ 3016.633676] ? lock_downgrade+0x740/0x740 [ 3016.633690] ? __fget+0x225/0x360 [ 3016.633699] ? do_vfs_ioctl+0xff0/0xff0 [ 3016.633713] ? security_file_ioctl+0x83/0xb0 [ 3016.636016] 0 [ 3016.641539] SyS_ioctl+0x7f/0xb0 [ 3016.673503] 0 [ 3016.678928] ? do_vfs_ioctl+0xff0/0xff0 [ 3016.684210] 0 [ 3016.687730] do_syscall_64+0x1d5/0x640 [ 3016.695496] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3016.695504] RIP: 0033:0x466459 [ 3016.695509] RSP: 002b:00007fa81d8e1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3016.695518] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 3016.695522] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3016.695526] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3016.695534] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 3016.700011] Node 0 [ 3016.703576] R13: 00007ffc23c68c0f R14: 00007fa81d8e1300 R15: 0000000000022000 [ 3016.704237] 0 [ 3016.708025] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3016.710150] 0 0 [ 3016.735237] lowmem_reserve[]: [ 3016.738237] 0 [ 3016.742449] 0 [ 3016.746932] 0 [ 3016.746941] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3016.746963] lowmem_reserve[]: [ 3016.770004] 0 [ 3016.778319] 0 [ 3016.801538] 0 [ 3016.802765] 0 [ 3016.816618] 0 [ 3016.819872] 0 [ 3016.842498] 0 [ 3016.867293] 0 [ 3016.911041] Node 1 Normal free:26848kB min:53696kB low:67120kB high:80544kB active_anon:73336kB inactive_anon:24396kB active_file:12kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21760kB pagetables:66932kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 3016.912462] 0 [ 3016.950469] lowmem_reserve[]: 0 0 0 0 0 [ 3016.956276] Node 1 Normal free:26848kB min:53696kB low:67120kB high:80544kB active_anon:73336kB inactive_anon:24396kB active_file:12kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21760kB pagetables:66932kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 3016.956315] Node 0 DMA: 12*4kB (M) 46*8kB (UME) 55*16kB (UM) 20*32kB (UME) 5*64kB (UME) 4*128kB (UE) 4*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 10960kB [ 3016.998630] lowmem_reserve[]: [ 3017.018338] Node 0 DMA32: 979*4kB (ME) 226*8kB (UME) 188*16kB (UME) 254*32kB (UME) 19*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18076kB [ 3017.024813] 0 [ 3017.045243] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3017.049395] 0 [ 3017.062155] Node 1 [ 3017.062174] 0 [ 3017.065749] Normal: 14*4kB (M) 699*8kB (UM) 281*16kB (UM) 522*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26848kB [ 3017.079636] 0 0 [ 3017.085416] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3017.088497] Node 0 [ 3017.099054] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3017.110162] DMA: 12*4kB (M) 46*8kB (UME) 55*16kB (UM) 20*32kB (UME) 5*64kB (UME) 4*128kB (UE) 4*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 10960kB [ 3017.112056] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3017.140050] Node 0 DMA32: 979*4kB (ME) 226*8kB (UME) 188*16kB (UME) 254*32kB (UME) 19*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18076kB [ 3017.141163] warn_alloc_show_mem: 1 callbacks suppressed [ 3017.141166] Mem-Info: [ 3017.169799] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3017.170035] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3017.196762] 31525 total pagecache pages [ 3017.197256] Node 1 Normal: [ 3017.201011] 0 pages in swap cache [ 3017.201019] Swap cache stats: add 0, delete 0, find 0/0 [ 3017.212544] 14*4kB (M) 699*8kB (UM) 281*16kB (UM) 522*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26848kB [ 3017.219045] active_anon:80387 inactive_anon:29021 isolated_anon:0 [ 3017.219045] active_file:10 inactive_file:10 isolated_file:0 [ 3017.219045] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3017.219045] slab_reclaimable:15283 slab_unreclaimable:148512 [ 3017.219045] mapped:43898 shmem:31505 pagetables:20590 bounce:0 [ 3017.219045] free:13971 free_pcp:60 free_cma:0 [ 3017.245783] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3017.270055] Free swap = 0kB [ 3017.277294] Total swap = 0kB [ 3017.281014] 2097051 pages RAM [ 3017.288494] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3017.290065] 0 pages HighMem/MovableOnly [ 3017.308926] 363848 pages reserved [ 3017.311972] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3017.313004] 0 pages cma reserved [ 3017.313012] Out of memory (oom_kill_allocating_task): Kill process 10767 (syz-fuzzer) score 0 or sacrifice child [ 3017.313066] Killed process 5015 (syz-executor.2) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 3017.357116] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3017.360480] Node 0 active_anon:248212kB inactive_anon:91688kB active_file:28kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:159600kB dirty:0kB writeback:0kB shmem:96308kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 178176kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3017.370968] 31525 total pagecache pages [ 3017.404377] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 3017.405380] Node 1 active_anon:73336kB inactive_anon:24396kB active_file:12kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:15992kB dirty:0kB writeback:0kB shmem:29712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3017.440133] syz-fuzzer cpuset= [ 3017.458145] Node 0 [ 3017.460286] / [ 3017.461558] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3017.466670] mems_allowed=0-1 [ 3017.502956] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3017.508996] 0 pages in swap cache [ 3017.509115] Node 0 [ 3017.518805] Swap cache stats: add 0, delete 0, find 0/0 [ 3017.520671] DMA32 free:18076kB min:36200kB low:45248kB high:54296kB active_anon:248044kB inactive_anon:91688kB active_file:28kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11488kB pagetables:15296kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 3017.521238] Free swap = 0kB [ 3017.531893] lowmem_reserve[]: [ 3017.566050] CPU: 1 PID: 7998 Comm: syz-fuzzer Not tainted 4.14.230-syzkaller #0 [ 3017.572342] 0 [ 3017.577178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3017.577183] Call Trace: [ 3017.577203] dump_stack+0x1b2/0x281 [ 3017.577218] dump_header+0x178/0x82f [ 3017.579340] 0 [ 3017.589065] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3017.589075] ? ___ratelimit+0x2cd/0x530 [ 3017.589085] oom_kill_process.cold+0x10/0xa40 [ 3017.589101] out_of_memory+0xe3e/0x1190 [ 3017.589113] ? oom_killer_disable+0x1c0/0x1c0 [ 3017.591770] 0 [ 3017.595571] ? mutex_trylock+0x152/0x1a0 [ 3017.595582] __alloc_pages_nodemask+0x23e1/0x2720 [ 3017.595602] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3017.599287] 0 [ 3017.601194] alloc_pages_current+0x155/0x260 [ 3017.606397] 0 [ 3017.610335] filemap_fault+0x11a1/0x1ad0 [ 3017.619127] ext4_filemap_fault+0x84/0xb0 [ 3017.623777] Node 0 [ 3017.625633] __do_fault+0xfa/0x380 [ 3017.629781] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3017.634686] __handle_mm_fault+0x2497/0x4620 [ 3017.634697] ? vm_insert_page+0x7c0/0x7c0 [ 3017.634704] ? free_object+0xe4/0x240 [ 3017.634719] ? mark_held_locks+0xa6/0xf0 [ 3017.639776] lowmem_reserve[]: [ 3017.641577] handle_mm_fault+0x455/0x9c0 [ 3017.646265] 0 [ 3017.648214] __do_page_fault+0x549/0xad0 [ 3017.652586] 0 [ 3017.656801] ? spurious_fault+0x640/0x640 [ 3017.659039] 0 [ 3017.664371] ? do_page_fault+0x60/0x500 [ 3017.664380] ? page_fault+0x2f/0x50 [ 3017.664386] page_fault+0x45/0x50 [ 3017.664394] RIP: 0000:0x940aec [ 3017.664398] RSP: 4e20:000000c00003df28 EFLAGS: 0043b6a0 [ 3017.673742] Total swap = 0kB [ 3017.709923] 0 [ 3017.713609] 2097051 pages RAM [ 3017.725842] 0 [ 3017.728287] 0 pages HighMem/MovableOnly [ 3017.737028] 363848 pages reserved [ 3017.758872] Node 1 [ 3017.761350] 0 pages cma reserved [ 3017.762077] Normal free:26848kB min:53696kB low:67120kB high:80544kB active_anon:73336kB inactive_anon:24396kB active_file:12kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21760kB pagetables:66932kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 3017.777706] Mem-Info: [ 3017.796446] lowmem_reserve[]: [ 3017.839182] active_anon:80387 inactive_anon:29021 isolated_anon:0 [ 3017.839182] active_file:0 inactive_file:21 isolated_file:0 [ 3017.839182] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3017.839182] slab_reclaimable:15283 slab_unreclaimable:148512 [ 3017.839182] mapped:43898 shmem:31505 pagetables:20590 bounce:0 [ 3017.839182] free:13971 free_pcp:64 free_cma:0 [ 3017.844208] 0 [ 3017.880058] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3017.898129] 0 0 0 0 [ 3017.898836] Node 0 active_anon:248212kB inactive_anon:91688kB active_file:52kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:159600kB dirty:0kB writeback:0kB shmem:96308kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 178176kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3017.900567] Node 0 [ 3017.935497] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 3017.946935] CPU: 1 PID: 5943 Comm: syz-executor.2 Not tainted 4.14.230-syzkaller #0 [ 3017.952496] DMA: [ 3017.955015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3017.955019] Call Trace: [ 3017.955041] dump_stack+0x1b2/0x281 [ 3017.955054] warn_alloc.cold+0x96/0x1cc [ 3017.955065] ? zone_watermark_ok_safe+0x220/0x220 [ 3017.955079] ? usleep_range+0x130/0x130 [ 3017.957249] 12*4kB [ 3017.967272] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3017.967284] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3017.967294] ? run_timer_softirq+0x5a0/0x5a0 [ 3017.967312] __alloc_pages_nodemask+0x2127/0x2720 [ 3017.969961] (M) [ 3017.973756] ? lock_acquire+0x170/0x3f0 [ 3017.973773] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3017.978250] 46*8kB [ 3017.983983] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3017.983999] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3017.984018] alloc_pages_current+0x155/0x260 [ 3017.988668] (UME) [ 3017.990920] ion_page_pool_alloc+0x118/0x1b0 [ 3017.997353] 55*16kB [ 3018.002970] ion_system_heap_allocate+0x133/0x8c0 [ 3018.002982] ? _raw_spin_unlock+0x29/0x40 [ 3018.002993] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3018.007392] (UM) [ 3018.012219] ? ion_system_contig_heap_create+0x130/0x130 [ 3018.014197] 20*32kB [ 3018.018308] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3018.024227] (UME) [ 3018.026874] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3018.026886] ion_alloc+0x27a/0x810 [ 3018.026900] ? ion_dma_buf_release+0x40/0x40 [ 3018.026910] ? __might_fault+0x177/0x1b0 [ 3018.026921] ion_ioctl+0xea/0x1f0 [ 3018.026930] ? ion_query_heaps+0x360/0x360 [ 3018.032388] 5*64kB [ 3018.038087] ? ion_query_heaps+0x360/0x360 [ 3018.038097] do_vfs_ioctl+0x75a/0xff0 [ 3018.038108] ? ioctl_preallocate+0x1a0/0x1a0 [ 3018.038116] ? lock_downgrade+0x740/0x740 [ 3018.038130] ? __fget+0x225/0x360 [ 3018.042854] (UME) [ 3018.045581] ? do_vfs_ioctl+0xff0/0xff0 [ 3018.050149] 4*128kB [ 3018.052766] ? security_file_ioctl+0x83/0xb0 [ 3018.052777] SyS_ioctl+0x7f/0xb0 [ 3018.052784] ? do_vfs_ioctl+0xff0/0xff0 [ 3018.052796] do_syscall_64+0x1d5/0x640 [ 3018.052810] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3018.058031] (UE) [ 3018.062165] RIP: 0033:0x466459 [ 3018.067479] 4*256kB [ 3018.069592] RSP: 002b:00007fa81d923188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3018.075222] (UME) [ 3018.077616] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3018.082847] 2*512kB [ 3018.085025] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3018.090113] (UE) [ 3018.093820] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3018.093826] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3018.093830] R13: 00007ffc23c68c0f R14: 00007fa81d923300 R15: 0000000000022000 [ 3018.096138] Node 1 active_anon:73336kB inactive_anon:24396kB active_file:0kB inactive_file:84kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:15992kB dirty:0kB writeback:0kB shmem:29712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3018.099554] 2*1024kB [ 3018.102936] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3018.102954] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3018.102974] Node 0 DMA32 free:18076kB min:36200kB low:45248kB high:54296kB active_anon:248044kB inactive_anon:91688kB active_file:52kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11488kB pagetables:15296kB bounce:0kB free_pcp:136kB local_pcp:124kB free_cma:0kB [ 3018.102992] lowmem_reserve[]: 0 0 0 0 0 [ 3018.103010] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3018.103024] lowmem_reserve[]: 0 0 0 0 0 [ 3018.103043] Node 1 Normal free:26848kB min:53696kB low:67120kB high:80544kB active_anon:73336kB inactive_anon:24396kB active_file:0kB inactive_file:84kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21760kB pagetables:66932kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 3018.103060] lowmem_reserve[]: 0 0 0 0 0 [ 3018.103085] Node 0 DMA: 12*4kB (M) 46*8kB (UME) 55*16kB (UM) 20*32kB (UME) 5*64kB (UME) 4*128kB (UE) 4*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB [ 3018.126191] (ME) [ 3018.129313] = 10960kB [ 3018.131777] 2*2048kB [ 3018.135510] Node 0 DMA32: 979*4kB (ME) 230*8kB (UME) 188*16kB (UME) 254*32kB (UME) 19*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18108kB [ 3018.157907] (UM) [ 3018.163344] Node 0 [ 3018.178703] 0*4096kB [ 3018.184281] Normal: [ 3018.198449] = 10960kB [ 3018.204516] 0*4kB [ 3018.216395] Node 0 [ 3018.220021] 0*8kB [ 3018.236882] DMA32: [ 3018.261609] 0*16kB [ 3018.295023] 979*4kB [ 3018.329609] 0*32kB [ 3018.371086] (ME) [ 3018.395023] Mem-Info: [ 3018.427895] 230*8kB [ 3018.436043] 0*64kB [ 3018.458308] (UME) [ 3018.462324] active_anon:80387 inactive_anon:29021 isolated_anon:0 [ 3018.462324] active_file:0 inactive_file:21 isolated_file:0 [ 3018.462324] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3018.462324] slab_reclaimable:15283 slab_unreclaimable:148512 [ 3018.462324] mapped:43898 shmem:31505 pagetables:20590 bounce:0 [ 3018.462324] free:13971 free_pcp:64 free_cma:0 [ 3018.479907] 188*16kB [ 3018.508358] Node 0 active_anon:248212kB inactive_anon:91688kB active_file:52kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:159600kB dirty:0kB writeback:0kB shmem:96308kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 178176kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3018.528030] (UME) [ 3018.544846] Node 1 active_anon:73336kB inactive_anon:24396kB active_file:0kB inactive_file:84kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:15992kB dirty:0kB writeback:0kB shmem:29712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3018.555716] 0*128kB [ 3018.580219] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3018.591842] 254*32kB [ 3018.619022] 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3018.625120] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3018.627321] (UME) [ 3018.640681] Node 1 Normal: 14*4kB (M) 699*8kB (UM) 281*16kB (UM) 522*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26848kB [ 3018.647065] Node 0 [ 3018.668031] 19*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18108kB [ 3018.676973] DMA32 free:18076kB min:36200kB low:45248kB high:54296kB active_anon:248044kB inactive_anon:91688kB active_file:52kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11488kB pagetables:15296kB bounce:0kB free_pcp:136kB local_pcp:124kB free_cma:0kB [ 3018.681835] Node 0 [ 3018.718474] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3018.725931] lowmem_reserve[]: 0 0 0 0 0 [ 3018.731999] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3018.748690] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3018.750888] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3018.796017] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3018.798010] lowmem_reserve[]: [ 3018.808985] Node 1 Normal: 14*4kB (M) 699*8kB (UM) 281*16kB (UM) 522*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26848kB [ 3018.827944] 0 0 0 0 0 [ 3018.833333] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3018.842214] Node 1 [ 3018.849979] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3018.851135] Normal free:26848kB min:53696kB low:67120kB high:80544kB active_anon:73336kB inactive_anon:24396kB active_file:76kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21760kB pagetables:66932kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 3018.852256] 31525 total pagecache pages [ 3018.878483] lowmem_reserve[]: [ 3018.897173] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3018.910891] 0 0 0 0 0 [ 3018.913319] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3018.920232] Node 0 [ 3018.929279] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3018.938862] DMA: 12*4kB (M) 46*8kB (UME) 55*16kB (UM) 20*32kB (UME) 5*64kB (UME) 4*128kB (UE) 4*256kB (UME) 2*512kB (UE) 2*1024kB (ME) [ 3018.941139] 31525 total pagecache pages [ 3018.941147] 2*2048kB [ 3018.963577] 0 pages in swap cache [ 3018.969697] Swap cache stats: add 0, delete 0, find 0/0 [ 3018.971980] (UM) 0*4096kB = 10960kB [ 3018.981569] Node 0 DMA32: 979*4kB (ME) 230*8kB (UME) 188*16kB (UME) 254*32kB (UME) 19*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18108kB [ 3018.982835] 0 pages in swap cache [ 3019.004417] Free swap = 0kB [ 3019.007624] Total swap = 0kB [ 3019.010904] 2097051 pages RAM [ 3019.016231] 0 pages HighMem/MovableOnly [ 3019.020207] 363848 pages reserved [ 3019.020445] Node 0 [ 3019.026234] Swap cache stats: add 0, delete 0, find 0/0 [ 3019.036331] 0 pages cma reserved [ 3019.040152] Out of memory (oom_kill_allocating_task): Kill process 7998 (syz-fuzzer) score 0 or sacrifice child [ 3019.041609] Normal: [ 3019.055869] Free swap = 0kB [ 3019.061681] Total swap = 0kB [ 3019.064740] 2097051 pages RAM [ 3019.067840] 0 pages HighMem/MovableOnly [ 3019.069371] 0*4kB [ 3019.071999] 363848 pages reserved [ 3019.072005] 0*8kB [ 3019.078484] Killed process 2537 (syz-executor.0) total-vm:84924kB, anon-rss:60kB, file-rss:0kB, shmem-rss:0kB [ 3019.091400] 0 pages cma reserved [ 3019.105691] 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3019.148175] oom_reaper: reaped process 5528 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3019.176753] Node 1 Normal: 1255*4kB (U) 837*8kB (U) 280*16kB (U) 522*32kB (U) 91*64kB (UM) 24*128kB (UM) 18*256kB (UM) 10*512kB (U) 2*1024kB (UM) 0*2048kB 0*4096kB = 53572kB [ 3019.238456] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3019.247724] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3019.260517] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3019.270804] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3019.280677] 31631 total pagecache pages [ 3019.285381] 0 pages in swap cache [ 3019.289718] Swap cache stats: add 0, delete 0, find 0/0 [ 3019.296285] Free swap = 0kB [ 3019.300171] Total swap = 0kB [ 3019.306535] 2097051 pages RAM [ 3019.310398] 0 pages HighMem/MovableOnly [ 3019.316290] 363848 pages reserved [ 3019.320551] 0 pages cma reserved [ 3019.896677] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3019.935779] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3019.964161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3019.970899] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3020.017427] device bridge_slave_1 left promiscuous mode [ 3020.035758] bridge0: port 2(bridge_slave_1) entered disabled state [ 3020.059576] device bridge_slave_0 left promiscuous mode [ 3020.072982] bridge0: port 1(bridge_slave_0) entered disabled state [ 3020.082629] device veth1_macvtap left promiscuous mode [ 3020.088622] device veth0_macvtap left promiscuous mode [ 3020.117535] device veth1_vlan left promiscuous mode [ 3020.122781] device veth0_vlan left promiscuous mode [ 3020.662199] oom_reaper: reaped process 5949 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3020.685251] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 3020.705806] systemd-journal cpuset=/ mems_allowed=0-1 [ 3020.711532] CPU: 1 PID: 5932 Comm: systemd-journal Not tainted 4.14.230-syzkaller #0 [ 3020.719681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3020.729491] Call Trace: [ 3020.732265] dump_stack+0x1b2/0x281 [ 3020.736181] dump_header+0x178/0x82f [ 3020.739981] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3020.745353] ? ___ratelimit+0x2cd/0x530 [ 3020.749589] oom_kill_process.cold+0x10/0xa40 [ 3020.754091] out_of_memory+0xe3e/0x1190 [ 3020.758157] ? oom_killer_disable+0x1c0/0x1c0 [ 3020.762745] ? mutex_trylock+0x152/0x1a0 [ 3020.767088] __alloc_pages_nodemask+0x23e1/0x2720 [ 3020.772333] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3020.777220] ? __put_seccomp_filter+0x90/0x90 [ 3020.781739] ? __seccomp_filter+0xbd/0xd60 [ 3020.786087] ? cache_grow_begin+0x3f/0x700 [ 3020.790534] cache_grow_begin+0x91/0x700 [ 3020.794893] fallback_alloc+0x207/0x2c0 [ 3020.798857] kmem_cache_alloc+0x1e5/0x3c0 [ 3020.803446] getname_flags+0xc8/0x550 [ 3020.807348] SyS_mkdirat+0x83/0x270 [ 3020.811916] ? SyS_mknod+0x30/0x30 [ 3020.815589] ? do_syscall_64+0x4c/0x640 [ 3020.820284] ? SyS_mkdirat+0x270/0x270 [ 3020.824452] do_syscall_64+0x1d5/0x640 [ 3020.828335] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3020.833687] RIP: 0033:0x7f601c292687 [ 3020.837551] RSP: 002b:00007ffeac038f68 EFLAGS: 00000293 ORIG_RAX: 0000000000000053 [ 3020.845528] RAX: ffffffffffffffda RBX: 00007ffeac03bfd0 RCX: 00007f601c292687 [ 3020.853040] RDX: 0000000000000000 RSI: 00000000000001ed RDI: 000055f4389e8d60 [ 3020.860755] RBP: 00007ffeac038fa0 R08: 000055f437f503e5 R09: 0000000000000018 [ 3020.868107] R10: 0000000000000069 R11: 0000000000000293 R12: 0000000000000000 [ 3020.875513] R13: 0000000000000001 R14: 000055f4389e8d60 R15: 00007ffeac0395e0 [ 3020.892597] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3020.892623] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 3020.892642] CPU: 0 PID: 5966 Comm: syz-executor.4 Not tainted 4.14.230-syzkaller #0 [ 3020.892646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3020.892650] Call Trace: [ 3020.892666] dump_stack+0x1b2/0x281 [ 3020.892680] warn_alloc.cold+0x96/0x1cc [ 3020.892691] ? zone_watermark_ok_safe+0x220/0x220 [ 3020.892700] ? usleep_range+0x130/0x130 [ 3020.892709] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3020.892721] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3020.892731] ? run_timer_softirq+0x5a0/0x5a0 [ 3020.892746] __alloc_pages_nodemask+0x2127/0x2720 [ 3020.892761] ? lock_acquire+0x170/0x3f0 [ 3020.916070] Mem-Info: [ 3020.919150] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3020.939921] active_anon:80343 inactive_anon:29017 isolated_anon:0 [ 3020.939921] active_file:22 inactive_file:16 isolated_file:0 [ 3020.939921] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3020.939921] slab_reclaimable:15273 slab_unreclaimable:147249 [ 3020.939921] mapped:35225 shmem:31497 pagetables:20496 bounce:0 [ 3020.939921] free:13989 free_pcp:0 free_cma:0 [ 3020.940002] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3020.947898] Node 0 active_anon:247428kB inactive_anon:91680kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:93320kB dirty:0kB writeback:0kB shmem:96292kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 178176kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3020.949076] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3020.961291] syz-executor.4: [ 3020.964059] alloc_pages_current+0x155/0x260 [ 3020.964073] ion_page_pool_alloc+0x118/0x1b0 [ 3020.964082] ion_system_heap_allocate+0x133/0x8c0 [ 3020.964091] ? ion_alloc+0x187/0x810 [ 3020.964101] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3020.964109] ? ion_system_contig_heap_create+0x130/0x130 [ 3020.964119] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3020.964128] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3020.964137] ion_alloc+0x204/0x810 [ 3020.964150] ? ion_dma_buf_release+0x40/0x40 [ 3020.983118] page allocation failure: order:0 [ 3021.015591] ? __might_fault+0x177/0x1b0 [ 3021.015604] ion_ioctl+0xea/0x1f0 [ 3021.015613] ? ion_query_heaps+0x360/0x360 [ 3021.015625] ? msg_exit_ns+0x40/0x40 [ 3021.015631] ? ion_query_heaps+0x360/0x360 [ 3021.015641] do_vfs_ioctl+0x75a/0xff0 [ 3021.015651] ? ioctl_preallocate+0x1a0/0x1a0 [ 3021.015659] ? lock_downgrade+0x740/0x740 [ 3021.015672] ? __fget+0x225/0x360 [ 3021.015680] ? do_vfs_ioctl+0xff0/0xff0 [ 3021.015690] ? security_file_ioctl+0x83/0xb0 [ 3021.015700] SyS_ioctl+0x7f/0xb0 [ 3021.015708] ? do_vfs_ioctl+0xff0/0xff0 [ 3021.015719] do_syscall_64+0x1d5/0x640 [ 3021.015733] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3021.015741] RIP: 0033:0x466459 [ 3021.015751] RSP: 002b:00007f61587a5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3021.015760] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 3021.015765] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3021.015774] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3021.032680] Node 1 active_anon:73944kB inactive_anon:24388kB active_file:108kB inactive_file:92kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:47580kB dirty:0kB writeback:0kB shmem:29696kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3021.057732] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 3021.057739] R13: 00007ffed7f6205f R14: 00007f61587a5300 R15: 0000000000022000 [ 3021.077114] Mem-Info: [ 3021.088529] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 3021.100649] active_anon:80343 inactive_anon:29017 isolated_anon:0 [ 3021.100649] active_file:16 inactive_file:17 isolated_file:0 [ 3021.100649] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3021.100649] slab_reclaimable:15273 slab_unreclaimable:147249 [ 3021.100649] mapped:35214 shmem:31497 pagetables:20496 bounce:0 [ 3021.100649] free:14049 free_pcp:0 free_cma:0 [ 3021.101454] (null) [ 3021.112465] Node 0 active_anon:247428kB inactive_anon:91680kB active_file:16kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:93296kB dirty:0kB writeback:0kB shmem:96292kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 178176kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3021.123385] Node 0 [ 3021.135499] Node 1 active_anon:73944kB inactive_anon:24388kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:47560kB dirty:0kB writeback:0kB shmem:29696kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3021.142182] syz-executor.4 cpuset= [ 3021.152252] Node 0 [ 3021.160849] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3021.164012] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3021.166840] lowmem_reserve[]: [ 3021.170366] lowmem_reserve[]: [ 3021.180800] / [ 3021.194247] 0 [ 3021.202371] 0 [ 3021.222369] 2717 [ 3021.255623] mems_allowed=0-1 [ 3021.272976] 2718 [ 3021.316947] 2717 [ 3021.351725] 2718 [ 3021.379105] CPU: 1 PID: 5949 Comm: syz-executor.4 Not tainted 4.14.230-syzkaller #0 [ 3021.416294] 2718 [ 3021.432713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3021.432717] Call Trace: [ 3021.432739] dump_stack+0x1b2/0x281 [ 3021.432753] warn_alloc.cold+0x96/0x1cc [ 3021.439381] ? zone_watermark_ok_safe+0x220/0x220 [ 3021.441091] Node 0 [ 3021.442888] ? usleep_range+0x130/0x130 [ 3021.442897] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3021.442909] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3021.442919] ? run_timer_softirq+0x5a0/0x5a0 [ 3021.444733] DMA32 free:18400kB min:36200kB low:45248kB high:54296kB active_anon:247260kB inactive_anon:91680kB active_file:16kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11328kB pagetables:14760kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3021.446778] __alloc_pages_nodemask+0x2127/0x2720 [ 3021.449943] lowmem_reserve[]: [ 3021.452348] ? lock_acquire+0x170/0x3f0 [ 3021.452362] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3021.452374] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3021.454417] 0 [ 3021.456664] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3021.464649] 0 [ 3021.466971] ? alloc_pages_current+0x123/0x260 [ 3021.476327] 0 [ 3021.478971] alloc_pages_current+0x155/0x260 [ 3021.482597] 0 [ 3021.486781] ion_page_pool_alloc+0x118/0x1b0 [ 3021.491773] 0 [ 3021.494204] ion_system_heap_allocate+0x133/0x8c0 [ 3021.494214] ? ion_alloc+0x187/0x810 [ 3021.494227] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3021.503616] ? ion_system_contig_heap_create+0x130/0x130 [ 3021.503626] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3021.503635] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3021.503646] ion_alloc+0x204/0x810 [ 3021.508832] Node 0 [ 3021.513688] ? ion_dma_buf_release+0x40/0x40 [ 3021.513700] ? __might_fault+0x177/0x1b0 [ 3021.513711] ion_ioctl+0xea/0x1f0 [ 3021.543101] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3021.547986] ? ion_query_heaps+0x360/0x360 [ 3021.551077] lowmem_reserve[]: [ 3021.555141] ? msg_exit_ns+0x40/0x40 [ 3021.555148] ? ion_query_heaps+0x360/0x360 [ 3021.555158] do_vfs_ioctl+0x75a/0xff0 [ 3021.555168] ? ioctl_preallocate+0x1a0/0x1a0 [ 3021.555179] ? lock_downgrade+0x740/0x740 [ 3021.560018] 0 [ 3021.564589] ? __fget+0x225/0x360 [ 3021.564598] ? do_vfs_ioctl+0xff0/0xff0 [ 3021.564609] ? security_file_ioctl+0x83/0xb0 [ 3021.566391] 0 [ 3021.571846] SyS_ioctl+0x7f/0xb0 [ 3021.573774] 0 [ 3021.578473] ? do_vfs_ioctl+0xff0/0xff0 [ 3021.580425] 0 [ 3021.585011] do_syscall_64+0x1d5/0x640 [ 3021.585026] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3021.585033] RIP: 0033:0x466459 [ 3021.585040] RSP: 002b:00007f61587e7188 EFLAGS: 00000246 [ 3021.586934] 0 [ 3021.591492] ORIG_RAX: 0000000000000010 [ 3021.591499] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3021.598549] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3021.598556] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3021.602261] Node 1 [ 3021.608399] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3021.608404] R13: 00007ffed7f6205f R14: 00007f61587e7300 R15: 0000000000022000 [ 3021.619985] 2718 [ 3021.630675] Normal free:26832kB min:53696kB low:67120kB high:80544kB active_anon:73944kB inactive_anon:24388kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21792kB pagetables:67092kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3021.636943] 2718 [ 3021.643624] lowmem_reserve[]: [ 3021.645067] 2718 [ 3021.681899] 0 [ 3021.693991] 0 [ 3021.696595] Node 0 [ 3021.701247] 0 [ 3021.709485] DMA32 free:18400kB min:36200kB low:45248kB high:54296kB active_anon:247260kB inactive_anon:91680kB active_file:16kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11328kB pagetables:14760kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3021.720379] 0 [ 3021.721099] lowmem_reserve[]: [ 3021.724650] 0 [ 3021.733915] 0 [ 3021.754650] 0 [ 3021.759498] Node 0 [ 3021.765634] 0 [ 3021.775287] DMA: [ 3021.781387] 0 [ 3021.798043] 13*4kB [ 3021.806251] 0 [ 3021.844662] (ME) 46*8kB [ 3021.889764] (UME) [ 3021.894270] Node 0 [ 3021.902724] 55*16kB [ 3021.905277] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3021.907090] (UM) [ 3021.909591] lowmem_reserve[]: [ 3021.954675] 20*32kB (UME) 5*64kB (UME) 4*128kB (UE) 4*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 10964kB [ 3021.962387] 0 [ 3022.002814] Node 0 DMA32: 1062*4kB (UME) 253*8kB (UME) 196*16kB (UME) 33*32kB (UME) 10*64kB (UM) 37*128kB (UM) 6*256kB (U) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18400kB [ 3022.013506] 0 [ 3022.021657] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3022.073392] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 0*16kB 2*32kB (U) 1*64kB (M) 1*128kB (U) 0*256kB 1*512kB (U) 81*1024kB (UM) 0*2048kB 0*4096kB = 83728kB [ 3022.088142] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3022.102680] 0 0 0 [ 3022.115635] Node 1 Normal free:104124kB min:53696kB low:67120kB high:80544kB active_anon:74144kB inactive_anon:24388kB active_file:1848kB inactive_file:7048kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21792kB pagetables:67240kB bounce:0kB free_pcp:596kB local_pcp:312kB free_cma:0kB [ 3022.135368] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3022.202342] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3022.215443] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3022.232329] lowmem_reserve[]: 0 0 0 0 0 [ 3022.236712] Node 0 DMA: 13*4kB (ME) 46*8kB (UME) 55*16kB (UM) 20*32kB (UME) 6*64kB (UME) 5*128kB (UE) 4*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 11156kB [ 3022.242301] 33824 total pagecache pages [ 3022.282337] Node 0 DMA32: 932*4kB (ME) 249*8kB (ME) 194*16kB (ME) 33*32kB (UME) 321*64kB (UM) 97*128kB (UM) 6*256kB (U) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 45400kB [ 3022.292375] 0 pages in swap cache [ 3022.332331] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB [ 3022.332386] Swap cache stats: add 0, delete 0, find 0/0 [ 3022.332392] Free swap = 0kB [ 3022.362301] 0*4096kB = 0kB [ 3022.365180] Node 1 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 1139*64kB (UM) 354*128kB (U) 69*256kB (UM) 63*512kB (UM) 105*1024kB (U) 19*2048kB (U) 0*4096kB = 314580kB [ 3022.385469] Total swap = 0kB [ 3022.388672] 2097051 pages RAM [ 3022.391887] 0 pages HighMem/MovableOnly [ 3022.402295] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3022.411809] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3022.421557] 363848 pages reserved [ 3022.428645] 0 pages cma reserved [ 3022.452320] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3022.461387] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3022.470425] 33861 total pagecache pages [ 3022.492330] 0 pages in swap cache [ 3022.495817] Swap cache stats: add 0, delete 0, find 0/0 [ 3022.501709] Free swap = 0kB [ 3022.522296] Total swap = 0kB [ 3022.525342] 2097051 pages RAM [ 3022.529224] 0 pages HighMem/MovableOnly [ 3022.542497] 363848 pages reserved [ 3022.552314] 0 pages cma reserved [ 3022.562308] Out of memory (oom_kill_allocating_task): Kill process 5932 (systemd-journal) score 0 or sacrifice child [ 3022.582319] Killed process 5932 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:4kB, shmem-rss:1580kB [ 3022.603541] oom_reaper: reaped process 5932 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1580kB [ 3022.630059] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 3022.652629] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 3022.687519] systemd[1]: Stopped Journal Service. [ 3022.757709] systemd[1]: Starting Journal Service... [ 3022.941264] systemd-journald[6017]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 3023.094044] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3023.094172] oom_reaper: reaped process 5941 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3023.165128] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 3023.170436] CPU: 0 PID: 5949 Comm: syz-executor.4 Not tainted 4.14.230-syzkaller #0 [ 3023.172531] rs:main Q:Reg invoked oom-killer: gfp_mask=0x1c200ca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), nodemask= [ 3023.179009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3023.179017] (null) [ 3023.189311] Call Trace: [ 3023.189332] dump_stack+0x1b2/0x281 [ 3023.189345] warn_alloc.cold+0x96/0x1cc [ 3023.189356] ? zone_watermark_ok_safe+0x220/0x220 [ 3023.189377] __alloc_pages_nodemask+0x2127/0x2720 [ 3023.189392] ? lock_acquire+0x170/0x3f0 [ 3023.225465] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3023.230673] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3023.236431] ? __mutex_unlock_slowpath+0x75/0x770 [ 3023.241283] ? retint_kernel+0x2d/0x2d [ 3023.242275] , order=0, oom_score_adj=0 [ 3023.245612] alloc_pages_current+0x155/0x260 [ 3023.249866] rs:main Q:Reg cpuset= [ 3023.254463] ion_page_pool_alloc+0x118/0x1b0 [ 3023.254473] ion_system_heap_allocate+0x133/0x8c0 [ 3023.254484] ? _raw_spin_unlock+0x29/0x40 [ 3023.254491] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3023.254500] ? ion_system_contig_heap_create+0x130/0x130 [ 3023.254510] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3023.254520] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3023.254534] ion_alloc+0x27a/0x810 [ 3023.254547] ? ion_dma_buf_release+0x40/0x40 [ 3023.254560] ? __might_fault+0x177/0x1b0 [ 3023.272474] / [ 3023.276888] ion_ioctl+0xea/0x1f0 [ 3023.276899] ? ion_query_heaps+0x360/0x360 [ 3023.315198] ? msg_exit_ns+0x40/0x40 [ 3023.319123] ? ion_query_heaps+0x360/0x360 [ 3023.323369] do_vfs_ioctl+0x75a/0xff0 [ 3023.327309] ? ioctl_preallocate+0x1a0/0x1a0 [ 3023.332136] ? lock_downgrade+0x740/0x740 [ 3023.336476] ? __fget+0x225/0x360 [ 3023.340199] ? do_vfs_ioctl+0xff0/0xff0 [ 3023.344643] ? security_file_ioctl+0x83/0xb0 [ 3023.349586] SyS_ioctl+0x7f/0xb0 [ 3023.352318] mems_allowed=0-1 [ 3023.353038] ? do_vfs_ioctl+0xff0/0xff0 [ 3023.360460] do_syscall_64+0x1d5/0x640 [ 3023.364524] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3023.369981] RIP: 0033:0x466459 [ 3023.373267] RSP: 002b:00007f61587e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3023.381329] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3023.388737] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3023.396008] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3023.403942] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3023.412433] R13: 00007ffed7f6205f R14: 00007f61587e7300 R15: 0000000000022000 [ 3023.420216] CPU: 1 PID: 5499 Comm: rs:main Q:Reg Not tainted 4.14.230-syzkaller #0 [ 3023.425748] warn_alloc_show_mem: 1 callbacks suppressed [ 3023.425751] Mem-Info: [ 3023.428190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3023.442243] active_anon:80363 inactive_anon:29443 isolated_anon:0 [ 3023.442243] active_file:670 inactive_file:679 isolated_file:83 [ 3023.442243] unevictable:0 dirty:24 writeback:0 unstable:0 [ 3023.442243] slab_reclaimable:15275 slab_unreclaimable:146702 [ 3023.442243] mapped:36139 shmem:31926 pagetables:20495 bounce:0 [ 3023.442243] free:14095 free_pcp:0 free_cma:0 [ 3023.445588] Call Trace: [ 3023.484267] dump_stack+0x1b2/0x281 [ 3023.486592] Node 0 active_anon:247268kB inactive_anon:92776kB active_file:40kB inactive_file:168kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:91748kB dirty:12kB writeback:0kB shmem:97392kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 178176kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3023.487988] dump_header+0x178/0x82f [ 3023.518081] Node 1 active_anon:74184kB inactive_anon:24996kB active_file:2640kB inactive_file:2548kB unevictable:0kB isolated(anon):0kB isolated(file):332kB mapped:52808kB dirty:84kB writeback:0kB shmem:30312kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3023.521947] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3023.550619] Node 0 [ 3023.556010] ? ___ratelimit+0x2cd/0x530 [ 3023.556022] oom_kill_process.cold+0x10/0xa40 [ 3023.556041] out_of_memory+0xe3e/0x1190 [ 3023.558267] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3023.558271] lowmem_reserve[]: [ 3023.562515] ? oom_killer_disable+0x1c0/0x1c0 [ 3023.562523] ? mutex_trylock+0x152/0x1a0 [ 3023.562534] __alloc_pages_nodemask+0x23e1/0x2720 [ 3023.567098] 0 2717 2718 2718 2718 [ 3023.567113] Node 0 DMA32 free:17788kB min:36200kB low:45248kB high:54296kB active_anon:247100kB inactive_anon:92684kB active_file:268kB inactive_file:200kB unevictable:0kB writepending:12kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11328kB pagetables:14744kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3023.567131] lowmem_reserve[]: 0 0 0 0 0 [ 3023.567147] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3023.567162] lowmem_reserve[]: 0 0 0 0 0 [ 3023.567178] Node 1 Normal free:27640kB min:53696kB low:67120kB high:80544kB active_anon:74184kB inactive_anon:24900kB active_file:2800kB inactive_file:2916kB unevictable:0kB writepending:84kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21760kB pagetables:67104kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3023.567198] lowmem_reserve[]: [ 3023.571264] ? trace_hardirqs_on+0x10/0x10 [ 3023.598978] 0 [ 3023.602310] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3023.602322] ? __radix_tree_lookup+0x1b5/0x2e0 [ 3023.607092] 0 [ 3023.611436] alloc_pages_current+0x155/0x260 [ 3023.617188] 0 [ 3023.620913] pagecache_get_page+0x3f5/0xab0 [ 3023.650824] 0 [ 3023.654988] grab_cache_page_write_begin+0x63/0x90 [ 3023.655000] ext4_da_write_begin+0x249/0xe70 [ 3023.655012] ? ext4_write_begin+0x1260/0x1260 [ 3023.655025] generic_perform_write+0x1c9/0x420 [ 3023.684193] 0 [ 3023.688332] ? __mnt_drop_write_file+0x5f/0x90 [ 3023.722798] ? filemap_page_mkwrite+0x2d0/0x2d0 [ 3023.722810] ? current_time+0xb0/0xb0 [ 3023.727233] Node 0 [ 3023.729074] ? ext4_file_write_iter+0x1cc/0xd20 [ 3023.734695] DMA: [ 3023.739674] __generic_file_write_iter+0x227/0x590 [ 3023.741650] 2*4kB [ 3023.746220] ext4_file_write_iter+0x276/0xd20 [ 3023.746231] ? aa_file_perm+0x304/0xab0 [ 3023.746240] ? ext4_file_read_iter+0x330/0x330 [ 3023.748020] (UE) [ 3023.752609] ? trace_hardirqs_on+0x10/0x10 [ 3023.752619] ? iov_iter_init+0xa6/0x1c0 [ 3023.752631] __vfs_write+0x44c/0x630 [ 3023.754414] 26*8kB [ 3023.760398] ? kernel_read+0x110/0x110 [ 3023.765205] (UME) [ 3023.770592] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3023.776454] 55*16kB [ 3023.778666] vfs_write+0x17f/0x4d0 [ 3023.783505] (UM) [ 3023.788662] SyS_write+0xf2/0x210 [ 3023.792819] 20*32kB [ 3023.795324] ? SyS_read+0x210/0x210 [ 3023.800505] (UME) [ 3023.802642] ? __do_page_fault+0x159/0xad0 [ 3023.802650] ? do_syscall_64+0x4c/0x640 [ 3023.802657] ? SyS_read+0x210/0x210 [ 3023.802666] do_syscall_64+0x1d5/0x640 [ 3023.807570] 4*64kB [ 3023.809730] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3023.814305] (ME) [ 3023.818445] RIP: 0033:0x7f12d667b1cd [ 3023.823119] 6*128kB [ 3023.825229] RSP: 002b:00007f12d3c36590 EFLAGS: 00000293 [ 3023.829800] (UE) [ 3023.833875] ORIG_RAX: 0000000000000001 [ 3023.833880] RAX: ffffffffffffffda RBX: 00007f12c8025c50 RCX: 00007f12d667b1cd [ 3023.833885] RDX: 0000000000000138 RSI: 00007f12c8025c50 RDI: 0000000000000006 [ 3023.833888] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3023.833892] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f12c80259d0 [ 3023.833896] R13: 00007f12d3c365b0 R14: 00005632bd19b3a0 R15: 0000000000000138 [ 3023.968471] Mem-Info: [ 3023.971110] active_anon:80374 inactive_anon:29458 isolated_anon:0 [ 3023.971110] active_file:353 inactive_file:359 isolated_file:0 [ 3023.971110] unevictable:0 dirty:1 writeback:0 unstable:0 [ 3023.971110] slab_reclaimable:15275 slab_unreclaimable:146712 [ 3023.971110] mapped:35506 shmem:31956 pagetables:20496 bounce:0 [ 3023.971110] free:14024 free_pcp:215 free_cma:0 [ 3024.008855] Node 0 active_anon:247272kB inactive_anon:92792kB active_file:16kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:91712kB dirty:4kB writeback:0kB shmem:97468kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 178176kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3024.041119] Node 1 active_anon:74224kB inactive_anon:25040kB active_file:612kB inactive_file:648kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:48612kB dirty:0kB writeback:0kB shmem:30356kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3024.092201] 4*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 10952kB [ 3024.100987] Node 0 DMA32: 712*4kB (UME) 334*8kB (UME) 213*16kB (UME) 40*32kB (UME) 13*64kB (UM) 30*128kB (UM) 9*256kB (U) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18208kB [ 3024.102178] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3024.141926] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3024.161707] Bluetooth: hci0 command 0x0409 tx timeout [ 3024.169210] Node 1 Normal: 117*4kB (M) 74*8kB (M) 58*16kB (UM) 39*32kB (UM) 31*64kB (UM) 13*128kB (M) 3*256kB (M) 37*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 27620kB [ 3024.179659] lowmem_reserve[]: 0 2717 2718 [ 3024.190055] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3024.190063] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3024.199275] 2718 2718 [ 3024.222050] Node 0 DMA32 free:18080kB min:36200kB low:45248kB high:54296kB active_anon:247104kB inactive_anon:92736kB active_file:16kB inactive_file:12kB unevictable:0kB writepending:4kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11328kB pagetables:14744kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 3024.247877] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3024.261280] lowmem_reserve[]: 0 0 0 0 0 [ 3024.275746] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3024.292710] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3024.312173] 32001 total pagecache pages [ 3024.315988] lowmem_reserve[]: 0 [ 3024.316427] 0 pages in swap cache [ 3024.316430] 0 0 [ 3024.319783] Swap cache stats: add 0, delete 0, find 0/0 [ 3024.319788] Free swap = 0kB [ 3024.331663] 0 0 [ 3024.341059] Total swap = 0kB [ 3024.345444] 2097051 pages RAM [ 3024.349117] 0 pages HighMem/MovableOnly [ 3024.350433] Node 1 [ 3024.353460] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3024.358731] Normal free:26776kB min:53696kB low:67120kB high:80544kB active_anon:74224kB inactive_anon:25040kB active_file:468kB inactive_file:488kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21760kB pagetables:67108kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3024.368471] 363848 pages reserved [ 3024.368476] 0 pages cma reserved [ 3024.377962] syz-executor.5 cpuset= [ 3024.421518] lowmem_reserve[]: 0 0 0 0 0 [ 3024.431574] / mems_allowed=0-1 [ 3024.438993] CPU: 1 PID: 5941 Comm: syz-executor.5 Not tainted 4.14.230-syzkaller #0 [ 3024.444173] Node 0 [ 3024.446960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3024.446969] DMA: [ 3024.449288] Call Trace: [ 3024.459095] 3*4kB [ 3024.461208] dump_stack+0x1b2/0x281 [ 3024.463817] (UE) [ 3024.466140] warn_alloc.cold+0x96/0x1cc [ 3024.470059] 27*8kB [ 3024.472199] ? zone_watermark_ok_safe+0x220/0x220 [ 3024.472209] ? usleep_range+0x130/0x130 [ 3024.472217] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3024.472229] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3024.476178] (UME) [ 3024.478410] ? run_timer_softirq+0x5a0/0x5a0 [ 3024.483443] 55*16kB [ 3024.487476] __alloc_pages_nodemask+0x2127/0x2720 [ 3024.492828] (UM) [ 3024.497820] ? lock_acquire+0x170/0x3f0 [ 3024.499943] 20*32kB [ 3024.504394] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3024.504405] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3024.504422] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3024.506833] (UME) [ 3024.511774] ? alloc_pages_current+0x73/0x260 [ 3024.513862] 4*64kB [ 3024.517876] alloc_pages_current+0x155/0x260 [ 3024.520181] (ME) [ 3024.525273] ion_page_pool_alloc+0x118/0x1b0 [ 3024.525283] ion_system_heap_allocate+0x133/0x8c0 [ 3024.525292] ? ion_alloc+0x187/0x810 [ 3024.530072] 6*128kB [ 3024.535969] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3024.535979] ? ion_system_contig_heap_create+0x130/0x130 [ 3024.535987] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3024.535997] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3024.538211] (UE) [ 3024.542794] ion_alloc+0x204/0x810 [ 3024.542807] ? ion_dma_buf_release+0x40/0x40 [ 3024.542819] ? __might_fault+0x177/0x1b0 [ 3024.545143] 4*256kB [ 3024.549545] ion_ioctl+0xea/0x1f0 [ 3024.554224] (UME) [ 3024.558897] ? ion_query_heaps+0x360/0x360 [ 3024.563934] 2*512kB [ 3024.568329] ? ion_query_heaps+0x360/0x360 [ 3024.571014] (UE) [ 3024.576649] do_vfs_ioctl+0x75a/0xff0 [ 3024.576660] ? ioctl_preallocate+0x1a0/0x1a0 [ 3024.576668] ? lock_downgrade+0x740/0x740 [ 3024.576680] ? __fget+0x225/0x360 [ 3024.576689] ? do_vfs_ioctl+0xff0/0xff0 [ 3024.582658] 2*1024kB [ 3024.587706] ? security_file_ioctl+0x83/0xb0 [ 3024.592630] (ME) [ 3024.594748] SyS_ioctl+0x7f/0xb0 [ 3024.598360] 2*2048kB [ 3024.603200] ? do_vfs_ioctl+0xff0/0xff0 [ 3024.603212] do_syscall_64+0x1d5/0x640 [ 3024.603227] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3024.607804] (UM) [ 3024.611345] RIP: 0033:0x466459 [ 3024.614811] 0*4096kB [ 3024.617019] RSP: 002b:00007f81c679f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3024.621413] = 10964kB [ 3024.624009] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3024.624015] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3024.624019] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3024.624024] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3024.624029] R13: 00007ffd3cef7c7f R14: 00007f81c679f300 R15: 0000000000022000 [ 3024.624198] syz-executor.4: [ 3024.628439] Node 0 [ 3024.630483] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 3024.650593] DMA32: [ 3024.653015] Mem-Info: [ 3024.653035] active_anon:80374 inactive_anon:29458 isolated_anon:0 [ 3024.653035] active_file:31 inactive_file:14 isolated_file:0 [ 3024.653035] unevictable:0 dirty:1 writeback:0 unstable:0 [ 3024.653035] slab_reclaimable:15275 slab_unreclaimable:146687 [ 3024.653035] mapped:34831 shmem:31956 pagetables:20496 bounce:0 [ 3024.653035] free:13952 free_pcp:30 free_cma:0 [ 3024.653052] Node 0 active_anon:247272kB inactive_anon:92792kB active_file:16kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:91712kB dirty:4kB writeback:0kB shmem:97468kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 178176kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3024.653067] Node 1 active_anon:74224kB inactive_anon:25040kB active_file:108kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:47612kB dirty:0kB writeback:0kB shmem:30356kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3024.665739] 704*4kB [ 3024.668345] Node 0 [ 3024.685469] (ME) [ 3024.685720] (null) [ 3024.689342] 322*8kB [ 3024.691754] syz-executor.4 cpuset= [ 3024.709212] (UME) [ 3024.709862] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3024.724213] 213*16kB [ 3024.725079] / [ 3024.740245] (UME) [ 3024.740600] lowmem_reserve[]: [ 3024.757379] 40*32kB [ 3024.758890] mems_allowed=0-1 [ 3024.761287] (UME) [ 3024.799458] 0 2717 2718 2718 2718 [ 3024.799479] Node 0 DMA32 free:18080kB min:36200kB low:45248kB high:54296kB active_anon:247104kB inactive_anon:92736kB active_file:0kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11328kB pagetables:14744kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 3024.799504] lowmem_reserve[]: [ 3024.843545] 13*64kB [ 3024.859495] CPU: 1 PID: 5949 Comm: syz-executor.4 Not tainted 4.14.230-syzkaller #0 [ 3024.859501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3024.859504] Call Trace: [ 3024.859525] dump_stack+0x1b2/0x281 [ 3024.859536] warn_alloc.cold+0x96/0x1cc [ 3024.859550] ? zone_watermark_ok_safe+0x220/0x220 [ 3024.877188] (UM) [ 3024.878269] ? usleep_range+0x130/0x130 [ 3024.905525] 30*128kB [ 3024.908105] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3024.909971] (UM) [ 3024.913093] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3024.913103] ? run_timer_softirq+0x5a0/0x5a0 [ 3024.913123] __alloc_pages_nodemask+0x2127/0x2720 [ 3024.916470] 9*256kB [ 3024.919420] ? lock_acquire+0x170/0x3f0 [ 3024.922639] (U) [ 3024.925185] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3024.929297] 2*512kB [ 3024.959316] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3024.959332] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3024.959344] ? retint_kernel+0x2d/0x2d [ 3024.959357] alloc_pages_current+0x155/0x260 [ 3024.962556] (U) [ 3024.964855] ion_page_pool_alloc+0x118/0x1b0 [ 3024.973429] 0*1024kB [ 3024.982958] ion_system_heap_allocate+0x133/0x8c0 [ 3024.982971] ? _raw_spin_unlock+0x29/0x40 [ 3024.982982] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3024.985727] 0*2048kB [ 3024.989454] ? ion_system_contig_heap_create+0x130/0x130 [ 3024.993532] 0*4096kB [ 3024.999203] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3024.999217] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3025.001360] = 18080kB [ 3025.006339] ion_alloc+0x27a/0x810 [ 3025.006352] ? ion_dma_buf_release+0x40/0x40 [ 3025.006362] ? __might_fault+0x177/0x1b0 [ 3025.006373] ion_ioctl+0xea/0x1f0 [ 3025.006382] ? ion_query_heaps+0x360/0x360 [ 3025.009419] Node 0 [ 3025.015368] ? msg_exit_ns+0x40/0x40 [ 3025.015376] ? ion_query_heaps+0x360/0x360 [ 3025.015385] do_vfs_ioctl+0x75a/0xff0 [ 3025.015397] ? ioctl_preallocate+0x1a0/0x1a0 [ 3025.018047] Normal: [ 3025.023139] ? lock_downgrade+0x740/0x740 [ 3025.023153] ? __fget+0x225/0x360 [ 3025.023163] ? do_vfs_ioctl+0xff0/0xff0 [ 3025.028261] 0*4kB [ 3025.033454] ? security_file_ioctl+0x83/0xb0 [ 3025.033466] SyS_ioctl+0x7f/0xb0 [ 3025.033474] ? do_vfs_ioctl+0xff0/0xff0 [ 3025.033485] do_syscall_64+0x1d5/0x640 [ 3025.035960] 0*8kB [ 3025.040397] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3025.042642] 0*16kB [ 3025.047676] RIP: 0033:0x466459 [ 3025.049975] 0*32kB [ 3025.054447] RSP: 002b:00007f61587e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3025.054457] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3025.054462] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3025.054467] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3025.054474] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3025.060422] 0*64kB [ 3025.064745] R13: 00007ffed7f6205f R14: 00007f61587e7300 R15: 0000000000022000 [ 3025.064913] 0 [ 3025.069436] 0*128kB [ 3025.071577] 0 [ 3025.095153] 0*256kB [ 3025.096873] 0 [ 3025.116879] 0*512kB [ 3025.117689] 0 [ 3025.120284] 0*1024kB [ 3025.124324] 0 [ 3025.124333] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3025.124353] lowmem_reserve[]: 0 0 0 0 0 [ 3025.124378] Node 1 Normal free:27120kB min:53696kB low:67120kB high:80544kB active_anon:74224kB inactive_anon:25040kB active_file:48kB inactive_file:52kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21760kB pagetables:67108kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3025.124397] lowmem_reserve[]: 0 0 0 0 0 [ 3025.124415] Node 0 DMA: 3*4kB (UE) [ 3025.142613] 0*2048kB [ 3025.144562] 27*8kB [ 3025.149569] 0*4096kB [ 3025.154536] (UME) 55*16kB (UM) 20*32kB (UME) 4*64kB (ME) 6*128kB (UE) 4*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 10964kB [ 3025.154599] Node 0 DMA32: 704*4kB (ME) 322*8kB (UME) 213*16kB (UME) 40*32kB (UME) 13*64kB (UM) 30*128kB (UM) 9*256kB (U) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18080kB [ 3025.154667] Node 0 Normal: [ 3025.170887] = 0kB [ 3025.173729] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3025.173771] Node 1 Normal: [ 3025.183539] Node 1 [ 3025.184452] 118*4kB [ 3025.188449] Normal: [ 3025.194349] (UM) [ 3025.208439] 118*4kB [ 3025.209964] 75*8kB [ 3025.219178] (UM) [ 3025.221432] (UM) [ 3025.233974] 75*8kB [ 3025.236640] 58*16kB [ 3025.255626] (UM) [ 3025.262193] (UM) [ 3025.271614] 58*16kB [ 3025.271854] 39*32kB [ 3025.278029] (UM) [ 3025.280073] (UM) [ 3025.280425] 39*32kB [ 3025.311319] 31*64kB [ 3025.325833] (UM) [ 3025.345860] (UM) [ 3025.360480] 31*64kB [ 3025.374288] 13*128kB [ 3025.394617] (UM) [ 3025.414765] (M) [ 3025.434457] 13*128kB [ 3025.493774] 3*256kB (M) 36*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 27120kB [ 3025.514946] (M) 3*256kB (M) 36*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 27120kB [ 3025.539741] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3025.541385] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3025.558781] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3025.595030] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3025.604793] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3025.604803] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3025.604809] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3025.604813] 35166 total pagecache pages [ 3025.604823] 0 pages in swap cache [ 3025.604828] Swap cache stats: add 0, delete 0, find 0/0 [ 3025.604835] Free swap = 0kB [ 3025.676728] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3025.685937] device hsr_slave_1 left promiscuous mode [ 3025.702097] Total swap = 0kB [ 3025.705336] 2097051 pages RAM [ 3025.708549] 0 pages HighMem/MovableOnly [ 3025.708662] 35166 total pagecache pages [ 3025.720358] device hsr_slave_0 left promiscuous mode [ 3025.722186] 363848 pages reserved [ 3025.729387] 0 pages cma reserved [ 3025.732122] 0 pages in swap cache [ 3025.736670] Swap cache stats: add 0, delete 0, find 0/0 [ 3025.753998] Free swap = 0kB [ 3025.757300] Total swap = 0kB [ 3025.760327] 2097051 pages RAM [ 3025.789344] team0 (unregistering): Port device team_slave_1 removed [ 3025.796638] 0 pages HighMem/MovableOnly [ 3025.800963] 363848 pages reserved [ 3025.827925] 0 pages cma reserved [ 3025.831947] Out of memory (oom_kill_allocating_task): Kill process 5499 (rs:main Q:Reg) score 0 or sacrifice child [ 3025.846787] team0 (unregistering): Port device team_slave_0 removed [ 3025.865504] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 3025.882136] Killed process 5494 (rsyslogd) total-vm:254332kB, anon-rss:1068kB, file-rss:628kB, shmem-rss:0kB [ 3025.897314] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 3025.914376] oom_reaper: reaped process 5494 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3025.956790] bond0 (unregistering): Released all slaves [ 3025.995590] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 3026.064481] systemd[1]: rsyslog.service: Unit entered failed state. [ 3026.117212] systemd[1]: rsyslog.service: Failed with result 'signal'. [ 3026.215214] Bluetooth: hci0 command 0x041b tx timeout [ 3026.354418] systemd[1]: rsyslog.service: Service hold-off time over, scheduling restart. [ 3026.376400] systemd[1]: Stopped System Logging Service. [ 3026.411225] systemd[1]: Starting System Logging Service... [ 3027.544989] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3027.574936] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 3027.580308] CPU: 0 PID: 5941 Comm: syz-executor.5 Not tainted 4.14.230-syzkaller #0 [ 3027.588631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3027.598845] Call Trace: [ 3027.601667] dump_stack+0x1b2/0x281 [ 3027.606091] warn_alloc.cold+0x96/0x1cc [ 3027.610256] ? zone_watermark_ok_safe+0x220/0x220 [ 3027.615490] __alloc_pages_nodemask+0x2127/0x2720 [ 3027.620694] ? io_schedule_timeout+0x140/0x140 [ 3027.625633] ? lock_acquire+0x170/0x3f0 [ 3027.630219] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3027.635601] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3027.641434] ? __mutex_unlock_slowpath+0x75/0x770 [ 3027.646760] alloc_pages_current+0x155/0x260 [ 3027.651279] ion_page_pool_alloc+0x118/0x1b0 [ 3027.656205] ion_system_heap_allocate+0x133/0x8c0 [ 3027.662928] IPVS: ftp: loaded support on port[0] = 21 [ 3027.663249] ? _raw_spin_unlock+0x29/0x40 [ 3027.672908] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3027.678004] ? ion_system_contig_heap_create+0x130/0x130 [ 3027.683554] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3027.689200] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3027.694409] ion_alloc+0x27a/0x810 [ 3027.698133] ? ion_dma_buf_release+0x40/0x40 [ 3027.702965] ? __might_fault+0x177/0x1b0 [ 3027.707102] ion_ioctl+0xea/0x1f0 [ 3027.710537] ? ion_query_heaps+0x360/0x360 [ 3027.714824] ? ion_query_heaps+0x360/0x360 [ 3027.719227] do_vfs_ioctl+0x75a/0xff0 [ 3027.723296] ? ioctl_preallocate+0x1a0/0x1a0 [ 3027.727705] ? lock_downgrade+0x740/0x740 [ 3027.732084] ? __fget+0x225/0x360 [ 3027.735645] ? do_vfs_ioctl+0xff0/0xff0 [ 3027.739784] ? security_file_ioctl+0x83/0xb0 [ 3027.744269] SyS_ioctl+0x7f/0xb0 [ 3027.747932] ? do_vfs_ioctl+0xff0/0xff0 [ 3027.752439] do_syscall_64+0x1d5/0x640 [ 3027.756851] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3027.762396] RIP: 0033:0x466459 [ 3027.765586] RSP: 002b:00007f81c679f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3027.773454] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3027.780982] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3027.788589] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3027.795844] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3027.803272] R13: 00007ffd3cef7c7f R14: 00007f81c679f300 R15: 0000000000022000 [ 3027.835723] warn_alloc_show_mem: 1 callbacks suppressed [ 3027.835727] Mem-Info: [ 3027.846721] active_anon:80238 inactive_anon:31050 isolated_anon:0 [ 3027.846721] active_file:1249 inactive_file:2590 isolated_file:0 [ 3027.846721] unevictable:0 dirty:20 writeback:0 unstable:0 [ 3027.846721] slab_reclaimable:15231 slab_unreclaimable:147969 [ 3027.846721] mapped:29013 shmem:33546 pagetables:20447 bounce:0 [ 3027.846721] free:256569 free_pcp:528 free_cma:0 [ 3027.885769] Node 0 active_anon:246444kB inactive_anon:92788kB active_file:2540kB inactive_file:8068kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:63768kB dirty:76kB writeback:0kB shmem:97456kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 178176kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3027.916291] Node 1 active_anon:74508kB inactive_anon:31412kB active_file:2456kB inactive_file:2292kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:52284kB dirty:4kB writeback:0kB shmem:36728kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3027.946353] Node 0 DMA free:11064kB min:204kB low:252kB high:300kB active_anon:172kB inactive_anon:56kB active_file:68kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3027.975887] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3027.987057] Node 0 DMA32 free:543664kB min:36200kB low:45248kB high:54296kB active_anon:246272kB inactive_anon:92732kB active_file:2472kB inactive_file:8068kB unevictable:0kB writepending:76kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11648kB pagetables:14464kB bounce:0kB free_pcp:828kB local_pcp:172kB free_cma:0kB [ 3028.029330] lowmem_reserve[]: 0 0 0 0 0 [ 3028.033700] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3028.058268] chnl_net:caif_netlink_parms(): no params data found [ 3028.068805] lowmem_reserve[]: 0 0 0 0 0 [ 3028.077717] Node 1 Normal free:651112kB min:53696kB low:67120kB high:80544kB active_anon:74508kB inactive_anon:31412kB active_file:2456kB inactive_file:2292kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21824kB pagetables:67192kB bounce:0kB free_pcp:1408kB local_pcp:676kB free_cma:0kB [ 3028.115327] lowmem_reserve[]: 0 0 0 0 0 [ 3028.119451] Node 0 DMA: 43*4kB (UME) 32*8kB (UME) 56*16kB (UM) 21*32kB (UME) 5*64kB (UME) 5*128kB (UE) 4*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 11148kB [ 3028.140255] Node 0 DMA32: 26318*4kB (UE) 13881*8kB (UME) 9528*16kB (UME) 3747*32kB (UME) 1601*64kB (UM) 47*128kB (U) 4*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 598176kB [ 3028.161378] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3028.175665] Node 1 Normal: 16372*4kB (UM) 12287*8kB (UM) 9612*16kB (UM) 6016*32kB (UM) 2255*64kB (U) 455*128kB (U) 46*256kB (U) 32*512kB (U) 14*1024kB (U) 0*2048kB 0*4096kB = 755144kB [ 3028.196114] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3028.206358] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3028.223070] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3028.236117] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3028.254315] 37425 total pagecache pages [ 3028.258500] 0 pages in swap cache [ 3028.269147] Swap cache stats: add 0, delete 0, find 0/0 [ 3028.278009] Free swap = 0kB [ 3028.287195] Total swap = 0kB [ 3028.291336] 2097051 pages RAM [ 3028.298344] Bluetooth: hci0 command 0x040f tx timeout [ 3028.306868] 0 pages HighMem/MovableOnly [ 3028.311056] 363848 pages reserved [ 3028.316154] 0 pages cma reserved [ 3028.337060] bridge0: port 1(bridge_slave_0) entered blocking state [ 3028.354958] bridge0: port 1(bridge_slave_0) entered disabled state [ 3028.375141] device bridge_slave_0 entered promiscuous mode [ 3028.403194] bridge0: port 2(bridge_slave_1) entered blocking state [ 3028.409850] bridge0: port 2(bridge_slave_1) entered disabled state [ 3028.422902] device bridge_slave_1 entered promiscuous mode [ 3028.486433] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 3028.504508] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 3028.559540] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 3028.583146] team0: Port device team_slave_0 added [ 3028.602615] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 3028.622335] team0: Port device team_slave_1 added [ 3028.675347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3028.694526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3028.751915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3028.773641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3028.780510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3028.844957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3028.860323] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 3028.872881] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 3028.905356] device hsr_slave_0 entered promiscuous mode [ 3028.911515] device hsr_slave_1 entered promiscuous mode [ 3028.922795] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 3028.930246] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 3029.086013] bridge0: port 2(bridge_slave_1) entered blocking state [ 3029.093070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3029.100010] bridge0: port 1(bridge_slave_0) entered blocking state [ 3029.106676] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3029.122277] bridge0: port 1(bridge_slave_0) entered disabled state [ 3029.129435] bridge0: port 2(bridge_slave_1) entered disabled state [ 3029.196021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3029.210327] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 3029.224879] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 3029.231580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3029.244387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3029.265347] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 3029.271455] 8021q: adding VLAN 0 to HW filter on device team0 [ 3029.285327] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 3029.292567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3029.301082] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3029.310780] bridge0: port 1(bridge_slave_0) entered blocking state [ 3029.317336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3029.331409] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 3029.341577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3029.354410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3029.366699] bridge0: port 2(bridge_slave_1) entered blocking state [ 3029.373591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3029.386149] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready 23:47:13 executing program 5: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000006, 0x27}) 23:47:13 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000006, 0x27}) openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x20000, 0x0) 23:47:13 executing program 1: openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000036c0)='/dev/dlm_plock\x00', 0x0, 0x0) getsockname$ax25(r0, 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f00000000c0)=0x5) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x30080, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]) 23:47:13 executing program 4: accept4$rose(0xffffffffffffffff, &(0x7f0000000080)=@full={0xb, @dev, @remote, 0x0, [@netrom, @rose, @bcast, @netrom, @null, @netrom]}, 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000006, 0x27}) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000140)) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x1, 0x1, 0x4, 0x4, 0xffffffff, {0x77359400}, {0x1, 0xc, 0x2, 0xec, 0x6e, 0x6, "25807a57"}, 0x1, 0x1, @fd}) [ 3029.397366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3029.409899] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 3029.423074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 23:47:13 executing program 0: semctl$GETZCNT(0x0, 0x2, 0xf, &(0x7f00000000c0)=""/34) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) accept4$rose(r0, &(0x7f0000000140)=@full={0xb, @remote, @null, 0x0, [@remote, @null, @default, @remote, @null, @null]}, &(0x7f0000000180)=0x40, 0x80800) ioctl$SIOCRSGCAUSE(r0, 0x89e0, 0x0) accept4$rose(r0, &(0x7f0000000080)=@full={0xb, @dev, @remote, 0x0, [@netrom, @rose, @bcast, @netrom, @null, @netrom]}, 0x0, 0x1800) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r2 = semget(0x0, 0x1, 0x480) semctl$SEM_STAT_ANY(r2, 0x3, 0x14, &(0x7f0000000100)=""/2) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x80000006, 0x27}) [ 3029.443420] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 3029.460386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3029.469631] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3029.486297] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 3029.512548] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3029.521722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3029.535796] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3029.547444] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 3029.561704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3029.579294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3029.590711] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 3029.600076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3029.610621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3029.623797] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3029.631246] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3029.641331] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3029.650780] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3029.665123] device bridge_slave_1 left promiscuous mode [ 3029.675446] bridge0: port 2(bridge_slave_1) entered disabled state [ 3029.685928] device bridge_slave_0 left promiscuous mode [ 3029.699312] bridge0: port 1(bridge_slave_0) entered disabled state [ 3029.723614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3029.735149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3029.746213] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3029.766058] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3029.789316] device bridge_slave_1 left promiscuous mode [ 3029.800665] bridge0: port 2(bridge_slave_1) entered disabled state [ 3029.810221] device bridge_slave_0 left promiscuous mode [ 3029.822837] bridge0: port 1(bridge_slave_0) entered disabled state [ 3029.838404] device veth1_macvtap left promiscuous mode [ 3029.846751] device veth0_macvtap left promiscuous mode [ 3029.866359] device veth1_vlan left promiscuous mode [ 3029.884381] device veth0_vlan left promiscuous mode [ 3029.901008] device veth1_macvtap left promiscuous mode [ 3029.917204] device veth0_macvtap left promiscuous mode [ 3029.929826] device veth1_vlan left promiscuous mode [ 3029.943520] device veth0_vlan left promiscuous mode [ 3030.226578] device hsr_slave_1 left promiscuous mode [ 3030.242761] device hsr_slave_0 left promiscuous mode [ 3030.262248] team0 (unregistering): Port device team_slave_1 removed [ 3030.276236] team0 (unregistering): Port device team_slave_0 removed [ 3030.287721] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 3030.302868] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 3030.371799] Bluetooth: hci0 command 0x0419 tx timeout [ 3030.379425] bond0 (unregistering): Released all slaves [ 3030.567092] device hsr_slave_1 left promiscuous mode [ 3030.590786] device hsr_slave_0 left promiscuous mode [ 3030.604455] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3030.624800] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3030.638293] team0 (unregistering): Port device team_slave_1 removed [ 3030.645136] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 3030.650576] CPU: 0 PID: 6245 Comm: syz-executor.4 Not tainted 4.14.230-syzkaller #0 [ 3030.653172] syz-executor.4 cpuset= [ 3030.658717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3030.658722] Call Trace: [ 3030.658742] dump_stack+0x1b2/0x281 [ 3030.658757] warn_alloc.cold+0x96/0x1cc [ 3030.675535] / [ 3030.677597] ? zone_watermark_ok_safe+0x220/0x220 [ 3030.680635] mems_allowed=0-1 [ 3030.684524] __alloc_pages_nodemask+0x2127/0x2720 [ 3030.684542] ? _raw_spin_unlock_irq+0x24/0x80 [ 3030.684555] ? lock_acquire+0x170/0x3f0 [ 3030.684568] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3030.684583] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3030.684596] ? __mutex_unlock_slowpath+0x75/0x770 [ 3030.732100] alloc_pages_current+0x155/0x260 [ 3030.736718] ion_page_pool_alloc+0x118/0x1b0 [ 3030.742990] ion_system_heap_allocate+0x133/0x8c0 [ 3030.749355] ? ion_alloc+0x187/0x810 [ 3030.753347] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3030.759564] ? ion_system_contig_heap_create+0x130/0x130 [ 3030.765466] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3030.771577] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3030.776668] ion_alloc+0x204/0x810 [ 3030.780583] ? ion_dma_buf_release+0x40/0x40 [ 3030.785994] ? __might_fault+0x177/0x1b0 [ 3030.790257] ion_ioctl+0xea/0x1f0 [ 3030.793893] ? ion_query_heaps+0x360/0x360 [ 3030.798506] ? ion_query_heaps+0x360/0x360 [ 3030.803178] do_vfs_ioctl+0x75a/0xff0 [ 3030.807287] ? ioctl_preallocate+0x1a0/0x1a0 [ 3030.811797] ? lock_downgrade+0x740/0x740 [ 3030.816480] ? __fget+0x225/0x360 [ 3030.820123] ? do_vfs_ioctl+0xff0/0xff0 [ 3030.824125] ? security_file_ioctl+0x83/0xb0 [ 3030.828741] SyS_ioctl+0x7f/0xb0 [ 3030.832415] ? do_vfs_ioctl+0xff0/0xff0 [ 3030.839909] do_syscall_64+0x1d5/0x640 [ 3030.844088] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3030.849313] RIP: 0033:0x466459 [ 3030.852645] RSP: 002b:00007f61587e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3030.860602] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3030.868060] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3030.875802] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3030.883926] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3030.891633] R13: 00007ffed7f6205f R14: 00007f61587e7300 R15: 0000000000022000 [ 3030.899760] CPU: 1 PID: 6247 Comm: syz-executor.4 Not tainted 4.14.230-syzkaller #0 [ 3030.905181] Mem-Info: [ 3030.909289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3030.909293] Call Trace: [ 3030.909311] dump_stack+0x1b2/0x281 [ 3030.909326] warn_alloc.cold+0x96/0x1cc [ 3030.912535] active_anon:80086 inactive_anon:31050 isolated_anon:0 [ 3030.912535] active_file:2051 inactive_file:4314 isolated_file:0 [ 3030.912535] unevictable:0 dirty:67 writeback:0 unstable:0 [ 3030.912535] slab_reclaimable:15102 slab_unreclaimable:144022 [ 3030.912535] mapped:31178 shmem:33546 pagetables:20447 bounce:0 [ 3030.912535] free:193224 free_pcp:334 free_cma:0 [ 3030.923414] ? zone_watermark_ok_safe+0x220/0x220 [ 3030.923435] __alloc_pages_nodemask+0x2127/0x2720 [ 3030.923445] ? _raw_spin_unlock_irq+0x5a/0x80 [ 3030.923455] ? finish_task_switch+0x178/0x610 [ 3030.923461] ? finish_task_switch+0x14d/0x610 [ 3030.923473] ? lock_acquire+0x170/0x3f0 [ 3030.923491] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3030.926313] Node 0 active_anon:245944kB inactive_anon:92788kB active_file:5696kB inactive_file:4680kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:65736kB dirty:244kB writeback:0kB shmem:97456kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 178176kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3030.930031] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3030.930043] ? __mutex_unlock_slowpath+0x75/0x770 [ 3030.930054] ? alloc_pages_current+0x123/0x260 [ 3030.934610] Node 1 active_anon:74400kB inactive_anon:31412kB active_file:2508kB inactive_file:12576kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58976kB dirty:24kB writeback:0kB shmem:36728kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3030.969890] alloc_pages_current+0x155/0x260 [ 3030.969904] ion_page_pool_alloc+0x118/0x1b0 [ 3030.969913] ion_system_heap_allocate+0x133/0x8c0 [ 3030.969922] ? ion_alloc+0x187/0x810 [ 3030.969933] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3030.969941] ? ion_system_contig_heap_create+0x130/0x130 [ 3030.969954] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3030.974974] Node 0 [ 3030.979992] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3030.980003] ion_alloc+0x204/0x810 [ 3030.980016] ? ion_dma_buf_release+0x40/0x40 [ 3030.985005] DMA free:11108kB min:204kB low:252kB high:300kB active_anon:172kB inactive_anon:56kB active_file:68kB inactive_file:20kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3030.989427] ? __might_fault+0x177/0x1b0 [ 3030.989438] ion_ioctl+0xea/0x1f0 [ 3030.989594] ? ion_query_heaps+0x360/0x360 [ 3030.994003] lowmem_reserve[]: [ 3030.997913] ? _raw_spin_unlock+0x29/0x40 [ 3030.997920] ? ion_query_heaps+0x360/0x360 [ 3030.997931] do_vfs_ioctl+0x75a/0xff0 [ 3031.002960] 0 [ 3031.033085] ? ioctl_preallocate+0x1a0/0x1a0 [ 3031.033095] ? lock_downgrade+0x740/0x740 [ 3031.033107] ? __fget+0x225/0x360 [ 3031.033115] ? do_vfs_ioctl+0xff0/0xff0 [ 3031.033126] ? security_file_ioctl+0x83/0xb0 [ 3031.033135] SyS_ioctl+0x7f/0xb0 [ 3031.033142] ? do_vfs_ioctl+0xff0/0xff0 [ 3031.033151] do_syscall_64+0x1d5/0x640 [ 3031.033163] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3031.033175] RIP: 0033:0x466459 [ 3031.033180] RSP: 002b:00007f61587a5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3031.033189] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 3031.033194] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3031.033198] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3031.033207] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 3031.039104] 2717 [ 3031.043737] R13: 00007ffed7f6205f R14: 00007f61587a5300 R15: 0000000000022000 [ 3031.057909] team0 (unregistering): Port device team_slave_0 removed [ 3031.084210] 2718 [ 3031.155713] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 3031.165123] 2718 [ 3031.185850] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 3031.219370] 2718 [ 3031.313530] Node 0 DMA32 free:276560kB min:36200kB low:45248kB high:54296kB active_anon:245872kB inactive_anon:92732kB active_file:5828kB inactive_file:4760kB unevictable:0kB writepending:244kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11264kB pagetables:14612kB bounce:0kB free_pcp:372kB local_pcp:252kB free_cma:0kB [ 3031.352010] lowmem_reserve[]: 0 0 0 0 0 [ 3031.356539] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3031.387703] lowmem_reserve[]: 0 0 0 0 0 [ 3031.392798] Node 1 Normal free:566592kB min:53696kB low:67120kB high:80544kB active_anon:74400kB inactive_anon:31412kB active_file:2508kB inactive_file:12576kB unevictable:0kB writepending:24kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21856kB pagetables:67192kB bounce:0kB free_pcp:20kB local_pcp:0kB free_cma:0kB [ 3031.420788] bond0 (unregistering): Released all slaves [ 3031.437830] lowmem_reserve[]: 0 0 0 0 0 [ 3031.444381] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 3031.450613] Node 0 DMA: 33*4kB (UE) 34*8kB (UME) 56*16kB (UM) 21*32kB (UME) 5*64kB (UME) 5*128kB (UE) 4*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 11124kB [ 3031.450844] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3031.506763] Node 0 DMA32: 327*4kB (UME) 16764*8kB (UME) 7308*16kB (UME) 993*32kB (UME) 34*64kB (UM) 2*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 286556kB [ 3031.529734] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 3031.545411] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 3031.562162] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3031.565359] Node 0 [ 3031.569438] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3031.576513] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3031.596139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3031.631712] Node 1 Normal: 14106*4kB (UM) 14279*8kB (UM) 9460*16kB (UM) 7642*32kB (UM) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 566624kB [ 3031.683951] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3031.711936] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3031.739674] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3031.770786] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3031.795061] 40328 total pagecache pages [ 3031.806820] 0 pages in swap cache [ 3031.815677] Swap cache stats: add 0, delete 0, find 0/0 [ 3031.827536] Free swap = 0kB [ 3031.836830] Total swap = 0kB [ 3031.849217] 2097051 pages RAM [ 3031.861316] 0 pages HighMem/MovableOnly [ 3031.871222] 363848 pages reserved [ 3031.887449] 0 pages cma reserved [ 3032.029067] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 3032.052430] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 3032.059864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3032.082265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3032.200995] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 3032.214500] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 3032.237233] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 3032.260155] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 3032.270126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3032.288722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3032.312576] device veth0_vlan entered promiscuous mode [ 3032.324951] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3032.344165] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3032.363728] device veth1_vlan entered promiscuous mode [ 3032.370446] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 3032.383646] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 3032.399617] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 3032.410025] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 3032.420977] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3032.429045] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3032.439981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3032.448651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3032.461199] device veth0_macvtap entered promiscuous mode [ 3032.468822] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 3032.480446] device veth1_macvtap entered promiscuous mode [ 3032.487274] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 3032.504918] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 3032.522015] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3032.530596] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3032.557678] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 3032.576841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3032.589213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3032.604499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3032.643756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3032.665389] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 3032.684306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3032.704478] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3032.713166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3032.733652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3032.744986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3032.771665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3032.791850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3032.813066] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 3032.820193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3032.853484] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3032.861332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3033.674848] IPVS: ftp: loaded support on port[0] = 21 [ 3034.426702] syz-executor.0 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 3034.505002] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 3034.510342] CPU: 1 PID: 6255 Comm: syz-executor.0 Not tainted 4.14.230-syzkaller #0 [ 3034.518244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3034.528489] Call Trace: [ 3034.531343] dump_stack+0x1b2/0x281 [ 3034.534995] dump_header+0x178/0x82f [ 3034.538806] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3034.544256] ? ___ratelimit+0x2cd/0x530 [ 3034.548227] oom_kill_process.cold+0x10/0xa40 [ 3034.552912] out_of_memory+0xe3e/0x1190 [ 3034.557085] ? oom_killer_disable+0x1c0/0x1c0 [ 3034.562017] ? mutex_trylock+0x152/0x1a0 [ 3034.566523] __alloc_pages_nodemask+0x23e1/0x2720 [ 3034.571975] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3034.577385] ? mark_held_locks+0xa6/0xf0 [ 3034.582234] ? cache_grow_begin+0x3f/0x700 [ 3034.586468] cache_grow_begin+0x91/0x700 [ 3034.590631] fallback_alloc+0x207/0x2c0 [ 3034.594696] kmem_cache_alloc_trace+0x1f1/0x3d0 [ 3034.599839] ? dev_uevent_filter+0xd0/0xd0 [ 3034.604521] kobject_uevent_env+0x20c/0xf40 [ 3034.609036] ? wait_for_completion_io+0x10/0x10 [ 3034.613818] device_add+0xa47/0x15c0 [ 3034.617552] ? device_is_dependent+0x2a0/0x2a0 [ 3034.622414] netdev_register_kobject+0x181/0x410 [ 3034.627363] register_netdevice+0x955/0xe40 [ 3034.631866] ? netdev_change_features+0xa0/0xa0 [ 3034.637370] ? alloc_netdev_mqs+0x8c0/0xb70 [ 3034.641951] __ip_tunnel_create+0x338/0x4a0 [ 3034.646362] ? ip_tunnel_xmit+0x33a0/0x33a0 [ 3034.650841] ip_tunnel_init_net+0x247/0x4f0 [ 3034.655144] ? ip_tunnel_add+0x2a0/0x2a0 [ 3034.659335] ? erspan_init_net+0x30/0x30 [ 3034.666643] ops_init+0xaa/0x3e0 [ 3034.672097] setup_net+0x22f/0x530 [ 3034.675646] ? rtnl_net_dumpid_one+0x240/0x240 [ 3034.680579] ? kmem_cache_alloc+0x35f/0x3c0 [ 3034.685192] copy_net_ns+0x19b/0x440 [ 3034.688991] create_new_namespaces+0x375/0x720 [ 3034.693663] unshare_nsproxy_namespaces+0xa1/0x1d0 [ 3034.699055] SyS_unshare+0x308/0x7f0 [ 3034.703113] ? walk_process_tree+0x2a0/0x2a0 [ 3034.707596] ? task_work_run+0xfd/0x190 [ 3034.711930] ? do_syscall_64+0x4c/0x640 [ 3034.716322] ? walk_process_tree+0x2a0/0x2a0 [ 3034.721170] do_syscall_64+0x1d5/0x640 [ 3034.725444] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3034.730877] RIP: 0033:0x467a07 [ 3034.734051] RSP: 002b:00007fffc32a0f18 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 3034.741862] RAX: ffffffffffffffda RBX: 00007fffc32a1538 RCX: 0000000000467a07 [ 3034.749572] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000040000000 [ 3034.757342] RBP: 00007fffc32a0fd0 R08: 0000000000000000 R09: 0000000000000000 [ 3034.764887] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000ffffffff [ 3034.772828] R13: 000000000056ca68 R14: 0000000000000000 R15: 00000000000000f8 [ 3034.785224] Mem-Info: [ 3034.788962] active_anon:80588 inactive_anon:31055 isolated_anon:0 [ 3034.788962] active_file:18 inactive_file:52 isolated_file:31 [ 3034.788962] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3034.788962] slab_reclaimable:15092 slab_unreclaimable:142463 [ 3034.788962] mapped:52724 shmem:33557 pagetables:20717 bounce:0 [ 3034.788962] free:25172 free_pcp:54 free_cma:0 [ 3034.854273] Node 0 active_anon:247564kB inactive_anon:92796kB active_file:100kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:162456kB dirty:0kB writeback:0kB shmem:97472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 178176kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3034.884989] Node 1 active_anon:74788kB inactive_anon:31424kB active_file:0kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:48328kB dirty:0kB writeback:0kB shmem:36756kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3035.026113] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:172kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3035.094951] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3035.101259] Node 0 DMA32 free:36104kB min:36200kB low:45248kB high:54296kB active_anon:247392kB inactive_anon:92740kB active_file:112kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11424kB pagetables:15320kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3035.151465] lowmem_reserve[]: 0 0 0 0 0 [ 3035.155858] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3035.251558] Bluetooth: hci1 command 0x0409 tx timeout [ 3035.257169] Bluetooth: hci4 command 0x0409 tx timeout [ 3035.300668] lowmem_reserve[]: 0 0 0 0 0 [ 3035.305074] Node 1 Normal free:53500kB min:53696kB low:67120kB high:80544kB active_anon:74788kB inactive_anon:31424kB active_file:76kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21952kB pagetables:67416kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3035.335873] Bluetooth: hci5 command 0x0409 tx timeout [ 3035.343568] lowmem_reserve[]: 0 0 0 0 0 [ 3035.347700] Node 0 DMA: 3*4kB (ME) 40*8kB (UME) 55*16kB (UM) 22*32kB (UME) 5*64kB (UME) 5*128kB (UE) 4*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 11068kB [ 3035.364070] Node 0 DMA32: 1015*4kB (ME) 335*8kB (UME) 273*16kB (ME) 64*32kB (ME) 326*64kB (UM) 17*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36196kB [ 3035.379224] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3035.390418] Node 1 Normal: 145*4kB (UM) 65*8kB (UM) 37*16kB (UM) 1427*32kB (UM) 34*64kB (UM) 15*128kB (UM) 4*256kB (UM) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 53500kB [ 3035.406305] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3035.429701] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3035.438749] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3035.447740] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3035.456494] 33598 total pagecache pages [ 3035.460907] 0 pages in swap cache [ 3035.464884] Swap cache stats: add 0, delete 0, find 0/0 [ 3035.470476] Free swap = 0kB [ 3035.474326] Total swap = 0kB [ 3035.477430] 2097051 pages RAM [ 3035.480633] 0 pages HighMem/MovableOnly [ 3035.484952] 363848 pages reserved [ 3035.488458] 0 pages cma reserved [ 3035.491972] Out of memory (oom_kill_allocating_task): Kill process 6255 (syz-executor.0) score 0 or sacrifice child [ 3035.503630] Killed process 6255 (syz-executor.0) total-vm:93120kB, anon-rss:76kB, file-rss:34144kB, shmem-rss:0kB [ 3035.530075] oom_reaper: reaped process 6255 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3035.698978] oom_reaper: reaped process 6247 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3035.733834] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 3035.819238] systemd-journal cpuset=/ mems_allowed=0-1 [ 3035.822568] IPVS: ftp: loaded support on port[0] = 21 [ 3035.841298] CPU: 1 PID: 6017 Comm: systemd-journal Not tainted 4.14.230-syzkaller #0 [ 3035.850186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3035.860165] Call Trace: [ 3035.862871] dump_stack+0x1b2/0x281 [ 3035.866606] dump_header+0x178/0x82f [ 3035.870490] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3035.875920] ? ___ratelimit+0x2cd/0x530 [ 3035.880060] oom_kill_process.cold+0x10/0xa40 [ 3035.884739] out_of_memory+0xe3e/0x1190 [ 3035.889005] ? oom_killer_disable+0x1c0/0x1c0 [ 3035.893893] ? mutex_trylock+0x152/0x1a0 [ 3035.898178] __alloc_pages_nodemask+0x23e1/0x2720 [ 3035.903512] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3035.908546] alloc_pages_current+0x155/0x260 [ 3035.913113] filemap_fault+0x11a1/0x1ad0 [ 3035.917533] ext4_filemap_fault+0x84/0xb0 [ 3035.921852] __do_fault+0xfa/0x380 [ 3035.925377] __handle_mm_fault+0x2497/0x4620 [ 3035.930139] ? vm_insert_page+0x7c0/0x7c0 [ 3035.934467] ? mark_held_locks+0xa6/0xf0 [ 3035.938812] handle_mm_fault+0x455/0x9c0 [ 3035.943036] __do_page_fault+0x549/0xad0 [ 3035.947141] ? spurious_fault+0x640/0x640 [ 3035.952335] ? do_page_fault+0x60/0x500 [ 3035.956579] ? page_fault+0x2f/0x50 [ 3035.960364] page_fault+0x45/0x50 [ 3035.963944] RIP: 0001:0xffffffffffffffff [ 3035.968260] RSP: 335791e0:00007ffee3e7dfb0 EFLAGS: 7ffee3e7ddc0 [ 3035.971571] syz-executor.4: [ 3035.972710] Mem-Info: [ 3035.977940] page allocation failure: order:0 [ 3035.981202] active_anon:80548 inactive_anon:31055 isolated_anon:0 [ 3035.981202] active_file:39 inactive_file:0 isolated_file:0 [ 3035.981202] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3035.981202] slab_reclaimable:15092 slab_unreclaimable:141827 [ 3035.981202] mapped:52712 shmem:33557 pagetables:20717 bounce:0 [ 3035.981202] free:13791 free_pcp:117 free_cma:0 [ 3036.006728] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 3036.033123] Node 0 active_anon:247420kB inactive_anon:92796kB active_file:152kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:162520kB dirty:0kB writeback:0kB shmem:97472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 178176kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3036.051653] (null) [ 3036.075095] Node 1 active_anon:74772kB inactive_anon:31424kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:48328kB dirty:0kB writeback:0kB shmem:36756kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3036.097992] syz-executor.4 cpuset= [ 3036.111780] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:172kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3036.131439] / [ 3036.152197] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3036.159144] Node 0 DMA32 free:17468kB min:36200kB low:45248kB high:54296kB active_anon:247248kB inactive_anon:92740kB active_file:152kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11424kB pagetables:15320kB bounce:0kB free_pcp:344kB local_pcp:224kB free_cma:0kB [ 3036.163049] mems_allowed=0-1 [ 3036.197886] lowmem_reserve[]: 0 0 0 0 0 [ 3036.202065] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3036.214033] CPU: 0 PID: 6247 Comm: syz-executor.4 Not tainted 4.14.230-syzkaller #0 [ 3036.239069] lowmem_reserve[]: [ 3036.239794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3036.239797] 0 0 [ 3036.242887] Call Trace: [ 3036.242906] dump_stack+0x1b2/0x281 [ 3036.242919] warn_alloc.cold+0x96/0x1cc [ 3036.242930] ? zone_watermark_ok_safe+0x220/0x220 [ 3036.242940] ? usleep_range+0x130/0x130 [ 3036.242948] ? try_to_free_pages+0x23f/0x6e0 [ 3036.242958] ? _find_next_bit+0xdb/0x100 [ 3036.242971] ? run_timer_softirq+0x5a0/0x5a0 [ 3036.260369] 0 [ 3036.261279] __alloc_pages_nodemask+0x2127/0x2720 [ 3036.265824] 0 [ 3036.270905] ? lock_acquire+0x170/0x3f0 [ 3036.283051] 0 [ 3036.284599] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3036.291498] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3036.291514] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3036.291532] alloc_pages_current+0x155/0x260 [ 3036.291543] ion_page_pool_alloc+0x118/0x1b0 [ 3036.291553] ion_system_heap_allocate+0x133/0x8c0 [ 3036.291561] ? ion_alloc+0x187/0x810 [ 3036.291571] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3036.291579] ? ion_system_contig_heap_create+0x130/0x130 [ 3036.291587] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3036.291597] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3036.291607] ion_alloc+0x204/0x810 [ 3036.291621] ? ion_dma_buf_release+0x40/0x40 [ 3036.291631] ? __might_fault+0x177/0x1b0 [ 3036.291642] ion_ioctl+0xea/0x1f0 [ 3036.291651] ? ion_query_heaps+0x360/0x360 [ 3036.291662] ? _raw_spin_unlock+0x29/0x40 [ 3036.291668] ? ion_query_heaps+0x360/0x360 [ 3036.291678] do_vfs_ioctl+0x75a/0xff0 [ 3036.291690] ? ioctl_preallocate+0x1a0/0x1a0 [ 3036.291699] ? lock_downgrade+0x740/0x740 [ 3036.291712] ? __fget+0x225/0x360 [ 3036.291720] ? do_vfs_ioctl+0xff0/0xff0 [ 3036.291731] ? security_file_ioctl+0x83/0xb0 [ 3036.291740] SyS_ioctl+0x7f/0xb0 [ 3036.291747] ? do_vfs_ioctl+0xff0/0xff0 [ 3036.291757] do_syscall_64+0x1d5/0x640 [ 3036.291769] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3036.291776] RIP: 0033:0x466459 [ 3036.291780] RSP: 002b:00007f61587a5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3036.291790] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 3036.291795] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3036.291800] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3036.291805] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 3036.291810] R13: 00007ffed7f6205f R14: 00007f61587a5300 R15: 0000000000022000 [ 3036.314460] warn_alloc_show_mem: 1 callbacks suppressed [ 3036.314464] Mem-Info: [ 3036.321873] Node 1 [ 3036.342902] active_anon:80548 inactive_anon:31055 isolated_anon:0 [ 3036.342902] active_file:37 inactive_file:0 isolated_file:0 [ 3036.342902] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3036.342902] slab_reclaimable:15092 slab_unreclaimable:141827 [ 3036.342902] mapped:52712 shmem:33557 pagetables:20717 bounce:0 [ 3036.342902] free:13791 free_pcp:117 free_cma:0 [ 3036.351235] Normal free:26740kB min:53696kB low:67120kB high:80544kB active_anon:74772kB inactive_anon:31424kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21952kB pagetables:67416kB bounce:0kB free_pcp:124kB local_pcp:4kB free_cma:0kB [ 3036.374392] Node 0 active_anon:247420kB inactive_anon:92796kB active_file:148kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:162520kB dirty:0kB writeback:0kB shmem:97472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 178176kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3036.381760] lowmem_reserve[]: [ 3036.404944] Node 1 active_anon:74772kB inactive_anon:31424kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:48328kB dirty:0kB writeback:0kB shmem:36756kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3036.413797] 0 [ 3036.432181] Node 0 [ 3036.443153] 0 [ 3036.465718] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:172kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3036.478075] 0 0 0 [ 3036.478088] Node 0 DMA: 3*4kB (ME) 26*8kB (UME) 55*16kB (UM) 22*32kB (UME) 5*64kB (UME) 5*128kB (UE) 4*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 10956kB [ 3036.478161] Node 0 DMA32: 1019*4kB (ME) 336*8kB (MEH) 273*16kB (MEH) 65*32kB (ME) [ 3036.503482] lowmem_reserve[]: [ 3036.543318] 32*64kB [ 3036.580533] 0 [ 3036.608097] (UM) [ 3036.633249] 2717 2718 2718 2718 [ 3036.703748] Node 0 DMA32 free:17468kB min:36200kB low:45248kB high:54296kB active_anon:247248kB inactive_anon:92740kB active_file:148kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11424kB pagetables:15320kB bounce:0kB free_pcp:344kB local_pcp:120kB free_cma:0kB [ 3036.710229] 17*128kB [ 3036.738186] lowmem_reserve[]: 0 0 0 0 0 [ 3036.744970] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3036.777163] lowmem_reserve[]: 0 0 0 0 0 [ 3036.781789] Node 1 Normal free:26692kB min:53696kB low:67120kB high:80544kB active_anon:74772kB inactive_anon:31424kB active_file:24kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21952kB pagetables:67416kB bounce:0kB free_pcp:124kB local_pcp:120kB free_cma:0kB [ 3036.790896] (UM) [ 3036.817721] lowmem_reserve[]: 0 0 0 0 0 [ 3036.823919] Node 0 DMA: 3*4kB (ME) 26*8kB (UME) 55*16kB (UM) 22*32kB (UME) 5*64kB (UME) 5*128kB (UE) 4*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 10956kB [ 3036.844573] Node 0 DMA32: 1019*4kB (ME) 336*8kB (MEH) 273*16kB (MEH) 65*32kB (ME) 32*64kB (UM) 17*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17436kB [ 3036.859473] 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17436kB [ 3036.859987] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3036.881513] Node 1 Normal: 141*4kB (M) 64*8kB (UM) 35*16kB (UM) 587*32kB (UM) 32*64kB (UM) 17*128kB (UM) 4*256kB (UM) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 26692kB [ 3036.899726] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3036.914130] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3036.920120] Node 0 [ 3036.925098] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3036.938997] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3036.950662] 33590 total pagecache pages [ 3036.957183] 0 pages in swap cache [ 3036.960912] Swap cache stats: add 0, delete 0, find 0/0 [ 3036.968659] Free swap = 0kB [ 3036.968964] Normal: [ 3036.973997] Total swap = 0kB [ 3036.979632] 2097051 pages RAM [ 3036.985160] 0 pages HighMem/MovableOnly [ 3036.989473] 363848 pages reserved [ 3036.996020] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3037.004881] 0 pages cma reserved [ 3037.034634] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 2*16kB (UM) 538*32kB (UM) 30*64kB (UM) 17*128kB (UM) 4*256kB (UM) 2*512kB (M) 80*1024kB (U) 4*2048kB (U) 0*4096kB = 113528kB [ 3037.121768] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3037.131218] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3037.164560] IPVS: ftp: loaded support on port[0] = 21 [ 3037.180012] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3037.261685] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3037.270804] 35785 total pagecache pages [ 3037.311681] 0 pages in swap cache [ 3037.315348] Swap cache stats: add 0, delete 0, find 0/0 [ 3037.320974] Free swap = 0kB [ 3037.334391] Bluetooth: hci4 command 0x041b tx timeout [ 3037.339878] Bluetooth: hci1 command 0x041b tx timeout [ 3037.342098] Total swap = 0kB [ 3037.349106] 2097051 pages RAM [ 3037.362021] 0 pages HighMem/MovableOnly [ 3037.366031] 363848 pages reserved [ 3037.369920] 0 pages cma reserved [ 3037.401579] Out of memory (oom_kill_allocating_task): Kill process 6017 (systemd-journal) score 0 or sacrifice child [ 3037.421513] Bluetooth: hci5 command 0x041b tx timeout [ 3037.422385] Killed process 6017 (systemd-journal) total-vm:46096kB, anon-rss:476kB, file-rss:0kB, shmem-rss:1952kB [ 3037.444065] oom_reaper: reaped process 6017 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1952kB [ 3037.469233] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 3037.543673] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 3037.563426] chnl_net:caif_netlink_parms(): no params data found [ 3037.584562] systemd[1]: Stopped Journal Service. [ 3037.639489] systemd[1]: Starting Journal Service... [ 3037.835559] systemd-journald[6487]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 3037.855258] chnl_net:caif_netlink_parms(): no params data found [ 3037.946713] bridge0: port 1(bridge_slave_0) entered blocking state [ 3037.962311] bridge0: port 1(bridge_slave_0) entered disabled state [ 3037.969710] device bridge_slave_0 entered promiscuous mode [ 3038.006568] bridge0: port 2(bridge_slave_1) entered blocking state [ 3038.031355] bridge0: port 2(bridge_slave_1) entered disabled state [ 3038.041298] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3038.044497] device bridge_slave_1 entered promiscuous mode [ 3038.087865] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 3038.104578] CPU: 0 PID: 6247 Comm: syz-executor.4 Not tainted 4.14.230-syzkaller #0 [ 3038.112940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3038.115950] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 3038.122921] Call Trace: [ 3038.122940] dump_stack+0x1b2/0x281 [ 3038.122953] warn_alloc.cold+0x96/0x1cc [ 3038.122964] ? zone_watermark_ok_safe+0x220/0x220 [ 3038.122984] __alloc_pages_nodemask+0x2127/0x2720 [ 3038.122994] ? lock_acquire+0x170/0x3f0 [ 3038.123005] ? lock_acquire+0x170/0x3f0 [ 3038.123021] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3038.152969] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 3038.156613] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3038.179011] ? __mutex_unlock_slowpath+0x75/0x770 [ 3038.183865] alloc_pages_current+0x155/0x260 [ 3038.188547] ion_page_pool_alloc+0x118/0x1b0 [ 3038.193087] ion_system_heap_allocate+0x133/0x8c0 [ 3038.198214] ? _raw_spin_unlock+0x29/0x40 [ 3038.202713] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3038.208081] ? ion_system_contig_heap_create+0x130/0x130 [ 3038.213623] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3038.215145] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 3038.219290] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3038.231356] ion_alloc+0x27a/0x810 [ 3038.235182] ? ion_dma_buf_release+0x40/0x40 [ 3038.239694] ? __might_fault+0x177/0x1b0 [ 3038.243949] ion_ioctl+0xea/0x1f0 [ 3038.247581] ? ion_query_heaps+0x360/0x360 [ 3038.251925] ? _raw_spin_unlock+0x29/0x40 [ 3038.251929] team0: Port device team_slave_0 added [ 3038.252633] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 3038.256107] ? ion_query_heaps+0x360/0x360 [ 3038.272392] do_vfs_ioctl+0x75a/0xff0 [ 3038.276405] ? ioctl_preallocate+0x1a0/0x1a0 [ 3038.280999] ? lock_downgrade+0x740/0x740 [ 3038.281918] team0: Port device team_slave_1 added [ 3038.285402] ? __fget+0x225/0x360 [ 3038.293739] ? do_vfs_ioctl+0xff0/0xff0 [ 3038.297994] ? security_file_ioctl+0x83/0xb0 [ 3038.302938] SyS_ioctl+0x7f/0xb0 [ 3038.306314] ? do_vfs_ioctl+0xff0/0xff0 [ 3038.310289] do_syscall_64+0x1d5/0x640 [ 3038.314479] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3038.320019] RIP: 0033:0x466459 [ 3038.323387] RSP: 002b:00007f61587a5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3038.331510] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 3038.339535] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3038.345466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3038.347101] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3038.360780] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 3038.368258] R13: 00007ffed7f6205f R14: 00007f61587a5300 R15: 0000000000022000 [ 3038.376789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3038.443849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3038.514534] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3038.523916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3038.544129] Mem-Info: [ 3038.555882] active_anon:80332 inactive_anon:33080 isolated_anon:0 [ 3038.555882] active_file:1638 inactive_file:1779 isolated_file:0 [ 3038.555882] unevictable:0 dirty:25 writeback:0 unstable:0 [ 3038.555882] slab_reclaimable:15092 slab_unreclaimable:141800 [ 3038.555882] mapped:46093 shmem:35583 pagetables:20529 bounce:0 [ 3038.555882] free:232663 free_pcp:618 free_cma:0 [ 3038.595615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3038.598899] Node 0 active_anon:247368kB inactive_anon:100892kB active_file:3504kB inactive_file:6100kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:132792kB dirty:4kB writeback:0kB shmem:105572kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 178176kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3038.642712] bridge0: port 1(bridge_slave_0) entered blocking state 23:47:22 executing program 0: semctl$GETZCNT(0x0, 0x2, 0xf, &(0x7f00000000c0)=""/34) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) accept4$rose(r0, &(0x7f0000000140)=@full={0xb, @remote, @null, 0x0, [@remote, @null, @default, @remote, @null, @null]}, &(0x7f0000000180)=0x40, 0x80800) ioctl$SIOCRSGCAUSE(r0, 0x89e0, 0x0) accept4$rose(r0, &(0x7f0000000080)=@full={0xb, @dev, @remote, 0x0, [@netrom, @rose, @bcast, @netrom, @null, @netrom]}, 0x0, 0x1800) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r2 = semget(0x0, 0x1, 0x480) semctl$SEM_STAT_ANY(r2, 0x3, 0x14, &(0x7f0000000100)=""/2) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x80000006, 0x27}) 23:47:22 executing program 3: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0x29e) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) accept4$ax25(r1, 0x0, 0x0, 0x0) getsockopt$ax25_int(r1, 0x101, 0x5, &(0x7f0000000080), &(0x7f0000000100)=0x4) 23:47:22 executing program 5: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000006, 0x27}) [ 3038.644164] Node 1 active_anon:74060kB inactive_anon:31428kB active_file:3248kB inactive_file:2116kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:52580kB dirty:96kB writeback:0kB shmem:36760kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3038.661597] bridge0: port 1(bridge_slave_0) entered disabled state 23:47:23 executing program 5: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000006, 0x27}) [ 3038.696212] Node 0 DMA free:11260kB min:204kB low:252kB high:300kB active_anon:172kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3038.732908] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3038.742569] device bridge_slave_0 entered promiscuous mode 23:47:23 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x80000006, 0x27}) 23:47:23 executing program 3: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x400000004}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x91) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340)='nbd\x00', 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r2, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r3}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4b8}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004850) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x321202, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x3, 0x70, 0x9, 0x3, 0xaf, 0x3, 0x0, 0x7e5, 0x2000, 0xd89fe283c75d7ace, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0xa4087dbeee6f8fd5, @perf_config_ext={0x0, 0x5}, 0x2000, 0x40000020, 0x1ff, 0x2, 0xb2f3, 0x401, 0x800}, r5, 0xa, 0xffffffffffffffff, 0x7) ioctl$RNDADDTOENTCNT(r4, 0x40045201, &(0x7f0000000080)=0xfffffffc) [ 3038.749924] Node 0 DMA32 free:504548kB min:36200kB low:45248kB high:54296kB active_anon:247296kB inactive_anon:100836kB active_file:3900kB inactive_file:13496kB unevictable:0kB writepending:4kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11328kB pagetables:14868kB bounce:0kB free_pcp:800kB local_pcp:668kB free_cma:0kB [ 3038.762494] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 3038.847767] bridge0: port 2(bridge_slave_1) entered blocking state [ 3038.857294] lowmem_reserve[]: 0 0 0 0 0 [ 3038.858867] bridge0: port 2(bridge_slave_1) entered disabled state [ 3038.866027] Node 0 [ 3038.870592] systemd[1]: Started Journal Service. [ 3038.875113] device bridge_slave_1 entered promiscuous mode 23:47:23 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x80000006, 0x27}) [ 3038.880282] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3038.892337] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 3038.915216] lowmem_reserve[]: 0 0 0 0 0 23:47:23 executing program 3: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000000)=0x5) [ 3038.926253] Node 1 Normal free:405296kB min:53696kB low:67120kB high:80544kB active_anon:74036kB inactive_anon:31416kB active_file:3340kB inactive_file:2068kB unevictable:0kB writepending:156kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21856kB pagetables:67116kB bounce:0kB free_pcp:1428kB local_pcp:736kB free_cma:0kB [ 3038.963958] device hsr_slave_0 entered promiscuous mode [ 3038.970391] device hsr_slave_1 entered promiscuous mode [ 3038.978765] lowmem_reserve[]: 0 0 0 0 0 [ 3038.985642] Node 0 DMA: 33*4kB (UME) 43*8kB (UME) 55*16kB (UM) 22*32kB (UME) 6*64kB (UME) 5*128kB (UE) 4*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 11276kB [ 3039.003491] Node 0 DMA32: 7856*4kB (UMEH) 19586*8kB (UMEH) 10468*16kB (UMEH) 3339*32kB (UEH) 580*64kB (UMH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 499568kB [ 3039.008778] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 3039.020533] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3039.048419] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 3039.049683] Node 1 Normal: 7976*4kB (UM) 8082*8kB (UM) 4760*16kB (UM) 7176*32kB (UM) 30*64kB (U) 6*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 405296kB [ 3039.058460] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 3039.075952] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3039.095184] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3039.096239] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 3039.103998] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3039.123440] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3039.133604] 42604 total pagecache pages [ 3039.141993] 0 pages in swap cache [ 3039.145845] Swap cache stats: add 0, delete 0, find 0/0 [ 3039.152194] Free swap = 0kB [ 3039.155404] Total swap = 0kB [ 3039.158426] 2097051 pages RAM [ 3039.163114] 0 pages HighMem/MovableOnly [ 3039.167378] 363848 pages reserved [ 3039.170936] 0 pages cma reserved [ 3039.183866] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 3039.194832] team0: Port device team_slave_0 added [ 3039.236764] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 3039.247250] team0: Port device team_slave_1 added [ 3039.306535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3039.322828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3039.353166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3039.376289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3039.384785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3039.416216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3039.421424] Bluetooth: hci1 command 0x040f tx timeout [ 3039.432149] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 3039.453285] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 3039.461007] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 3039.491320] Bluetooth: hci5 command 0x040f tx timeout [ 3039.541024] device hsr_slave_0 entered promiscuous mode [ 3039.549876] device hsr_slave_1 entered promiscuous mode [ 3039.560805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3039.585072] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 3039.606014] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 3039.616217] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 3039.628733] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 3039.638278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3039.650779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3039.678765] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 3039.686936] 8021q: adding VLAN 0 to HW filter on device team0 [ 3039.698682] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 3039.712032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3039.722887] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3039.730714] bridge0: port 1(bridge_slave_0) entered blocking state [ 3039.738016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3039.761823] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 3039.776542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3039.785536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3039.799968] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3039.809547] bridge0: port 2(bridge_slave_1) entered blocking state [ 3039.816108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3039.836286] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 3039.853445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3039.874602] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 3039.886046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3039.923397] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 3039.935265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3039.955370] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3040.027164] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3040.056603] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 3040.082055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3040.089948] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3040.125758] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 3040.151017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3040.168731] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3040.195857] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 3040.214243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3040.233875] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3040.258560] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 3040.273531] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 3040.280238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3040.325349] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 3040.347655] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 3040.373800] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3040.380886] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3040.408326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3040.441824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3040.462754] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 3040.473140] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 3040.480258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3040.492210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3040.502994] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 3040.509372] 8021q: adding VLAN 0 to HW filter on device team0 [ 3040.552207] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 3040.559755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3040.591757] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3040.599837] bridge0: port 1(bridge_slave_0) entered blocking state [ 3040.606549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3040.623620] modprobe invoked oom-killer: gfp_mask=0x14200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 3040.683343] modprobe cpuset=/ mems_allowed=0-1 [ 3040.688621] CPU: 1 PID: 6789 Comm: modprobe Not tainted 4.14.230-syzkaller #0 [ 3040.696080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3040.706482] Call Trace: [ 3040.709834] dump_stack+0x1b2/0x281 [ 3040.713872] dump_header+0x178/0x82f [ 3040.717944] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3040.723755] ? ___ratelimit+0x2cd/0x530 [ 3040.728542] oom_kill_process.cold+0x10/0xa40 [ 3040.733637] out_of_memory+0xe3e/0x1190 [ 3040.737702] ? oom_killer_disable+0x1c0/0x1c0 [ 3040.742608] ? mutex_trylock+0x152/0x1a0 [ 3040.747332] __alloc_pages_nodemask+0x23e1/0x2720 [ 3040.752472] ? lock_acquire+0x170/0x3f0 [ 3040.757245] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3040.762940] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3040.768779] ? debug_check_no_obj_freed+0x2c0/0x680 [ 3040.773985] ? __lock_acquire+0x5fc/0x3f20 [ 3040.778391] alloc_pages_vma+0xd2/0x6d0 [ 3040.782523] __handle_mm_fault+0xe4f/0x4620 [ 3040.787463] ? vm_insert_page+0x7c0/0x7c0 [ 3040.792082] ? vm_mmap_pgoff+0x168/0x1a0 [ 3040.796611] ? mark_held_locks+0xa6/0xf0 [ 3040.800898] handle_mm_fault+0x455/0x9c0 [ 3040.805054] __do_page_fault+0x549/0xad0 [ 3040.809752] ? spurious_fault+0x640/0x640 [ 3040.813988] ? do_page_fault+0x60/0x500 [ 3040.818041] ? page_fault+0x2f/0x50 [ 3040.821845] page_fault+0x45/0x50 [ 3040.825281] RIP: 0002:0x801 [ 3040.828193] RSP: a8d29000:00007ffe6d3e3000 EFLAGS: 7ffe6d3e30e8 [ 3040.994422] Mem-Info: [ 3041.004206] active_anon:80391 inactive_anon:33085 isolated_anon:0 [ 3041.004206] active_file:835 inactive_file:808 isolated_file:25 [ 3041.004206] unevictable:0 dirty:49 writeback:2 unstable:0 [ 3041.004206] slab_reclaimable:14944 slab_unreclaimable:141961 [ 3041.004206] mapped:53854 shmem:35602 pagetables:20585 bounce:0 [ 3041.004206] free:13777 free_pcp:22 free_cma:0 [ 3041.051347] Node 0 active_anon:247396kB inactive_anon:100924kB active_file:2848kB inactive_file:3020kB unevictable:0kB isolated(anon):0kB isolated(file):100kB mapped:132940kB dirty:104kB writeback:0kB shmem:105664kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 178176kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3041.144651] Node 1 active_anon:74168kB inactive_anon:31416kB active_file:84kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:82376kB dirty:92kB writeback:8kB shmem:36744kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3041.175207] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:172kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3041.214038] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3041.219254] Node 0 DMA32 free:19736kB min:36200kB low:45248kB high:54296kB active_anon:247124kB inactive_anon:100868kB active_file:1216kB inactive_file:932kB unevictable:0kB writepending:104kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11296kB pagetables:14896kB bounce:0kB free_pcp:788kB local_pcp:88kB free_cma:0kB [ 3041.267519] lowmem_reserve[]: 0 0 0 0 0 [ 3041.275041] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3041.324262] lowmem_reserve[]: 0 0 0 0 0 [ 3041.328358] Node 1 Normal free:26580kB min:53696kB low:67120kB high:80544kB active_anon:74168kB inactive_anon:31416kB active_file:84kB inactive_file:68kB unevictable:0kB writepending:100kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21952kB pagetables:67312kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3041.363112] lowmem_reserve[]: 0 0 0 0 0 [ 3041.367315] Node 0 DMA: 4*4kB (UME) 18*8kB (UME) 54*16kB (UM) 23*32kB (UME) 6*64kB (UME) 5*128kB (UE) 4*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 10976kB [ 3041.387118] Node 0 DMA32: 1096*4kB (UMEH) 354*8kB (MEH) 209*16kB (MEH) 16*32kB (UMEH) 116*64kB (UMH) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18624kB [ 3041.406108] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3041.431091] Node 1 Normal: 125*4kB (M) 100*8kB (UM) 54*16kB (UM) 589*32kB (UM) 57*64kB (UM) 12*128kB (UM) 2*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26708kB [ 3041.460480] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3041.473893] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3041.485655] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3041.499251] Bluetooth: hci1 command 0x0419 tx timeout [ 3041.505969] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3041.516729] 35690 total pagecache pages [ 3041.520928] 0 pages in swap cache [ 3041.524778] Swap cache stats: add 0, delete 0, find 0/0 [ 3041.530239] Free swap = 0kB [ 3041.533531] Total swap = 0kB [ 3041.536561] 2097051 pages RAM [ 3041.539666] 0 pages HighMem/MovableOnly [ 3041.543885] 363848 pages reserved [ 3041.547438] 0 pages cma reserved [ 3041.550901] Out of memory (oom_kill_allocating_task): Kill process 6789 (modprobe) score 0 or sacrifice child [ 3041.561625] Killed process 6789 (modprobe) total-vm:4184kB, anon-rss:32kB, file-rss:4kB, shmem-rss:0kB [ 3041.572725] oom_reaper: reaped process 6789 (modprobe), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3041.581091] Bluetooth: hci5 command 0x0419 tx timeout [ 3041.595098] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 3041.612884] in:imklog cpuset=/ mems_allowed=0-1 [ 3041.617644] CPU: 0 PID: 6032 Comm: in:imklog Not tainted 4.14.230-syzkaller #0 [ 3041.625052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3041.635083] Call Trace: [ 3041.637770] dump_stack+0x1b2/0x281 [ 3041.641584] dump_header+0x178/0x82f [ 3041.645318] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3041.650837] ? ___ratelimit+0x2cd/0x530 [ 3041.654831] oom_kill_process.cold+0x10/0xa40 [ 3041.661289] out_of_memory+0xe3e/0x1190 [ 3041.665873] ? oom_killer_disable+0x1c0/0x1c0 [ 3041.670396] ? mutex_trylock+0x152/0x1a0 [ 3041.674647] __alloc_pages_nodemask+0x23e1/0x2720 [ 3041.679658] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3041.684673] alloc_pages_current+0x155/0x260 [ 3041.689153] filemap_fault+0x11a1/0x1ad0 [ 3041.693229] ext4_filemap_fault+0x84/0xb0 [ 3041.697371] __do_fault+0xfa/0x380 [ 3041.701085] __handle_mm_fault+0x2497/0x4620 [ 3041.705855] ? vm_insert_page+0x7c0/0x7c0 [ 3041.710049] ? lock_downgrade+0x740/0x740 [ 3041.714209] ? mark_held_locks+0xa6/0xf0 [ 3041.718574] handle_mm_fault+0x455/0x9c0 [ 3041.722823] __do_page_fault+0x549/0xad0 [ 3041.726869] ? spurious_fault+0x640/0x640 [ 3041.731172] ? do_page_fault+0x60/0x500 [ 3041.735768] ? page_fault+0x2f/0x50 [ 3041.739653] page_fault+0x45/0x50 [ 3041.743350] RIP: 1fa0:0x1f9f [ 3041.746606] RSP: 0000:000055d0e43379d0 EFLAGS: 7fc011b6fda0 [ 3041.759329] Mem-Info: [ 3041.780878] active_anon:80391 inactive_anon:33085 isolated_anon:0 [ 3041.780878] active_file:43 inactive_file:0 isolated_file:0 [ 3041.780878] unevictable:0 dirty:49 writeback:2 unstable:0 [ 3041.780878] slab_reclaimable:14944 slab_unreclaimable:141963 [ 3041.780878] mapped:52614 shmem:35602 pagetables:20585 bounce:0 [ 3041.780878] free:13815 free_pcp:0 free_cma:0 [ 3041.823591] Node 0 active_anon:247416kB inactive_anon:100924kB active_file:52kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:127992kB dirty:52kB writeback:0kB shmem:105664kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 178176kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3041.861357] Node 1 active_anon:74136kB inactive_anon:31416kB active_file:76kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:82376kB dirty:92kB writeback:0kB shmem:36744kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3041.899133] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:172kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3041.930862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3041.939128] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3041.961374] Node 0 DMA32 free:64540kB min:36200kB low:45248kB high:54296kB active_anon:247244kB inactive_anon:100868kB active_file:52kB inactive_file:4732kB unevictable:0kB writepending:52kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11392kB pagetables:14896kB bounce:0kB free_pcp:128kB local_pcp:12kB free_cma:0kB [ 3042.034746] lowmem_reserve[]: 0 0 0 0 0 [ 3042.040584] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3042.079053] lowmem_reserve[]: 0 0 0 0 0 [ 3042.083501] Node 1 Normal free:26740kB min:53696kB low:67120kB high:80544kB active_anon:74136kB inactive_anon:31416kB active_file:76kB inactive_file:64kB unevictable:0kB writepending:92kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21952kB pagetables:67312kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3042.113536] lowmem_reserve[]: 0 0 0 0 0 [ 3042.117631] Node 0 DMA: 4*4kB (UME) 18*8kB (UME) 54*16kB (UM) 23*32kB (UME) 6*64kB (UME) 5*128kB (UE) 4*256kB (UME) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 12000kB [ 3042.138423] Node 0 DMA32: 417*4kB (MEH) 64*8kB (EH) 181*16kB (MEH) 15*32kB (MEH) 5*64kB (MH) 1*128kB (U) 1*256kB (U) 1*512kB (U) 58*1024kB (U) 32*2048kB (U) 1*4096kB (U) = 135796kB [ 3042.200693] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3042.215101] Node 1 Normal: 119*4kB (M) 99*8kB (UM) 52*16kB (UM) 590*32kB (UM) 56*64kB (UM) 11*128kB (UM) 3*256kB (UM) 0*512kB 135*1024kB (U) 0*2048kB 0*4096kB = 164980kB [ 3042.236273] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3042.245998] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3042.258179] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3042.268131] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3042.280737] 37472 total pagecache pages [ 3042.286155] 0 pages in swap cache [ 3042.289887] Swap cache stats: add 0, delete 0, find 0/0 [ 3042.301010] Free swap = 0kB [ 3042.304070] Total swap = 0kB [ 3042.307106] 2097051 pages RAM [ 3042.310632] 0 pages HighMem/MovableOnly [ 3042.341073] 363848 pages reserved [ 3042.344670] 0 pages cma reserved [ 3042.348242] Out of memory (oom_kill_allocating_task): Kill process 6032 (in:imklog) score 0 or sacrifice child [ 3042.384171] Killed process 6020 (rsyslogd) total-vm:254332kB, anon-rss:684kB, file-rss:0kB, shmem-rss:0kB [ 3042.699053] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 3042.726232] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 3042.751274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3042.760383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3042.871581] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 3042.885609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3042.897426] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3042.907169] bridge0: port 2(bridge_slave_1) entered blocking state [ 3042.915830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3042.929974] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 3042.934080] IPVS: ftp: loaded support on port[0] = 21 [ 3042.952234] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 3042.962256] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 3042.971327] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 3042.991743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3043.001867] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 3043.008790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3043.018745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3043.031110] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 3043.042158] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 3043.055470] device veth0_vlan entered promiscuous mode [ 3043.063601] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3043.072291] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3043.079854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3043.089710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3043.099332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3043.118911] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 3043.134612] device veth1_vlan entered promiscuous mode [ 3043.140766] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 3043.157847] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3043.166183] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3043.173849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3043.182749] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3043.197506] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 3043.209665] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 3043.217605] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3043.227671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3043.235994] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3043.251309] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 3043.264493] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 3043.276700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3043.285384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3043.295762] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 3043.302736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3043.316780] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 3043.326462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3043.335984] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3043.364095] device veth0_macvtap entered promiscuous mode [ 3043.370679] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 3043.428277] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 3043.437600] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 3043.445892] device veth1_macvtap entered promiscuous mode [ 3043.453056] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 3043.460261] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3043.470054] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3043.481995] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3043.488953] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3043.536845] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 3043.548522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3043.569372] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 3043.579449] chnl_net:caif_netlink_parms(): no params data found [ 3043.597140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3043.610065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3043.619822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3043.630361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3043.640405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3043.650687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3043.662848] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 3043.670159] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3043.683206] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3043.692314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3043.709205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3043.724455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3043.739406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3043.750496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3043.763937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3043.775366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3043.789162] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 3043.797179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3043.807990] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3043.817526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3043.927809] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 3043.936771] bridge0: port 1(bridge_slave_0) entered blocking state [ 3043.945274] bridge0: port 1(bridge_slave_0) entered disabled state [ 3043.959353] device bridge_slave_0 entered promiscuous mode [ 3043.972909] bridge0: port 2(bridge_slave_1) entered blocking state [ 3043.979481] bridge0: port 2(bridge_slave_1) entered disabled state [ 3043.988042] device bridge_slave_1 entered promiscuous mode [ 3044.005847] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 3044.015823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3044.025189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3044.047195] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 3044.065574] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 3044.105409] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 3044.113646] team0: Port device team_slave_0 added [ 3044.119688] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 3044.128526] team0: Port device team_slave_1 added [ 3044.135168] Bluetooth: hci4 command 0x0409 tx timeout [ 3044.146847] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 3044.155096] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 3044.162557] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 3044.195515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3044.202369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3044.229147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3044.241720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3044.247998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3044.275274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3044.287466] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 3044.296982] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 3044.308305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3044.317190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3044.326166] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 3044.349128] device veth0_vlan entered promiscuous mode [ 3044.356076] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3044.365506] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3044.387763] device veth1_vlan entered promiscuous mode [ 3044.403054] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 3044.415562] device hsr_slave_0 entered promiscuous mode [ 3044.430535] device hsr_slave_1 entered promiscuous mode [ 3044.442791] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 3044.460913] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 3044.469195] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 3044.508082] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 3044.528551] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 3044.542703] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3044.554663] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3044.563196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3044.577200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3044.633358] device veth0_macvtap entered promiscuous mode [ 3044.645271] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 3044.683866] device veth1_macvtap entered promiscuous mode [ 3044.705714] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 3044.756207] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 3044.779297] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 3044.799974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3044.816786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3044.827868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3044.854895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3044.878457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3044.917091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3044.948290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3044.954919] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3044.975554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3044.991099] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 3044.996709] CPU: 0 PID: 7020 Comm: syz-executor.2 Not tainted 4.14.230-syzkaller #0 [ 3045.004715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3045.005726] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 3045.014786] Call Trace: [ 3045.014810] dump_stack+0x1b2/0x281 [ 3045.014823] warn_alloc.cold+0x96/0x1cc [ 3045.014834] ? zone_watermark_ok_safe+0x220/0x220 [ 3045.014854] __alloc_pages_nodemask+0x2127/0x2720 [ 3045.014863] ? _raw_spin_unlock_irq+0x5a/0x80 [ 3045.014872] ? finish_task_switch+0x178/0x610 [ 3045.014878] ? finish_task_switch+0x14d/0x610 [ 3045.014890] ? lock_acquire+0x170/0x3f0 [ 3045.014904] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3045.014919] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3045.014931] ? __mutex_unlock_slowpath+0x75/0x770 [ 3045.014941] ? alloc_pages_current+0x73/0x260 [ 3045.014951] alloc_pages_current+0x155/0x260 [ 3045.014963] ion_page_pool_alloc+0x118/0x1b0 [ 3045.014971] ion_system_heap_allocate+0x133/0x8c0 [ 3045.014979] ? ion_alloc+0x187/0x810 [ 3045.014989] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3045.014999] ? ion_system_contig_heap_create+0x130/0x130 [ 3045.015007] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3045.015017] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3045.015027] ion_alloc+0x204/0x810 [ 3045.015041] ? ion_dma_buf_release+0x40/0x40 [ 3045.015053] ? __might_fault+0x177/0x1b0 [ 3045.015064] ion_ioctl+0xea/0x1f0 [ 3045.015072] ? ion_query_heaps+0x360/0x360 [ 3045.015083] ? ion_query_heaps+0x360/0x360 [ 3045.015093] do_vfs_ioctl+0x75a/0xff0 [ 3045.015104] ? ioctl_preallocate+0x1a0/0x1a0 [ 3045.015111] ? lock_downgrade+0x740/0x740 [ 3045.015125] ? __fget+0x225/0x360 [ 3045.015134] ? do_vfs_ioctl+0xff0/0xff0 [ 3045.015145] ? security_file_ioctl+0x83/0xb0 [ 3045.015155] SyS_ioctl+0x7f/0xb0 [ 3045.015161] ? do_vfs_ioctl+0xff0/0xff0 [ 3045.015173] do_syscall_64+0x1d5/0x640 [ 3045.050079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3045.053895] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3045.053904] RIP: 0033:0x466459 [ 3045.053908] RSP: 002b:00007f6b2e8a1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3045.053918] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3045.053922] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3045.053927] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3045.053931] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3045.053936] R13: 00007ffd3826db4f R14: 00007f6b2e8a1300 R15: 0000000000022000 [ 3045.130812] Mem-Info: [ 3045.248304] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3045.262850] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3045.270659] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3045.283312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3045.311413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3045.325614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3045.337349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3045.353544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3045.365675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3045.377510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3045.389483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3045.403923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3045.410800] active_anon:80898 inactive_anon:33087 isolated_anon:12 [ 3045.410800] active_file:961 inactive_file:1356 isolated_file:0 [ 3045.410800] unevictable:0 dirty:4 writeback:0 unstable:0 [ 3045.410800] slab_reclaimable:14936 slab_unreclaimable:141908 [ 3045.410800] mapped:54312 shmem:35606 pagetables:20581 bounce:0 [ 3045.410800] free:175674 free_pcp:525 free_cma:0 [ 3045.416194] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 3045.462427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3045.469420] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3045.482333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3045.496818] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 3045.505100] Node 0 active_anon:249792kB inactive_anon:100932kB active_file:3756kB inactive_file:5352kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:134852kB dirty:0kB writeback:0kB shmem:105680kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 180224kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3045.576082] Node 1 active_anon:73800kB inactive_anon:31416kB active_file:88kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:82396kB dirty:16kB writeback:0kB shmem:36744kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3045.606770] Node 0 DMA free:11372kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:0kB inactive_file:128kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3045.635948] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3045.646184] Node 0 DMA32 free:524812kB min:36200kB low:45248kB high:54296kB active_anon:249624kB inactive_anon:100876kB active_file:3656kB inactive_file:5024kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11392kB pagetables:14852kB bounce:0kB free_pcp:680kB local_pcp:20kB free_cma:0kB [ 3045.651998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3045.683206] lowmem_reserve[]: 0 0 0 0 0 [ 3045.689055] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3045.717440] lowmem_reserve[]: 0 0 0 0 0 [ 3045.722161] Node 1 Normal free:406360kB min:53696kB low:67120kB high:80544kB active_anon:73800kB inactive_anon:31416kB active_file:176kB inactive_file:356kB unevictable:0kB writepending:16kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:22016kB pagetables:67340kB bounce:0kB free_pcp:1360kB local_pcp:684kB free_cma:0kB [ 3045.754748] lowmem_reserve[]: 0 0 0 0 0 [ 3045.756149] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 3045.759906] Node 0 DMA: 32*4kB (UE) 30*8kB (UME) 3*16kB (M) 7*32kB (UME) 4*64kB (ME) 2*128kB (UE) 4*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 11392kB [ 3045.784548] Node 0 DMA32: 8151*4kB (UEH) 20088*8kB (UMEH) 11151*16kB (UME) 3641*32kB (UMEH) 752*64kB (UH) 28*128kB (U) 20*256kB (U) 15*512kB (U) 56*1024kB (UM) 8*2048kB (U) 0*4096kB = 626476kB [ 3045.786667] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 3045.804289] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3045.827721] Node 1 Normal: 8042*4kB (UM) 7518*8kB (UM) 3012*16kB (UM) 7095*32kB (UM) 19*64kB (UM) 13*128kB (UM) 4*256kB (UM) 3*512kB (UM) 1*1024kB (U) 2*2048kB (UM) 10*4096kB (U) = 419064kB [ 3045.831790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3045.851649] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3045.870274] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3045.870867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3045.880501] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3045.903521] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 3045.906916] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3045.909712] 8021q: adding VLAN 0 to HW filter on device team0 [ 3045.922466] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 3045.932906] 37986 total pagecache pages [ 3045.938902] 0 pages in swap cache [ 3045.946768] Swap cache stats: add 0, delete 0, find 0/0 [ 3045.952453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3045.954321] Free swap = 0kB [ 3045.968077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3045.973537] Total swap = 0kB [ 3045.985057] 2097051 pages RAM [ 3045.988349] 0 pages HighMem/MovableOnly [ 3045.991124] bridge0: port 1(bridge_slave_0) entered blocking state [ 3045.994696] 363848 pages reserved [ 3045.999107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3046.006637] 0 pages cma reserved [ 3046.017249] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 3046.026063] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3046.041310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3046.049567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3046.071218] bridge0: port 2(bridge_slave_1) entered blocking state [ 3046.077785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3046.106751] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 3046.121330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3046.135298] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 3046.151733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3046.172131] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 3046.181613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3046.189513] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3046.203197] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 3046.212999] Bluetooth: hci4 command 0x041b tx timeout [ 3046.218782] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3046.228045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3046.237335] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3046.248491] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 3046.257758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3046.269564] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3046.289592] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 3046.309599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3046.318472] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3046.333368] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 3046.340360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3046.379603] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 3046.403273] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 3046.424819] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3046.455030] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3046.479877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3046.618051] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 3046.634529] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 3046.651777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3046.671281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3046.783247] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 3046.815573] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 3046.823274] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 3046.836233] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 3046.843202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3046.852273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3046.860256] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3046.868001] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3046.877070] device veth0_vlan entered promiscuous mode [ 3046.890435] device veth1_vlan entered promiscuous mode [ 3046.896850] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 3046.907141] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 3046.922593] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 3046.934890] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 3046.942547] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3046.951417] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3046.959398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3046.968008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3046.978928] device veth0_macvtap entered promiscuous mode [ 3046.986992] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 3046.997241] device veth1_macvtap entered promiscuous mode [ 3047.004454] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 3047.015826] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 3047.027768] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 3047.037896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3047.048470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3047.058581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3047.068869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3047.078558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3047.089190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3047.099151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3047.109709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3047.123441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3047.133990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3047.147930] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 3047.156308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3047.167969] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3047.177158] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3047.189151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3047.198868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3047.216189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3047.227265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3047.238359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3047.250187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3047.261575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3047.272131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3047.283731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3047.295099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3047.306226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3047.317645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 23:47:31 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x80000006, 0x27}) 23:47:31 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000006, 0x27, 0x1}) 23:47:31 executing program 3: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000000c0)={0xf0c8, 0x46, "e58e4b0cff9f37e8e07622ab84fed4862576e1fa7eb73dc85599d554431f7c060e0eeef437a36f548f31e621be0be960499c45f7759d3947608eff1ce8b15d11f15153baadc5"}) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000080)=0xfffffffc) 23:47:31 executing program 1: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f00000000c0)=0x8) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x1f, 0x3f, 0x3f, 0xf1, 0x0, 0x4, 0x4000, 0x6, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x20, 0x4, @perf_config_ext={0xcb, 0xc8}, 0x0, 0xfc, 0x3, 0x3, 0x2f4c, 0x7, 0x7ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x2) [ 3047.347508] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 3047.360387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3047.376842] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3047.389928] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3047.724980] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3047.755212] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 3047.767753] CPU: 0 PID: 7152 Comm: syz-executor.0 Not tainted 4.14.230-syzkaller #0 [ 3047.777070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3047.786898] Call Trace: [ 3047.789623] dump_stack+0x1b2/0x281 [ 3047.793490] warn_alloc.cold+0x96/0x1cc [ 3047.797519] ? zone_watermark_ok_safe+0x220/0x220 [ 3047.802493] __alloc_pages_nodemask+0x2127/0x2720 [ 3047.807816] ? lock_acquire+0x170/0x3f0 [ 3047.811821] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3047.816779] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3047.822599] ? __mutex_unlock_slowpath+0x75/0x770 [ 3047.827639] alloc_pages_current+0x155/0x260 [ 3047.832174] ion_page_pool_alloc+0x118/0x1b0 [ 3047.836965] ion_system_heap_allocate+0x133/0x8c0 [ 3047.842005] ? ion_alloc+0x187/0x810 [ 3047.845745] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3047.851485] ? ion_system_contig_heap_create+0x130/0x130 [ 3047.856951] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3047.862076] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3047.867057] ion_alloc+0x204/0x810 [ 3047.870870] ? ion_dma_buf_release+0x40/0x40 [ 3047.875520] ? __might_fault+0x177/0x1b0 [ 3047.879707] ion_ioctl+0xea/0x1f0 [ 3047.883193] ? ion_query_heaps+0x360/0x360 [ 3047.887446] ? ion_query_heaps+0x360/0x360 [ 3047.891704] do_vfs_ioctl+0x75a/0xff0 [ 3047.895608] ? ioctl_preallocate+0x1a0/0x1a0 [ 3047.900109] ? lock_downgrade+0x740/0x740 [ 3047.904281] ? __fget+0x225/0x360 [ 3047.907929] ? do_vfs_ioctl+0xff0/0xff0 [ 3047.912193] ? security_file_ioctl+0x83/0xb0 [ 3047.916623] SyS_ioctl+0x7f/0xb0 [ 3047.920093] ? do_vfs_ioctl+0xff0/0xff0 [ 3047.924183] do_syscall_64+0x1d5/0x640 [ 3047.928366] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3047.933570] RIP: 0033:0x466459 [ 3047.936859] RSP: 002b:00007f1ef2095188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3047.946454] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3047.954086] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3047.961567] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3047.969123] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3047.976417] R13: 00007fffa779c11f R14: 00007f1ef2095300 R15: 0000000000022000 [ 3047.992864] Mem-Info: [ 3047.995684] active_anon:81354 inactive_anon:33087 isolated_anon:0 [ 3047.995684] active_file:1690 inactive_file:2889 isolated_file:0 [ 3047.995684] unevictable:0 dirty:4 writeback:0 unstable:0 [ 3047.995684] slab_reclaimable:14927 slab_unreclaimable:140041 [ 3047.995684] mapped:55540 shmem:35605 pagetables:20587 bounce:0 [ 3047.995684] free:148227 free_pcp:110 free_cma:0 [ 3048.034730] Node 0 active_anon:251800kB inactive_anon:100936kB active_file:6744kB inactive_file:11088kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139384kB dirty:12kB writeback:0kB shmem:105684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 182272kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3048.072092] Node 1 active_anon:73616kB inactive_anon:31412kB active_file:16kB inactive_file:468kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:82776kB dirty:4kB writeback:0kB shmem:36736kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3048.140487] Node 0 DMA free:11052kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:128kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3048.213103] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3048.218369] Node 0 DMA32 free:58668kB min:36200kB low:45248kB high:54296kB active_anon:251632kB inactive_anon:100880kB active_file:6616kB inactive_file:11088kB unevictable:0kB writepending:12kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11360kB pagetables:14996kB bounce:0kB free_pcp:732kB local_pcp:84kB free_cma:0kB [ 3048.252915] lowmem_reserve[]: 0 0 0 0 0 [ 3048.257252] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3048.287881] lowmem_reserve[]: 0 0 0 0 0 [ 3048.294215] Bluetooth: hci4 command 0x040f tx timeout [ 3048.304231] Node 1 Normal free:830260kB min:53696kB low:67120kB high:80544kB active_anon:73616kB inactive_anon:31412kB active_file:16kB inactive_file:468kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21952kB pagetables:67220kB bounce:0kB free_pcp:224kB local_pcp:112kB free_cma:0kB [ 3048.375125] lowmem_reserve[]: 0 0 0 0 0 [ 3048.379339] Node 0 DMA: 31*4kB (UE) 28*8kB (UME) 53*16kB (UM) 28*32kB (UME) 4*64kB (ME) 4*128kB (UE) 4*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 11052kB [ 3048.433805] Node 0 DMA32: 8306*4kB (UMEH) 14197*8kB (UMEH) 549*16kB (UME) 135*32kB (UMEH) 5*64kB (H) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 160352kB [ 3048.474163] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3048.500827] Node 1 Normal: 7877*4kB (U) 7268*8kB (U) 3037*16kB (UM) 7049*32kB (UM) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 363876kB [ 3048.518726] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3048.521613] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3048.549862] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3048.557054] syz-executor.2 cpuset= [ 3048.559737] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3048.562558] / [ 3048.568022] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3048.586906] mems_allowed=0-1 [ 3048.589591] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3048.596840] CPU: 1 PID: 7118 Comm: syz-executor.2 Not tainted 4.14.230-syzkaller #0 [ 3048.603798] syz-executor.2 cpuset= [ 3048.610485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3048.610493] Call Trace: [ 3048.615367] 40109 total pagecache pages [ 3048.623844] dump_stack+0x1b2/0x281 [ 3048.623864] warn_alloc.cold+0x96/0x1cc [ 3048.623875] ? zone_watermark_ok_safe+0x220/0x220 [ 3048.623896] __alloc_pages_nodemask+0x2127/0x2720 [ 3048.628148] 0 pages in swap cache [ 3048.630836] ? io_schedule_timeout+0x140/0x140 [ 3048.630852] ? lock_acquire+0x170/0x3f0 [ 3048.630867] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3048.630882] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3048.636357] / [ 3048.638771] ? __mutex_unlock_slowpath+0x75/0x770 [ 3048.645768] Swap cache stats: add 0, delete 0, find 0/0 [ 3048.648635] alloc_pages_current+0x155/0x260 [ 3048.652573] mems_allowed=0-1 [ 3048.657565] ion_page_pool_alloc+0x118/0x1b0 [ 3048.664543] Free swap = 0kB [ 3048.667987] ion_system_heap_allocate+0x133/0x8c0 [ 3048.680622] Total swap = 0kB [ 3048.680873] ? ion_alloc+0x187/0x810 [ 3048.686337] 2097051 pages RAM [ 3048.690758] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3048.690769] ? ion_system_contig_heap_create+0x130/0x130 [ 3048.690778] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3048.690788] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3048.690798] ion_alloc+0x204/0x810 [ 3048.690810] ? ion_dma_buf_release+0x40/0x40 [ 3048.690822] ? __might_fault+0x177/0x1b0 [ 3048.710543] 0 pages HighMem/MovableOnly [ 3048.713225] ion_ioctl+0xea/0x1f0 [ 3048.716479] 363848 pages reserved [ 3048.721931] ? ion_query_heaps+0x360/0x360 [ 3048.721942] ? ion_query_heaps+0x360/0x360 [ 3048.721952] do_vfs_ioctl+0x75a/0xff0 [ 3048.721963] ? ioctl_preallocate+0x1a0/0x1a0 [ 3048.721975] ? lock_downgrade+0x740/0x740 [ 3048.740594] 0 pages cma reserved [ 3048.741658] ? __fget+0x225/0x360 [ 3048.791003] ? do_vfs_ioctl+0xff0/0xff0 [ 3048.795055] ? security_file_ioctl+0x83/0xb0 [ 3048.799710] SyS_ioctl+0x7f/0xb0 [ 3048.803162] ? do_vfs_ioctl+0xff0/0xff0 [ 3048.807525] do_syscall_64+0x1d5/0x640 [ 3048.812132] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3048.817409] RIP: 0033:0x466459 [ 3048.820598] RSP: 002b:00007f6b2e8a1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3048.828511] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3048.836024] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3048.843396] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3048.850845] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3048.858882] R13: 00007ffd3826db4f R14: 00007f6b2e8a1300 R15: 0000000000022000 [ 3048.869523] CPU: 0 PID: 7154 Comm: syz-executor.2 Not tainted 4.14.230-syzkaller #0 [ 3048.877561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3048.887194] Call Trace: [ 3048.889888] dump_stack+0x1b2/0x281 [ 3048.893662] warn_alloc.cold+0x96/0x1cc [ 3048.898273] ? zone_watermark_ok_safe+0x220/0x220 [ 3048.903146] __alloc_pages_nodemask+0x2127/0x2720 [ 3048.908192] ? lock_acquire+0x170/0x3f0 [ 3048.912275] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3048.917232] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3048.923107] ? __mutex_unlock_slowpath+0x75/0x770 [ 3048.928059] alloc_pages_current+0x155/0x260 [ 3048.932765] ion_page_pool_alloc+0x118/0x1b0 [ 3048.937702] ion_system_heap_allocate+0x133/0x8c0 [ 3048.942890] ? ion_alloc+0x187/0x810 [ 3048.946895] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3048.952406] ? ion_system_contig_heap_create+0x130/0x130 [ 3048.958582] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3048.963697] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3048.968818] ion_alloc+0x204/0x810 [ 3048.972388] ? ion_dma_buf_release+0x40/0x40 [ 3048.977159] ? __might_fault+0x177/0x1b0 [ 3048.981235] ion_ioctl+0xea/0x1f0 [ 3048.984702] ? ion_query_heaps+0x360/0x360 [ 3048.989038] ? _raw_spin_unlock+0x29/0x40 [ 3048.993898] ? ion_query_heaps+0x360/0x360 [ 3048.998166] do_vfs_ioctl+0x75a/0xff0 [ 3049.002147] ? ioctl_preallocate+0x1a0/0x1a0 [ 3049.007781] ? lock_downgrade+0x740/0x740 [ 3049.012187] ? __fget+0x225/0x360 [ 3049.016029] ? do_vfs_ioctl+0xff0/0xff0 [ 3049.020022] ? security_file_ioctl+0x83/0xb0 [ 3049.024622] SyS_ioctl+0x7f/0xb0 [ 3049.028224] ? do_vfs_ioctl+0xff0/0xff0 [ 3049.032395] do_syscall_64+0x1d5/0x640 [ 3049.036336] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3049.042145] RIP: 0033:0x466459 [ 3049.045616] RSP: 002b:00007f6b2e85f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3049.053509] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 3049.061593] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3049.069158] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3049.076982] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 3049.084440] R13: 00007ffd3826db4f R14: 00007f6b2e85f300 R15: 0000000000022000 [ 3049.180540] Mem-Info: [ 3049.183189] active_anon:81358 inactive_anon:33087 isolated_anon:0 [ 3049.183189] active_file:1691 inactive_file:2810 isolated_file:0 [ 3049.183189] unevictable:0 dirty:9 writeback:0 unstable:0 [ 3049.183189] slab_reclaimable:14897 slab_unreclaimable:140653 [ 3049.183189] mapped:55467 shmem:35605 pagetables:20587 bounce:0 [ 3049.183189] free:242514 free_pcp:213 free_cma:0 [ 3049.260573] Node 0 active_anon:251812kB inactive_anon:100936kB active_file:6744kB inactive_file:11224kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139484kB dirty:32kB writeback:0kB shmem:105684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 182272kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3049.298534] Node 1 active_anon:73620kB inactive_anon:31412kB active_file:20kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:82384kB dirty:4kB writeback:0kB shmem:36736kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3049.328478] Node 0 DMA free:11052kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:128kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3049.359634] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3049.365493] Node 0 DMA32 free:487988kB min:36200kB low:45248kB high:54296kB active_anon:251644kB inactive_anon:100880kB active_file:6616kB inactive_file:11224kB unevictable:0kB writepending:32kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11360kB pagetables:14996kB bounce:0kB free_pcp:776kB local_pcp:632kB free_cma:0kB [ 3049.431336] lowmem_reserve[]: 0 0 0 0 0 [ 3049.444966] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3049.509969] lowmem_reserve[]: 0 0 0 0 0 [ 3049.524012] Node 1 Normal free:363896kB min:53696kB low:67120kB high:80544kB active_anon:73620kB inactive_anon:31412kB active_file:20kB inactive_file:16kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21920kB pagetables:67220kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3049.557472] lowmem_reserve[]: 0 0 0 0 0 [ 3049.562347] Node 0 DMA: 30*4kB (UE) 27*8kB (UME) 54*16kB (UME) 28*32kB (UME) 4*64kB (ME) 4*128kB (UE) 4*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 11056kB [ 3049.583007] Node 0 DMA32: 361*4kB (UEH) 97*8kB (MEH) 143*16kB (ME) 51*32kB (UMEH) 2562*64kB (UMH) 307*128kB (UM) 33*256kB (U) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 218876kB [ 3049.601458] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3049.615854] Node 1 Normal: 7878*4kB (UM) 7272*8kB (U) 3038*16kB (U) 7050*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 363896kB [ 3049.636947] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3049.656625] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3049.687379] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3049.708052] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3049.734601] 40106 total pagecache pages [ 3049.743640] 0 pages in swap cache [ 3049.755472] Swap cache stats: add 0, delete 0, find 0/0 [ 3049.768116] Free swap = 0kB [ 3049.778891] Total swap = 0kB [ 3049.787209] 2097051 pages RAM [ 3049.798197] 0 pages HighMem/MovableOnly [ 3049.810066] 363848 pages reserved [ 3049.830529] 0 pages cma reserved [ 3050.374601] Bluetooth: hci4 command 0x0419 tx timeout [ 3050.438208] oom_reaper: reaped process 7152 (syz-executor.0), now anon-rss:0kB, file-rss:32kB, shmem-rss:0kB [ 3050.546910] oom_reaper: reaped process 7154 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3050.614677] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 3050.643816] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 3050.648844] CPU: 0 PID: 8003 Comm: syz-fuzzer Not tainted 4.14.230-syzkaller #0 [ 3050.657103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3050.668694] Call Trace: [ 3050.671513] dump_stack+0x1b2/0x281 [ 3050.675426] dump_header+0x178/0x82f [ 3050.679142] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3050.684249] ? ___ratelimit+0x2cd/0x530 [ 3050.688312] oom_kill_process.cold+0x10/0xa40 [ 3050.692822] out_of_memory+0xe3e/0x1190 [ 3050.696801] ? oom_killer_disable+0x1c0/0x1c0 [ 3050.701706] ? mutex_trylock+0x152/0x1a0 [ 3050.705858] __alloc_pages_nodemask+0x23e1/0x2720 [ 3050.710832] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3050.715964] alloc_pages_current+0x155/0x260 [ 3050.720553] syz-executor.2: page allocation failure: order:0 [ 3050.720570] filemap_fault+0x11a1/0x1ad0 [ 3050.720587] ext4_filemap_fault+0x84/0xb0 [ 3050.726479] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 3050.730543] __do_fault+0xfa/0x380 [ 3050.730553] __handle_mm_fault+0x2497/0x4620 [ 3050.730562] ? vm_insert_page+0x7c0/0x7c0 [ 3050.730577] ? mark_held_locks+0xa6/0xf0 [ 3050.730586] handle_mm_fault+0x455/0x9c0 [ 3050.730598] __do_page_fault+0x549/0xad0 [ 3050.730608] ? spurious_fault+0x640/0x640 [ 3050.730615] ? do_page_fault+0x60/0x500 [ 3050.730623] ? page_fault+0x2f/0x50 [ 3050.730629] page_fault+0x45/0x50 [ 3050.730639] RIP: 1980:0xc00047c840 [ 3050.734806] syz-executor.2: [ 3050.741849] RSP: 03e7:000000c00003be40 EFLAGS: 00000003 [ 3050.753228] Mem-Info: [ 3050.771356] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3050.771373] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 3050.771395] CPU: 1 PID: 7154 Comm: syz-executor.2 Not tainted 4.14.230-syzkaller #0 [ 3050.771400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3050.771404] Call Trace: [ 3050.771419] dump_stack+0x1b2/0x281 [ 3050.771433] warn_alloc.cold+0x96/0x1cc [ 3050.771444] ? zone_watermark_ok_safe+0x220/0x220 [ 3050.771454] ? usleep_range+0x130/0x130 [ 3050.771463] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3050.771474] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3050.771484] ? run_timer_softirq+0x5a0/0x5a0 [ 3050.789105] (null) [ 3050.791064] __alloc_pages_nodemask+0x2127/0x2720 [ 3050.791082] ? lock_acquire+0x170/0x3f0 [ 3050.791096] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3050.796628] syz-executor.2 cpuset= [ 3050.799117] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3050.824279] active_anon:80798 inactive_anon:33087 isolated_anon:0 [ 3050.824279] active_file:11 inactive_file:0 isolated_file:0 [ 3050.824279] unevictable:0 dirty:13 writeback:0 unstable:0 [ 3050.824279] slab_reclaimable:14849 slab_unreclaimable:140361 [ 3050.824279] mapped:52670 shmem:35605 pagetables:20586 bounce:0 [ 3050.824279] free:13913 free_pcp:30 free_cma:0 [ 3050.824595] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3050.843675] / [ 3050.845479] alloc_pages_current+0x155/0x260 [ 3050.852441] Node 0 active_anon:249584kB inactive_anon:100936kB active_file:32kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:128304kB dirty:48kB writeback:0kB shmem:105684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 180224kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3050.854510] ion_page_pool_alloc+0x118/0x1b0 [ 3050.859778] Node 1 active_anon:73608kB inactive_anon:31412kB active_file:12kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:82376kB dirty:4kB writeback:0kB shmem:36736kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3050.865769] ion_system_heap_allocate+0x133/0x8c0 [ 3050.865780] ? ion_alloc+0x187/0x810 [ 3050.865790] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3050.865798] ? ion_system_contig_heap_create+0x130/0x130 [ 3050.865807] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3050.865817] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3050.865827] ion_alloc+0x204/0x810 [ 3050.874919] mems_allowed=0-1 [ 3050.877742] ? ion_dma_buf_release+0x40/0x40 [ 3050.890403] Node 0 [ 3050.894803] ? __might_fault+0x177/0x1b0 [ 3050.970398] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3050.974487] ion_ioctl+0xea/0x1f0 [ 3051.040387] lowmem_reserve[]: [ 3051.042415] ? ion_query_heaps+0x360/0x360 [ 3051.047068] 0 [ 3051.049392] ? _raw_spin_unlock+0x29/0x40 [ 3051.060381] 2717 [ 3051.080640] ? ion_query_heaps+0x360/0x360 [ 3051.080651] do_vfs_ioctl+0x75a/0xff0 [ 3051.080663] ? ioctl_preallocate+0x1a0/0x1a0 [ 3051.080672] ? lock_downgrade+0x740/0x740 [ 3051.080684] ? __fget+0x225/0x360 [ 3051.110377] 2718 [ 3051.113010] ? do_vfs_ioctl+0xff0/0xff0 [ 3051.117234] 2718 [ 3051.120700] ? security_file_ioctl+0x83/0xb0 [ 3051.120711] SyS_ioctl+0x7f/0xb0 [ 3051.120719] ? do_vfs_ioctl+0xff0/0xff0 [ 3051.120731] do_syscall_64+0x1d5/0x640 [ 3051.130430] 2718 [ 3051.133580] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3051.141123] RIP: 0033:0x466459 [ 3051.141128] RSP: 002b:00007f6b2e85f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3051.141136] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 3051.141141] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3051.141144] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3051.141149] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 3051.141153] R13: 00007ffd3826db4f R14: 00007f6b2e85f300 R15: 0000000000022000 [ 3051.146361] warn_alloc_show_mem: 1 callbacks suppressed [ 3051.146364] Mem-Info: [ 3051.147302] CPU: 0 PID: 7118 Comm: syz-executor.2 Not tainted 4.14.230-syzkaller #0 [ 3051.152633] active_anon:80798 inactive_anon:33087 isolated_anon:0 [ 3051.152633] active_file:11 inactive_file:0 isolated_file:0 [ 3051.152633] unevictable:0 dirty:13 writeback:0 unstable:0 [ 3051.152633] slab_reclaimable:14849 slab_unreclaimable:140361 [ 3051.152633] mapped:52670 shmem:35605 pagetables:20586 bounce:0 [ 3051.152633] free:13913 free_pcp:30 free_cma:0 [ 3051.155857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3051.167564] Node 0 active_anon:249584kB inactive_anon:100936kB active_file:32kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:128304kB dirty:48kB writeback:0kB shmem:105684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 180224kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3051.171293] Call Trace: [ 3051.171313] dump_stack+0x1b2/0x281 [ 3051.171326] warn_alloc.cold+0x96/0x1cc [ 3051.171337] ? zone_watermark_ok_safe+0x220/0x220 [ 3051.171347] ? usleep_range+0x130/0x130 [ 3051.171355] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3051.171367] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3051.171377] ? run_timer_softirq+0x5a0/0x5a0 [ 3051.171391] __alloc_pages_nodemask+0x2127/0x2720 [ 3051.171406] ? lock_acquire+0x170/0x3f0 [ 3051.171419] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3051.171428] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3051.171443] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3051.171462] alloc_pages_current+0x155/0x260 [ 3051.171472] ion_page_pool_alloc+0x118/0x1b0 [ 3051.171482] ion_system_heap_allocate+0x133/0x8c0 [ 3051.171492] ? ion_alloc+0x187/0x810 [ 3051.171502] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3051.171512] ? ion_system_contig_heap_create+0x130/0x130 [ 3051.178869] Node 1 active_anon:73608kB inactive_anon:31412kB active_file:12kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:82376kB dirty:4kB writeback:0kB shmem:36736kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3051.186309] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3051.186320] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3051.186329] ion_alloc+0x204/0x810 [ 3051.186341] ? ion_dma_buf_release+0x40/0x40 [ 3051.186351] ? __might_fault+0x177/0x1b0 [ 3051.186362] ion_ioctl+0xea/0x1f0 [ 3051.186371] ? ion_query_heaps+0x360/0x360 [ 3051.186381] ? ion_query_heaps+0x360/0x360 [ 3051.186391] do_vfs_ioctl+0x75a/0xff0 [ 3051.186405] ? ioctl_preallocate+0x1a0/0x1a0 [ 3051.198208] Node 0 [ 3051.201813] ? lock_downgrade+0x740/0x740 [ 3051.201827] ? __fget+0x225/0x360 [ 3051.201836] ? do_vfs_ioctl+0xff0/0xff0 [ 3051.201846] ? security_file_ioctl+0x83/0xb0 [ 3051.201855] SyS_ioctl+0x7f/0xb0 [ 3051.201863] ? do_vfs_ioctl+0xff0/0xff0 [ 3051.201876] do_syscall_64+0x1d5/0x640 [ 3051.207338] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3051.209839] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3051.221789] lowmem_reserve[]: [ 3051.252047] RIP: 0033:0x466459 [ 3051.252053] RSP: 002b:00007f6b2e8a1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3051.252061] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3051.252066] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3051.252070] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3051.252074] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3051.252079] R13: 00007ffd3826db4f R14: 00007f6b2e8a1300 R15: 0000000000022000 [ 3051.253135] syz-executor.0: [ 3051.265716] 0 [ 3051.293376] page allocation failure: order:0 [ 3051.312957] Node 0 [ 3051.318091] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 3051.325240] 2717 [ 3051.326253] (null) [ 3051.339525] 2718 [ 3051.342878] syz-executor.0 cpuset= [ 3051.350276] 2718 [ 3051.354216] / mems_allowed=0-1 [ 3051.354236] CPU: 0 PID: 7152 Comm: syz-executor.0 Not tainted 4.14.230-syzkaller #0 [ 3051.354242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3051.354246] Call Trace: [ 3051.354265] dump_stack+0x1b2/0x281 [ 3051.354279] warn_alloc.cold+0x96/0x1cc [ 3051.354291] ? zone_watermark_ok_safe+0x220/0x220 [ 3051.354303] ? usleep_range+0x130/0x130 [ 3051.367704] DMA32 free:18052kB min:36200kB low:45248kB high:54296kB active_anon:249416kB inactive_anon:100880kB active_file:36kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11360kB pagetables:14992kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3051.368166] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3051.372836] 2718 [ 3051.377582] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3051.392259] lowmem_reserve[]: [ 3051.410969] ? run_timer_softirq+0x5a0/0x5a0 [ 3051.410986] __alloc_pages_nodemask+0x2127/0x2720 [ 3051.411002] ? lock_acquire+0x170/0x3f0 [ 3051.411015] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3051.411024] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3051.411040] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3051.411053] ? __sanitizer_cov_trace_pc+0x41/0x50 [ 3051.411067] alloc_pages_current+0x155/0x260 [ 3051.411078] ion_page_pool_alloc+0x118/0x1b0 [ 3051.411086] ion_system_heap_allocate+0x133/0x8c0 [ 3051.411094] ? ion_alloc+0x187/0x810 [ 3051.411103] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3051.411112] ? ion_system_contig_heap_create+0x130/0x130 [ 3051.411122] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3051.411132] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3051.411142] ion_alloc+0x204/0x810 [ 3051.411154] ? ion_dma_buf_release+0x40/0x40 [ 3051.411167] ? __might_fault+0x177/0x1b0 [ 3051.411177] ion_ioctl+0xea/0x1f0 [ 3051.411186] ? ion_query_heaps+0x360/0x360 [ 3051.411198] ? ion_query_heaps+0x360/0x360 [ 3051.411208] do_vfs_ioctl+0x75a/0xff0 [ 3051.411219] ? ioctl_preallocate+0x1a0/0x1a0 [ 3051.411226] ? lock_downgrade+0x740/0x740 [ 3051.411237] ? __fget+0x225/0x360 [ 3051.411246] ? do_vfs_ioctl+0xff0/0xff0 [ 3051.411257] ? security_file_ioctl+0x83/0xb0 [ 3051.411267] SyS_ioctl+0x7f/0xb0 [ 3051.411274] ? do_vfs_ioctl+0xff0/0xff0 [ 3051.411285] do_syscall_64+0x1d5/0x640 [ 3051.411299] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3051.411306] RIP: 0033:0x466459 [ 3051.411311] RSP: 002b:00007f1ef2095188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3051.411321] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3051.411326] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3051.411330] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3051.411335] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3051.411339] R13: 00007fffa779c11f R14: 00007f1ef2095300 R15: 0000000000022000 [ 3051.586109] 0 [ 3051.610379] Node 0 [ 3051.680407] 0 [ 3051.730380] DMA32 free:105968kB min:36200kB low:45248kB high:54296kB active_anon:249416kB inactive_anon:100880kB active_file:36kB inactive_file:1332kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11360kB pagetables:14992kB bounce:0kB free_pcp:744kB local_pcp:736kB free_cma:0kB [ 3051.814771] 0 [ 3051.940461] lowmem_reserve[]: 0 0 0 0 0 [ 3051.952900] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3052.010375] 0 0 [ 3052.024047] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3052.030354] lowmem_reserve[]: [ 3052.093651] lowmem_reserve[]: 0 0 0 0 0 [ 3052.100339] 0 0 0 0 0 [ 3052.102487] Node 1 Normal free:63052kB min:53696kB low:67120kB high:80544kB active_anon:73608kB inactive_anon:31412kB active_file:16kB inactive_file:3412kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21920kB pagetables:67220kB bounce:0kB free_pcp:1348kB local_pcp:620kB free_cma:0kB [ 3052.103971] Node 1 [ 3052.170492] lowmem_reserve[]: 0 0 0 0 0 [ 3052.177039] Node 0 DMA: 1*4kB (E) 23*8kB (UME) 58*16kB (UME) 28*32kB (UME) 4*64kB (ME) 4*128kB (UE) 4*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 10972kB [ 3052.200412] Normal free:150944kB min:53696kB low:67120kB high:80544kB active_anon:73608kB inactive_anon:31412kB active_file:16kB inactive_file:3412kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21920kB pagetables:67220kB bounce:0kB free_pcp:1348kB local_pcp:628kB free_cma:0kB [ 3052.244704] Node 0 DMA32: 9768*4kB (UME) 19681*8kB (UME) 8548*16kB (UME) 1823*32kB (UME) 2*64kB (U) 4*128kB (U) 3*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 393032kB [ 3052.248352] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3052.274306] lowmem_reserve[]: 0 0 0 0 0 [ 3052.274427] syz-executor.2: page allocation failure: order:4 [ 3052.278325] Node 0 DMA: [ 3052.284330] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3052.284338] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 3052.284359] CPU: 0 PID: 7118 Comm: syz-executor.2 Not tainted 4.14.230-syzkaller #0 [ 3052.284364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3052.284367] Call Trace: [ 3052.284385] dump_stack+0x1b2/0x281 [ 3052.284398] warn_alloc.cold+0x96/0x1cc [ 3052.300752] Node 0 [ 3052.308160] ? zone_watermark_ok_safe+0x220/0x220 [ 3052.332157] 2*4kB (UE) 33*8kB (UME) 58*16kB [ 3052.335896] __alloc_pages_nodemask+0x2127/0x2720 [ 3052.335908] ? _raw_spin_unlock_irq+0x5a/0x80 [ 3052.345802] (UME) [ 3052.346018] ? finish_task_switch+0x178/0x610 [ 3052.355480] Normal: [ 3052.357692] ? finish_task_switch+0x14d/0x610 [ 3052.357707] ? lock_acquire+0x170/0x3f0 [ 3052.357722] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3052.357738] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3052.357750] ? __mutex_unlock_slowpath+0x75/0x770 [ 3052.357760] ? ion_page_pool_remove+0x19d/0x280 [ 3052.357772] alloc_pages_current+0x155/0x260 [ 3052.357782] ion_page_pool_alloc+0x118/0x1b0 [ 3052.366513] 0*4kB [ 3052.368830] ion_system_heap_allocate+0x133/0x8c0 [ 3052.386390] 28*32kB [ 3052.389662] ? _raw_spin_unlock+0x29/0x40 [ 3052.389673] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3052.389681] ? ion_system_contig_heap_create+0x130/0x130 [ 3052.389691] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3052.389701] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3052.389710] ion_alloc+0x27a/0x810 [ 3052.389722] ? ion_dma_buf_release+0x40/0x40 [ 3052.389734] ? __might_fault+0x177/0x1b0 [ 3052.394638] 0*8kB [ 3052.398717] ion_ioctl+0xea/0x1f0 [ 3052.398726] ? ion_query_heaps+0x360/0x360 [ 3052.398737] ? ion_query_heaps+0x360/0x360 [ 3052.398747] do_vfs_ioctl+0x75a/0xff0 [ 3052.398757] ? ioctl_preallocate+0x1a0/0x1a0 [ 3052.398766] ? lock_downgrade+0x740/0x740 [ 3052.398778] ? __fget+0x225/0x360 [ 3052.398786] ? do_vfs_ioctl+0xff0/0xff0 [ 3052.398799] ? security_file_ioctl+0x83/0xb0 [ 3052.414585] (UME) [ 3052.418320] SyS_ioctl+0x7f/0xb0 [ 3052.424981] 0*16kB [ 3052.429143] ? do_vfs_ioctl+0xff0/0xff0 [ 3052.437537] 5*64kB [ 3052.437784] do_syscall_64+0x1d5/0x640 [ 3052.442462] 0*32kB [ 3052.446426] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3052.448647] 0*64kB [ 3052.452216] RIP: 0033:0x466459 [ 3052.452221] RSP: 002b:00007f6b2e8a1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3052.452230] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3052.452235] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3052.452239] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3052.452244] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3052.452249] R13: 00007ffd3826db4f R14: 00007f6b2e8a1300 R15: 0000000000022000 [ 3052.458160] syz-executor.0 cpuset= [ 3052.467892] (UME) [ 3052.470308] / [ 3052.475512] 3*128kB [ 3052.478020] mems_allowed=0-1 [ 3052.487115] (UE) [ 3052.488880] CPU: 0 PID: 7152 Comm: syz-executor.0 Not tainted 4.14.230-syzkaller #0 [ 3052.489421] 4*256kB [ 3052.492852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3052.492855] Call Trace: [ 3052.492873] dump_stack+0x1b2/0x281 [ 3052.492886] warn_alloc.cold+0x96/0x1cc [ 3052.492898] ? zone_watermark_ok_safe+0x220/0x220 [ 3052.492918] __alloc_pages_nodemask+0x2127/0x2720 [ 3052.492928] ? lock_acquire+0x170/0x3f0 [ 3052.492939] ? lock_acquire+0x170/0x3f0 [ 3052.492953] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3052.492969] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3052.492980] ? __mutex_unlock_slowpath+0x75/0x770 [ 3052.492993] alloc_pages_current+0x155/0x260 [ 3052.493004] ion_page_pool_alloc+0x118/0x1b0 [ 3052.493012] ion_system_heap_allocate+0x133/0x8c0 [ 3052.493023] ? _raw_spin_unlock+0x29/0x40 [ 3052.493031] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3052.493040] ? ion_system_contig_heap_create+0x130/0x130 [ 3052.493050] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3052.493060] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3052.493070] ion_alloc+0x27a/0x810 [ 3052.493083] ? ion_dma_buf_release+0x40/0x40 [ 3052.493096] ? __might_fault+0x177/0x1b0 [ 3052.493107] ion_ioctl+0xea/0x1f0 [ 3052.493119] ? ion_query_heaps+0x360/0x360 [ 3052.493131] ? ion_query_heaps+0x360/0x360 [ 3052.508566] 0*128kB [ 3052.513527] do_vfs_ioctl+0x75a/0xff0 [ 3052.513539] ? ioctl_preallocate+0x1a0/0x1a0 [ 3052.513548] ? lock_downgrade+0x740/0x740 [ 3052.513560] ? __fget+0x225/0x360 [ 3052.513567] ? do_vfs_ioctl+0xff0/0xff0 [ 3052.513578] ? security_file_ioctl+0x83/0xb0 [ 3052.513587] SyS_ioctl+0x7f/0xb0 [ 3052.513594] ? do_vfs_ioctl+0xff0/0xff0 [ 3052.513608] do_syscall_64+0x1d5/0x640 [ 3052.515836] 0*256kB [ 3052.519139] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3052.531981] (UME) [ 3052.534972] RIP: 0033:0x466459 [ 3052.551539] 2*512kB [ 3052.557501] RSP: 002b:00007f1ef2095188 EFLAGS: 00000246 [ 3052.567786] 0*512kB [ 3052.569072] ORIG_RAX: 0000000000000010 [ 3052.572529] 0*1024kB [ 3052.572936] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3052.575328] 0*2048kB [ 3052.578590] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3052.578596] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3052.586945] (UE) [ 3052.589139] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3052.593753] 2*1024kB [ 3052.601228] R13: 00007fffa779c11f R14: 00007f1ef2095300 R15: 0000000000022000 [ 3052.602962] warn_alloc_show_mem: 2 callbacks suppressed [ 3052.602965] Mem-Info: [ 3052.607973] 0*4096kB [ 3052.612628] active_anon:80824 inactive_anon:33087 isolated_anon:0 [ 3052.612628] active_file:89 inactive_file:1231 isolated_file:0 [ 3052.612628] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3052.612628] slab_reclaimable:14792 slab_unreclaimable:141189 [ 3052.612628] mapped:53606 shmem:35605 pagetables:20586 bounce:0 [ 3052.612628] free:154619 free_pcp:382 free_cma:0 [ 3052.620217] = 0kB [ 3052.623711] Node 0 active_anon:249688kB inactive_anon:100936kB active_file:140kB inactive_file:1936kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:129784kB dirty:100kB writeback:0kB shmem:105684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 180224kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3052.629161] Node 1 [ 3052.630850] Node 1 active_anon:73608kB inactive_anon:31412kB active_file:216kB inactive_file:3088kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:84640kB dirty:0kB writeback:0kB shmem:36736kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3052.637356] (ME) [ 3052.650348] Node 0 [ 3052.651215] Normal: [ 3052.655201] DMA free:10992kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3052.668031] 2963*4kB [ 3052.690310] lowmem_reserve[]: [ 3052.697620] 2*2048kB [ 3052.700119] 0 [ 3052.704527] (UM) [ 3052.710320] 2717 [ 3052.716874] 0*4096kB [ 3052.730302] 2718 [ 3052.735315] (UM) [ 3052.739624] 2718 [ 3052.743821] 2347*8kB [ 3052.748434] 2718 [ 3052.755545] = 10992kB [ 3052.762282] Node 0 [ 3052.764897] Node 0 [ 3052.767416] DMA32: [ 3052.790338] DMA32 free:324164kB min:36200kB low:45248kB high:54296kB active_anon:249520kB inactive_anon:100880kB active_file:140kB inactive_file:1936kB unevictable:0kB writepending:148kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11360kB pagetables:14992kB bounce:0kB free_pcp:912kB local_pcp:240kB free_cma:0kB [ 3052.798171] (UM) [ 3052.800227] lowmem_reserve[]: [ 3052.808468] 1263*16kB [ 3052.830302] 0 [ 3052.839107] 653*4kB [ 3052.839531] 0 [ 3052.879489] (UM) [ 3052.950280] (UME) [ 3052.975714] 5265*32kB [ 3053.010917] 12786*8kB (UME) 8596*16kB (UME) 1842*32kB (UME) 3*64kB (U) 5*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 302212kB [ 3053.010966] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3053.011011] Node 1 Normal: 2963*4kB (UM) 2347*8kB (UM) 1263*16kB (UM) 5265*32kB (U) 4*64kB (U) 5*128kB (U) 3*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 221492kB [ 3053.011080] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3053.011086] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3053.011091] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3053.011096] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3053.011100] 37000 total pagecache pages [ 3053.011110] 0 pages in swap cache [ 3053.011115] Swap cache stats: add 0, delete 0, find 0/0 [ 3053.011118] Free swap = 0kB [ 3053.011121] Total swap = 0kB [ 3053.011127] 2097051 pages RAM [ 3053.011130] 0 pages HighMem/MovableOnly [ 3053.011132] 363848 pages reserved [ 3053.011134] 0 pages cma reserved [ 3053.030288] 0 [ 3053.051340] (U) [ 3053.083687] 0 [ 3053.091337] 4*64kB [ 3053.153698] 0 [ 3053.177742] (U) 5*128kB (U) 3*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 221492kB [ 3053.196699] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3053.197552] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3053.236945] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3053.250288] lowmem_reserve[]: 0 0 0 0 0 [ 3053.254546] Node 1 Normal free:219316kB min:53696kB low:67120kB high:80544kB active_anon:73608kB inactive_anon:31412kB active_file:276kB inactive_file:3092kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21920kB pagetables:67220kB bounce:0kB free_pcp:700kB local_pcp:0kB free_cma:0kB [ 3053.273857] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3053.285336] lowmem_reserve[]: 0 0 0 0 0 [ 3053.298806] Node 0 DMA: 2*4kB (UE) 33*8kB (UME) 58*16kB (UME) 28*32kB (UME) 5*64kB (UME) 3*128kB (UE) 4*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 10992kB [ 3053.320364] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3053.320968] Node 0 [ 3053.329165] 37000 total pagecache pages [ 3053.329168] DMA32: 825*4kB (UME) 3580*8kB (UME) 8645*16kB (UME) 3792*32kB (UME) 6*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 291988kB [ 3053.351391] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3053.354019] 0 pages in swap cache [ 3053.362660] Node 1 Normal: 2963*4kB (UM) 2347*8kB (UM) 1263*16kB (UM) 5265*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 219316kB [ 3053.380298] Swap cache stats: add 0, delete 0, find 0/0 [ 3053.388626] Free swap = 0kB [ 3053.400365] Total swap = 0kB [ 3053.404153] 2097051 pages RAM [ 3053.407867] 0 pages HighMem/MovableOnly [ 3053.410282] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3053.430306] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3053.433887] 363848 pages reserved [ 3053.439722] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3053.445702] 0 pages cma reserved [ 3053.470305] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3053.474127] Out of memory (oom_kill_allocating_task): Kill process 8003 (syz-fuzzer) score 0 or sacrifice child [ 3053.480163] 37000 total pagecache pages [ 3053.510520] Killed process 6000 (syz-executor.3) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 3053.510662] 0 pages in swap cache [ 3053.537401] oom_reaper: reaped process 6000 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3053.540279] Swap cache stats: add 0, delete 0, find 0/0 [ 3053.558096] Free swap = 0kB [ 3053.562199] Total swap = 0kB [ 3053.565500] 2097051 pages RAM [ 3053.569687] 0 pages HighMem/MovableOnly [ 3053.578747] 363848 pages reserved [ 3053.583649] 0 pages cma reserved [ 3053.866789] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3053.926450] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 3053.934067] CPU: 0 PID: 7154 Comm: syz-executor.2 Not tainted 4.14.230-syzkaller #0 [ 3053.942120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3053.951694] Call Trace: [ 3053.954469] dump_stack+0x1b2/0x281 [ 3053.958282] warn_alloc.cold+0x96/0x1cc [ 3053.962358] ? zone_watermark_ok_safe+0x220/0x220 [ 3053.967431] __alloc_pages_nodemask+0x2127/0x2720 [ 3053.972490] ? lock_acquire+0x170/0x3f0 [ 3053.976589] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3053.981554] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3053.987219] ? __mutex_unlock_slowpath+0x75/0x770 [ 3053.992094] ? alloc_pages_current+0x16/0x260 [ 3053.996900] alloc_pages_current+0x155/0x260 [ 3054.001502] ion_page_pool_alloc+0x118/0x1b0 [ 3054.005920] ion_system_heap_allocate+0x133/0x8c0 [ 3054.010864] ? _raw_spin_unlock+0x29/0x40 [ 3054.015101] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3054.020139] ? ion_system_contig_heap_create+0x130/0x130 [ 3054.025696] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3054.030729] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3054.035674] ion_alloc+0x27a/0x810 [ 3054.039424] ? ion_dma_buf_release+0x40/0x40 [ 3054.044204] ? __might_fault+0x177/0x1b0 [ 3054.048445] ion_ioctl+0xea/0x1f0 [ 3054.052018] ? ion_query_heaps+0x360/0x360 [ 3054.056265] ? _raw_spin_unlock+0x29/0x40 [ 3054.060875] ? ion_query_heaps+0x360/0x360 [ 3054.065440] do_vfs_ioctl+0x75a/0xff0 [ 3054.069337] ? ioctl_preallocate+0x1a0/0x1a0 [ 3054.074110] ? lock_downgrade+0x740/0x740 [ 3054.078467] ? __fget+0x225/0x360 [ 3054.082065] ? do_vfs_ioctl+0xff0/0xff0 [ 3054.086261] ? security_file_ioctl+0x83/0xb0 [ 3054.090946] SyS_ioctl+0x7f/0xb0 [ 3054.094632] ? do_vfs_ioctl+0xff0/0xff0 [ 3054.098703] do_syscall_64+0x1d5/0x640 [ 3054.102598] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3054.107790] RIP: 0033:0x466459 [ 3054.111016] RSP: 002b:00007f6b2e85f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3054.118991] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 3054.126542] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3054.133820] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3054.141359] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 3054.149398] R13: 00007ffd3826db4f R14: 00007f6b2e85f300 R15: 0000000000022000 [ 3054.163791] warn_alloc_show_mem: 1 callbacks suppressed [ 3054.163794] Mem-Info: [ 3054.173149] active_anon:80876 inactive_anon:33086 isolated_anon:0 [ 3054.173149] active_file:999 inactive_file:1693 isolated_file:12 [ 3054.173149] unevictable:0 dirty:36 writeback:0 unstable:0 [ 3054.173149] slab_reclaimable:14723 slab_unreclaimable:141995 [ 3054.173149] mapped:45766 shmem:35602 pagetables:20547 bounce:0 [ 3054.173149] free:77018 free_pcp:72 free_cma:0 [ 3054.216865] Node 0 active_anon:250140kB inactive_anon:100940kB active_file:2480kB inactive_file:5308kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:129568kB dirty:140kB writeback:0kB shmem:105688kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 180224kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3054.253191] Node 1 active_anon:73364kB inactive_anon:31404kB active_file:1516kB inactive_file:1464kB unevictable:0kB isolated(anon):0kB isolated(file):48kB mapped:53496kB dirty:4kB writeback:0kB shmem:36720kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3054.287870] Node 0 DMA free:11016kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3054.328167] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3054.335011] Node 0 DMA32 free:44032kB min:36200kB low:45248kB high:54296kB active_anon:249672kB inactive_anon:100884kB active_file:2484kB inactive_file:4740kB unevictable:0kB writepending:140kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11392kB pagetables:14920kB bounce:0kB free_pcp:176kB local_pcp:20kB free_cma:0kB [ 3054.371513] lowmem_reserve[]: 0 0 0 0 0 [ 3054.376014] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3054.406893] lowmem_reserve[]: 0 0 0 0 0 [ 3054.423666] Node 1 Normal free:60908kB min:53696kB low:67120kB high:80544kB active_anon:73364kB inactive_anon:31404kB active_file:1428kB inactive_file:956kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21888kB pagetables:67136kB bounce:0kB free_pcp:492kB local_pcp:0kB free_cma:0kB [ 3054.544675] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 3054.565892] lowmem_reserve[]: 0 0 0 0 0 [ 3054.570039] Node 0 DMA: 16*4kB (UE) 38*8kB (UME) 58*16kB (UME) 28*32kB (UME) 5*64kB (UME) 2*128kB (UE) 4*256kB (UME) 2*512kB (UE) [ 3054.588524] syz-fuzzer cpuset= [ 3054.605204] 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 10960kB [ 3054.624240] Node 0 DMA32: 765*4kB (ME) 230*8kB (UME) 162*16kB (ME) 345*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18532kB [ 3054.640403] / mems_allowed=0-1 [ 3054.660377] CPU: 1 PID: 8001 Comm: syz-fuzzer Not tainted 4.14.230-syzkaller #0 [ 3054.663969] Node 0 [ 3054.669061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3054.669063] Normal: 0*4kB [ 3054.671404] Call Trace: [ 3054.671423] dump_stack+0x1b2/0x281 [ 3054.671434] dump_header+0x178/0x82f [ 3054.671445] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3054.671453] ? ___ratelimit+0x2cd/0x530 [ 3054.671462] oom_kill_process.cold+0x10/0xa40 [ 3054.671478] out_of_memory+0xe3e/0x1190 [ 3054.713617] ? oom_killer_disable+0x1c0/0x1c0 [ 3054.718531] ? mutex_trylock+0x152/0x1a0 [ 3054.722576] __alloc_pages_nodemask+0x23e1/0x2720 [ 3054.727411] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3054.732335] alloc_pages_current+0x155/0x260 [ 3054.736922] filemap_fault+0x11a1/0x1ad0 [ 3054.740971] ext4_filemap_fault+0x84/0xb0 [ 3054.745100] __do_fault+0xfa/0x380 [ 3054.748994] __handle_mm_fault+0x2497/0x4620 [ 3054.753400] ? vm_insert_page+0x7c0/0x7c0 [ 3054.757822] ? mark_held_locks+0xa6/0xf0 [ 3054.761967] handle_mm_fault+0x455/0x9c0 [ 3054.766451] __do_page_fault+0x549/0xad0 [ 3054.770782] ? spurious_fault+0x640/0x640 [ 3054.775175] ? do_page_fault+0x60/0x500 [ 3054.779216] ? page_fault+0x2f/0x50 [ 3054.782835] page_fault+0x45/0x50 [ 3054.786481] RIP: ac480:0xc0000ab980 [ 3054.790193] RSP: 0000:000000c0002b7f28 EFLAGS: 00000003 [ 3054.790230] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3054.798033] Mem-Info: [ 3054.811773] Node 1 Normal: 53*4kB (UM) 15*8kB (UM) 2*16kB (M) 765*32kB (UM) 2*64kB (M) 1*128kB (U) 0*256kB 0*512kB 2*1024kB (M) 0*2048kB 0*4096kB [ 3054.811868] active_anon:80887 inactive_anon:33086 isolated_anon:0 [ 3054.811868] active_file:238 inactive_file:233 isolated_file:32 [ 3054.811868] unevictable:0 dirty:1 writeback:0 unstable:0 [ 3054.811868] slab_reclaimable:14723 slab_unreclaimable:141690 [ 3054.811868] mapped:44459 shmem:35602 pagetables:20561 bounce:0 [ 3054.811868] free:13905 free_pcp:30 free_cma:0 [ 3054.811884] Node 0 active_anon:250184kB inactive_anon:100940kB active_file:932kB inactive_file:956kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:127008kB dirty:0kB writeback:0kB shmem:105688kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 180224kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3054.828462] = 27148kB [ 3054.861899] Node 1 active_anon:73364kB inactive_anon:31404kB active_file:20kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:50828kB dirty:4kB writeback:0kB shmem:36720kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3054.896134] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3054.939667] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3054.948750] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3054.961647] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3054.962899] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3054.972151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3055.003500] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3055.004148] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3055.009214] Node 0 [ 3055.020310] device bridge_slave_1 left promiscuous mode [ 3055.022474] DMA32 free:17988kB min:36200kB low:45248kB high:54296kB active_anon:250036kB inactive_anon:100884kB active_file:464kB inactive_file:580kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11328kB pagetables:14984kB bounce:0kB free_pcp:636kB local_pcp:564kB free_cma:0kB [ 3055.023473] bridge0: port 2(bridge_slave_1) entered disabled state [ 3055.028982] lowmem_reserve[]: 0 0 0 0 0 [ 3055.029000] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3055.029015] lowmem_reserve[]: 0 0 0 0 0 [ 3055.029035] Node 1 [ 3055.061879] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3055.080398] Normal free:26868kB min:53696kB low:67120kB high:80544kB active_anon:73364kB inactive_anon:31404kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21888kB pagetables:67136kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 3055.101305] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3055.106856] lowmem_reserve[]: [ 3055.113777] device bridge_slave_0 left promiscuous mode [ 3055.147928] 0 [ 3055.153240] 35673 total pagecache pages [ 3055.156676] 0 [ 3055.162245] 0 pages in swap cache [ 3055.162251] Swap cache stats: add 0, delete 0, find 0/0 [ 3055.162254] Free swap = 0kB [ 3055.162258] Total swap = 0kB [ 3055.162265] 2097051 pages RAM [ 3055.162268] 0 pages HighMem/MovableOnly [ 3055.162272] 363848 pages reserved [ 3055.162275] 0 pages cma reserved [ 3055.163516] bridge0: port 1(bridge_slave_0) entered disabled state [ 3055.167841] 0 [ 3055.188158] device veth1_macvtap left promiscuous mode [ 3055.195608] 0 [ 3055.200150] device veth0_macvtap left promiscuous mode [ 3055.200651] 0 [ 3055.204220] device veth1_vlan left promiscuous mode [ 3055.216834] device veth0_vlan left promiscuous mode [ 3055.219640] Node 0 DMA: 16*4kB (UE) 38*8kB (UME) 58*16kB (UME) 28*32kB (UME) 5*64kB (UME) 2*128kB (UE) 4*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 10960kB [ 3055.274253] Node 0 DMA32: 1271*4kB (UME) 363*8kB (ME) 178*16kB (ME) 227*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18100kB [ 3055.288664] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3055.301171] Node 1 Normal: 53*4kB (UM) 14*8kB (M) 2*16kB (M) 753*32kB (UM) 2*64kB (M) 1*128kB (U) 0*256kB 0*512kB 2*1024kB (M) 0*2048kB 0*4096kB = 26756kB [ 3055.331122] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3055.340553] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3055.349771] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3055.359239] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3055.369852] 35673 total pagecache pages [ 3055.374254] 0 pages in swap cache [ 3055.378767] Swap cache stats: add 0, delete 0, find 0/0 [ 3055.384933] Free swap = 0kB [ 3055.401569] Total swap = 0kB [ 3055.404861] 2097051 pages RAM [ 3055.408080] 0 pages HighMem/MovableOnly [ 3055.414272] 363848 pages reserved [ 3055.418446] 0 pages cma reserved [ 3055.422070] Out of memory (oom_kill_allocating_task): Kill process 8001 (syz-fuzzer) score 0 or sacrifice child [ 3055.447888] Killed process 6251 (syz-executor.2) total-vm:84924kB, anon-rss:60kB, file-rss:0kB, shmem-rss:0kB [ 3055.471696] oom_reaper: reaped process 6251 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3055.562830] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 3055.583078] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 3055.588916] CPU: 1 PID: 7998 Comm: syz-fuzzer Not tainted 4.14.230-syzkaller #0 [ 3055.597084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3055.606834] Call Trace: [ 3055.609440] dump_stack+0x1b2/0x281 [ 3055.613571] dump_header+0x178/0x82f [ 3055.617272] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3055.622533] ? ___ratelimit+0x2cd/0x530 [ 3055.626791] oom_kill_process.cold+0x10/0xa40 [ 3055.631282] out_of_memory+0xe3e/0x1190 [ 3055.635245] ? oom_killer_disable+0x1c0/0x1c0 [ 3055.639810] ? mutex_trylock+0x152/0x1a0 [ 3055.643875] __alloc_pages_nodemask+0x23e1/0x2720 [ 3055.648799] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3055.654603] alloc_pages_current+0x155/0x260 [ 3055.661416] filemap_fault+0x11a1/0x1ad0 [ 3055.666444] ext4_filemap_fault+0x84/0xb0 [ 3055.670890] __do_fault+0xfa/0x380 [ 3055.674548] __handle_mm_fault+0x2497/0x4620 [ 3055.679407] ? vm_insert_page+0x7c0/0x7c0 [ 3055.683824] ? lock_downgrade+0x740/0x740 [ 3055.688056] ? mark_held_locks+0xa6/0xf0 [ 3055.692369] handle_mm_fault+0x455/0x9c0 [ 3055.696768] __do_page_fault+0x549/0xad0 [ 3055.701078] ? spurious_fault+0x640/0x640 [ 3055.705320] ? do_page_fault+0x60/0x500 [ 3055.709306] ? page_fault+0x2f/0x50 [ 3055.713586] page_fault+0x45/0x50 [ 3055.717397] RIP: 0000:0x940aec [ 3055.720662] RSP: 2e000:000000c00003dfa0 EFLAGS: 0043b6a0 [ 3055.730909] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3055.762431] Mem-Info: [ 3055.764896] active_anon:80881 inactive_anon:33086 isolated_anon:0 [ 3055.764896] active_file:27 inactive_file:18 isolated_file:1 [ 3055.764896] unevictable:0 dirty:1 writeback:0 unstable:0 [ 3055.764896] slab_reclaimable:14723 slab_unreclaimable:141289 [ 3055.764896] mapped:35333 shmem:35602 pagetables:20541 bounce:0 [ 3055.764896] free:13845 free_pcp:0 free_cma:0 [ 3055.776358] syz-executor.2 cpuset= [ 3055.801987] Node 0 active_anon:250160kB inactive_anon:100940kB active_file:204kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:90524kB dirty:0kB writeback:0kB shmem:105688kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 180224kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3055.804470] / [ 3055.805659] Node 1 active_anon:73364kB inactive_anon:31404kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:50808kB dirty:4kB writeback:0kB shmem:36720kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3055.852955] mems_allowed=0-1 [ 3055.865850] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3055.869208] CPU: 1 PID: 7154 Comm: syz-executor.2 Not tainted 4.14.230-syzkaller #0 [ 3055.896003] lowmem_reserve[]: [ 3055.904007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3055.904011] Call Trace: [ 3055.904032] dump_stack+0x1b2/0x281 [ 3055.904046] warn_alloc.cold+0x96/0x1cc [ 3055.907218] 0 [ 3055.916830] ? zone_watermark_ok_safe+0x220/0x220 [ 3055.916840] ? usleep_range+0x130/0x130 [ 3055.916848] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3055.916860] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3055.919417] 2717 [ 3055.923049] ? run_timer_softirq+0x5a0/0x5a0 [ 3055.923065] __alloc_pages_nodemask+0x2127/0x2720 [ 3055.923080] ? lock_acquire+0x170/0x3f0 [ 3055.932996] 2718 [ 3055.934762] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3055.939922] 2718 [ 3055.944063] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3055.944078] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3055.944095] ? alloc_pages_current+0x16/0x260 [ 3055.949187] 2718 [ 3055.954537] alloc_pages_current+0x155/0x260 [ 3055.954549] ion_page_pool_alloc+0x118/0x1b0 [ 3055.954559] ion_system_heap_allocate+0x133/0x8c0 [ 3055.961358] ? _raw_spin_unlock+0x29/0x40 [ 3055.961367] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3055.961375] ? ion_system_contig_heap_create+0x130/0x130 [ 3055.961387] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3055.966207] Node 0 [ 3055.970259] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3055.970270] ion_alloc+0x27a/0x810 [ 3055.970283] ? ion_dma_buf_release+0x40/0x40 [ 3055.972430] DMA32 free:18144kB min:36200kB low:45248kB high:54296kB active_anon:249908kB inactive_anon:100884kB active_file:64kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11296kB pagetables:14808kB bounce:0kB free_pcp:56kB local_pcp:8kB free_cma:0kB [ 3055.977358] ? __might_fault+0x177/0x1b0 [ 3055.979566] lowmem_reserve[]: [ 3055.984321] ion_ioctl+0xea/0x1f0 [ 3055.984329] ? ion_query_heaps+0x360/0x360 [ 3055.984342] ? _raw_spin_unlock+0x29/0x40 [ 3055.984351] ? ion_query_heaps+0x360/0x360 [ 3055.990337] 0 [ 3055.995154] do_vfs_ioctl+0x75a/0xff0 [ 3055.997282] 0 [ 3056.002202] ? ioctl_preallocate+0x1a0/0x1a0 [ 3056.002211] ? lock_downgrade+0x740/0x740 [ 3056.002225] ? __fget+0x225/0x360 [ 3056.007493] 0 [ 3056.012870] ? do_vfs_ioctl+0xff0/0xff0 [ 3056.012882] ? security_file_ioctl+0x83/0xb0 [ 3056.012890] SyS_ioctl+0x7f/0xb0 [ 3056.012900] ? do_vfs_ioctl+0xff0/0xff0 [ 3056.012914] do_syscall_64+0x1d5/0x640 [ 3056.017128] 0 [ 3056.022143] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3056.022152] RIP: 0033:0x466459 [ 3056.022157] RSP: 002b:00007f6b2e85f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3056.028216] 0 [ 3056.033797] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 3056.033802] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3056.033807] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3056.033812] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 3056.033816] R13: 00007ffd3826db4f R14: 00007f6b2e85f300 R15: 0000000000022000 [ 3056.041688] Mem-Info: [ 3056.081961] active_anon:80855 inactive_anon:33086 isolated_anon:0 [ 3056.081961] active_file:17 inactive_file:17 isolated_file:0 [ 3056.081961] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3056.081961] slab_reclaimable:14723 slab_unreclaimable:141146 [ 3056.081961] mapped:35311 shmem:35602 pagetables:20518 bounce:0 [ 3056.081961] free:13960 free_pcp:0 free_cma:0 [ 3056.136188] Node 0 [ 3056.140564] Node 0 active_anon:250076kB inactive_anon:100940kB active_file:64kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:90436kB dirty:0kB writeback:0kB shmem:105688kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 180224kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3056.140579] Node 1 active_anon:73344kB inactive_anon:31404kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:50808kB dirty:0kB writeback:0kB shmem:36720kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3056.140583] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3056.140602] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3056.140625] Node 0 [ 3056.157491] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3056.161917] DMA32 free:18004kB min:36200kB low:45248kB high:54296kB active_anon:249908kB inactive_anon:100884kB active_file:64kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11296kB pagetables:14808kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3056.178772] lowmem_reserve[]: [ 3056.186789] lowmem_reserve[]: [ 3056.200904] syz-executor.0: [ 3056.210888] 0 [ 3056.255891] 0 [ 3056.282400] 0 [ 3056.309475] 0 [ 3056.345910] page allocation failure: order:0 [ 3056.371421] 0 [ 3056.401835] 0 [ 3056.414056] 0 [ 3056.416469] 0 [ 3056.419907] 0 [ 3056.424044] 0 [ 3056.430903] Node 1 Normal free:26752kB min:53696kB low:67120kB high:80544kB active_anon:73344kB inactive_anon:31404kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21888kB pagetables:67132kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 3056.432101] Node 0 [ 3056.465295] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3056.470274] lowmem_reserve[]: 0 0 0 0 0 [ 3056.475342] syz-executor.0 cpuset= [ 3056.479279] Node 0 [ 3056.479281] / mems_allowed=0-1 [ 3056.490067] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3056.492453] DMA: [ 3056.515968] CPU: 1 PID: 7152 Comm: syz-executor.0 Not tainted 4.14.230-syzkaller #0 [ 3056.524723] 16*4kB [ 3056.526261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3056.526268] (UE) [ 3056.528572] Call Trace: [ 3056.538308] 38*8kB [ 3056.540545] dump_stack+0x1b2/0x281 [ 3056.540560] warn_alloc.cold+0x96/0x1cc [ 3056.543216] (UME) [ 3056.545446] ? zone_watermark_ok_safe+0x220/0x220 [ 3056.549149] 58*16kB [ 3056.553114] ? usleep_range+0x130/0x130 [ 3056.553123] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3056.553134] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3056.553147] ? run_timer_softirq+0x5a0/0x5a0 [ 3056.555388] (UME) [ 3056.560599] __alloc_pages_nodemask+0x2127/0x2720 [ 3056.560617] ? lock_acquire+0x170/0x3f0 [ 3056.560636] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3056.563044] 28*32kB [ 3056.567559] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3056.572844] (UME) [ 3056.577937] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3056.582778] 5*64kB [ 3056.585271] alloc_pages_current+0x155/0x260 [ 3056.590203] (UME) [ 3056.594412] ion_page_pool_alloc+0x118/0x1b0 [ 3056.599314] 2*128kB (UE) [ 3056.601732] ion_system_heap_allocate+0x133/0x8c0 [ 3056.601744] ? _raw_spin_unlock+0x29/0x40 [ 3056.601752] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3056.601761] ? ion_system_contig_heap_create+0x130/0x130 [ 3056.606513] 4*256kB [ 3056.608741] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3056.614799] (UME) [ 3056.617289] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3056.621805] 2*512kB [ 3056.623947] ion_alloc+0x27a/0x810 [ 3056.628523] (UE) [ 3056.631583] ? ion_dma_buf_release+0x40/0x40 [ 3056.631595] ? __might_fault+0x177/0x1b0 [ 3056.631607] ion_ioctl+0xea/0x1f0 [ 3056.636706] 2*1024kB [ 3056.641185] ? ion_query_heaps+0x360/0x360 [ 3056.641197] ? ion_query_heaps+0x360/0x360 [ 3056.641206] do_vfs_ioctl+0x75a/0xff0 [ 3056.641218] ? ioctl_preallocate+0x1a0/0x1a0 [ 3056.646395] (ME) [ 3056.651918] ? lock_downgrade+0x740/0x740 [ 3056.651932] ? __fget+0x225/0x360 [ 3056.651942] ? do_vfs_ioctl+0xff0/0xff0 [ 3056.654518] 2*2048kB [ 3056.660599] ? security_file_ioctl+0x83/0xb0 [ 3056.660610] SyS_ioctl+0x7f/0xb0 [ 3056.660618] ? do_vfs_ioctl+0xff0/0xff0 [ 3056.660628] do_syscall_64+0x1d5/0x640 [ 3056.660642] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3056.660655] RIP: 0033:0x466459 [ 3056.662981] (UM) [ 3056.667983] RSP: 002b:00007f1ef2095188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3056.670584] 0*4096kB [ 3056.674499] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3056.674507] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3056.677250] = 10960kB [ 3056.683017] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3056.683023] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3056.683027] R13: 00007fffa779c11f R14: 00007f1ef2095300 R15: 0000000000022000 [ 3056.764573] lowmem_reserve[]: [ 3056.794394] Node 0 DMA32: 937*4kB (UME) 2817*8kB (UME) 193*16kB (UME) 216*32kB (UME) 66*64kB (U) 143*128kB (U) 34*256kB (U) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 68540kB [ 3056.897789] 0 0 0 0 0 [ 3056.900605] Node 1 Normal free:26772kB min:53696kB low:67120kB high:80544kB active_anon:73344kB inactive_anon:31404kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21888kB pagetables:67132kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 3056.920027] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3056.990044] lowmem_reserve[]: 0 0 0 0 0 [ 3056.994513] Node 0 DMA: 16*4kB (UE) 38*8kB (UME) 58*16kB (UME) 28*32kB (UME) 6*64kB (UME) 2*128kB (UE) 4*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 11024kB [ 3057.007286] Node 1 Normal: 51*4kB (M) 15*8kB (M) 3*16kB (M) 753*32kB (UM) 2*64kB (M) 1*128kB (U) 0*256kB 0*512kB 2*1024kB (M) 0*2048kB 0*4096kB = 26772kB [ 3057.030091] Node 0 DMA32: 885*4kB (UME) 3884*8kB (UME) 5479*16kB (UME) 242*32kB (UME) 69*64kB (U) 144*128kB (U) 34*256kB (U) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 162596kB [ 3057.056775] device hsr_slave_1 left promiscuous mode [ 3057.080026] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3057.085397] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3057.101353] device hsr_slave_0 left promiscuous mode [ 3057.116528] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3057.126222] Node 1 Normal: 51*4kB (M) 15*8kB (M) 3*16kB (M) 753*32kB (UM) 2*64kB (M) 1*128kB (U) 0*256kB 0*512kB 2*1024kB (M) 0*2048kB 0*4096kB = 26772kB [ 3057.140015] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3057.149573] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3057.150609] team0 (unregistering): Port device team_slave_1 removed [ 3057.167411] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3057.176785] 36499 total pagecache pages [ 3057.176795] 0 pages in swap cache [ 3057.176799] Swap cache stats: add 0, delete 0, find 0/0 [ 3057.176802] Free swap = 0kB [ 3057.176804] Total swap = 0kB [ 3057.176810] 2097051 pages RAM [ 3057.176813] 0 pages HighMem/MovableOnly [ 3057.176815] 363848 pages reserved [ 3057.176818] 0 pages cma reserved [ 3057.176825] Out of memory (oom_kill_allocating_task): Kill process 7998 (syz-fuzzer) score 0 or sacrifice child [ 3057.184566] Killed process 2909 (syz-executor.5) total-vm:84924kB, anon-rss:60kB, file-rss:0kB, shmem-rss:0kB [ 3057.243610] oom_reaper: reaped process 2909 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3057.253923] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3057.254290] team0 (unregistering): Port device team_slave_0 removed [ 3057.262575] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3057.262581] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3057.262585] 36573 total pagecache pages [ 3057.262593] 0 pages in swap cache [ 3057.262598] Swap cache stats: add 0, delete 0, find 0/0 [ 3057.262602] Free swap = 0kB [ 3057.262605] Total swap = 0kB [ 3057.262612] 2097051 pages RAM [ 3057.262616] 0 pages HighMem/MovableOnly [ 3057.262619] 363848 pages reserved [ 3057.262622] 0 pages cma reserved 23:47:41 executing program 4: accept4$rose(0xffffffffffffffff, &(0x7f0000000080)=@full={0xb, @dev, @remote, 0x0, [@netrom, @rose, @bcast, @netrom, @null, @netrom]}, 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000006, 0x27}) [ 3057.348413] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 3057.374356] bond0 (unregistering): Releasing backup interface bond_slave_0 23:47:41 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) [ 3057.427237] bond0 (unregistering): Released all slaves 23:47:41 executing program 1: openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x157080, 0x0) socketpair(0xf, 0x5, 0xffffffff, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000080)=""/71, &(0x7f0000000100)=0x47) 23:47:41 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000006, 0x27}) openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x20000, 0x0) 23:47:41 executing program 3: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video1\x00', 0x2, 0x0) r1 = geteuid() r2 = geteuid() mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x3a2c000, &(0x7f0000000300)=ANY=[@ANYBLOB="747261f4453d66642c7266646e6f3d91963acac3598ce655b8d112c60277b98f4002ad898bc579b3935d385cb7e8f8a8fa8a90a8d5064aef2f35b0b371de0709014e041bec9f5413b64e8d25c32abb9b0706f090f40345d90a33dfd0c987a04a69f0ca133026da45f4531b282811c968d293fc1931eb07a7805bbf48b0f8f64778377edf4812f2f5780b3c9b9a08b85cbf26fa0d8f9e60de93dd5db847d6ed3877bba6168551ca4b21d97c5cf05665afa1667bdf27c84d8fc8af", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',noextend,version=9p2000.u,cache=fscache,mmap,cache=fscache,mmap,cache=fscache,privport,euid<', @ANYRESDEC=r1, @ANYBLOB=',audit,fowner<', @ANYRESDEC=r2, @ANYBLOB=',rootcontext=system_u,\x00']) r3 = semget$private(0x0, 0x3, 0x2) semctl$IPC_RMID(r3, 0x0, 0x0) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r4, 0x40045201, &(0x7f0000000080)=0xfffffffc) r5 = semget$private(0x0, 0x2, 0x0) semctl$SETALL(r5, 0x0, 0x11, &(0x7f0000000000)=[0x20, 0x5]) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r6, 0x8921, &(0x7f0000000200)={'sit0\x00'}) semtimedop(r5, &(0x7f0000000180)=[{0x1, 0x2, 0x1800}, {0x4}, {0x4, 0x6, 0x1000}, {0x2, 0x581b, 0x3800}, {0x1, 0x4, 0x1000}, {0x1, 0x44e0}, {0x4, 0x8}, {0x0, 0xfff, 0x1800}, {0x2, 0x7, 0x1000}, {0x4, 0x7ff, 0x1000}], 0xa, &(0x7f00000001c0)={0x0, 0x3938700}) ioctl$SIOCAX25ADDFWD(0xffffffffffffffff, 0x89ea, &(0x7f0000000140)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}) 23:47:41 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x15}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000001}, 0x4000000) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x80000006, 0x27}) 23:47:41 executing program 1: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000000)=0x7) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f00000000c0)=0x8) 23:47:42 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 23:47:42 executing program 1: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000036c0)='/dev/dlm_plock\x00', 0x0, 0x0) getsockname$ax25(r1, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x9, 0x1, 0x4, 0x70000, 0x2, {}, {0x5, 0x1, 0x5, 0x3, 0x0, 0x1, "6eeab945"}, 0x3, 0x2, @offset=0xa36, 0x1, 0x0, r1}) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f00000000c0)=0x8) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x800, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) accept4$ax25(r2, 0x0, 0x0, 0x0) ioctl$SIOCAX25CTLCON(r2, 0x89e8, &(0x7f00000001c0)={@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0xc, 0x100000001, 0x3, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @bcast, @default]}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080)='nl802154\x00', r3) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900)='802.15.4 MAC\x00', r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000040)={'wpan4\x00'}) 23:47:42 executing program 1: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f00000000c0)=0x8) openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0xe481, 0x0) 23:47:42 executing program 1: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f00000000c0)=0x8) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000140)={0x7, 0x9f, "534921964e4accc9cf2050712205917daa3d99c740eeefbca64e49282aa8cf53b122f30aad57c7c1987e1eaa6d1aac3571b76d791b61f985147cc57acbb4fc40cbc19757b39083687df8da4c6bcc9c0fbec6b228a49077a372c3f37912ff6a139f44de0dffd71abedd1b73622c71971bf5eab6b6c65e8aac90c98449ba638e31d1aa381206c4a84ba61eefed6005085c174edbce179153fb1c5b5a8e9b3b39"}) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) 23:47:42 executing program 1: syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x8666, 0x12640) r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000040)={0x2, 0x8, 0x4, 0x0, 0x6, {}, {0x15aacd69a2e9794b, 0x2, 0x3f, 0x2, 0x6, 0x0, "999242ec"}, 0x3, 0x3, @offset=0x1, 0xfffffffb, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000002c0)) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000200)=@netrom={'nr', 0x0}, 0x10) syz_open_dev$media(&(0x7f0000000240)='/dev/media#\x00', 0x7, 0x4001) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000140)={0x4, 0x2, 0x4, 0x4, 0x3f, {0x77359400}, {0x2, 0xc, 0x4, 0x9, 0xcb, 0x1, "7531eb3d"}, 0xac, 0x3, @fd, 0x0, 0x0, r1}) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f00000000c0)=0x8) syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x29, 0x80000) [ 3058.469566] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3058.513737] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 3058.533480] CPU: 0 PID: 7182 Comm: syz-executor.0 Not tainted 4.14.230-syzkaller #0 [ 3058.541411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3058.550952] Call Trace: [ 3058.553555] dump_stack+0x1b2/0x281 [ 3058.559891] warn_alloc.cold+0x96/0x1cc [ 3058.563891] ? zone_watermark_ok_safe+0x220/0x220 [ 3058.568771] __alloc_pages_nodemask+0x2127/0x2720 [ 3058.573633] ? lock_acquire+0x170/0x3f0 [ 3058.577719] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3058.582780] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3058.588587] ? __mutex_unlock_slowpath+0x75/0x770 [ 3058.593718] ? retint_kernel+0x2d/0x2d [ 3058.598261] alloc_pages_current+0x155/0x260 [ 3058.602868] ion_page_pool_alloc+0x118/0x1b0 [ 3058.605222] syz-executor.4: [ 3058.607289] ion_system_heap_allocate+0x133/0x8c0 [ 3058.607303] ? ion_alloc+0x187/0x810 [ 3058.620733] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3058.626374] ? ion_system_contig_heap_create+0x130/0x130 [ 3058.632495] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3058.635027] page allocation failure: order:4 [ 3058.638262] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3058.638275] ion_alloc+0x204/0x810 [ 3058.651515] ? ion_dma_buf_release+0x40/0x40 [ 3058.656027] ? __might_fault+0x177/0x1b0 [ 3058.661996] ion_ioctl+0xea/0x1f0 [ 3058.665042] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 3058.666515] ? ion_query_heaps+0x360/0x360 [ 3058.666528] ? ion_query_heaps+0x360/0x360 [ 3058.666542] do_vfs_ioctl+0x75a/0xff0 [ 3058.687931] ? ioctl_preallocate+0x1a0/0x1a0 [ 3058.692619] ? lock_downgrade+0x740/0x740 [ 3058.696774] ? __fget+0x225/0x360 [ 3058.700414] ? do_vfs_ioctl+0xff0/0xff0 [ 3058.702521] (null) [ 3058.704491] ? security_file_ioctl+0x83/0xb0 [ 3058.704502] SyS_ioctl+0x7f/0xb0 [ 3058.715017] ? do_vfs_ioctl+0xff0/0xff0 [ 3058.716464] syz-executor.4 cpuset= [ 3058.719435] do_syscall_64+0x1d5/0x640 [ 3058.719451] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3058.733599] RIP: 0033:0x466459 [ 3058.736882] RSP: 002b:00007f1ef2095188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3058.743224] / [ 3058.744866] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3058.747067] mems_allowed=0-1 [ 3058.754131] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3058.754137] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3058.754142] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3058.754147] R13: 00007fffa779c11f R14: 00007f1ef2095300 R15: 0000000000022000 [ 3058.830176] CPU: 1 PID: 7219 Comm: syz-executor.4 Not tainted 4.14.230-syzkaller #0 [ 3058.838223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3058.848120] Call Trace: [ 3058.850733] dump_stack+0x1b2/0x281 [ 3058.854498] warn_alloc.cold+0x96/0x1cc [ 3058.858684] ? zone_watermark_ok_safe+0x220/0x220 [ 3058.863836] __alloc_pages_nodemask+0x2127/0x2720 [ 3058.869185] ? lock_acquire+0x170/0x3f0 [ 3058.873563] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3058.878815] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3058.884645] ? __mutex_unlock_slowpath+0x75/0x770 [ 3058.889801] alloc_pages_current+0x155/0x260 [ 3058.894713] ion_page_pool_alloc+0x118/0x1b0 [ 3058.899303] ion_system_heap_allocate+0x133/0x8c0 [ 3058.904339] ? ion_alloc+0x187/0x810 [ 3058.908155] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3058.913982] ? ion_system_contig_heap_create+0x130/0x130 [ 3058.919809] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3058.925037] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3058.929984] ion_alloc+0x204/0x810 [ 3058.933543] ? ion_dma_buf_release+0x40/0x40 [ 3058.938249] ? __might_fault+0x177/0x1b0 [ 3058.942322] ion_ioctl+0xea/0x1f0 [ 3058.945781] ? ion_query_heaps+0x360/0x360 [ 3058.950509] ? _raw_spin_unlock+0x29/0x40 [ 3058.954691] ? ion_query_heaps+0x360/0x360 [ 3058.959475] do_vfs_ioctl+0x75a/0xff0 [ 3058.963309] ? ioctl_preallocate+0x1a0/0x1a0 [ 3058.967823] ? lock_downgrade+0x740/0x740 [ 3058.972337] ? __fget+0x225/0x360 [ 3058.976257] ? do_vfs_ioctl+0xff0/0xff0 [ 3058.980624] ? security_file_ioctl+0x83/0xb0 [ 3058.985373] SyS_ioctl+0x7f/0xb0 [ 3058.988924] ? do_vfs_ioctl+0xff0/0xff0 [ 3058.992906] do_syscall_64+0x1d5/0x640 [ 3058.996819] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3059.002288] RIP: 0033:0x466459 [ 3059.005651] RSP: 002b:00007f61587a5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3059.015382] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 3059.023032] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3059.030671] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3059.038318] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 3059.045993] R13: 00007ffed7f6205f R14: 00007f61587a5300 R15: 0000000000022000 [ 3059.323013] warn_alloc_show_mem: 1 callbacks suppressed [ 3059.335411] Mem-Info: [ 3059.337855] active_anon:80776 inactive_anon:33081 isolated_anon:0 [ 3059.337855] active_file:1227 inactive_file:5438 isolated_file:0 [ 3059.337855] unevictable:0 dirty:90 writeback:0 unstable:0 [ 3059.337855] slab_reclaimable:14712 slab_unreclaimable:138217 [ 3059.337855] mapped:57052 shmem:35594 pagetables:20473 bounce:0 [ 3059.337855] free:217414 free_pcp:418 free_cma:0 [ 3059.422273] Node 0 active_anon:249904kB inactive_anon:100924kB active_file:4900kB inactive_file:21616kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:193392kB dirty:352kB writeback:0kB shmem:105668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 180224kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3059.519868] Node 1 active_anon:73200kB inactive_anon:31400kB active_file:8kB inactive_file:136kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:8kB writeback:0kB shmem:36708kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3059.562781] Node 0 DMA free:11148kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3059.659912] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3059.665703] Node 0 DMA32 free:249356kB min:36200kB low:45248kB high:54296kB active_anon:249636kB inactive_anon:100868kB active_file:4900kB inactive_file:21316kB unevictable:0kB writepending:352kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11424kB pagetables:14720kB bounce:0kB free_pcp:764kB local_pcp:144kB free_cma:0kB [ 3059.698095] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3059.723315] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 3059.739848] lowmem_reserve[]: 0 0 0 0 0 [ 3059.740651] CPU: 0 PID: 7177 Comm: syz-executor.4 Not tainted 4.14.230-syzkaller #0 [ 3059.744053] Node 0 [ 3059.752467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3059.752472] Call Trace: [ 3059.752494] dump_stack+0x1b2/0x281 [ 3059.752506] warn_alloc.cold+0x96/0x1cc [ 3059.752518] ? zone_watermark_ok_safe+0x220/0x220 [ 3059.752539] __alloc_pages_nodemask+0x2127/0x2720 [ 3059.752549] ? _raw_spin_unlock_irq+0x24/0x80 [ 3059.752563] ? lock_acquire+0x170/0x3f0 [ 3059.752575] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3059.752590] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3059.752601] ? __mutex_unlock_slowpath+0x75/0x770 [ 3059.752616] alloc_pages_current+0x155/0x260 [ 3059.769917] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3059.770906] ion_page_pool_alloc+0x118/0x1b0 [ 3059.774880] lowmem_reserve[]: [ 3059.779799] ion_system_heap_allocate+0x133/0x8c0 [ 3059.779809] ? ion_alloc+0x187/0x810 [ 3059.779819] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3059.779827] ? ion_system_contig_heap_create+0x130/0x130 [ 3059.779836] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3059.779849] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3059.799377] 0 [ 3059.804788] ion_alloc+0x204/0x810 [ 3059.804802] ? ion_dma_buf_release+0x40/0x40 [ 3059.804814] ? __might_fault+0x177/0x1b0 [ 3059.804823] ion_ioctl+0xea/0x1f0 [ 3059.804831] ? ion_query_heaps+0x360/0x360 [ 3059.804842] ? ion_query_heaps+0x360/0x360 [ 3059.804852] do_vfs_ioctl+0x75a/0xff0 [ 3059.804863] ? ioctl_preallocate+0x1a0/0x1a0 [ 3059.804871] ? lock_downgrade+0x740/0x740 [ 3059.804884] ? __fget+0x225/0x360 [ 3059.804892] ? do_vfs_ioctl+0xff0/0xff0 [ 3059.804902] ? security_file_ioctl+0x83/0xb0 [ 3059.804910] SyS_ioctl+0x7f/0xb0 [ 3059.804917] ? do_vfs_ioctl+0xff0/0xff0 [ 3059.804930] do_syscall_64+0x1d5/0x640 [ 3059.829872] 0 [ 3059.840866] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3059.840875] RIP: 0033:0x466459 [ 3059.840880] RSP: 002b:00007f61587e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3059.859853] 0 [ 3059.863455] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3059.868979] 0 [ 3059.874430] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3059.874436] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3059.874441] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3059.874445] R13: 00007ffed7f6205f R14: 00007f61587e7300 R15: 0000000000022000 [ 3060.207958] 0 [ 3060.222884] Node 1 Normal free:365040kB min:53696kB low:67120kB high:80544kB active_anon:73200kB inactive_anon:31400kB active_file:8kB inactive_file:136kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21824kB pagetables:67040kB bounce:0kB free_pcp:148kB local_pcp:52kB free_cma:0kB [ 3060.273642] lowmem_reserve[]: 0 0 0 0 0 [ 3060.279819] Node 0 DMA: 31*4kB (UE) 38*8kB (UME) 60*16kB (UME) 31*32kB (UME) 4*64kB (ME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11084kB [ 3060.319625] Node 0 DMA32: 449*4kB (UME) 94*8kB (ME) 155*16kB (UME) 862*32kB (UME) 179*64kB (U) 6*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 45092kB [ 3060.353710] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3060.379818] Node 1 Normal: 12*4kB (UM) 2*8kB (UM) 0*16kB 6430*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 205824kB [ 3060.409827] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3060.418998] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3060.439796] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3060.449046] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3060.479785] 42217 total pagecache pages [ 3060.483949] 0 pages in swap cache [ 3060.490063] Swap cache stats: add 0, delete 0, find 0/0 [ 3060.495753] Free swap = 0kB [ 3060.509797] Total swap = 0kB [ 3060.513121] 2097051 pages RAM [ 3060.516356] 0 pages HighMem/MovableOnly [ 3060.539809] 363848 pages reserved [ 3060.543503] 0 pages cma reserved [ 3061.221239] syz-executor.2 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 [ 3061.235609] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 3061.242841] CPU: 1 PID: 7224 Comm: syz-executor.2 Not tainted 4.14.230-syzkaller #0 [ 3061.250767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3061.260605] Call Trace: [ 3061.263294] dump_stack+0x1b2/0x281 [ 3061.267116] dump_header+0x178/0x82f [ 3061.270839] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3061.276031] ? ___ratelimit+0x2cd/0x530 [ 3061.280095] oom_kill_process.cold+0x10/0xa40 [ 3061.285129] out_of_memory+0xe3e/0x1190 [ 3061.289308] ? oom_killer_disable+0x1c0/0x1c0 [ 3061.293843] ? mutex_trylock+0x152/0x1a0 [ 3061.298253] __alloc_pages_nodemask+0x23e1/0x2720 [ 3061.303329] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3061.308501] ? perf_event_mmap+0x74/0xb80 [ 3061.313081] ? __anon_vma_prepare+0x28f/0x4f0 [ 3061.317678] ? anon_vma_interval_tree_insert+0x20a/0x3c0 [ 3061.323485] alloc_pages_vma+0xd2/0x6d0 [ 3061.327665] __handle_mm_fault+0x25fa/0x4620 [ 3061.332098] ? change_protection+0xa0/0xa0 [ 3061.337105] ? vm_insert_page+0x7c0/0x7c0 [ 3061.341527] ? do_mprotect_pkey+0x691/0x7e0 [ 3061.345856] ? mark_held_locks+0xa6/0xf0 [ 3061.350195] handle_mm_fault+0x455/0x9c0 [ 3061.354314] __do_page_fault+0x549/0xad0 [ 3061.358502] ? spurious_fault+0x640/0x640 [ 3061.363163] ? do_page_fault+0x60/0x500 [ 3061.367582] ? page_fault+0x2f/0x50 [ 3061.371358] page_fault+0x45/0x50 [ 3061.375509] RIP: 2067f700: (null) [ 3061.380077] RSP: 801000:00007fff3acd5ef0 EFLAGS: 7fff3acd5e80 [ 3061.390608] Mem-Info: [ 3061.406741] active_anon:80931 inactive_anon:33081 isolated_anon:0 [ 3061.406741] active_file:11 inactive_file:14 isolated_file:0 [ 3061.406741] unevictable:0 dirty:0 writeback:5 unstable:0 [ 3061.406741] slab_reclaimable:14704 slab_unreclaimable:137051 [ 3061.406741] mapped:52779 shmem:35594 pagetables:20605 bounce:0 [ 3061.406741] free:25091 free_pcp:0 free_cma:0 [ 3061.450764] Node 0 active_anon:250424kB inactive_anon:100924kB active_file:12kB inactive_file:84kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176328kB dirty:0kB writeback:12kB shmem:105668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 180224kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3061.483429] Node 1 active_anon:73300kB inactive_anon:31400kB active_file:12kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:8kB shmem:36708kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3061.512831] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3061.540507] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3061.545964] Node 0 DMA32 free:35708kB min:36200kB low:45248kB high:54296kB active_anon:250256kB inactive_anon:100868kB active_file:0kB inactive_file:248kB unevictable:0kB writepending:12kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11552kB pagetables:15248kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3061.576285] lowmem_reserve[]: 0 0 0 0 0 [ 3061.592441] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3061.627858] lowmem_reserve[]: 0 0 0 0 0 [ 3061.632285] Node 1 Normal free:53668kB min:53696kB low:67120kB high:80544kB active_anon:73200kB inactive_anon:31400kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21824kB pagetables:67040kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3061.676275] lowmem_reserve[]: 0 0 0 0 0 [ 3061.695172] Node 0 DMA: 24*4kB (UE) 38*8kB (UME) 60*16kB (UME) 31*32kB (UME) 4*64kB (ME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11056kB [ 3061.717586] Node 0 DMA32: 1368*4kB (UME) 418*8kB (ME) 256*16kB (UME) 89*32kB (UME) 212*64kB (UM) 20*128kB (UM) 9*256kB (UM) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 35728kB [ 3061.736643] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3061.748731] Node 1 Normal: 12*4kB (M) 4*8kB (UM) 0*16kB 1675*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53680kB [ 3061.762361] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3061.771586] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3061.781318] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3061.790836] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3061.800519] 35621 total pagecache pages [ 3061.804543] 0 pages in swap cache [ 3061.808346] Swap cache stats: add 0, delete 0, find 0/0 [ 3061.815091] Free swap = 0kB [ 3061.818572] Total swap = 0kB [ 3061.821901] 2097051 pages RAM [ 3061.825188] 0 pages HighMem/MovableOnly [ 3061.829246] 363848 pages reserved [ 3061.833107] 0 pages cma reserved [ 3061.836686] Out of memory (oom_kill_allocating_task): Kill process 7224 (syz-executor.2) score 0 or sacrifice child [ 3061.848064] Killed process 7224 (syz-executor.2) total-vm:93120kB, anon-rss:72kB, file-rss:34152kB, shmem-rss:0kB [ 3061.868568] oom_reaper: reaped process 7224 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3061.881707] syz-executor.3 invoked oom-killer: gfp_mask=0x14200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 3061.898876] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 3061.918233] CPU: 1 PID: 7225 Comm: syz-executor.3 Not tainted 4.14.230-syzkaller #0 [ 3061.927164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3061.937174] Call Trace: [ 3061.939762] dump_stack+0x1b2/0x281 [ 3061.944084] dump_header+0x178/0x82f [ 3061.948330] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3061.953885] ? ___ratelimit+0x2cd/0x530 [ 3061.958139] oom_kill_process.cold+0x10/0xa40 [ 3061.963482] out_of_memory+0xe3e/0x1190 [ 3061.968070] ? oom_killer_disable+0x1c0/0x1c0 [ 3061.973425] ? mutex_trylock+0x152/0x1a0 [ 3061.977759] __alloc_pages_nodemask+0x23e1/0x2720 [ 3061.982899] ? __schedule+0x893/0x1de0 [ 3061.986768] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3061.991869] ? lock_acquire+0x170/0x3f0 [ 3061.995837] ? reacquire_held_locks+0xb5/0x3f0 [ 3062.001271] ? alloc_set_pte+0xd57/0x1610 [ 3062.005492] alloc_pages_vma+0xd2/0x6d0 [ 3062.009651] wp_page_copy+0x1f5/0x25c0 [ 3062.014053] ? tlb_flush_mmu_free+0x1a0/0x1a0 [ 3062.019032] ? __lock_acquire+0x5fc/0x3f20 [ 3062.023337] do_wp_page+0x245/0x1db0 [ 3062.027381] ? __handle_mm_fault+0x129c/0x4620 [ 3062.032069] ? finish_mkwrite_fault+0x5e0/0x5e0 [ 3062.037295] __handle_mm_fault+0x234f/0x4620 [ 3062.042283] ? vm_insert_page+0x7c0/0x7c0 [ 3062.046788] ? do_mprotect_pkey+0x691/0x7e0 [ 3062.051384] ? mark_held_locks+0xa6/0xf0 [ 3062.055443] handle_mm_fault+0x455/0x9c0 [ 3062.060365] __do_page_fault+0x549/0xad0 [ 3062.065245] ? spurious_fault+0x640/0x640 [ 3062.069563] ? do_page_fault+0x60/0x500 [ 3062.073526] ? page_fault+0x2f/0x50 [ 3062.077160] page_fault+0x45/0x50 [ 3062.081118] RIP: 1514700: (null) [ 3062.085341] RSP: 801000:00007ffec2733bf0 EFLAGS: 7ffec2733b80 [ 3062.105575] Mem-Info: [ 3062.125970] active_anon:80938 inactive_anon:33081 isolated_anon:0 [ 3062.125970] active_file:41 inactive_file:0 isolated_file:0 [ 3062.125970] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3062.125970] slab_reclaimable:14704 slab_unreclaimable:137060 [ 3062.125970] mapped:52777 shmem:35594 pagetables:20605 bounce:0 [ 3062.125970] free:25116 free_pcp:63 free_cma:0 [ 3062.169275] Node 0 active_anon:250424kB inactive_anon:100924kB active_file:156kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176292kB dirty:0kB writeback:0kB shmem:105668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 180224kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3062.212306] Node 1 active_anon:73328kB inactive_anon:31400kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:36708kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3062.254454] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3062.290580] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3062.295764] Node 0 DMA32 free:35728kB min:36200kB low:45248kB high:54296kB active_anon:250256kB inactive_anon:100868kB active_file:112kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11488kB pagetables:15248kB bounce:0kB free_pcp:252kB local_pcp:120kB free_cma:0kB [ 3062.332588] lowmem_reserve[]: 0 0 0 0 0 [ 3062.336895] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3062.372233] lowmem_reserve[]: 0 0 0 0 0 [ 3062.376349] Node 1 Normal free:53680kB min:53696kB low:67120kB high:80544kB active_anon:73328kB inactive_anon:31400kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21824kB pagetables:67040kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3062.409801] lowmem_reserve[]: 0 0 0 0 0 [ 3062.414061] Node 0 DMA: 24*4kB (UE) 38*8kB (UME) 60*16kB (UME) 31*32kB (UME) 4*64kB (ME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11056kB [ 3062.432823] Node 0 DMA32: 1368*4kB (UME) 418*8kB (ME) 256*16kB (UME) 89*32kB (UME) 212*64kB (UM) 20*128kB (UM) 9*256kB (UM) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 35728kB [ 3062.449423] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3062.462757] Node 1 Normal: 12*4kB (M) 4*8kB (UM) 0*16kB 1675*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53680kB [ 3062.475993] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3062.486961] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3062.513263] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3062.526684] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3062.548929] 35621 total pagecache pages [ 3062.555092] 0 pages in swap cache [ 3062.558680] Swap cache stats: add 0, delete 0, find 0/0 [ 3062.572622] Free swap = 0kB [ 3062.576012] Total swap = 0kB [ 3062.579358] 2097051 pages RAM [ 3062.586728] 0 pages HighMem/MovableOnly [ 3062.594962] 363848 pages reserved [ 3062.598945] 0 pages cma reserved [ 3062.606473] Out of memory (oom_kill_allocating_task): Kill process 7225 (syz-executor.3) score 0 or sacrifice child [ 3062.619508] Killed process 7225 (syz-executor.3) total-vm:93120kB, anon-rss:76kB, file-rss:34148kB, shmem-rss:0kB [ 3062.644700] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 3062.664348] in:imklog cpuset=/ mems_allowed=0-1 [ 3062.669408] CPU: 1 PID: 6819 Comm: in:imklog Not tainted 4.14.230-syzkaller #0 [ 3062.677299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3062.686832] Call Trace: [ 3062.689595] dump_stack+0x1b2/0x281 [ 3062.693469] dump_header+0x178/0x82f [ 3062.697178] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3062.702606] ? ___ratelimit+0x2cd/0x530 [ 3062.706682] oom_kill_process.cold+0x10/0xa40 [ 3062.711434] out_of_memory+0xe3e/0x1190 [ 3062.715531] ? oom_killer_disable+0x1c0/0x1c0 [ 3062.720411] ? mutex_trylock+0x152/0x1a0 [ 3062.725451] __alloc_pages_nodemask+0x23e1/0x2720 [ 3062.730440] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3062.735358] alloc_pages_current+0x155/0x260 [ 3062.740159] filemap_fault+0x11a1/0x1ad0 [ 3062.744441] ext4_filemap_fault+0x84/0xb0 [ 3062.748796] __do_fault+0xfa/0x380 [ 3062.752342] __handle_mm_fault+0x2497/0x4620 [ 3062.757489] ? vm_insert_page+0x7c0/0x7c0 [ 3062.762645] ? lock_downgrade+0x740/0x740 [ 3062.767244] ? mark_held_locks+0xa6/0xf0 [ 3062.771440] handle_mm_fault+0x455/0x9c0 [ 3062.775897] __do_page_fault+0x549/0xad0 [ 3062.780060] ? spurious_fault+0x640/0x640 [ 3062.784378] ? do_page_fault+0x60/0x500 [ 3062.788755] ? page_fault+0x2f/0x50 [ 3062.792609] page_fault+0x45/0x50 [ 3062.796241] RIP: 1fa0:0x1f9f [ 3062.799250] RSP: 0000:0000559b24e7b9d0 EFLAGS: 7fbb5c566da0 [ 3062.806039] Mem-Info: [ 3062.814551] active_anon:80930 inactive_anon:33081 isolated_anon:0 [ 3062.814551] active_file:11 inactive_file:4 isolated_file:0 [ 3062.814551] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3062.814551] slab_reclaimable:14704 slab_unreclaimable:137060 [ 3062.814551] mapped:52777 shmem:35594 pagetables:20583 bounce:0 [ 3062.814551] free:25085 free_pcp:101 free_cma:0 [ 3062.849064] Node 0 active_anon:250392kB inactive_anon:100924kB active_file:40kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176292kB dirty:0kB writeback:0kB shmem:105668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 180224kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3062.878090] Node 1 active_anon:73328kB inactive_anon:31400kB active_file:0kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:36708kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3062.906334] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3062.940616] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3062.945801] Node 0 DMA32 free:35604kB min:36200kB low:45248kB high:54296kB active_anon:250196kB inactive_anon:100868kB active_file:52kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11488kB pagetables:15072kB bounce:0kB free_pcp:516kB local_pcp:132kB free_cma:0kB [ 3062.979215] lowmem_reserve[]: 0 0 0 0 0 [ 3062.983290] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3063.009995] lowmem_reserve[]: 0 0 0 0 0 [ 3063.014123] Node 1 Normal free:53680kB min:53696kB low:67120kB high:80544kB active_anon:73328kB inactive_anon:31400kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21824kB pagetables:67040kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3063.044308] lowmem_reserve[]: 0 0 0 0 0 [ 3063.048467] Node 0 DMA: 24*4kB (UE) 38*8kB (UME) 60*16kB (UME) 31*32kB (UME) 4*64kB (ME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11056kB [ 3063.065133] Node 0 DMA32: 1337*4kB (UME) 418*8kB (ME) 256*16kB (UME) 89*32kB (UME) 212*64kB (UM) 20*128kB (UM) 9*256kB (UM) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 35604kB [ 3063.081945] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3063.093355] Node 1 Normal: 12*4kB (M) 4*8kB (UM) 0*16kB 1675*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53680kB [ 3063.106439] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3063.116381] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3063.125693] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3063.135300] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3063.146282] 35621 total pagecache pages [ 3063.150646] 0 pages in swap cache [ 3063.154210] Swap cache stats: add 0, delete 0, find 0/0 [ 3063.161853] Free swap = 0kB [ 3063.165069] Total swap = 0kB [ 3063.168346] 2097051 pages RAM [ 3063.172033] 0 pages HighMem/MovableOnly [ 3063.176282] 363848 pages reserved [ 3063.181837] 0 pages cma reserved [ 3063.185239] Out of memory (oom_kill_allocating_task): Kill process 6819 (in:imklog) score 0 or sacrifice child [ 3063.195830] Killed process 6807 (rsyslogd) total-vm:254332kB, anon-rss:2824kB, file-rss:0kB, shmem-rss:0kB [ 3063.209310] oom_reaper: reaped process 6807 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3063.388448] oom_reaper: reaped process 7182 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3063.508280] systemd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 3063.538853] systemd cpuset=/ mems_allowed=0-1 [ 3063.546547] CPU: 0 PID: 1 Comm: systemd Not tainted 4.14.230-syzkaller #0 [ 3063.553783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3063.563588] Call Trace: [ 3063.566292] dump_stack+0x1b2/0x281 [ 3063.570141] dump_header+0x178/0x82f [ 3063.573979] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3063.579180] ? ___ratelimit+0x2cd/0x530 [ 3063.583252] oom_kill_process.cold+0x10/0xa40 [ 3063.588262] ? lock_downgrade+0x740/0x740 [ 3063.592700] out_of_memory+0x2dc/0x1190 [ 3063.596690] ? oom_killer_disable+0x1c0/0x1c0 [ 3063.601289] ? mutex_trylock+0x152/0x1a0 [ 3063.605928] __alloc_pages_nodemask+0x23e1/0x2720 [ 3063.610901] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3063.615948] alloc_pages_current+0x155/0x260 [ 3063.620836] filemap_fault+0x11a1/0x1ad0 [ 3063.625388] ext4_filemap_fault+0x84/0xb0 [ 3063.629533] __do_fault+0xfa/0x380 [ 3063.629700] syz-executor.0: page allocation failure: order:0 [ 3063.633085] __handle_mm_fault+0x2497/0x4620 [ 3063.633096] ? vm_insert_page+0x7c0/0x7c0 [ 3063.639149] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 3063.643736] ? mark_held_locks+0xa6/0xf0 [ 3063.643746] handle_mm_fault+0x455/0x9c0 [ 3063.643757] __do_page_fault+0x549/0xad0 [ 3063.643767] ? spurious_fault+0x640/0x640 [ 3063.643774] ? do_page_fault+0x60/0x500 [ 3063.643781] ? page_fault+0x2f/0x50 [ 3063.643787] page_fault+0x45/0x50 [ 3063.643794] RIP: 0001:0xffffffffffffffff [ 3063.643798] RSP: fe7d1f50:00007ffe37cf8dc0 EFLAGS: 7ffe37cf8ae0 [ 3063.661913] Mem-Info: [ 3063.669433] (null) [ 3063.687389] active_anon:80144 inactive_anon:33081 isolated_anon:0 [ 3063.687389] active_file:19 inactive_file:17 isolated_file:0 [ 3063.687389] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3063.687389] slab_reclaimable:14704 slab_unreclaimable:136646 [ 3063.687389] mapped:52786 shmem:35594 pagetables:20530 bounce:0 [ 3063.687389] free:13974 free_pcp:86 free_cma:0 [ 3063.693403] syz-executor.0 cpuset= [ 3063.705955] Node 0 active_anon:247288kB inactive_anon:100924kB active_file:80kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176328kB dirty:0kB writeback:0kB shmem:105668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 178176kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3063.745035] / mems_allowed=0-1 [ 3063.791453] Node 1 active_anon:73288kB inactive_anon:31400kB active_file:0kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:36708kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3063.795201] CPU: 1 PID: 7182 Comm: syz-executor.0 Not tainted 4.14.230-syzkaller #0 [ 3063.823319] Node 0 [ 3063.831250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3063.831255] Call Trace: [ 3063.831275] dump_stack+0x1b2/0x281 [ 3063.831289] warn_alloc.cold+0x96/0x1cc [ 3063.831302] ? zone_watermark_ok_safe+0x220/0x220 [ 3063.833665] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3063.843202] ? usleep_range+0x130/0x130 [ 3063.843211] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3063.843223] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3063.843231] ? run_timer_softirq+0x5a0/0x5a0 [ 3063.843247] __alloc_pages_nodemask+0x2127/0x2720 [ 3063.846072] lowmem_reserve[]: [ 3063.849776] ? lock_acquire+0x170/0x3f0 [ 3063.849793] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3063.853745] 0 [ 3063.858670] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3063.885798] 2717 [ 3063.889908] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3063.889928] alloc_pages_current+0x155/0x260 [ 3063.895697] 2718 [ 3063.901599] ion_page_pool_alloc+0x118/0x1b0 [ 3063.901609] ion_system_heap_allocate+0x133/0x8c0 [ 3063.901618] ? ion_alloc+0x187/0x810 [ 3063.906387] 2718 [ 3063.911409] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3063.911420] ? ion_system_contig_heap_create+0x130/0x130 [ 3063.911427] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3063.911439] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3063.914800] 2718 [ 3063.919129] ion_alloc+0x204/0x810 [ 3063.925875] ? ion_dma_buf_release+0x40/0x40 [ 3063.930496] Node 0 [ 3063.932531] ? __might_fault+0x177/0x1b0 [ 3063.938228] DMA32 free:18076kB min:36200kB low:45248kB high:54296kB active_anon:247120kB inactive_anon:100868kB active_file:24kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11392kB pagetables:14972kB bounce:0kB free_pcp:220kB local_pcp:4kB free_cma:0kB [ 3063.942705] ion_ioctl+0xea/0x1f0 [ 3063.942716] ? ion_query_heaps+0x360/0x360 [ 3063.942727] ? ion_query_heaps+0x360/0x360 [ 3063.942738] do_vfs_ioctl+0x75a/0xff0 [ 3063.945014] lowmem_reserve[]: [ 3063.949551] ? ioctl_preallocate+0x1a0/0x1a0 [ 3063.949561] ? lock_downgrade+0x740/0x740 [ 3063.949574] ? __fget+0x225/0x360 [ 3063.954966] 0 [ 3063.958385] ? do_vfs_ioctl+0xff0/0xff0 [ 3063.960614] 0 [ 3063.967348] ? security_file_ioctl+0x83/0xb0 [ 3063.972930] 0 [ 3063.978062] SyS_ioctl+0x7f/0xb0 [ 3063.983114] 0 [ 3063.985134] ? do_vfs_ioctl+0xff0/0xff0 [ 3063.988845] 0 [ 3063.993332] do_syscall_64+0x1d5/0x640 [ 3063.993348] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3063.993356] RIP: 0033:0x466459 [ 3063.999970] RSP: 002b:00007f1ef2095188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3063.999979] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3063.999985] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3063.999990] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3063.999994] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3064.000002] R13: 00007fffa779c11f R14: 00007f1ef2095300 R15: 0000000000022000 [ 3064.030890] Node 0 [ 3064.044760] warn_alloc_show_mem: 2 callbacks suppressed [ 3064.044764] Mem-Info: [ 3064.059110] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3064.068149] active_anon:80144 inactive_anon:33081 isolated_anon:0 [ 3064.068149] active_file:13 inactive_file:13 isolated_file:0 [ 3064.068149] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3064.068149] slab_reclaimable:14703 slab_unreclaimable:136544 [ 3064.068149] mapped:52777 shmem:35594 pagetables:20530 bounce:0 [ 3064.068149] free:14194 free_pcp:106 free_cma:0 [ 3064.080233] lowmem_reserve[]: [ 3064.090108] Node 0 active_anon:247288kB inactive_anon:100924kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176292kB dirty:0kB writeback:0kB shmem:105668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 178176kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3064.105043] 0 [ 3064.127220] Node 1 active_anon:73288kB inactive_anon:31400kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:36708kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3064.149466] 0 [ 3064.156263] Node 0 [ 3064.163766] 0 [ 3064.190242] DMA free:10992kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3064.241929] 0 [ 3064.257334] lowmem_reserve[]: [ 3064.297126] 0 [ 3064.320056] 0 2717 2718 2718 2718 [ 3064.325644] Node 0 DMA32 free:19340kB min:36200kB low:45248kB high:54296kB active_anon:247120kB inactive_anon:100868kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11392kB pagetables:14972kB bounce:0kB free_pcp:112kB local_pcp:0kB free_cma:0kB [ 3064.363696] lowmem_reserve[]: 0 0 0 0 0 [ 3064.367893] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3064.373742] Node 1 [ 3064.400577] lowmem_reserve[]: 0 0 0 0 0 [ 3064.407151] Node 1 Normal free:26944kB min:53696kB low:67120kB high:80544kB active_anon:73288kB inactive_anon:31400kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21792kB pagetables:67016kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3064.411452] Normal free:26944kB min:53696kB low:67120kB high:80544kB active_anon:73288kB inactive_anon:31400kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21792kB pagetables:67016kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3064.451849] lowmem_reserve[]: [ 3064.476959] lowmem_reserve[]: [ 3064.481923] 0 [ 3064.484672] 0 [ 3064.485298] 0 [ 3064.487267] 0 [ 3064.489055] 0 [ 3064.497550] 0 0 0 [ 3064.505602] 0 0 [ 3064.505729] Node 0 [ 3064.507712] Node 0 [ 3064.507719] DMA: [ 3064.516617] DMA: [ 3064.518459] 4*4kB [ 3064.518878] 4*4kB [ 3064.524835] (UE) 38*8kB (UME) 59*16kB (UME) 30*32kB (UME) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10992kB [ 3064.529157] (UE) 38*8kB (UME) 59*16kB (UME) 30*32kB (UME) 5*64kB (UME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10992kB [ 3064.555188] Node 0 [ 3064.577256] Node 0 DMA32: 1409*4kB (UME) 434*8kB (UME) 257*16kB (UME) 38*32kB (ME) 21*64kB (UM) 12*128kB (UM) 7*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19108kB [ 3064.581106] DMA32: [ 3064.606001] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3064.610194] 1409*4kB [ 3064.629289] Node 1 Normal: 15*4kB (M) 3*8kB (M) 2*16kB (UM) 839*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26964kB [ 3064.633719] (UME) 434*8kB (UME) 257*16kB (UME) 38*32kB (ME) 21*64kB (UM) 12*128kB (UM) 7*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19108kB [ 3064.664632] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3064.681700] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3064.693621] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3064.702606] Node 1 Normal: 15*4kB (M) 3*8kB (M) 2*16kB (UM) 839*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26964kB [ 3064.715051] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3064.726506] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3064.738302] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3064.743671] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3064.759556] 35620 total pagecache pages [ 3064.764211] 0 pages in swap cache [ 3064.766442] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3064.768360] Swap cache stats: add 0, delete 0, find 0/0 [ 3064.768366] Free swap = 0kB [ 3064.780921] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3064.796991] Total swap = 0kB [ 3064.804808] 2097051 pages RAM [ 3064.807483] 35620 total pagecache pages [ 3064.807921] 0 pages HighMem/MovableOnly [ 3064.813758] 0 pages in swap cache [ 3064.827501] Swap cache stats: add 0, delete 0, find 0/0 [ 3064.828663] 363848 pages reserved [ 3064.835100] Free swap = 0kB [ 3064.838200] 0 pages cma reserved [ 3064.847383] Total swap = 0kB [ 3064.852802] 2097051 pages RAM [ 3064.856052] 0 pages HighMem/MovableOnly [ 3064.885098] 363848 pages reserved [ 3064.889147] 0 pages cma reserved [ 3064.895058] Out of memory: Kill process 8565 (syz-executor.4) score 1005 or sacrifice child [ 3064.935950] Killed process 8565 (syz-executor.4) total-vm:93252kB, anon-rss:2200kB, file-rss:34628kB, shmem-rss:0kB [ 3064.975476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3065.009278] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3065.069210] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3065.112051] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3065.161028] device bridge_slave_1 left promiscuous mode [ 3065.191601] bridge0: port 2(bridge_slave_1) entered disabled state [ 3065.198994] device bridge_slave_0 left promiscuous mode [ 3065.206274] bridge0: port 1(bridge_slave_0) entered disabled state [ 3065.243879] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3065.269557] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3065.301752] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3065.308594] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3065.341280] device bridge_slave_1 left promiscuous mode [ 3065.347006] bridge0: port 2(bridge_slave_1) entered disabled state [ 3065.358877] device bridge_slave_0 left promiscuous mode [ 3065.392760] bridge0: port 1(bridge_slave_0) entered disabled state [ 3065.463254] device veth1_macvtap left promiscuous mode [ 3065.493053] device veth0_macvtap left promiscuous mode [ 3065.520176] device veth1_vlan left promiscuous mode [ 3065.525754] device veth0_vlan left promiscuous mode [ 3065.553223] device veth1_macvtap left promiscuous mode [ 3065.572593] device veth0_macvtap left promiscuous mode [ 3065.580464] device veth1_vlan left promiscuous mode [ 3065.585668] device veth0_vlan left promiscuous mode [ 3065.780434] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 3065.869693] systemd-journal cpuset=/ mems_allowed=0-1 [ 3065.875500] CPU: 1 PID: 6487 Comm: systemd-journal Not tainted 4.14.230-syzkaller #0 [ 3065.884275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3065.894166] Call Trace: [ 3065.896772] dump_stack+0x1b2/0x281 [ 3065.900873] dump_header+0x178/0x82f [ 3065.904637] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3065.909956] ? ___ratelimit+0x2cd/0x530 [ 3065.914325] oom_kill_process.cold+0x10/0xa40 [ 3065.919209] out_of_memory+0xe3e/0x1190 [ 3065.923391] ? oom_killer_disable+0x1c0/0x1c0 [ 3065.928045] ? mutex_trylock+0x152/0x1a0 [ 3065.932364] __alloc_pages_nodemask+0x23e1/0x2720 [ 3065.937559] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3065.942767] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3065.948697] ? cache_grow_begin+0x3f/0x700 [ 3065.953511] cache_grow_begin+0x91/0x700 [ 3065.957692] fallback_alloc+0x207/0x2c0 [ 3065.961724] kmem_cache_alloc+0x1e5/0x3c0 [ 3065.965903] getname_flags+0xc8/0x550 [ 3065.970427] user_path_at_empty+0x2a/0x50 [ 3065.974596] SyS_faccessat+0x21b/0x680 [ 3065.978498] ? SyS_fallocate+0x80/0x80 [ 3065.982489] ? do_syscall_64+0x4c/0x640 [ 3065.986711] ? SyS_faccessat+0x680/0x680 [ 3065.990803] do_syscall_64+0x1d5/0x640 [ 3065.994800] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3066.000043] RIP: 0033:0x7fb5efcc99c7 [ 3066.004112] RSP: 002b:00007ffe8e01da58 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 3066.012155] RAX: ffffffffffffffda RBX: 00007ffe8e020970 RCX: 00007fb5efcc99c7 [ 3066.019523] RDX: 00007fb5f073aa00 RSI: 0000000000000000 RDI: 0000564bd96699a3 [ 3066.027327] RBP: 00007ffe8e01da90 R08: 0000000000000000 R09: 0000000000000000 [ 3066.034939] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 3066.042461] R13: 0000000000000000 R14: 00007ffe8e020970 R15: 00007ffe8e01df80 [ 3066.139304] Mem-Info: [ 3066.142158] active_anon:79689 inactive_anon:33085 isolated_anon:0 [ 3066.142158] active_file:67 inactive_file:47 isolated_file:0 [ 3066.142158] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3066.142158] slab_reclaimable:14704 slab_unreclaimable:137702 [ 3066.142158] mapped:52899 shmem:35602 pagetables:20522 bounce:0 [ 3066.142158] free:13964 free_pcp:45 free_cma:0 [ 3066.205840] Node 0 active_anon:245260kB inactive_anon:100932kB active_file:100kB inactive_file:80kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176440kB dirty:0kB writeback:0kB shmem:105692kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 176128kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3066.240085] Node 1 active_anon:73496kB inactive_anon:31408kB active_file:68kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34856kB dirty:0kB writeback:0kB shmem:36716kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3066.273465] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3066.305824] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3066.311869] Node 0 DMA32 free:17736kB min:36200kB low:45248kB high:54296kB active_anon:245092kB inactive_anon:100876kB active_file:684kB inactive_file:556kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11392kB pagetables:14872kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3066.347837] lowmem_reserve[]: 0 0 0 0 0 [ 3066.349789] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3066.352306] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3066.386826] syz-executor.0 cpuset= [ 3066.403976] lowmem_reserve[]: [ 3066.405319] / [ 3066.407635] 0 [ 3066.412597] mems_allowed=0-1 [ 3066.414699] 0 0 [ 3066.417713] CPU: 0 PID: 7182 Comm: syz-executor.0 Not tainted 4.14.230-syzkaller #0 [ 3066.417716] 0 0 [ 3066.419691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3066.419695] Call Trace: [ 3066.419715] dump_stack+0x1b2/0x281 [ 3066.419728] warn_alloc.cold+0x96/0x1cc [ 3066.419739] ? zone_watermark_ok_safe+0x220/0x220 [ 3066.419761] __alloc_pages_nodemask+0x2127/0x2720 [ 3066.419771] ? lock_acquire+0x170/0x3f0 [ 3066.419783] ? lock_acquire+0x170/0x3f0 [ 3066.441173] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3066.441191] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3066.441203] ? __mutex_unlock_slowpath+0x75/0x770 [ 3066.441215] alloc_pages_current+0x155/0x260 [ 3066.441229] ion_page_pool_alloc+0x118/0x1b0 [ 3066.445834] Node 1 [ 3066.447433] ion_system_heap_allocate+0x133/0x8c0 [ 3066.457393] Normal free:26624kB min:53696kB low:67120kB high:80544kB active_anon:73496kB inactive_anon:31408kB active_file:48kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21792kB pagetables:67084kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3066.461817] ? _raw_spin_unlock+0x29/0x40 [ 3066.461827] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3066.461837] ? ion_system_contig_heap_create+0x130/0x130 [ 3066.461845] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3066.461857] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3066.461868] ion_alloc+0x27a/0x810 [ 3066.467884] lowmem_reserve[]: [ 3066.470066] ? ion_dma_buf_release+0x40/0x40 [ 3066.470077] ? __might_fault+0x177/0x1b0 [ 3066.470088] ion_ioctl+0xea/0x1f0 [ 3066.470096] ? ion_query_heaps+0x360/0x360 [ 3066.470107] ? ion_query_heaps+0x360/0x360 [ 3066.470118] do_vfs_ioctl+0x75a/0xff0 [ 3066.470128] ? ioctl_preallocate+0x1a0/0x1a0 [ 3066.470136] ? lock_downgrade+0x740/0x740 [ 3066.470149] ? __fget+0x225/0x360 [ 3066.470160] ? do_vfs_ioctl+0xff0/0xff0 [ 3066.482458] 0 [ 3066.485633] ? security_file_ioctl+0x83/0xb0 [ 3066.494429] 0 [ 3066.495168] SyS_ioctl+0x7f/0xb0 [ 3066.497540] 0 [ 3066.502620] ? do_vfs_ioctl+0xff0/0xff0 [ 3066.502632] do_syscall_64+0x1d5/0x640 [ 3066.502646] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3066.502654] RIP: 0033:0x466459 [ 3066.502658] RSP: 002b:00007f1ef2095188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3066.502667] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3066.502672] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3066.502677] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3066.502681] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3066.502686] R13: 00007fffa779c11f R14: 00007f1ef2095300 R15: 0000000000022000 [ 3066.510725] Mem-Info: [ 3066.539439] 0 [ 3066.547785] active_anon:79689 inactive_anon:33085 isolated_anon:0 [ 3066.547785] active_file:35 inactive_file:6 isolated_file:0 [ 3066.547785] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3066.547785] slab_reclaimable:14704 slab_unreclaimable:137702 [ 3066.547785] mapped:52810 shmem:35602 pagetables:20522 bounce:0 [ 3066.547785] free:13859 free_pcp:30 free_cma:0 [ 3066.557407] 0 [ 3066.557877] Node 0 active_anon:245260kB inactive_anon:100932kB active_file:72kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176392kB dirty:0kB writeback:0kB shmem:105692kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 176128kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3066.571249] Node 1 active_anon:73496kB inactive_anon:31408kB active_file:68kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34848kB dirty:0kB writeback:0kB shmem:36716kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3066.578789] Node 0 [ 3066.587647] Node 0 [ 3066.595005] DMA: [ 3066.598096] DMA free:10980kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3066.603702] 1*4kB [ 3066.605908] lowmem_reserve[]: [ 3066.607974] (E) 12*8kB [ 3066.618934] 0 [ 3066.626859] (UME) [ 3066.627864] 2717 [ 3066.633283] 8*16kB (ME) 6*32kB (ME) 5*64kB (UME) 2*128kB (UE) 5*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10980kB [ 3066.633334] Node 0 DMA32: 1385*4kB (UME) 472*8kB [ 3066.644263] 2718 [ 3066.652606] (UME) 267*16kB (UME) 48*32kB (UME) 11*64kB (M) 6*128kB (M) 5*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17876kB [ 3066.652656] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB [ 3066.669414] 2718 [ 3066.690244] 0*128kB [ 3066.698412] 2718 [ 3066.737439] 0*256kB [ 3066.793895] 0*512kB [ 3066.804118] Node 0 [ 3066.827468] 0*1024kB [ 3066.838362] DMA32 free:18000kB min:36200kB low:45248kB high:54296kB active_anon:245092kB inactive_anon:100876kB active_file:64kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11392kB pagetables:14872kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 3066.855170] 0*2048kB [ 3066.866269] lowmem_reserve[]: [ 3066.876934] 0*4096kB [ 3066.883306] 0 [ 3066.884358] = 0kB [ 3066.886669] 0 [ 3066.889101] Node 1 [ 3066.892506] 0 [ 3066.929553] Normal: [ 3066.936919] 0 [ 3066.938685] 40*4kB [ 3066.940526] 0 [ 3066.940533] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3066.940552] lowmem_reserve[]: 0 0 0 0 0 [ 3066.940570] Node 1 Normal free:26976kB min:53696kB low:67120kB high:80544kB active_anon:73496kB inactive_anon:31408kB active_file:44kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21792kB pagetables:67084kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3066.940588] lowmem_reserve[]: [ 3066.948671] (UM) [ 3066.948987] 0 [ 3066.982497] 20*8kB [ 3067.017780] 0 0 0 0 [ 3067.022707] Node 0 DMA: 1*4kB (E) 12*8kB (UME) 8*16kB (ME) 6*32kB (ME) 5*64kB (UME) 2*128kB (UE) 5*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10980kB [ 3067.024598] (UM) 10*16kB (UM) 12*32kB (UM) 24*64kB (UM) 70*128kB (UM) 23*256kB (UM) 17*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 26976kB [ 3067.046575] Node 0 DMA32: 1385*4kB (UME) 472*8kB (UME) 267*16kB (UME) 48*32kB (UME) 11*64kB (M) 6*128kB (M) 5*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17876kB [ 3067.068471] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3067.091916] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3067.101515] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3067.113838] Node 1 Normal: 40*4kB (UM) 20*8kB (UM) 10*16kB (UM) 12*32kB (UM) 24*64kB (UM) 70*128kB (UM) 23*256kB (UM) 17*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 26976kB [ 3067.118413] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3067.137267] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3067.147173] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3067.149169] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3067.158305] 35637 total pagecache pages [ 3067.158314] 0 pages in swap cache [ 3067.158318] Swap cache stats: add 0, delete 0, find 0/0 [ 3067.158321] Free swap = 0kB [ 3067.158324] Total swap = 0kB [ 3067.158330] 2097051 pages RAM [ 3067.158333] 0 pages HighMem/MovableOnly [ 3067.158336] 363848 pages reserved [ 3067.158339] 0 pages cma reserved [ 3067.158346] Out of memory (oom_kill_allocating_task): Kill process 6487 (systemd-journal) score 0 or sacrifice child [ 3067.158373] Killed process 6487 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:0kB, shmem-rss:2276kB [ 3067.173433] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3067.183914] oom_reaper: reaped process 6487 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:2276kB [ 3067.188551] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3067.224795] kworker/u4:8 invoked oom-killer: gfp_mask=0x14142c0(GFP_KERNEL|__GFP_NOWARN|__GFP_COMP|__GFP_NOMEMALLOC), nodemask= [ 3067.239760] 35637 total pagecache pages [ 3067.263520] (null) [ 3067.271896] 0 pages in swap cache [ 3067.275854] , order=1, oom_score_adj=0 [ 3067.277659] Swap cache stats: add 0, delete 0, find 0/0 [ 3067.287156] kworker/u4:8 cpuset=/ mems_allowed=0-1 [ 3067.290310] Free swap = 0kB [ 3067.296151] Total swap = 0kB [ 3067.297685] CPU: 1 PID: 6342 Comm: kworker/u4:8 Not tainted 4.14.230-syzkaller #0 [ 3067.302372] 2097051 pages RAM [ 3067.307849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3067.310984] 0 pages HighMem/MovableOnly [ 3067.321014] Workqueue: netns cleanup_net [ 3067.321021] Call Trace: [ 3067.321038] dump_stack+0x1b2/0x281 [ 3067.325190] 363848 pages reserved [ 3067.329347] dump_header+0x178/0x82f [ 3067.329358] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3067.329368] ? ___ratelimit+0x2cd/0x530 [ 3067.331948] 0 pages cma reserved [ 3067.335645] oom_kill_process.cold+0x10/0xa40 [ 3067.360089] ? lock_downgrade+0x740/0x740 [ 3067.364427] out_of_memory+0x2dc/0x1190 [ 3067.368507] ? oom_killer_disable+0x1c0/0x1c0 [ 3067.372995] ? mutex_trylock+0x152/0x1a0 [ 3067.377465] __alloc_pages_nodemask+0x23e1/0x2720 [ 3067.382397] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3067.387242] ? cleanup_net+0x3b3/0x840 [ 3067.391443] ? process_one_work+0x793/0x14a0 [ 3067.396036] ? worker_thread+0x5cc/0xff0 [ 3067.400261] ? trace_hardirqs_on_caller+0x288/0x580 [ 3067.405652] ? mark_held_locks+0xa6/0xf0 [ 3067.410247] ? cache_grow_begin+0x3f/0x700 [ 3067.414787] cache_grow_begin+0x91/0x700 [ 3067.419192] fallback_alloc+0x207/0x2c0 [ 3067.423474] kmem_cache_alloc_node_trace+0xed/0x400 [ 3067.428596] __kmalloc_node_track_caller+0x38/0x70 [ 3067.433766] __alloc_skb+0x96/0x510 [ 3067.437731] rtmsg_ifinfo_build_skb+0x65/0x130 [ 3067.442634] rtmsg_ifinfo+0x68/0x100 [ 3067.446721] dev_close_many+0x2bf/0x5f0 [ 3067.450951] ? kernfs_put.part.0+0x1d2/0x490 [ 3067.456685] ? __dev_close_many+0x270/0x270 [ 3067.461314] ? kernfs_put.part.0+0x1d2/0x490 [ 3067.465945] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3067.471240] rollback_registered_many+0x399/0xba0 [ 3067.476335] ? netdev_state_change+0xf0/0xf0 [ 3067.480875] ? sysfs_remove_group+0xbe/0x100 [ 3067.485378] unregister_netdevice_many.part.0+0x18/0x2e0 [ 3067.491188] default_device_exit_batch+0x2d8/0x380 [ 3067.496715] ? unregister_netdevice_many+0x50/0x50 [ 3067.502033] ? do_wait_intr_irq+0x270/0x270 [ 3067.506762] ? __local_bh_enable_ip+0xc1/0x170 [ 3067.512146] ? unregister_netdevice_many+0x50/0x50 [ 3067.517516] ? dev_change_net_namespace+0xc90/0xc90 [ 3067.522615] ops_exit_list+0xf9/0x150 [ 3067.526499] cleanup_net+0x3b3/0x840 [ 3067.530578] ? net_drop_ns+0x70/0x70 [ 3067.534515] ? lock_acquire+0x170/0x3f0 [ 3067.538491] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3067.543936] process_one_work+0x793/0x14a0 [ 3067.548890] ? work_busy+0x320/0x320 [ 3067.552878] ? worker_thread+0x158/0xff0 [ 3067.557106] ? _raw_spin_unlock_irq+0x24/0x80 [ 3067.561678] worker_thread+0x5cc/0xff0 [ 3067.565646] ? rescuer_thread+0xc80/0xc80 [ 3067.569982] kthread+0x30d/0x420 [ 3067.573339] ? kthread_create_on_node+0xd0/0xd0 [ 3067.578099] ret_from_fork+0x24/0x30 [ 3067.586845] Mem-Info: [ 3067.589680] active_anon:79589 inactive_anon:33085 isolated_anon:0 [ 3067.589680] active_file:13 inactive_file:22 isolated_file:0 [ 3067.589680] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3067.589680] slab_reclaimable:14704 slab_unreclaimable:137703 [ 3067.589680] mapped:52227 shmem:35602 pagetables:20522 bounce:0 [ 3067.589680] free:13918 free_pcp:210 free_cma:0 [ 3067.591499] syz-executor.0: [ 3067.629221] Node 0 active_anon:244860kB inactive_anon:100932kB active_file:40kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174092kB dirty:0kB writeback:0kB shmem:105692kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 176128kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3067.629354] Bluetooth: hci3 command 0x0409 tx timeout [ 3067.632777] Node 1 active_anon:73496kB inactive_anon:31408kB active_file:12kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:36716kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3067.683028] page allocation failure: order:0 [ 3067.703256] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3067.711872] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3067.744926] lowmem_reserve[]: [ 3067.754355] syz-executor.0 cpuset= [ 3067.754388] 0 [ 3067.757558] / mems_allowed=0-1 [ 3067.766997] 2717 [ 3067.773954] CPU: 0 PID: 7182 Comm: syz-executor.0 Not tainted 4.14.230-syzkaller #0 [ 3067.773970] 2718 [ 3067.776199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3067.776205] Call Trace: [ 3067.793312] 2718 [ 3067.795926] dump_stack+0x1b2/0x281 [ 3067.798663] 2718 [ 3067.801015] warn_alloc.cold+0x96/0x1cc [ 3067.801028] ? zone_watermark_ok_safe+0x220/0x220 [ 3067.801037] ? usleep_range+0x130/0x130 [ 3067.801045] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3067.801056] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3067.801067] ? run_timer_softirq+0x5a0/0x5a0 [ 3067.801081] __alloc_pages_nodemask+0x2127/0x2720 [ 3067.801095] ? lock_acquire+0x170/0x3f0 [ 3067.810955] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3067.810966] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3067.810982] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3067.810999] alloc_pages_current+0x155/0x260 [ 3067.811010] ion_page_pool_alloc+0x118/0x1b0 [ 3067.811018] ion_system_heap_allocate+0x133/0x8c0 [ 3067.811029] ? _raw_spin_unlock+0x29/0x40 [ 3067.811038] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3067.811047] ? ion_system_contig_heap_create+0x130/0x130 [ 3067.811057] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3067.811067] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3067.811076] ion_alloc+0x27a/0x810 [ 3067.811088] ? ion_dma_buf_release+0x40/0x40 [ 3067.811099] ? __might_fault+0x177/0x1b0 [ 3067.824951] Node 0 [ 3067.825354] ion_ioctl+0xea/0x1f0 [ 3067.832553] DMA32 free:17908kB min:36200kB low:45248kB high:54296kB active_anon:244624kB inactive_anon:100872kB active_file:4kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11360kB pagetables:14772kB bounce:0kB free_pcp:716kB local_pcp:596kB free_cma:0kB [ 3067.835045] ? ion_query_heaps+0x360/0x360 [ 3067.846921] lowmem_reserve[]: [ 3067.849357] ? ion_query_heaps+0x360/0x360 [ 3067.849368] do_vfs_ioctl+0x75a/0xff0 [ 3067.849380] ? ioctl_preallocate+0x1a0/0x1a0 [ 3067.849388] ? lock_downgrade+0x740/0x740 [ 3067.849400] ? __fget+0x225/0x360 [ 3067.849409] ? do_vfs_ioctl+0xff0/0xff0 [ 3067.849420] ? security_file_ioctl+0x83/0xb0 [ 3067.855617] 0 [ 3067.860201] SyS_ioctl+0x7f/0xb0 [ 3067.860210] ? do_vfs_ioctl+0xff0/0xff0 [ 3067.860220] do_syscall_64+0x1d5/0x640 [ 3067.860234] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3067.860243] RIP: 0033:0x466459 [ 3067.860248] RSP: 002b:00007f1ef2095188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3067.860258] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3067.860263] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3067.860268] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3067.860272] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3067.860277] R13: 00007fffa779c11f R14: 00007f1ef2095300 R15: 0000000000022000 [ 3067.870017] Mem-Info: [ 3067.882164] 0 [ 3067.888446] active_anon:79572 inactive_anon:33084 isolated_anon:0 [ 3067.888446] active_file:17 inactive_file:18 isolated_file:0 [ 3067.888446] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3067.888446] slab_reclaimable:14704 slab_unreclaimable:137704 [ 3067.888446] mapped:52225 shmem:35602 pagetables:20497 bounce:0 [ 3067.888446] free:13926 free_pcp:210 free_cma:0 [ 3067.892835] 0 [ 3067.896179] Node 0 active_anon:244792kB inactive_anon:100928kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174084kB dirty:0kB writeback:0kB shmem:105692kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 176128kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3067.905454] 0 [ 3067.912012] Node 1 active_anon:73496kB inactive_anon:31408kB active_file:36kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:36716kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3067.916693] 0 [ 3067.918876] Node 0 [ 3067.967311] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3067.969130] Node 0 [ 3067.973302] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3067.973323] Node 0 DMA32 free:17908kB min:36200kB low:45248kB high:54296kB active_anon:244624kB inactive_anon:100872kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11360kB pagetables:14772kB bounce:0kB free_pcp:716kB local_pcp:120kB free_cma:0kB [ 3067.973343] lowmem_reserve[]: 0 0 0 0 0 [ 3067.973361] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3067.973379] lowmem_reserve[]: [ 3067.989604] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3067.994562] 0 [ 3067.995875] lowmem_reserve[]: [ 3067.999767] 0 0 0 0 [ 3067.999782] Node 1 Normal free:26844kB min:53696kB low:67120kB high:80544kB active_anon:73496kB inactive_anon:31408kB active_file:36kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21792kB pagetables:67084kB bounce:0kB free_pcp:124kB local_pcp:0kB free_cma:0kB [ 3067.999802] lowmem_reserve[]: 0 0 0 0 0 [ 3067.999822] Node 0 DMA: 2*4kB (UE) 12*8kB (UME) 8*16kB (ME) 7*32kB (UME) 4*64kB (ME) 2*128kB (UE) 5*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) [ 3068.017702] 0 [ 3068.027471] 0*4096kB [ 3068.044700] 0 [ 3068.049318] = 10952kB [ 3068.068066] 0 [ 3068.097383] Node 0 [ 3068.128880] 0 [ 3068.142400] DMA32: [ 3068.164637] 0 [ 3068.198727] 1385*4kB [ 3068.241849] (UME) [ 3068.259798] Node 1 [ 3068.297352] 472*8kB [ 3068.326949] Normal free:26844kB min:53696kB low:67120kB high:80544kB active_anon:73496kB inactive_anon:31408kB active_file:36kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21792kB pagetables:67084kB bounce:0kB free_pcp:124kB local_pcp:124kB free_cma:0kB [ 3068.340001] (UME) [ 3068.345333] lowmem_reserve[]: [ 3068.346330] 267*16kB [ 3068.348117] 0 [ 3068.362576] (UME) [ 3068.366846] 0 [ 3068.367628] 49*32kB [ 3068.370473] 0 [ 3068.413986] (UME) 11*64kB (M) 6*128kB (M) 5*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17908kB [ 3068.420001] 0 0 [ 3068.431747] Node 0 DMA: 2*4kB (UE) 12*8kB (UME) 8*16kB (ME) 7*32kB (UME) 4*64kB (ME) 2*128kB (UE) 5*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10952kB [ 3068.434317] Node 0 [ 3068.452987] Node 0 DMA32: 1385*4kB (UME) 472*8kB (UME) 267*16kB (UME) 49*32kB (UME) 11*64kB (M) 6*128kB (M) 5*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17908kB [ 3068.461729] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3068.474461] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3068.493733] Node 1 Normal: 15*4kB (UM) 16*8kB (UM) 10*16kB (UM) 12*32kB (UM) 24*64kB (UM) 70*128kB (UM) 23*256kB (UM) 17*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 26844kB [ 3068.496800] Node 1 Normal: 15*4kB (UM) 16*8kB (UM) 10*16kB (UM) 12*32kB (UM) 24*64kB (UM) 70*128kB (UM) 23*256kB (UM) 17*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 26844kB [ 3068.522813] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3068.533780] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3068.552353] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3068.553617] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3068.569742] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3068.573613] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3068.588801] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3068.592902] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3068.601981] 35637 total pagecache pages [ 3068.612162] 35637 total pagecache pages [ 3068.616149] 0 pages in swap cache [ 3068.619141] 0 pages in swap cache [ 3068.623857] Swap cache stats: add 0, delete 0, find 0/0 [ 3068.626983] Swap cache stats: add 0, delete 0, find 0/0 [ 3068.630044] Free swap = 0kB [ 3068.638047] Total swap = 0kB [ 3068.646200] 2097051 pages RAM [ 3068.646288] Free swap = 0kB [ 3068.650077] 0 pages HighMem/MovableOnly [ 3068.655495] Total swap = 0kB [ 3068.658397] 363848 pages reserved [ 3068.658404] 0 pages cma reserved [ 3068.673865] 2097051 pages RAM [ 3068.677349] 0 pages HighMem/MovableOnly [ 3068.682455] 363848 pages reserved [ 3068.687208] 0 pages cma reserved [ 3068.719322] Out of memory: Kill process 9500 (syz-executor.4) score 1005 or sacrifice child [ 3068.729310] Killed process 9500 (syz-executor.4) total-vm:93252kB, anon-rss:2192kB, file-rss:34628kB, shmem-rss:0kB [ 3068.794962] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 3068.824361] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 3068.863504] systemd[1]: Stopped Journal Service. [ 3068.900181] systemd[1]: Starting Journal Service... [ 3069.014263] systemd[1]: Started System Logging Service. [ 3069.054214] systemd-journald[7243]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 3069.092113] device hsr_slave_1 left promiscuous mode [ 3069.125790] device hsr_slave_0 left promiscuous mode [ 3069.165513] team0 (unregistering): Port device team_slave_1 removed [ 3069.187302] team0 (unregistering): Port device team_slave_0 removed [ 3069.212697] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 3069.233019] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 3069.295741] bond0 (unregistering): Released all slaves [ 3069.407075] device hsr_slave_1 left promiscuous mode [ 3069.422288] device hsr_slave_0 left promiscuous mode [ 3069.443876] team0 (unregistering): Port device team_slave_1 removed [ 3069.458465] team0 (unregistering): Port device team_slave_0 removed [ 3069.493389] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 3069.517046] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 3069.603851] bond0 (unregistering): Released all slaves [ 3069.674980] systemd[1]: Started Journal Service. [ 3069.729321] Bluetooth: hci3 command 0x041b tx timeout [ 3070.340272] oom_reaper: reaped process 7219 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3070.445921] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 3070.461323] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 3070.466160] CPU: 1 PID: 7998 Comm: syz-fuzzer Not tainted 4.14.230-syzkaller #0 [ 3070.474127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3070.483671] Call Trace: [ 3070.486280] dump_stack+0x1b2/0x281 [ 3070.489915] dump_header+0x178/0x82f [ 3070.493878] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3070.499563] ? ___ratelimit+0x2cd/0x530 [ 3070.504206] oom_kill_process.cold+0x10/0xa40 [ 3070.509190] out_of_memory+0xe3e/0x1190 [ 3070.513191] ? oom_killer_disable+0x1c0/0x1c0 [ 3070.517681] ? mutex_trylock+0x152/0x1a0 [ 3070.521748] __alloc_pages_nodemask+0x23e1/0x2720 [ 3070.526963] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3070.531906] alloc_pages_current+0x155/0x260 [ 3070.536410] filemap_fault+0x11a1/0x1ad0 [ 3070.540643] ext4_filemap_fault+0x84/0xb0 [ 3070.544788] __do_fault+0xfa/0x380 [ 3070.548313] __handle_mm_fault+0x2497/0x4620 [ 3070.552801] ? vm_insert_page+0x7c0/0x7c0 [ 3070.557179] ? lock_downgrade+0x740/0x740 [ 3070.561364] ? mark_held_locks+0xa6/0xf0 [ 3070.565438] handle_mm_fault+0x455/0x9c0 [ 3070.569493] __do_page_fault+0x549/0xad0 [ 3070.574256] ? spurious_fault+0x640/0x640 [ 3070.578506] ? do_page_fault+0x60/0x500 [ 3070.582562] ? page_fault+0x2f/0x50 [ 3070.586437] page_fault+0x45/0x50 [ 3070.589878] RIP: 0000:0x940aec [ 3070.593701] RSP: 2e000:000000c00003dec8 EFLAGS: 0043b6a0 [ 3070.602334] Mem-Info: [ 3070.614669] active_anon:79312 inactive_anon:35116 isolated_anon:0 [ 3070.614669] active_file:20 inactive_file:10 isolated_file:0 [ 3070.614669] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3070.614669] slab_reclaimable:14707 slab_unreclaimable:138422 [ 3070.614669] mapped:52609 shmem:37650 pagetables:20483 bounce:0 [ 3070.614669] free:13826 free_pcp:221 free_cma:0 [ 3070.649485] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3070.655181] Node 0 active_anon:242680kB inactive_anon:100860kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174088kB dirty:0kB writeback:0kB shmem:105688kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 174080kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3070.664912] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 3070.664937] CPU: 1 PID: 7219 Comm: syz-executor.4 Not tainted 4.14.230-syzkaller #0 [ 3070.664942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3070.664945] Call Trace: [ 3070.664963] dump_stack+0x1b2/0x281 [ 3070.664977] warn_alloc.cold+0x96/0x1cc [ 3070.664989] ? zone_watermark_ok_safe+0x220/0x220 [ 3070.665000] ? usleep_range+0x130/0x130 [ 3070.665009] ? try_to_free_pages+0x23f/0x6e0 [ 3070.665019] ? _find_next_bit+0xdb/0x100 [ 3070.665030] ? run_timer_softirq+0x5a0/0x5a0 [ 3070.665046] __alloc_pages_nodemask+0x2127/0x2720 [ 3070.665063] ? lock_acquire+0x170/0x3f0 [ 3070.699846] Node 1 active_anon:74568kB inactive_anon:39604kB active_file:72kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36348kB dirty:0kB writeback:0kB shmem:44912kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3070.707782] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3070.718274] Node 0 [ 3070.721522] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3070.721541] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3070.725198] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3070.729364] alloc_pages_current+0x155/0x260 [ 3070.729376] ion_page_pool_alloc+0x118/0x1b0 [ 3070.729386] ion_system_heap_allocate+0x133/0x8c0 [ 3070.734495] lowmem_reserve[]: [ 3070.738900] ? ion_alloc+0x187/0x810 [ 3070.744092] 0 [ 3070.748302] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3070.752717] 2717 [ 3070.758245] ? ion_system_contig_heap_create+0x130/0x130 [ 3070.762339] 2718 [ 3070.791468] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3070.791483] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3070.791494] ion_alloc+0x204/0x810 [ 3070.791510] ? ion_dma_buf_release+0x40/0x40 [ 3070.797907] 2718 [ 3070.800149] ? __might_fault+0x177/0x1b0 [ 3070.800159] ion_ioctl+0xea/0x1f0 [ 3070.800169] ? ion_query_heaps+0x360/0x360 [ 3070.800182] ? _raw_spin_unlock+0x29/0x40 [ 3070.804858] 2718 [ 3070.810611] ? ion_query_heaps+0x360/0x360 [ 3070.810624] do_vfs_ioctl+0x75a/0xff0 [ 3070.810635] ? ioctl_preallocate+0x1a0/0x1a0 [ 3070.810644] ? lock_downgrade+0x740/0x740 [ 3070.810659] ? __fget+0x225/0x360 [ 3070.838599] Node 0 [ 3070.843311] ? do_vfs_ioctl+0xff0/0xff0 [ 3070.843332] ? security_file_ioctl+0x83/0xb0 [ 3070.843340] SyS_ioctl+0x7f/0xb0 [ 3070.843347] ? do_vfs_ioctl+0xff0/0xff0 [ 3070.843357] do_syscall_64+0x1d5/0x640 [ 3070.843371] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3070.843378] RIP: 0033:0x466459 [ 3070.843382] RSP: 002b:00007f61587a5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3070.843390] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 3070.843395] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3070.843399] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3070.843403] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 3070.843408] R13: 00007ffed7f6205f R14: 00007f61587a5300 R15: 0000000000022000 [ 3070.844520] Mem-Info: [ 3070.848829] DMA32 free:17884kB min:36200kB low:45248kB high:54296kB active_anon:242512kB inactive_anon:100804kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11232kB pagetables:14584kB bounce:0kB free_pcp:736kB local_pcp:24kB free_cma:0kB [ 3070.854291] active_anon:79312 inactive_anon:35116 isolated_anon:0 [ 3070.854291] active_file:14 inactive_file:16 isolated_file:0 [ 3070.854291] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3070.854291] slab_reclaimable:14707 slab_unreclaimable:138422 [ 3070.854291] mapped:52609 shmem:37650 pagetables:20483 bounce:0 [ 3070.854291] free:13826 free_pcp:221 free_cma:0 [ 3070.854308] Node 0 active_anon:242680kB inactive_anon:100860kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174088kB dirty:0kB writeback:0kB shmem:105688kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 174080kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3070.854323] Node 1 active_anon:74568kB inactive_anon:39604kB active_file:52kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36348kB dirty:0kB writeback:0kB shmem:44912kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3070.854326] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3070.854344] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3070.854364] Node 0 DMA32 free:17884kB min:36200kB low:45248kB high:54296kB active_anon:242512kB inactive_anon:100804kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11232kB pagetables:14584kB bounce:0kB free_pcp:736kB local_pcp:712kB free_cma:0kB [ 3070.854384] lowmem_reserve[]: 0 0 0 0 0 [ 3070.854402] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3070.854420] lowmem_reserve[]: 0 0 0 0 0 [ 3070.854438] Node 1 Normal free:26464kB min:53696kB low:67120kB high:80544kB active_anon:74568kB inactive_anon:39604kB active_file:52kB inactive_file:56kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21888kB pagetables:67216kB bounce:0kB free_pcp:148kB local_pcp:124kB free_cma:0kB [ 3070.854457] lowmem_reserve[]: 0 0 0 0 0 [ 3070.854475] Node 0 DMA: 1*4kB (E) 11*8kB (ME) 9*16kB (UME) 7*32kB (UME) 4*64kB (ME) 2*128kB (UE) 5*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10956kB [ 3070.854543] Node 0 DMA32: 1237*4kB (ME) 391*8kB (ME) 253*16kB (UME) 35*32kB (ME) 13*64kB (UM) 6*128kB (M) 6*256kB (UM) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 17916kB [ 3070.854616] Node 0 Normal: 0*4kB 0*8kB [ 3070.872294] lowmem_reserve[]: [ 3070.876813] 0*16kB [ 3070.880886] 0 [ 3070.884243] 0*32kB [ 3070.898287] 0 [ 3070.899910] 0*64kB [ 3070.904438] 0 [ 3070.908257] 0*128kB [ 3070.922016] 0 [ 3070.924024] 0*256kB [ 3070.932839] 0 [ 3070.932847] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3070.932865] lowmem_reserve[]: 0 0 0 0 0 [ 3070.932882] Node 1 Normal free:26464kB min:53696kB low:67120kB high:80544kB active_anon:74568kB inactive_anon:39604kB active_file:52kB inactive_file:56kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21888kB pagetables:67216kB bounce:0kB free_pcp:148kB local_pcp:24kB free_cma:0kB [ 3070.932899] lowmem_reserve[]: 0 0 0 0 0 [ 3070.932918] Node 0 DMA: 1*4kB (E) 11*8kB (ME) 9*16kB [ 3070.937520] 0*512kB [ 3070.951198] (UME) [ 3070.952952] 0*1024kB [ 3070.973268] 7*32kB [ 3070.980929] 0*2048kB [ 3070.986568] (UME) [ 3071.002674] 0*4096kB [ 3071.012240] 4*64kB [ 3071.044368] = 0kB [ 3071.063700] (ME) [ 3071.204285] Node 1 [ 3071.228092] 2*128kB [ 3071.241249] Normal: [ 3071.258690] (UE) [ 3071.262681] 72*4kB [ 3071.299320] 5*256kB [ 3071.315747] (UM) [ 3071.337021] (UME) [ 3071.338427] 52*8kB [ 3071.339587] 3*512kB [ 3071.341384] (M) [ 3071.343861] (UE) [ 3071.345653] 50*16kB [ 3071.347875] 3*1024kB [ 3071.350623] (UM) [ 3071.359854] (UME) [ 3071.390076] 42*32kB [ 3071.396332] 2*2048kB [ 3071.424442] (UM) [ 3071.430389] (UM) 0*4096kB = 10956kB [ 3071.430402] Node 0 DMA32: 1237*4kB (ME) 391*8kB (ME) 255*16kB [ 3071.432804] 27*64kB [ 3071.435064] (UME) [ 3071.437553] (M) [ 3071.445044] 35*32kB [ 3071.450122] 15*128kB [ 3071.451547] (ME) [ 3071.453595] (M) 6*256kB [ 3071.456022] 13*64kB [ 3071.458356] (M) [ 3071.466199] (UM) [ 3071.469011] 2*512kB [ 3071.469949] 6*128kB (M) 6*256kB (UM) 1*512kB (U) 1*1024kB [ 3071.473326] (M) [ 3071.474515] (U) [ 3071.477100] 1*1024kB (M) [ 3071.484882] 0*2048kB [ 3071.487600] 8*2048kB [ 3071.488092] 0*4096kB = 17948kB [ 3071.492335] (U) [ 3071.492781] Node 0 [ 3071.495174] 0*4096kB = 26464kB [ 3071.497241] Normal: [ 3071.501859] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3071.512290] 0*4kB [ 3071.517178] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3071.519810] 0*8kB [ 3071.521980] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3071.524132] 0*16kB [ 3071.526565] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3071.528801] 0*32kB [ 3071.533927] 37680 total pagecache pages [ 3071.544385] 0*64kB [ 3071.546665] 0 pages in swap cache [ 3071.548644] 0*128kB [ 3071.554154] Swap cache stats: add 0, delete 0, find 0/0 [ 3071.554464] 0*256kB [ 3071.556430] Free swap = 0kB [ 3071.558649] 0*512kB [ 3071.562455] Total swap = 0kB [ 3071.569454] 0*1024kB [ 3071.576383] 2097051 pages RAM [ 3071.599768] 0*2048kB [ 3071.616765] 0 pages HighMem/MovableOnly [ 3071.630394] 0*4096kB [ 3071.640936] 363848 pages reserved [ 3071.652493] = 0kB [ 3071.667720] 0 pages cma reserved [ 3071.669805] Node 1 Normal: 72*4kB (UM) 52*8kB (M) 50*16kB (UM) 42*32kB (UM) 27*64kB (M) 15*128kB (M) 6*256kB (M) 2*512kB (M) 1*1024kB (M) 8*2048kB (U) 0*4096kB = 26464kB [ 3071.699943] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3071.722858] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3071.807000] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3071.816956] Bluetooth: hci3 command 0x040f tx timeout [ 3071.859751] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3071.869178] 40219 total pagecache pages [ 3071.909119] 0 pages in swap cache [ 3071.914367] Swap cache stats: add 0, delete 0, find 0/0 [ 3071.946957] Free swap = 0kB [ 3071.950869] Total swap = 0kB [ 3071.954505] 2097051 pages RAM [ 3071.979471] 0 pages HighMem/MovableOnly [ 3071.983754] 363848 pages reserved [ 3071.987214] 0 pages cma reserved [ 3072.001889] IPVS: ftp: loaded support on port[0] = 21 23:47:56 executing program 3: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000080)=0xfffffffc) r1 = accept$ax25(r0, &(0x7f00000000c0)={{0x3, @null}, [@bcast, @remote, @remote, @netrom, @remote, @null, @default]}, &(0x7f0000000000)=0x48) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000200)=0x3) getpeername$ax25(r1, &(0x7f0000000140)={{0x3, @netrom}, [@default, @rose, @netrom, @remote, @null, @null, @netrom, @netrom]}, &(0x7f00000001c0)=0x48) [ 3072.032027] Out of memory (oom_kill_allocating_task): Kill process 7998 (syz-fuzzer) score 0 or sacrifice child [ 3072.111253] Killed process 7221 (syz-executor.5) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 3072.176398] oom_reaper: reaped process 7221 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3072.761767] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3072.790719] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 3072.796160] CPU: 1 PID: 7219 Comm: syz-executor.4 Not tainted 4.14.230-syzkaller #0 [ 3072.805117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3072.814945] Call Trace: [ 3072.817632] dump_stack+0x1b2/0x281 [ 3072.821503] warn_alloc.cold+0x96/0x1cc [ 3072.825486] ? zone_watermark_ok_safe+0x220/0x220 [ 3072.831380] __alloc_pages_nodemask+0x2127/0x2720 [ 3072.836444] ? lock_acquire+0x170/0x3f0 [ 3072.840554] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3072.845679] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3072.851368] ? __mutex_unlock_slowpath+0x75/0x770 [ 3072.856891] alloc_pages_current+0x155/0x260 [ 3072.863436] ion_page_pool_alloc+0x118/0x1b0 [ 3072.868389] ion_system_heap_allocate+0x133/0x8c0 [ 3072.873446] ? _raw_spin_unlock+0x29/0x40 [ 3072.877904] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3072.883285] ? ion_system_contig_heap_create+0x130/0x130 [ 3072.889117] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3072.894244] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3072.899665] ion_alloc+0x27a/0x810 [ 3072.903676] ? ion_dma_buf_release+0x40/0x40 [ 3072.908390] ? __might_fault+0x177/0x1b0 [ 3072.912555] ion_ioctl+0xea/0x1f0 [ 3072.917652] ? ion_query_heaps+0x360/0x360 [ 3072.926490] ? _raw_spin_unlock+0x29/0x40 [ 3072.937507] ? ion_query_heaps+0x360/0x360 [ 3072.943853] do_vfs_ioctl+0x75a/0xff0 [ 3072.949220] ? ioctl_preallocate+0x1a0/0x1a0 [ 3072.957104] ? lock_downgrade+0x740/0x740 [ 3072.963331] ? __fget+0x225/0x360 [ 3072.967208] ? do_vfs_ioctl+0xff0/0xff0 [ 3072.972177] ? security_file_ioctl+0x83/0xb0 [ 3072.977375] SyS_ioctl+0x7f/0xb0 [ 3072.981369] ? do_vfs_ioctl+0xff0/0xff0 [ 3072.986426] do_syscall_64+0x1d5/0x640 [ 3072.991348] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3072.996989] RIP: 0033:0x466459 [ 3073.000746] RSP: 002b:00007f61587a5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3073.009864] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 3073.019042] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3073.027790] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3073.035777] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 3073.043429] R13: 00007ffed7f6205f R14: 00007f61587a5300 R15: 0000000000022000 [ 3073.058971] Mem-Info: [ 3073.061415] active_anon:79096 inactive_anon:35113 isolated_anon:12 [ 3073.061415] active_file:1588 inactive_file:4790 isolated_file:1 [ 3073.061415] unevictable:0 dirty:17 writeback:0 unstable:0 [ 3073.061415] slab_reclaimable:14655 slab_unreclaimable:139877 [ 3073.061415] mapped:30863 shmem:37642 pagetables:20396 bounce:0 [ 3073.061415] free:257885 free_pcp:356 free_cma:0 [ 3073.100612] Node 0 active_anon:241968kB inactive_anon:100856kB active_file:1800kB inactive_file:14372kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:79972kB dirty:56kB writeback:0kB shmem:105664kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 174080kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3073.132337] Node 1 active_anon:74416kB inactive_anon:39596kB active_file:4552kB inactive_file:4788kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:43480kB dirty:12kB writeback:0kB shmem:44904kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3073.163158] Node 0 DMA free:11148kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3073.194066] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3073.199367] Node 0 DMA32 free:505596kB min:36200kB low:45248kB high:54296kB active_anon:241800kB inactive_anon:100800kB active_file:1800kB inactive_file:14372kB unevictable:0kB writepending:56kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11040kB pagetables:14236kB bounce:0kB free_pcp:68kB local_pcp:0kB free_cma:0kB [ 3073.231841] lowmem_reserve[]: 0 0 0 0 0 [ 3073.236434] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3073.266004] lowmem_reserve[]: 0 0 0 0 0 [ 3073.271362] Node 1 Normal free:1183652kB min:53696kB low:67120kB high:80544kB active_anon:74416kB inactive_anon:39596kB active_file:4552kB inactive_file:4788kB unevictable:0kB writepending:12kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21888kB pagetables:67216kB bounce:0kB free_pcp:1420kB local_pcp:716kB free_cma:0kB [ 3073.305206] lowmem_reserve[]: 0 0 0 0 0 [ 3073.309464] Node 0 DMA: 41*4kB (UE) 39*8kB (UME) 61*16kB (UME) 33*32kB (UME) 7*64kB (UME) 2*128kB (UE) 5*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 1*2048kB (M) 0*4096kB = 11148kB [ 3073.328266] Node 0 DMA32: 14131*4kB (UME) 12393*8kB (UME) 5639*16kB (UE) 2204*32kB (UE) 2982*64kB (UM) 527*128kB (UM) 9*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 577028kB [ 3073.347502] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3073.361095] Node 1 Normal: 1416*4kB (UM) 509*8kB (UM) 406*16kB (UM) 2313*32kB (UM) 3575*64kB (UM) 1946*128kB (UM) 974*256kB (UM) 406*512kB (UM) 327*1024kB (UM) 48*2048kB (U) 2*4096kB (U) = 1466696kB [ 3073.382485] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3073.391710] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3073.402999] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3073.417487] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3073.428252] 43894 total pagecache pages [ 3073.432716] 0 pages in swap cache [ 3073.436260] Swap cache stats: add 0, delete 0, find 0/0 [ 3073.444155] Free swap = 0kB [ 3073.447416] Total swap = 0kB [ 3073.450878] 2097051 pages RAM [ 3073.454246] 0 pages HighMem/MovableOnly [ 3073.458659] 363848 pages reserved [ 3073.464177] 0 pages cma reserved [ 3074.728416] IPVS: ftp: loaded support on port[0] = 21 23:47:59 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000006, 0x27, 0x1}) 23:47:59 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGCAUSE(r0, 0x89e0, 0x0) r1 = accept4$rose(r0, &(0x7f00000000c0)=@full={0xb, @dev, @remote, 0x0, [@netrom, @rose, @bcast, @netrom, @null, @netrom]}, 0x0, 0x800) syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) recvfrom$rose(r2, &(0x7f0000000200)=""/93, 0x5d, 0x10100, &(0x7f0000000280)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x80000006, 0x26}) setsockopt$rose(r1, 0x104, 0x2, &(0x7f00000001c0)=0x7, 0x4) sendto$rose(r0, &(0x7f0000000100)="d1938ada477de962502b74102657c6e5778f511b806f065673f8690fb05242ca0c5a0b7fc60e4c32c28fc65fecd49e13df33e2eef18ff417676f6748330ef330a2a09a2d4fc08181cb5c1a6f3d65b835e38d2ef8e1a0275e21ab83e2b5789a8295545a8a8d9468fb07a81ad9db2f475e6bf8e7b43ae595b56e1f93ab053842a81978173671001d635f1b8a579eaf37f6c3f7d33c5a30ac5b53a3569712b615ef788ddf764ab1", 0xa6, 0x40, &(0x7f0000000080)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}, 0x1c) 23:47:59 executing program 1: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x7e5042, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) r1 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1, 0xa2000) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000080)) getsockname$ax25(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @null}, [@netrom, @netrom, @remote, @netrom, @default, @null, @null, @bcast]}, &(0x7f0000000140)=0x48) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) 23:47:59 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x18, 0x67c2cf5b, 0x10000, 0x6, 0x450, 0x1, 0xe32, [], 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x1}, 0x40) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000036c0)='/dev/dlm_plock\x00', 0x0, 0x0) getsockname$ax25(r2, 0x0, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf17, 0x0, 0x0, 0x0, 0xffff}}, &(0x7f0000000240)='GPL\x00', 0xffff8000, 0xb2, &(0x7f0000000280)=""/178, 0x41100, 0x11, [], 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0x4, 0x2, 0x9}, 0x10, 0x2356f}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x7, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x9}, [@alu={0x4, 0x1, 0x9, 0x6, 0x7, 0xfffffffffffffff8, 0x4}, @jmp={0x5, 0x0, 0x6, 0x9, 0x6, 0xc, 0x10}, @map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000100)='syzkaller\x00', 0x455, 0x29, &(0x7f0000000140)=""/41, 0x41100, 0xb, [], 0x0, 0x3, r2, 0x8, &(0x7f0000000180)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0x3, 0x2, 0x14}, 0x10, 0x0, r3}, 0x78) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000006, 0x27}) [ 3074.910010] chnl_net:caif_netlink_parms(): no params data found 23:47:59 executing program 1: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000)='NET_DM\x00', r1) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f00000000c0)=0x8) 23:47:59 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2002030}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x44, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x48010}, 0x20008000) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f00000000c0)=0x8) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000200)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008800}, 0x5) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300)='NLBL_UNLBL\x00', r0) [ 3075.042774] IPVS: ftp: loaded support on port[0] = 21 [ 3075.295492] bridge0: port 1(bridge_slave_0) entered blocking state [ 3075.307019] bridge0: port 1(bridge_slave_0) entered disabled state [ 3075.325741] device bridge_slave_0 entered promiscuous mode [ 3075.345253] bridge0: port 2(bridge_slave_1) entered blocking state [ 3075.353290] bridge0: port 2(bridge_slave_1) entered disabled state [ 3075.363011] device bridge_slave_1 entered promiscuous mode [ 3075.526791] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 3075.565397] chnl_net:caif_netlink_parms(): no params data found [ 3075.584804] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 3075.699671] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 3075.707957] team0: Port device team_slave_0 added [ 3075.739489] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 3075.780406] team0: Port device team_slave_1 added [ 3075.942730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3075.971917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3076.088795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3076.132542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3076.163585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3076.251122] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3076.283992] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 3076.288787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3076.308852] CPU: 1 PID: 7396 Comm: syz-executor.4 Not tainted 4.14.230-syzkaller #0 [ 3076.316805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3076.326652] Call Trace: [ 3076.329374] dump_stack+0x1b2/0x281 [ 3076.330185] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 3076.333733] warn_alloc.cold+0x96/0x1cc [ 3076.344904] ? zone_watermark_ok_safe+0x220/0x220 [ 3076.349874] __alloc_pages_nodemask+0x2127/0x2720 [ 3076.354824] ? io_schedule_timeout+0x140/0x140 [ 3076.359420] ? lock_acquire+0x170/0x3f0 [ 3076.363412] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3076.368293] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3076.374133] ? __mutex_unlock_slowpath+0x75/0x770 [ 3076.379052] alloc_pages_current+0x155/0x260 [ 3076.384017] ion_page_pool_alloc+0x118/0x1b0 [ 3076.388632] ion_system_heap_allocate+0x133/0x8c0 [ 3076.393769] ? ion_alloc+0x187/0x810 [ 3076.397676] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3076.401165] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 3076.403579] ? ion_system_contig_heap_create+0x130/0x130 [ 3076.414090] bridge0: port 1(bridge_slave_0) entered blocking state [ 3076.416354] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3076.416368] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3076.428857] bridge0: port 1(bridge_slave_0) entered disabled state [ 3076.432882] ion_alloc+0x204/0x810 [ 3076.444363] ? ion_dma_buf_release+0x40/0x40 [ 3076.448888] ? __might_fault+0x177/0x1b0 [ 3076.453194] ion_ioctl+0xea/0x1f0 [ 3076.456743] ? ion_query_heaps+0x360/0x360 [ 3076.459734] device bridge_slave_0 entered promiscuous mode [ 3076.461069] ? ion_query_heaps+0x360/0x360 [ 3076.471693] do_vfs_ioctl+0x75a/0xff0 [ 3076.475503] ? ioctl_preallocate+0x1a0/0x1a0 [ 3076.480316] ? lock_downgrade+0x740/0x740 [ 3076.485406] ? __fget+0x225/0x360 [ 3076.489238] ? do_vfs_ioctl+0xff0/0xff0 [ 3076.493596] ? security_file_ioctl+0x83/0xb0 [ 3076.493620] bridge0: port 2(bridge_slave_1) entered blocking state [ 3076.498086] SyS_ioctl+0x7f/0xb0 [ 3076.507848] ? do_vfs_ioctl+0xff0/0xff0 [ 3076.512524] do_syscall_64+0x1d5/0x640 [ 3076.516634] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3076.518841] bridge0: port 2(bridge_slave_1) entered disabled state [ 3076.522338] RIP: 0033:0x466459 [ 3076.532396] RSP: 002b:00007f61587e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3076.540096] device bridge_slave_1 entered promiscuous mode [ 3076.541008] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3076.555024] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3076.562948] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3076.570487] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3076.578257] R13: 00007ffed7f6205f R14: 00007f61587e7300 R15: 0000000000022000 [ 3076.595258] device hsr_slave_0 entered promiscuous mode [ 3076.612050] device hsr_slave_1 entered promiscuous mode [ 3076.643017] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 3076.675387] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 3076.694875] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 3076.726566] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 3076.768897] Bluetooth: hci0 command 0x0409 tx timeout [ 3076.800723] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3076.815256] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3076.832569] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 3076.844791] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 3076.845007] team0: Port device team_slave_0 added [ 3076.853426] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 3076.867342] CPU: 1 PID: 7416 Comm: syz-executor.0 Not tainted 4.14.230-syzkaller #0 [ 3076.877193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3076.887509] Call Trace: [ 3076.890114] dump_stack+0x1b2/0x281 [ 3076.891253] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 3076.893937] warn_alloc.cold+0x96/0x1cc [ 3076.893952] ? zone_watermark_ok_safe+0x220/0x220 [ 3076.912090] __alloc_pages_nodemask+0x2127/0x2720 [ 3076.916070] team0: Port device team_slave_1 added [ 3076.919533] ? lock_acquire+0x170/0x3f0 [ 3076.919548] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3076.919565] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3076.919576] ? __mutex_unlock_slowpath+0x75/0x770 [ 3076.919587] ? retint_kernel+0x2d/0x2d [ 3076.949537] alloc_pages_current+0x155/0x260 [ 3076.955015] ion_page_pool_alloc+0x118/0x1b0 [ 3076.959709] ion_system_heap_allocate+0x133/0x8c0 [ 3076.964662] ? ion_alloc+0x187/0x810 [ 3076.968562] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3076.975154] ? ion_system_contig_heap_create+0x130/0x130 [ 3076.981487] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3076.986718] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3076.991760] ion_alloc+0x204/0x810 [ 3076.995422] ? ion_dma_buf_release+0x40/0x40 [ 3077.000016] ? __might_fault+0x177/0x1b0 [ 3077.004514] ion_ioctl+0xea/0x1f0 [ 3077.008157] ? ion_query_heaps+0x360/0x360 [ 3077.013082] ? ion_query_heaps+0x360/0x360 [ 3077.018031] do_vfs_ioctl+0x75a/0xff0 [ 3077.021955] ? ioctl_preallocate+0x1a0/0x1a0 [ 3077.026490] ? lock_downgrade+0x740/0x740 [ 3077.030910] ? __fget+0x225/0x360 [ 3077.034546] ? do_vfs_ioctl+0xff0/0xff0 [ 3077.038700] ? security_file_ioctl+0x83/0xb0 [ 3077.043425] SyS_ioctl+0x7f/0xb0 [ 3077.046805] ? do_vfs_ioctl+0xff0/0xff0 [ 3077.050964] do_syscall_64+0x1d5/0x640 [ 3077.055409] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3077.060799] RIP: 0033:0x466459 [ 3077.064254] RSP: 002b:00007f1ef2095188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3077.072245] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3077.079628] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3077.087167] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3077.094988] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3077.102971] R13: 00007fffa779c11f R14: 00007f1ef2095300 R15: 0000000000022000 [ 3077.114887] CPU: 1 PID: 7411 Comm: syz-executor.4 Not tainted 4.14.230-syzkaller #0 [ 3077.119761] Bluetooth: hci1 command 0x0409 tx timeout [ 3077.123304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3077.138749] Call Trace: [ 3077.141345] dump_stack+0x1b2/0x281 [ 3077.145020] warn_alloc.cold+0x96/0x1cc [ 3077.149285] ? zone_watermark_ok_safe+0x220/0x220 [ 3077.154258] __alloc_pages_nodemask+0x2127/0x2720 [ 3077.159393] ? lock_acquire+0x170/0x3f0 [ 3077.163702] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3077.168650] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3077.174163] ? __mutex_unlock_slowpath+0x75/0x770 [ 3077.179196] alloc_pages_current+0x155/0x260 [ 3077.183850] ion_page_pool_alloc+0x118/0x1b0 [ 3077.188364] ion_system_heap_allocate+0x133/0x8c0 [ 3077.193319] ? ion_alloc+0x187/0x810 [ 3077.197138] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3077.202692] ? ion_system_contig_heap_create+0x130/0x130 [ 3077.208368] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3077.213669] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3077.218583] ion_alloc+0x204/0x810 [ 3077.222168] ? ion_dma_buf_release+0x40/0x40 [ 3077.226588] ? __might_fault+0x177/0x1b0 [ 3077.231010] ion_ioctl+0xea/0x1f0 [ 3077.234613] ? ion_query_heaps+0x360/0x360 [ 3077.238978] ? SyS_send+0x40/0x40 [ 3077.242438] ? ion_query_heaps+0x360/0x360 [ 3077.246792] do_vfs_ioctl+0x75a/0xff0 [ 3077.250984] ? ioctl_preallocate+0x1a0/0x1a0 [ 3077.255492] ? lock_downgrade+0x740/0x740 [ 3077.259669] ? __fget+0x225/0x360 [ 3077.263126] ? do_vfs_ioctl+0xff0/0xff0 [ 3077.267221] ? security_file_ioctl+0x83/0xb0 [ 3077.271896] SyS_ioctl+0x7f/0xb0 [ 3077.275269] ? do_vfs_ioctl+0xff0/0xff0 [ 3077.280644] do_syscall_64+0x1d5/0x640 [ 3077.284637] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3077.290877] RIP: 0033:0x466459 [ 3077.294247] RSP: 002b:00007f61587c6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3077.302572] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 3077.310828] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3077.319429] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3077.327141] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 3077.334687] R13: 00007ffed7f6205f R14: 00007f61587c6300 R15: 0000000000022000 [ 3077.344696] Mem-Info: [ 3077.347624] active_anon:79254 inactive_anon:35119 isolated_anon:0 [ 3077.347624] active_file:1616 inactive_file:2560 isolated_file:0 [ 3077.347624] unevictable:0 dirty:31 writeback:0 unstable:0 [ 3077.347624] slab_reclaimable:14646 slab_unreclaimable:140504 [ 3077.347624] mapped:56195 shmem:37650 pagetables:20554 bounce:0 [ 3077.347624] free:205020 free_pcp:359 free_cma:0 [ 3077.386954] Node 0 active_anon:242624kB inactive_anon:100852kB active_file:4096kB inactive_file:9756kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175656kB dirty:96kB writeback:0kB shmem:105660kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 174080kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3077.448074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3077.460548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3077.495210] Node 1 active_anon:74392kB inactive_anon:39624kB active_file:2368kB inactive_file:484kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:49124kB dirty:28kB writeback:0kB shmem:44940kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3077.545879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3077.562142] Node 0 DMA free:11160kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3077.575410] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 3077.620897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3077.628164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3077.640503] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3077.687732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3077.693643] Node 0 DMA32 free:90856kB min:36200kB low:45248kB high:54296kB active_anon:242456kB inactive_anon:100796kB active_file:4196kB inactive_file:9756kB unevictable:0kB writepending:96kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11200kB pagetables:14636kB bounce:0kB free_pcp:340kB local_pcp:120kB free_cma:0kB [ 3077.721769] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 3077.773502] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 3077.782294] lowmem_reserve[]: 0 0 0 0 0 [ 3077.796714] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3077.816856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3077.860990] device hsr_slave_0 entered promiscuous mode [ 3077.868321] lowmem_reserve[]: 0 0 0 0 0 [ 3077.872752] device hsr_slave_1 entered promiscuous mode [ 3077.882429] Node 1 Normal free:358360kB min:53696kB low:67120kB high:80544kB active_anon:74392kB inactive_anon:39624kB active_file:2544kB inactive_file:456kB unevictable:0kB writepending:28kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:22048kB pagetables:67448kB bounce:0kB free_pcp:60kB local_pcp:60kB free_cma:0kB [ 3077.891022] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 3077.949260] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 3077.956950] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 3077.960029] lowmem_reserve[]: [ 3077.966332] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 3077.973413] 0 [ 3077.977443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3077.981591] 0 [ 3077.986638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3077.995149] 0 0 0 [ 3078.001430] Node 0 DMA: 2*4kB (UE) 21*8kB (UME) 58*16kB (UME) 33*32kB (UME) 10*64kB (UME) 3*128kB (UE) 5*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 1*2048kB (M) 0*4096kB = 11120kB [ 3078.017868] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 3078.017875] 8021q: adding VLAN 0 to HW filter on device team0 [ 3078.020179] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 3078.058944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3078.065361] Node 0 [ 3078.067325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3078.068098] DMA32: [ 3078.079312] bridge0: port 1(bridge_slave_0) entered blocking state [ 3078.089115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3078.098518] 591*4kB (ME) 119*8kB (ME) 150*16kB (MEH) 17*32kB (UMEH) 426*64kB (UH) 40*128kB (UH) 20*256kB (UH) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 43764kB [ 3078.121221] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 3078.135796] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3078.147655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3078.165046] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3078.181124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3078.202498] bridge0: port 2(bridge_slave_1) entered blocking state [ 3078.209377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3078.224880] Node 1 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 474*32kB (UM) 1066*64kB (UM) 8*128kB (M) 3*256kB (M) 0*512kB 4*1024kB (UM) 1*2048kB (U) 10*4096kB (U) = 132308kB [ 3078.241154] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 3078.259084] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3078.275871] IPVS: ftp: loaded support on port[0] = 21 [ 3078.279517] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3078.284125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3078.311812] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3078.322226] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 3078.356947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3078.358685] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3078.391968] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 3078.424895] 40939 total pagecache pages [ 3078.436498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3078.448557] 0 pages in swap cache [ 3078.452090] Swap cache stats: add 0, delete 0, find 0/0 [ 3078.457741] Free swap = 0kB [ 3078.462034] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3078.497356] Total swap = 0kB [ 3078.520397] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 3078.548658] 2097051 pages RAM [ 3078.551895] 0 pages HighMem/MovableOnly [ 3078.556130] 363848 pages reserved [ 3078.599180] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3078.606668] 0 pages cma reserved [ 3078.607064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3078.620428] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3078.848902] Bluetooth: hci0 command 0x041b tx timeout [ 3079.163003] oom_reaper: reaped process 7396 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3079.198608] Bluetooth: hci1 command 0x041b tx timeout [ 3079.254427] rs:main Q:Reg invoked oom-killer: gfp_mask=0x1c200ca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), nodemask=(null), order=0, oom_score_adj=0 [ 3079.283388] rs:main Q:Reg cpuset=/ mems_allowed=0-1 [ 3079.293056] CPU: 1 PID: 7246 Comm: rs:main Q:Reg Not tainted 4.14.230-syzkaller #0 [ 3079.301421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3079.311409] Call Trace: [ 3079.314031] dump_stack+0x1b2/0x281 [ 3079.317858] dump_header+0x178/0x82f [ 3079.321742] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3079.326830] ? ___ratelimit+0x2cd/0x530 [ 3079.331346] oom_kill_process.cold+0x10/0xa40 [ 3079.337083] out_of_memory+0xe3e/0x1190 [ 3079.341060] ? oom_killer_disable+0x1c0/0x1c0 [ 3079.345912] ? mutex_trylock+0x152/0x1a0 [ 3079.350392] __alloc_pages_nodemask+0x23e1/0x2720 [ 3079.355558] ? trace_hardirqs_on+0x10/0x10 [ 3079.359868] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3079.365201] ? __radix_tree_lookup+0x1b5/0x2e0 [ 3079.370039] alloc_pages_current+0x155/0x260 [ 3079.374746] pagecache_get_page+0x3f5/0xab0 [ 3079.379417] grab_cache_page_write_begin+0x63/0x90 [ 3079.384420] ext4_da_write_begin+0x249/0xe70 [ 3079.389389] ? __ext4_journal_stop+0xe7/0x1b0 [ 3079.394076] ? ext4_write_begin+0x1260/0x1260 [ 3079.398818] ? balance_dirty_pages_ratelimited+0x887/0x1800 [ 3079.404624] generic_perform_write+0x1c9/0x420 [ 3079.409705] ? filemap_page_mkwrite+0x2d0/0x2d0 [ 3079.414664] ? current_time+0xb0/0xb0 [ 3079.418958] ? ext4_file_write_iter+0x1cc/0xd20 [ 3079.424111] __generic_file_write_iter+0x227/0x590 [ 3079.429298] ext4_file_write_iter+0x276/0xd20 [ 3079.434496] ? aa_file_perm+0x304/0xab0 [ 3079.438459] ? ext4_file_read_iter+0x330/0x330 [ 3079.443218] ? trace_hardirqs_on+0x10/0x10 [ 3079.447885] ? iov_iter_init+0xa6/0x1c0 [ 3079.452031] __vfs_write+0x44c/0x630 [ 3079.455741] ? kernel_read+0x110/0x110 [ 3079.459754] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3079.464952] vfs_write+0x17f/0x4d0 [ 3079.470685] SyS_write+0xf2/0x210 [ 3079.474221] ? SyS_read+0x210/0x210 [ 3079.478005] ? __do_page_fault+0x159/0xad0 [ 3079.482406] ? do_syscall_64+0x4c/0x640 [ 3079.486622] ? SyS_read+0x210/0x210 [ 3079.490418] do_syscall_64+0x1d5/0x640 [ 3079.494401] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3079.499955] RIP: 0033:0x7f39df5681cd [ 3079.503748] RSP: 002b:00007f39dcb23590 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 3079.511526] RAX: ffffffffffffffda RBX: 00007f39d4003bd0 RCX: 00007f39df5681cd [ 3079.518966] RDX: 0000000000000071 RSI: 00007f39d4003bd0 RDI: 0000000000000007 [ 3079.527417] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3079.535164] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f39d4003910 [ 3079.542788] R13: 00007f39dcb235b0 R14: 00005630c68f0480 R15: 0000000000000071 [ 3079.551378] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3079.568353] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 3079.568547] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3079.574021] CPU: 1 PID: 7396 Comm: syz-executor.4 Not tainted 4.14.230-syzkaller #0 [ 3079.595817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3079.601552] Mem-Info: [ 3079.605704] Call Trace: [ 3079.608205] active_anon:79408 inactive_anon:35121 isolated_anon:0 [ 3079.608205] active_file:16 inactive_file:17 isolated_file:0 [ 3079.608205] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3079.608205] slab_reclaimable:14645 slab_unreclaimable:141174 [ 3079.608205] mapped:52669 shmem:37654 pagetables:20554 bounce:0 [ 3079.608205] free:13947 free_pcp:99 free_cma:0 [ 3079.610867] dump_stack+0x1b2/0x281 [ 3079.610879] warn_alloc.cold+0x96/0x1cc [ 3079.610891] ? zone_watermark_ok_safe+0x220/0x220 [ 3079.610910] ? usleep_range+0x130/0x130 [ 3079.645793] syz-executor.4 cpuset= [ 3079.649467] ? try_to_free_pages+0x23f/0x6e0 [ 3079.649478] ? _find_next_bit+0xdb/0x100 [ 3079.649489] ? run_timer_softirq+0x5a0/0x5a0 [ 3079.653541] / [ 3079.660728] __alloc_pages_nodemask+0x2127/0x2720 [ 3079.664914] mems_allowed=0-1 [ 3079.668664] ? lock_acquire+0x170/0x3f0 [ 3079.668681] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3079.678541] Node 0 active_anon:243200kB inactive_anon:100852kB active_file:36kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:164108kB dirty:0kB writeback:0kB shmem:105660kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 174080kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3079.682444] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3079.684152] Node 1 active_anon:74432kB inactive_anon:39632kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:46568kB dirty:0kB writeback:0kB shmem:44956kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3079.689342] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3079.689362] alloc_pages_current+0x155/0x260 [ 3079.689373] ion_page_pool_alloc+0x118/0x1b0 [ 3079.708571] Node 0 [ 3079.730925] ion_system_heap_allocate+0x133/0x8c0 [ 3079.730936] ? ion_alloc+0x187/0x810 [ 3079.730952] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3079.768529] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3079.769783] ? ion_system_contig_heap_create+0x130/0x130 [ 3079.774610] lowmem_reserve[]: [ 3079.779306] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3079.779320] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3079.779331] ion_alloc+0x204/0x810 [ 3079.779344] ? ion_dma_buf_release+0x40/0x40 [ 3079.779357] ? __might_fault+0x177/0x1b0 [ 3079.788518] 0 [ 3079.790756] ion_ioctl+0xea/0x1f0 [ 3079.796276] 2717 [ 3079.823744] ? ion_query_heaps+0x360/0x360 [ 3079.823755] ? ion_query_heaps+0x360/0x360 [ 3079.823765] do_vfs_ioctl+0x75a/0xff0 [ 3079.823781] ? ioctl_preallocate+0x1a0/0x1a0 [ 3079.868545] 2718 [ 3079.871314] ? lock_downgrade+0x740/0x740 [ 3079.875101] 2718 [ 3079.879497] ? __fget+0x225/0x360 [ 3079.879507] ? do_vfs_ioctl+0xff0/0xff0 [ 3079.879519] ? security_file_ioctl+0x83/0xb0 [ 3079.879529] SyS_ioctl+0x7f/0xb0 [ 3079.898510] 2718 [ 3079.901140] ? do_vfs_ioctl+0xff0/0xff0 [ 3079.906743] do_syscall_64+0x1d5/0x640 [ 3079.915634] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3079.920902] RIP: 0033:0x466459 [ 3079.924340] RSP: 002b:00007f61587e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3079.928512] Node 0 [ 3079.932300] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3079.932307] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3079.934986] DMA32 free:18000kB min:36200kB low:45248kB high:54296kB active_anon:243032kB inactive_anon:100796kB active_file:36kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11200kB pagetables:14636kB bounce:0kB free_pcp:232kB local_pcp:120kB free_cma:0kB [ 3079.942646] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3079.942652] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3079.942656] R13: 00007ffed7f6205f R14: 00007f61587e7300 R15: 0000000000022000 [ 3079.946872] CPU: 1 PID: 7411 Comm: syz-executor.4 Not tainted 4.14.230-syzkaller #0 [ 3079.969027] lowmem_reserve[]: [ 3079.980421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3079.980426] Call Trace: [ 3079.980445] dump_stack+0x1b2/0x281 [ 3079.980458] warn_alloc.cold+0x96/0x1cc [ 3079.987976] 0 [ 3079.996134] ? zone_watermark_ok_safe+0x220/0x220 [ 3079.996144] ? usleep_range+0x130/0x130 [ 3079.996152] ? try_to_free_pages+0x23f/0x6e0 [ 3079.996165] ? _find_next_bit+0xdb/0x100 [ 3080.003607] 0 [ 3080.011544] ? run_timer_softirq+0x5a0/0x5a0 [ 3080.011564] __alloc_pages_nodemask+0x2127/0x2720 [ 3080.014829] 0 [ 3080.024505] ? lock_acquire+0x170/0x3f0 [ 3080.024519] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3080.024527] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3080.024542] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3080.024559] alloc_pages_current+0x155/0x260 [ 3080.024568] ion_page_pool_alloc+0x118/0x1b0 [ 3080.024578] ion_system_heap_allocate+0x133/0x8c0 [ 3080.027251] 0 [ 3080.030775] ? ion_alloc+0x187/0x810 [ 3080.030786] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3080.030793] ? ion_system_contig_heap_create+0x130/0x130 [ 3080.030803] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3080.034754] 0 [ 3080.036680] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3080.045837] ion_alloc+0x204/0x810 [ 3080.050409] Node 0 [ 3080.054759] ? ion_dma_buf_release+0x40/0x40 [ 3080.056723] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3080.061499] ? __might_fault+0x177/0x1b0 [ 3080.061511] ion_ioctl+0xea/0x1f0 [ 3080.061520] ? ion_query_heaps+0x360/0x360 [ 3080.061531] ? SyS_send+0x40/0x40 [ 3080.061540] ? ion_query_heaps+0x360/0x360 [ 3080.066461] lowmem_reserve[]: [ 3080.068270] do_vfs_ioctl+0x75a/0xff0 [ 3080.072572] 0 [ 3080.077719] ? ioctl_preallocate+0x1a0/0x1a0 [ 3080.082356] 0 [ 3080.088066] ? lock_downgrade+0x740/0x740 [ 3080.092661] 0 [ 3080.097162] ? __fget+0x225/0x360 [ 3080.101999] 0 [ 3080.103773] ? do_vfs_ioctl+0xff0/0xff0 [ 3080.107548] 0 [ 3080.113196] ? security_file_ioctl+0x83/0xb0 [ 3080.113206] SyS_ioctl+0x7f/0xb0 [ 3080.113214] ? do_vfs_ioctl+0xff0/0xff0 [ 3080.113225] do_syscall_64+0x1d5/0x640 [ 3080.124680] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3080.126631] Node 1 [ 3080.132011] RIP: 0033:0x466459 [ 3080.132015] RSP: 002b:00007f61587c6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3080.132025] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 3080.132030] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3080.132035] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3080.132042] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 3080.136086] Normal free:26700kB min:53696kB low:67120kB high:80544kB active_anon:74352kB inactive_anon:39632kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:22080kB pagetables:67448kB bounce:0kB free_pcp:164kB local_pcp:120kB free_cma:0kB [ 3080.138292] R13: 00007ffed7f6205f R14: 00007f61587c6300 R15: 0000000000022000 [ 3080.142791] lowmem_reserve[]: [ 3080.175277] warn_alloc_show_mem: 2 callbacks suppressed [ 3080.175280] Mem-Info: [ 3080.219457] Bluetooth: hci3 command 0x0409 tx timeout [ 3080.225404] active_anon:79382 inactive_anon:35121 isolated_anon:0 [ 3080.225404] active_file:17 inactive_file:191 isolated_file:0 [ 3080.225404] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3080.225404] slab_reclaimable:14645 slab_unreclaimable:141176 [ 3080.225404] mapped:52694 shmem:37654 pagetables:20554 bounce:0 [ 3080.225404] free:24327 free_pcp:140 free_cma:0 [ 3080.264852] 0 [ 3080.274632] Node 0 active_anon:243176kB inactive_anon:100852kB active_file:40kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:164108kB dirty:0kB writeback:0kB shmem:105660kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 174080kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3080.324618] 0 [ 3080.334896] Node 1 active_anon:74352kB inactive_anon:39632kB active_file:228kB inactive_file:4528kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:49768kB dirty:0kB writeback:0kB shmem:44956kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3080.438517] 0 0 0 [ 3080.446936] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3080.478141] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3080.484032] Node 0 DMA32 free:61528kB min:36200kB low:45248kB high:54296kB active_anon:243008kB inactive_anon:100796kB active_file:40kB inactive_file:236kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11200kB pagetables:14636kB bounce:0kB free_pcp:952kB local_pcp:156kB free_cma:0kB [ 3080.515619] lowmem_reserve[]: 0 0 0 0 0 [ 3080.520136] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3080.538494] Node 0 [ 3080.548509] lowmem_reserve[]: 0 0 0 0 0 [ 3080.548532] Node 1 Normal free:154548kB min:53696kB low:67120kB high:80544kB active_anon:74352kB inactive_anon:39632kB active_file:428kB inactive_file:5080kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:22080kB pagetables:67448kB bounce:0kB free_pcp:760kB local_pcp:132kB free_cma:0kB [ 3080.548554] lowmem_reserve[]: 0 0 0 0 0 [ 3080.548571] Node 0 DMA: 1*4kB (E) 12*8kB (UME) 53*16kB (UME) 33*32kB (UME) 10*64kB (UME) 3*128kB (UE) 5*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 1*2048kB (M) 0*4096kB = 10964kB [ 3080.548638] Node 0 DMA32: 1308*4kB (UME) 399*8kB (ME) 276*16kB (UMEH) 105*32kB (UMEH) 23*64kB (UMH) 60*128kB (UMH) 76*256kB (UMH) 3*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 47368kB [ 3080.548704] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB [ 3080.599298] DMA: [ 3080.678553] 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3080.687891] Node 1 Normal: 20*4kB (UM) 4*8kB (M) 1*16kB (M) 3*32kB (UM) 0*64kB 11*128kB (M) 5*256kB (UM) 0*512kB 34*1024kB (U) 8*2048kB (U) 0*4096kB = 54112kB [ 3080.731896] 1*4kB (E) 12*8kB (UME) 53*16kB (UME) 33*32kB (UME) 10*64kB (UME) 3*128kB (UE) 5*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 1*2048kB (M) 0*4096kB = 10964kB [ 3080.754280] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3080.763445] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3080.772990] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3080.782322] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3080.788485] Node 0 DMA32: 1176*4kB (UME) 501*8kB (UME) 258*16kB (UMEH) 57*32kB (UMEH) 17*64kB (MH) 7*128kB (MH) 3*256kB (MH) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 17928kB [ 3080.798570] 38884 total pagecache pages [ 3080.828494] 0 pages in swap cache [ 3080.832070] Swap cache stats: add 0, delete 0, find 0/0 [ 3080.837810] Free swap = 0kB [ 3080.841747] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3080.877268] Total swap = 0kB [ 3080.880582] 2097051 pages RAM [ 3080.883872] 0 pages HighMem/MovableOnly [ 3080.888025] 363848 pages reserved [ 3080.888649] Node 1 Normal: 88*4kB (UM) 59*8kB (UM) 20*16kB (UM) 18*32kB (UM) 10*64kB (UM) 11*128kB (M) 5*256kB (UM) 0*512kB 7*1024kB (U) 8*2048kB (U) 0*4096kB = 28600kB [ 3080.898499] 0 pages cma reserved [ 3080.928505] Bluetooth: hci0 command 0x040f tx timeout [ 3080.948508] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3080.957466] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3081.041985] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3081.082327] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 3081.092941] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3081.098591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3081.103822] 38528 total pagecache pages [ 3081.118625] 0 pages in swap cache [ 3081.122419] Swap cache stats: add 0, delete 0, find 0/0 [ 3081.131840] Free swap = 0kB [ 3081.134956] Total swap = 0kB [ 3081.137992] 2097051 pages RAM [ 3081.138975] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3081.141866] 0 pages HighMem/MovableOnly [ 3081.184644] 363848 pages reserved [ 3081.187888] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 3081.188321] 0 pages cma reserved [ 3081.228598] Out of memory (oom_kill_allocating_task): Kill process 7246 (rs:main Q:Reg) score 0 or sacrifice child [ 3081.229787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3081.248897] Bluetooth: hci1 command 0x040f tx timeout [ 3081.267107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3081.278934] Killed process 7237 (rsyslogd) total-vm:254332kB, anon-rss:820kB, file-rss:0kB, shmem-rss:0kB [ 3081.310938] oom_reaper: reaped process 7237 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3081.332908] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 3081.369085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3081.461075] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 3081.631586] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 3081.650453] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 3081.669900] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3081.678452] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3081.735127] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 3081.739041] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 3081.747464] CPU: 0 PID: 7411 Comm: syz-executor.4 Not tainted 4.14.230-syzkaller #0 [ 3081.755849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3081.765300] Call Trace: [ 3081.767903] dump_stack+0x1b2/0x281 [ 3081.771718] warn_alloc.cold+0x96/0x1cc [ 3081.775892] ? zone_watermark_ok_safe+0x220/0x220 [ 3081.780843] __alloc_pages_nodemask+0x2127/0x2720 [ 3081.785792] ? lock_acquire+0x170/0x3f0 [ 3081.790126] ? lock_acquire+0x170/0x3f0 [ 3081.793933] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3081.794227] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3081.803435] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3081.806166] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3081.818279] ? __mutex_unlock_slowpath+0x75/0x770 [ 3081.823240] alloc_pages_current+0x155/0x260 [ 3081.827662] ion_page_pool_alloc+0x118/0x1b0 [ 3081.832433] ion_system_heap_allocate+0x133/0x8c0 [ 3081.837289] ? _raw_spin_unlock+0x29/0x40 [ 3081.841704] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3081.846719] ? ion_system_contig_heap_create+0x130/0x130 [ 3081.852271] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3081.857303] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3081.862242] ion_alloc+0x27a/0x810 [ 3081.865885] ? ion_dma_buf_release+0x40/0x40 [ 3081.870743] ? __might_fault+0x177/0x1b0 [ 3081.873700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3081.875004] ion_ioctl+0xea/0x1f0 [ 3081.875013] ? ion_query_heaps+0x360/0x360 [ 3081.875024] ? SyS_send+0x40/0x40 [ 3081.875031] ? ion_query_heaps+0x360/0x360 [ 3081.875042] do_vfs_ioctl+0x75a/0xff0 [ 3081.875054] ? ioctl_preallocate+0x1a0/0x1a0 [ 3081.875063] ? lock_downgrade+0x740/0x740 [ 3081.875077] ? __fget+0x225/0x360 [ 3081.875086] ? do_vfs_ioctl+0xff0/0xff0 [ 3081.875097] ? security_file_ioctl+0x83/0xb0 [ 3081.875108] SyS_ioctl+0x7f/0xb0 [ 3081.875116] ? do_vfs_ioctl+0xff0/0xff0 [ 3081.875128] do_syscall_64+0x1d5/0x640 [ 3081.875145] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3081.939220] RIP: 0033:0x466459 [ 3081.942537] RSP: 002b:00007f61587c6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3081.943638] chnl_net:caif_netlink_parms(): no params data found [ 3081.950248] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 3081.950253] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3081.950257] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3081.950262] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 3081.950267] R13: 00007ffed7f6205f R14: 00007f61587c6300 R15: 0000000000022000 [ 3082.002219] CPU: 1 PID: 7396 Comm: syz-executor.4 Not tainted 4.14.230-syzkaller #0 [ 3082.010570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3082.020194] Call Trace: [ 3082.022917] dump_stack+0x1b2/0x281 [ 3082.026681] warn_alloc.cold+0x96/0x1cc [ 3082.030662] ? zone_watermark_ok_safe+0x220/0x220 [ 3082.035657] __alloc_pages_nodemask+0x2127/0x2720 [ 3082.040690] ? lock_acquire+0x170/0x3f0 [ 3082.044850] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3082.049808] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3082.055718] ? __mutex_unlock_slowpath+0x75/0x770 [ 3082.060576] alloc_pages_current+0x155/0x260 [ 3082.064992] ion_page_pool_alloc+0x118/0x1b0 [ 3082.069688] ion_system_heap_allocate+0x133/0x8c0 [ 3082.074732] ? _raw_spin_unlock+0x29/0x40 [ 3082.079097] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3082.084033] ? ion_system_contig_heap_create+0x130/0x130 [ 3082.089995] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3082.095125] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3082.100446] ion_alloc+0x27a/0x810 [ 3082.104168] ? ion_dma_buf_release+0x40/0x40 [ 3082.108676] ? __might_fault+0x177/0x1b0 [ 3082.112921] ion_ioctl+0xea/0x1f0 [ 3082.116387] ? ion_query_heaps+0x360/0x360 [ 3082.120632] ? ion_query_heaps+0x360/0x360 [ 3082.124960] do_vfs_ioctl+0x75a/0xff0 [ 3082.128951] ? ioctl_preallocate+0x1a0/0x1a0 [ 3082.133496] ? lock_downgrade+0x740/0x740 [ 3082.137660] ? __fget+0x225/0x360 [ 3082.141475] ? do_vfs_ioctl+0xff0/0xff0 [ 3082.145643] ? security_file_ioctl+0x83/0xb0 [ 3082.150149] SyS_ioctl+0x7f/0xb0 [ 3082.153952] ? do_vfs_ioctl+0xff0/0xff0 [ 3082.158206] do_syscall_64+0x1d5/0x640 [ 3082.162776] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3082.168145] RIP: 0033:0x466459 [ 3082.171337] RSP: 002b:00007f61587e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3082.179148] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3082.186423] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3082.193871] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3082.201388] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3082.208751] R13: 00007ffed7f6205f R14: 00007f61587e7300 R15: 0000000000022000 [ 3082.236131] warn_alloc_show_mem: 1 callbacks suppressed [ 3082.236135] Mem-Info: [ 3082.253741] active_anon:79207 inactive_anon:35121 isolated_anon:0 [ 3082.253741] active_file:626 inactive_file:394 isolated_file:32 [ 3082.253741] unevictable:0 dirty:2 writeback:0 unstable:0 [ 3082.253741] slab_reclaimable:14631 slab_unreclaimable:142043 [ 3082.253741] mapped:53415 shmem:37654 pagetables:20540 bounce:0 [ 3082.253741] free:25382 free_pcp:94 free_cma:0 [ 3082.294186] Bluetooth: hci3 command 0x041b tx timeout [ 3082.324865] Node 0 active_anon:242416kB inactive_anon:100852kB active_file:2284kB inactive_file:1792kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:167136kB dirty:4kB writeback:0kB shmem:105660kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 174080kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3082.463334] Node 1 active_anon:74412kB inactive_anon:39632kB active_file:80kB inactive_file:84kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:46724kB dirty:4kB writeback:0kB shmem:44956kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3082.496236] Node 0 DMA free:11064kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3082.527008] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3082.533873] Node 0 DMA32 free:36752kB min:36200kB low:45248kB high:54296kB active_anon:242248kB inactive_anon:100796kB active_file:1764kB inactive_file:1748kB unevictable:0kB writepending:4kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11200kB pagetables:14620kB bounce:0kB free_pcp:876kB local_pcp:196kB free_cma:0kB [ 3082.597171] lowmem_reserve[]: 0 0 0 0 0 [ 3082.601998] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3082.628389] lowmem_reserve[]: 0 0 0 0 0 [ 3082.632851] Node 1 Normal free:53440kB min:53696kB low:67120kB high:80544kB active_anon:74412kB inactive_anon:39632kB active_file:0kB inactive_file:32kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:22144kB pagetables:67408kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3082.725712] syz-executor.2: page allocation failure: order:4, mode:0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null) [ 3082.742033] lowmem_reserve[]: 0 0 0 0 0 [ 3082.755878] oom_reaper: reaped process 7416 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3082.757147] Node 0 DMA: 2*4kB (UE) 12*8kB (UME) 56*16kB (UME) 31*32kB (UME) 10*64kB (UME) 3*128kB (UE) 5*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 1*2048kB (M) 0*4096kB = 10952kB [ 3082.781567] syz-executor.2 cpuset= [ 3082.784947] syz-executor.0: [ 3082.784968] / [ 3082.788703] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3082.806683] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3082.813449] mems_allowed=0-1 [ 3082.820865] rsyslogd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 3082.835737] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 3082.836502] CPU: 1 PID: 7605 Comm: syz-executor.2 Not tainted 4.14.230-syzkaller #0 [ 3082.840898] rsyslogd cpuset= [ 3082.849103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3082.849107] Call Trace: [ 3082.849127] dump_stack+0x1b2/0x281 [ 3082.849137] warn_alloc.cold+0x96/0x1cc [ 3082.849148] ? zone_watermark_ok_safe+0x220/0x220 [ 3082.858341] Node 0 [ 3082.862043] __alloc_pages_nodemask+0x2127/0x2720 [ 3082.864714] DMA32: 1524*4kB [ 3082.868520] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3082.868528] ? __alloc_pages_nodemask+0x1a6e/0x2720 [ 3082.868544] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3082.868563] ? mark_held_locks+0xa6/0xf0 [ 3082.878311] / [ 3082.879741] ? cache_grow_begin+0x3f/0x700 [ 3082.885641] mems_allowed=0-1 [ 3082.888927] cache_grow_begin+0x91/0x700 [ 3082.888940] fallback_alloc+0x207/0x2c0 [ 3082.888951] kmem_cache_alloc_trace+0x1f1/0x3d0 [ 3082.888961] can_notifier+0x1ea/0x300 [ 3082.888971] notifier_call_chain+0x108/0x1a0 [ 3082.898313] (ME) [ 3082.899145] register_netdevice+0xb98/0xe40 [ 3082.904146] 338*8kB [ 3082.908739] ? netdev_change_features+0xa0/0xa0 [ 3082.908746] ? memcpy+0x35/0x50 [ 3082.908754] ? nla_strlcpy+0xcc/0x100 [ 3082.908764] vxcan_newlink+0x318/0x4c0 [ 3082.938299] (UME) [ 3082.939991] ? vxcan_close+0xb0/0xb0 [ 3082.942054] 189*16kB (ME) [ 3082.946735] ? lock_downgrade+0x740/0x740 [ 3082.968298] 167*32kB [ 3082.971324] ? fs_reclaim_release+0xd0/0x110 [ 3082.974427] (UME) [ 3082.978649] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3082.978657] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3082.978667] ? __kmalloc_node+0x38/0x70 [ 3083.003610] ? kmem_cache_alloc_node_trace+0x383/0x400 [ 3083.008334] 7*64kB (UH) [ 3083.009242] ? __kmalloc_node+0x4c/0x70 [ 3083.009244] 0*128kB 0*256kB [ 3083.011906] ? alloc_netdev_mqs+0x8c0/0xb70 [ 3083.015873] 0*512kB 0*1024kB [ 3083.020114] ? rtnl_create_link+0x129/0x890 [ 3083.020126] rtnl_newlink+0xfab/0x1860 [ 3083.020134] ? rtnl_newlink+0x43d/0x1860 [ 3083.020146] ? __lock_acquire+0x5fc/0x3f20 [ 3083.045775] ? vxcan_close+0xb0/0xb0 [ 3083.048297] 0*2048kB [ 3083.049822] ? trace_hardirqs_on+0x10/0x10 [ 3083.049829] 0*4096kB [ 3083.052330] ? rtnl_dellink+0x6a0/0x6a0 [ 3083.057180] = 17616kB [ 3083.057185] Node 0 [ 3083.059710] ? trace_hardirqs_on+0x10/0x10 [ 3083.059720] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 3083.059728] ? deref_stack_reg+0x124/0x1a0 [ 3083.059766] ? lock_acquire+0x170/0x3f0 [ 3083.088443] ? lock_downgrade+0x740/0x740 [ 3083.092671] ? rtnl_dellink+0x6a0/0x6a0 [ 3083.096898] rtnetlink_rcv_msg+0x3be/0xb10 [ 3083.102335] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 3083.107107] ? __netlink_lookup+0x345/0x5d0 [ 3083.108296] Normal: 0*4kB [ 3083.112422] netlink_rcv_skb+0x125/0x390 [ 3083.112435] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 3083.115402] 0*8kB [ 3083.119789] ? netlink_ack+0x9a0/0x9a0 [ 3083.119803] netlink_unicast+0x437/0x610 [ 3083.119812] ? netlink_sendskb+0xd0/0xd0 [ 3083.119820] ? __check_object_size+0x179/0x230 [ 3083.119829] netlink_sendmsg+0x62e/0xb80 [ 3083.119841] ? nlmsg_notify+0x170/0x170 [ 3083.148302] 0*16kB [ 3083.149449] ? security_socket_sendmsg+0x83/0xb0 [ 3083.153679] 0*32kB 0*64kB [ 3083.156274] ? nlmsg_notify+0x170/0x170 [ 3083.169481] sock_sendmsg+0xb5/0x100 [ 3083.173546] SyS_sendto+0x1c7/0x2c0 [ 3083.177438] ? SyS_getpeername+0x220/0x220 [ 3083.182182] ? vm_insert_page+0x7c0/0x7c0 [ 3083.186867] ? up_read+0x17/0x30 [ 3083.188352] 0*128kB 0*256kB [ 3083.190245] ? __do_page_fault+0x159/0xad0 [ 3083.190258] ? do_syscall_64+0x4c/0x640 [ 3083.193267] 0*512kB [ 3083.197497] ? SyS_getpeername+0x220/0x220 [ 3083.208168] do_syscall_64+0x1d5/0x640 [ 3083.212323] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3083.217811] RIP: 0033:0x4193ec [ 3083.221529] RSP: 002b:00007ffd20e1caa0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 3083.228296] 0*1024kB [ 3083.229505] RAX: ffffffffffffffda RBX: 00000000014a4320 RCX: 00000000004193ec [ 3083.229512] 0*2048kB [ 3083.232040] RDX: 000000000000003c RSI: 00000000014a4370 RDI: 0000000000000003 [ 3083.249297] RBP: 0000000000000000 R08: 00007ffd20e1caf4 R09: 000000000000000c [ 3083.257037] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 3083.264475] R13: 00000000014a4370 R14: 0000000000000003 R15: 0000000000000000 [ 3083.268280] 0*4096kB = 0kB [ 3083.275904] Node 1 Normal: 92*4kB (UM) 35*8kB (UM) 18*16kB (UM) 779*32kB (UM) 9*64kB (UM) 2*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26696kB [ 3083.291816] Bluetooth: hci0 command 0x0419 tx timeout [ 3083.293779] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 3083.297788] CPU: 0 PID: 7396 Comm: syz-executor.4 Not tainted 4.14.230-syzkaller #0 [ 3083.310756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3083.320291] Call Trace: [ 3083.323066] dump_stack+0x1b2/0x281 [ 3083.326782] warn_alloc.cold+0x96/0x1cc [ 3083.330928] ? zone_watermark_ok_safe+0x220/0x220 [ 3083.336119] ? usleep_range+0x130/0x130 [ 3083.340474] ? try_to_free_pages+0x23f/0x6e0 [ 3083.345056] ? _find_next_bit+0xdb/0x100 [ 3083.349195] ? run_timer_softirq+0x5a0/0x5a0 [ 3083.353896] __alloc_pages_nodemask+0x2127/0x2720 [ 3083.359050] ? lock_acquire+0x170/0x3f0 [ 3083.363804] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3083.369089] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3083.373698] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3083.379600] alloc_pages_current+0x155/0x260 [ 3083.384292] ion_page_pool_alloc+0x118/0x1b0 [ 3083.388896] ion_system_heap_allocate+0x133/0x8c0 [ 3083.394056] ? _raw_spin_unlock+0x29/0x40 [ 3083.398516] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3083.403586] ? ion_system_contig_heap_create+0x130/0x130 [ 3083.409052] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3083.414253] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3083.419287] ion_alloc+0x27a/0x810 [ 3083.422917] ? ion_dma_buf_release+0x40/0x40 [ 3083.427615] ? __might_fault+0x177/0x1b0 [ 3083.431856] ion_ioctl+0xea/0x1f0 [ 3083.435318] ? ion_query_heaps+0x360/0x360 [ 3083.440172] ? ion_query_heaps+0x360/0x360 [ 3083.444496] do_vfs_ioctl+0x75a/0xff0 [ 3083.448418] ? ioctl_preallocate+0x1a0/0x1a0 [ 3083.454121] ? lock_downgrade+0x740/0x740 [ 3083.458829] ? __fget+0x225/0x360 [ 3083.462384] ? do_vfs_ioctl+0xff0/0xff0 [ 3083.466442] ? security_file_ioctl+0x83/0xb0 [ 3083.470848] SyS_ioctl+0x7f/0xb0 [ 3083.475004] ? do_vfs_ioctl+0xff0/0xff0 [ 3083.479069] do_syscall_64+0x1d5/0x640 [ 3083.483580] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3083.488898] RIP: 0033:0x466459 [ 3083.492224] RSP: 002b:00007f61587e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3083.500156] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3083.508774] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3083.516586] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3083.524637] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3083.532170] R13: 00007ffed7f6205f R14: 00007f61587e7300 R15: 0000000000022000 [ 3083.539709] Bluetooth: hci1 command 0x0419 tx timeout [ 3083.540167] CPU: 1 PID: 7780 Comm: rsyslogd Not tainted 4.14.230-syzkaller #0 [ 3083.552233] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3083.553135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3083.568122] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3083.579304] Call Trace: [ 3083.579331] dump_stack+0x1b2/0x281 [ 3083.579343] dump_header+0x178/0x82f [ 3083.579353] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3083.579362] ? ___ratelimit+0x2cd/0x530 [ 3083.579375] oom_kill_process.cold+0x10/0xa40 [ 3083.589230] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3083.592125] out_of_memory+0xe3e/0x1190 [ 3083.596695] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3083.600400] ? oom_killer_disable+0x1c0/0x1c0 [ 3083.600409] ? mutex_trylock+0x152/0x1a0 [ 3083.600419] __alloc_pages_nodemask+0x23e1/0x2720 [ 3083.600437] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3083.600460] alloc_pages_current+0x155/0x260 [ 3083.606154] 37688 total pagecache pages [ 3083.610409] filemap_fault+0x11a1/0x1ad0 [ 3083.610427] ext4_filemap_fault+0x84/0xb0 [ 3083.610437] __do_fault+0xfa/0x380 [ 3083.610448] __handle_mm_fault+0x2497/0x4620 [ 3083.615355] 0 pages in swap cache [ 3083.626015] ? vm_insert_page+0x7c0/0x7c0 [ 3083.626026] ? vm_mmap_pgoff+0x168/0x1a0 [ 3083.626040] ? mark_held_locks+0xa6/0xf0 [ 3083.626049] handle_mm_fault+0x455/0x9c0 [ 3083.626063] __do_page_fault+0x549/0xad0 [ 3083.630662] Swap cache stats: add 0, delete 0, find 0/0 [ 3083.640702] ? spurious_fault+0x640/0x640 [ 3083.640719] ? do_page_fault+0x60/0x500 [ 3083.640727] ? page_fault+0x2f/0x50 [ 3083.640736] page_fault+0x45/0x50 [ 3083.640747] RIP: 80000000:0x7f15bf59a040 [ 3083.645961] Free swap = 0kB [ 3083.650280] RSP: bd95e90c:0000000000000000 EFLAGS: 561c73b44490 [ 3083.657774] Mem-Info: [ 3083.671282] Total swap = 0kB [ 3083.681497] CPU: 1 PID: 7416 Comm: syz-executor.0 Not tainted 4.14.230-syzkaller #0 [ 3083.692283] 2097051 pages RAM [ 3083.693069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3083.697380] 0 pages HighMem/MovableOnly [ 3083.704505] Call Trace: [ 3083.704530] dump_stack+0x1b2/0x281 [ 3083.704543] warn_alloc.cold+0x96/0x1cc [ 3083.704554] ? zone_watermark_ok_safe+0x220/0x220 [ 3083.704562] ? usleep_range+0x130/0x130 [ 3083.704574] ? try_to_free_pages+0x23f/0x6e0 [ 3083.709554] 363848 pages reserved [ 3083.713581] ? _find_next_bit+0xdb/0x100 [ 3083.717801] 0 pages cma reserved [ 3083.725271] ? run_timer_softirq+0x5a0/0x5a0 [ 3083.725288] __alloc_pages_nodemask+0x2127/0x2720 [ 3083.725306] ? lock_acquire+0x170/0x3f0 [ 3083.725320] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3083.731899] warn_alloc_show_mem: 1 callbacks suppressed [ 3083.731902] Mem-Info: [ 3083.734475] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3083.738095] active_anon:79205 inactive_anon:35121 isolated_anon:0 [ 3083.738095] active_file:12 inactive_file:22 isolated_file:0 [ 3083.738095] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3083.738095] slab_reclaimable:14629 slab_unreclaimable:141943 [ 3083.738095] mapped:52703 shmem:37654 pagetables:20548 bounce:0 [ 3083.738095] free:13812 free_pcp:32 free_cma:0 [ 3083.741683] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3083.741697] ? alloc_pages_current+0xe3/0x260 [ 3083.741706] alloc_pages_current+0x155/0x260 [ 3083.741718] ion_page_pool_alloc+0x118/0x1b0 [ 3083.741728] ion_system_heap_allocate+0x133/0x8c0 [ 3083.746227] Node 0 active_anon:242404kB inactive_anon:100852kB active_file:24kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:164108kB dirty:0kB writeback:0kB shmem:105660kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 174080kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3083.749507] ? ion_alloc+0x187/0x810 [ 3083.749519] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3083.749527] ? ion_system_contig_heap_create+0x130/0x130 [ 3083.749536] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3083.749546] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3083.749556] ion_alloc+0x204/0x810 [ 3083.755990] Node 1 active_anon:74416kB inactive_anon:39632kB active_file:24kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:46704kB dirty:0kB writeback:0kB shmem:44956kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3083.758477] ? ion_dma_buf_release+0x40/0x40 [ 3083.758489] ? __might_fault+0x177/0x1b0 [ 3083.758503] ion_ioctl+0xea/0x1f0 [ 3083.761555] Node 0 [ 3083.770517] ? ion_query_heaps+0x360/0x360 [ 3083.770529] ? ion_query_heaps+0x360/0x360 [ 3083.770541] do_vfs_ioctl+0x75a/0xff0 [ 3083.773642] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3083.783540] ? ioctl_preallocate+0x1a0/0x1a0 [ 3083.783549] ? lock_downgrade+0x740/0x740 [ 3083.783562] ? __fget+0x225/0x360 [ 3083.787949] lowmem_reserve[]: [ 3083.790689] ? do_vfs_ioctl+0xff0/0xff0 [ 3083.790701] ? security_file_ioctl+0x83/0xb0 [ 3083.790712] SyS_ioctl+0x7f/0xb0 [ 3083.794394] 0 [ 3083.798368] ? do_vfs_ioctl+0xff0/0xff0 [ 3083.798380] do_syscall_64+0x1d5/0x640 [ 3083.798394] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3083.803871] 2717 [ 3083.808052] RIP: 0033:0x466459 [ 3083.812590] 2718 [ 3083.816529] RSP: 002b:00007f1ef2095188 EFLAGS: 00000246 [ 3083.820934] 2718 [ 3083.824632] ORIG_RAX: 0000000000000010 [ 3083.829650] 2718 [ 3083.834906] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3083.843901] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3083.843908] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3083.849648] Node 0 [ 3083.852283] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3083.852291] R13: 00007fffa779c11f R14: 00007f1ef2095300 R15: 0000000000022000 [ 3083.857073] DMA32 free:17616kB min:36200kB low:45248kB high:54296kB active_anon:242236kB inactive_anon:100796kB active_file:24kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11200kB pagetables:14624kB bounce:0kB free_pcp:124kB local_pcp:120kB free_cma:0kB [ 3084.027280] syz-executor.4: [ 3084.034760] lowmem_reserve[]: [ 3084.081730] active_anon:79205 inactive_anon:35121 isolated_anon:0 [ 3084.081730] active_file:35 inactive_file:1624 isolated_file:0 [ 3084.081730] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3084.081730] slab_reclaimable:14629 slab_unreclaimable:142078 [ 3084.081730] mapped:53953 shmem:37654 pagetables:20548 bounce:0 [ 3084.081730] free:58417 free_pcp:232 free_cma:0 [ 3084.086727] 0 [ 3084.092092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3084.099779] 0 [ 3084.118771] Node 0 active_anon:242404kB inactive_anon:100852kB active_file:20kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:164108kB dirty:0kB writeback:0kB shmem:105660kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 174080kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3084.145352] 0 [ 3084.161293] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 3084.178418] page allocation failure: order:0 [ 3084.281692] Node 1 active_anon:74416kB inactive_anon:39632kB active_file:220kB inactive_file:6548kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:51804kB dirty:0kB writeback:0kB shmem:44956kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3084.298512] 0 0 [ 3084.360433] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3084.374516] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 3084.388171] Bluetooth: hci3 command 0x040f tx timeout [ 3084.430280] lowmem_reserve[]: 0 0 0 0 0 [ 3084.434328] Node 1 Normal free:412228kB min:53696kB low:67120kB high:80544kB active_anon:74416kB inactive_anon:39632kB active_file:1820kB inactive_file:5748kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:22016kB pagetables:67436kB bounce:0kB free_pcp:516kB local_pcp:308kB free_cma:0kB [ 3084.458406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3084.467460] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 3084.472930] lowmem_reserve[]: [ 3084.481592] (null) [ 3084.487286] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 3084.493902] 0 0 0 0 0 [ 3084.496708] Node 0 DMA: 2*4kB (UE) 14*8kB (UME) 56*16kB (UME) 33*32kB (UME) 10*64kB (UME) 3*128kB (UE) 5*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 1*2048kB (M) 0*4096kB = 11032kB [ 3084.498854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3084.515718] CPU: 0 PID: 7411 Comm: syz-executor.4 Not tainted 4.14.230-syzkaller #0 [ 3084.524705] Node 0 [ 3084.529722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3084.529726] Call Trace: [ 3084.529746] dump_stack+0x1b2/0x281 [ 3084.529759] warn_alloc.cold+0x96/0x1cc [ 3084.529770] ? zone_watermark_ok_safe+0x220/0x220 [ 3084.529779] ? usleep_range+0x130/0x130 [ 3084.529786] ? try_to_free_pages+0x23f/0x6e0 [ 3084.529795] ? _find_next_bit+0xdb/0x100 [ 3084.529804] ? run_timer_softirq+0x5a0/0x5a0 [ 3084.529819] __alloc_pages_nodemask+0x2127/0x2720 [ 3084.529836] ? lock_acquire+0x170/0x3f0 [ 3084.529851] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3084.529859] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3084.529874] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3084.529892] alloc_pages_current+0x155/0x260 [ 3084.529903] ion_page_pool_alloc+0x118/0x1b0 [ 3084.529912] ion_system_heap_allocate+0x133/0x8c0 [ 3084.529921] ? _raw_spin_unlock+0x29/0x40 [ 3084.529930] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3084.529938] ? ion_system_contig_heap_create+0x130/0x130 [ 3084.529947] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3084.529957] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3084.529965] ion_alloc+0x27a/0x810 [ 3084.529976] ? ion_dma_buf_release+0x40/0x40 [ 3084.529987] ? __might_fault+0x177/0x1b0 [ 3084.529998] ion_ioctl+0xea/0x1f0 [ 3084.530006] ? ion_query_heaps+0x360/0x360 [ 3084.530016] ? SyS_send+0x40/0x40 [ 3084.530024] ? ion_query_heaps+0x360/0x360 [ 3084.530034] do_vfs_ioctl+0x75a/0xff0 [ 3084.530044] ? ioctl_preallocate+0x1a0/0x1a0 [ 3084.530051] ? lock_downgrade+0x740/0x740 [ 3084.530063] ? __fget+0x225/0x360 [ 3084.541671] DMA free:11024kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3084.542104] ? do_vfs_ioctl+0xff0/0xff0 [ 3084.544757] lowmem_reserve[]: [ 3084.548657] ? security_file_ioctl+0x83/0xb0 [ 3084.548666] SyS_ioctl+0x7f/0xb0 [ 3084.548674] ? do_vfs_ioctl+0xff0/0xff0 [ 3084.548684] do_syscall_64+0x1d5/0x640 [ 3084.548698] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3084.548706] RIP: 0033:0x466459 [ 3084.548710] RSP: 002b:00007f61587c6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3084.548718] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 3084.548723] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3084.548728] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3084.548735] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 3084.562006] 0 [ 3084.566425] R13: 00007ffed7f6205f R14: 00007f61587c6300 R15: 0000000000022000 [ 3084.582151] 2717 [ 3084.618989] Node 0 [ 3084.634911] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 3084.658308] DMA32: 1524*4kB (ME) 923*8kB (UME) 433*16kB (UME) 207*32kB (UME) 21*64kB (UH) 5*128kB (U) 2*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 30040kB [ 3084.658378] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3084.658421] Node 1 Normal: 1*4kB (U) 1*8kB (M) 1*16kB (U) 202*32kB (UM) 676*64kB (UM) 51*128kB (U) 485*256kB (UM) 177*512kB (UM) 1*1024kB (U) 45*2048kB [ 3084.702237] 8021q: adding VLAN 0 to HW filter on device team0 [ 3084.768268] warn_alloc_show_mem: 2 callbacks suppressed [ 3084.768270] Mem-Info: [ 3084.801897] 2718 [ 3084.838214] (U) [ 3084.877737] active_anon:79205 inactive_anon:35121 isolated_anon:0 [ 3084.877737] active_file:517 inactive_file:1377 isolated_file:0 [ 3084.877737] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3084.877737] slab_reclaimable:14623 slab_unreclaimable:143231 [ 3084.877737] mapped:54011 shmem:37654 pagetables:20548 bounce:0 [ 3084.877737] free:96191 free_pcp:448 free_cma:0 [ 3084.899447] 2718 [ 3084.918284] 2*4096kB (U) = 372444kB [ 3084.928235] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3084.932819] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 3084.948252] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3084.957091] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3084.958749] 2718 [ 3084.969247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3084.969682] Node 0 active_anon:242404kB inactive_anon:100852kB active_file:36kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:164108kB dirty:0kB writeback:0kB shmem:105660kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 174080kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3084.977404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3085.028310] Node 0 DMA32 free:117780kB min:36200kB low:45248kB high:54296kB active_anon:242236kB inactive_anon:100796kB active_file:36kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11200kB pagetables:14624kB bounce:0kB free_pcp:1084kB local_pcp:624kB free_cma:0kB [ 3085.038222] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3085.096985] Node 1 active_anon:74416kB inactive_anon:39632kB active_file:2032kB inactive_file:5476kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:52036kB dirty:0kB writeback:0kB shmem:44956kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3085.098469] lowmem_reserve[]: [ 3085.127147] bridge0: port 1(bridge_slave_0) entered blocking state [ 3085.137071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3085.142138] 39548 total pagecache pages [ 3085.148085] 0 pages in swap cache [ 3085.158217] Swap cache stats: add 0, delete 0, find 0/0 [ 3085.163700] Free swap = 0kB [ 3085.166805] Total swap = 0kB [ 3085.175539] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 3085.183609] 2097051 pages RAM [ 3085.184395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3085.186813] 0 pages HighMem/MovableOnly [ 3085.195719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3085.201603] Node 0 DMA free:11032kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3085.218496] 0 [ 3085.233823] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3085.244514] 363848 pages reserved [ 3085.247984] 0 pages cma reserved [ 3085.258874] 0 0 0 0 [ 3085.262153] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3085.293320] bridge0: port 2(bridge_slave_1) entered blocking state [ 3085.300048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3085.300666] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3085.325142] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 3085.328180] Node 0 DMA32 free:169248kB min:36200kB low:45248kB high:54296kB active_anon:242236kB inactive_anon:100796kB active_file:36kB inactive_file:1132kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11200kB pagetables:14624kB bounce:0kB free_pcp:1224kB local_pcp:564kB free_cma:0kB [ 3085.366710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3085.380017] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 3085.399421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3085.418938] bridge0: port 1(bridge_slave_0) entered blocking state [ 3085.425738] bridge0: port 1(bridge_slave_0) entered disabled state [ 3085.427049] lowmem_reserve[]: [ 3085.440942] lowmem_reserve[]: [ 3085.448727] 0 [ 3085.451756] 0 0 0 0 0 [ 3085.456460] Node 1 Normal free:485136kB min:53696kB low:67120kB high:80544kB active_anon:74416kB inactive_anon:39632kB active_file:2032kB inactive_file:5476kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21984kB pagetables:67436kB bounce:0kB free_pcp:1344kB local_pcp:624kB free_cma:0kB [ 3085.459599] 0 [ 3085.511930] device bridge_slave_0 entered promiscuous mode [ 3085.535304] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 3085.543045] lowmem_reserve[]: 0 0 0 0 0 [ 3085.547059] Node 0 DMA: 2*4kB (UE) 14*8kB (UME) 56*16kB (UME) 33*32kB (UME) 10*64kB (UME) 3*128kB (UE) 5*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 1*2048kB (M) 0*4096kB = 11032kB [ 3085.548680] 0 [ 3085.579062] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 3085.588091] bridge0: port 2(bridge_slave_1) entered blocking state [ 3085.596046] 0 0 [ 3085.599106] Node 0 DMA32: 7320*4kB (UE) 2937*8kB (UME) 4401*16kB (UME) 1356*32kB (UME) 825*64kB (UMH) 148*128kB (UM) 99*256kB (U) 33*512kB (UM) 9*1024kB (U) 0*2048kB 0*4096kB = 289784kB [ 3085.600683] bridge0: port 2(bridge_slave_1) entered disabled state [ 3085.627389] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3085.638202] Node 0 [ 3085.679135] device bridge_slave_1 entered promiscuous mode [ 3085.681204] Normal: [ 3085.688178] lowmem_reserve[]: 0 0 0 0 0 [ 3085.690855] 0*4kB 0*8kB [ 3085.694793] Node 1 Normal free:878224kB min:53696kB low:67120kB high:80544kB active_anon:74416kB inactive_anon:39632kB active_file:2332kB inactive_file:5176kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21984kB pagetables:67436kB bounce:0kB free_pcp:1344kB local_pcp:720kB free_cma:0kB [ 3085.697474] 0*16kB [ 3085.730283] lowmem_reserve[]: 0 0 0 0 0 [ 3085.735014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3085.736750] Node 0 DMA: 2*4kB (UE) 14*8kB (UME) 56*16kB (UME) 33*32kB (UME) 10*64kB (UME) 3*128kB (UE) 5*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 1*2048kB (M) 0*4096kB = 11032kB [ 3085.758874] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3085.760560] Node 0 DMA32: 7320*4kB (UE) 2835*8kB (UME) 4401*16kB (UME) 1356*32kB (UME) 1357*64kB (UMH) 248*128kB (UM) 151*256kB (U) 51*512kB (UM) 30*1024kB (U) 1*2048kB (U) 0*4096kB = 381896kB [ 3085.786858] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3085.799409] Node 1 Normal: 4744*4kB (UM) 4388*8kB (UM) 113*16kB (UM) 204*32kB (U) 1315*64kB (UM) 297*128kB (U) 216*256kB (U) 217*512kB (U) 446*1024kB (U) 74*2048kB (U) 7*4096kB (U) = 987920kB [ 3085.812634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3085.818973] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3085.836124] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3085.845576] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3085.855302] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3085.858861] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3085.868190] 40415 total pagecache pages [ 3085.878729] 0 pages in swap cache [ 3085.882407] Swap cache stats: add 0, delete 0, find 0/0 [ 3085.889760] Free swap = 0kB [ 3085.891857] 0*32kB [ 3085.892874] Total swap = 0kB [ 3085.892881] 0*64kB [ 3085.895110] 2097051 pages RAM [ 3085.899099] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3085.902640] 0 pages HighMem/MovableOnly [ 3085.904098] 0*128kB [ 3085.911847] 363848 pages reserved [ 3085.936125] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 3085.936977] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 3085.937911] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 3085.951464] 0 pages cma reserved [ 3085.956419] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 3085.965047] 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3085.991397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3085.998656] Node 1 Normal: 5007*4kB (UM) 4697*8kB (UM) 1332*16kB (UM) 2164*32kB (U) 1569*64kB (UM) 313*128kB (UM) 224*256kB (UM) 220*512kB (U) 466*1024kB (U) 93*2048kB (U) 9*4096kB (U) = 1163140kB [ 3086.000041] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3086.048886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3086.052350] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3086.056658] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3086.081920] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3086.090700] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 3086.097152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3086.098173] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3086.122893] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 3086.130856] team0: Port device team_slave_0 added [ 3086.142559] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 3086.150031] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3086.159962] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 3086.167294] team0: Port device team_slave_1 added [ 3086.174099] 40413 total pagecache pages [ 3086.181645] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 3086.191959] 0 pages in swap cache [ 3086.195618] Swap cache stats: add 0, delete 0, find 0/0 [ 3086.202960] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3086.211429] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3086.219673] Free swap = 0kB [ 3086.222799] Total swap = 0kB [ 3086.225999] 2097051 pages RAM [ 3086.243528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3086.261461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3086.267945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3086.295174] 0 pages HighMem/MovableOnly [ 3086.305196] 363848 pages reserved [ 3086.314048] 0 pages cma reserved [ 3086.317465] Out of memory (oom_kill_allocating_task): Kill process 7780 (rsyslogd) score 0 or sacrifice child [ 3086.332802] Killed process 7780 (rsyslogd) total-vm:27836kB, anon-rss:272kB, file-rss:0kB, shmem-rss:0kB [ 3086.344875] oom_reaper: reaped process 7780 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3086.368378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3086.409653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3086.416015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3086.448420] Bluetooth: hci3 command 0x0419 tx timeout [ 3086.460985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3086.475531] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 3086.486280] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 3086.540764] device hsr_slave_0 entered promiscuous mode [ 3086.547227] device hsr_slave_1 entered promiscuous mode [ 3086.563536] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 3086.582067] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 3086.706055] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 3086.731177] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 3086.740029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3086.752723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3086.775264] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 3086.803117] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 3086.815944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3086.830129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3086.900972] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 3086.910309] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 3086.919218] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 3086.927313] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 3086.952114] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 3086.965759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3086.975904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3086.986859] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3086.995108] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3087.005452] device veth0_vlan entered promiscuous mode [ 3087.016366] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 3087.024744] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 3087.032098] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 3087.053257] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 3087.061015] device veth1_vlan entered promiscuous mode [ 3087.067360] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 3087.077923] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3087.086186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3087.094083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3087.110043] device veth0_vlan entered promiscuous mode [ 3087.117281] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 3087.132394] device veth1_vlan entered promiscuous mode [ 3087.143019] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 3087.150643] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3087.162222] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3087.173937] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3087.185108] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3087.201655] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 3087.211751] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 3087.223581] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 3087.233758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3087.241331] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3087.249599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3087.257740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3087.268335] device veth0_macvtap entered promiscuous mode [ 3087.275068] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 3087.284913] device veth1_macvtap entered promiscuous mode [ 3087.295186] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 3087.307044] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 3087.319126] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 3087.328995] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 3087.336364] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 3087.346294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3087.357087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3087.366908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3087.377542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3087.386912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3087.398289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3087.409660] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 3087.417227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3087.426349] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3087.441591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3087.453340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3087.460911] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3087.474378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3087.486222] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 3087.504688] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 3087.513240] 8021q: adding VLAN 0 to HW filter on device team0 [ 3087.523856] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 3087.532196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3087.542485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3087.552782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3087.563290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3087.575198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3087.585877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3087.596981] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 3087.604721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3087.612519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3087.630181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3087.642282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3087.650279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3087.665046] bridge0: port 1(bridge_slave_0) entered blocking state [ 3087.672383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3087.684214] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3087.693024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3087.707354] device veth0_macvtap entered promiscuous mode [ 3087.715638] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 3087.730699] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 3087.745819] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3087.754417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3087.766543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3087.775671] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3087.836664] bridge0: port 2(bridge_slave_1) entered blocking state [ 3087.843721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3087.857726] device veth1_macvtap entered promiscuous mode [ 3087.865181] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 3087.881147] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 3087.893495] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 3087.908669] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3087.917772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3087.937116] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 3087.950089] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 3087.958888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3087.973362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3087.983908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3087.996009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3088.005990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3088.016494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3088.027421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3088.037314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3088.047924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3088.059034] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 3088.066304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3088.075920] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 3088.084291] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3088.097371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3088.105777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3088.114741] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3088.123559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3088.135337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3088.145123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3088.155727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3088.165356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3088.175576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3088.185512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3088.196678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3088.208630] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 3088.215915] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3088.231420] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3088.239433] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3088.247507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3088.258942] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 3088.270279] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 3088.278249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3088.287135] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3088.296379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3088.304817] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3088.315488] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 3088.330920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3088.340079] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3088.353587] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 3088.360500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3088.374780] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 3088.386270] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 3088.394938] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3088.402456] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3088.415484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3088.564490] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 3088.581921] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 3088.589990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3088.602717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3088.657736] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 3088.670492] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 3088.679452] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 3088.697388] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready 23:48:13 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 23:48:13 executing program 4: r0 = accept4$rose(0xffffffffffffffff, &(0x7f0000000080)=@full={0xb, @dev, @remote, 0x0, [@netrom, @rose, @bcast, @netrom, @null, @netrom]}, 0x0, 0x80800) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f00000000c0)=@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x80000006, 0x27}) 23:48:13 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000004c0)='NLBL_MGMT\x00', r0) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r2, 0x25}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, r2, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '[\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4044015) openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x80, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r3, 0x80047453, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x1, 0x4) 23:48:13 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000006, 0x27, 0x1}) 23:48:13 executing program 3: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000080)=0xfffffffc) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000140)={0x2000000, 0x97, "77b41c0b711451f004eceb2a4002f2ab93fba4993641f0dedb2d153051b27c5473cbe1e8bf028cb0a3e05ecd9d592a821891e9b9abfc2b1fb879d2771f5e274476fb07d7243a4739fb97fe06382f1a8ca4b1e9c9a2db2094a4f42361c74487301f4fc1809e5caee1da7f9ed261a4c0f49f1b9384ed1f446b855718f920226e28f6f7454d2b6c029bb694c9001998f90da06f0000000000"}) 23:48:13 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0x27}) [ 3088.707732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3088.719065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3088.736228] device veth0_vlan entered promiscuous mode [ 3088.747491] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready 23:48:13 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0x27}) 23:48:13 executing program 3: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000080)=0xfffffffc) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000000)) [ 3088.761922] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3088.784568] device veth1_vlan entered promiscuous mode [ 3088.801337] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready 23:48:13 executing program 1: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x1410c0, 0x0) getsockname$ax25(r1, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000000)={0x6}, 0x4) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f00000000c0)=0x8) [ 3088.838826] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 3088.864015] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 3088.887243] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 3088.924566] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3088.939578] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3088.952056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3088.961045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3088.979706] device veth0_macvtap entered promiscuous mode [ 3088.986414] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 3089.023913] device veth1_macvtap entered promiscuous mode [ 3089.044754] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 3089.071800] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 3089.099454] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 3089.123625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3089.152798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3089.162928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3089.178351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3089.187830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3089.203216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3089.213014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3089.226632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3089.241751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3089.266895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3089.281529] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 3089.289416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3089.296981] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3089.310754] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3089.320555] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3089.333535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3089.346878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3089.362144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3089.373307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3089.389404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3089.404494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3089.418924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3089.434721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3089.449502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3089.463412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3089.477221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3089.494070] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 3089.501832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3089.524485] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3089.543746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3090.188681] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3090.200471] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3090.201469] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 3090.219190] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3090.223303] CPU: 0 PID: 8048 Comm: syz-executor.0 Not tainted 4.14.230-syzkaller #0 [ 3090.242595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3090.246136] syz-executor.4: [ 3090.252046] Call Trace: [ 3090.252069] dump_stack+0x1b2/0x281 [ 3090.252082] warn_alloc.cold+0x96/0x1cc [ 3090.252093] ? zone_watermark_ok_safe+0x220/0x220 [ 3090.252114] __alloc_pages_nodemask+0x2127/0x2720 [ 3090.252124] ? io_schedule_timeout+0x140/0x140 [ 3090.252137] ? lock_acquire+0x170/0x3f0 [ 3090.252150] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3090.252165] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3090.275609] page allocation failure: order:4 [ 3090.275640] ? __mutex_unlock_slowpath+0x75/0x770 [ 3090.292538] syz-executor.4 cpuset= [ 3090.295135] ? alloc_pages_current+0x21c/0x260 [ 3090.295149] alloc_pages_current+0x155/0x260 [ 3090.295163] ion_page_pool_alloc+0x118/0x1b0 [ 3090.305198] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 3090.308147] ion_system_heap_allocate+0x133/0x8c0 [ 3090.308156] ? ion_alloc+0x187/0x810 [ 3090.308166] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3090.308175] ? ion_system_contig_heap_create+0x130/0x130 [ 3090.308185] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3090.308200] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3090.308209] ion_alloc+0x204/0x810 [ 3090.308221] ? ion_dma_buf_release+0x40/0x40 [ 3090.308232] ? __might_fault+0x177/0x1b0 [ 3090.308243] ion_ioctl+0xea/0x1f0 [ 3090.326735] (null) [ 3090.330153] ? ion_query_heaps+0x360/0x360 [ 3090.330165] ? ion_query_heaps+0x360/0x360 [ 3090.330174] do_vfs_ioctl+0x75a/0xff0 [ 3090.330185] ? ioctl_preallocate+0x1a0/0x1a0 [ 3090.330194] ? lock_downgrade+0x740/0x740 [ 3090.330205] ? __fget+0x225/0x360 [ 3090.330217] ? do_vfs_ioctl+0xff0/0xff0 [ 3090.337386] syz-executor.2 cpuset= [ 3090.338855] ? security_file_ioctl+0x83/0xb0 [ 3090.338866] SyS_ioctl+0x7f/0xb0 [ 3090.338874] ? do_vfs_ioctl+0xff0/0xff0 [ 3090.338884] do_syscall_64+0x1d5/0x640 [ 3090.338900] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3090.338908] RIP: 0033:0x466459 [ 3090.338912] RSP: 002b:00007f1ef2095188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3090.338921] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3090.338926] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3090.338931] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3090.338936] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3090.338941] R13: 00007fffa779c11f R14: 00007f1ef2095300 R15: 0000000000022000 [ 3090.352273] Mem-Info: [ 3090.368618] / [ 3090.375702] active_anon:79341 inactive_anon:35120 isolated_anon:0 [ 3090.375702] active_file:1664 inactive_file:3010 isolated_file:12 [ 3090.375702] unevictable:0 dirty:29 writeback:0 unstable:0 [ 3090.375702] slab_reclaimable:14622 slab_unreclaimable:141274 [ 3090.375702] mapped:55681 shmem:37653 pagetables:20561 bounce:0 [ 3090.375702] free:211375 free_pcp:364 free_cma:0 [ 3090.377611] mems_allowed=0-1 [ 3090.377624] CPU: 1 PID: 8041 Comm: syz-executor.4 Not tainted 4.14.230-syzkaller #0 [ 3090.377630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3090.377633] Call Trace: [ 3090.377651] dump_stack+0x1b2/0x281 [ 3090.377665] warn_alloc.cold+0x96/0x1cc [ 3090.380451] Node 0 active_anon:243628kB inactive_anon:100856kB active_file:2908kB inactive_file:8532kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:169704kB dirty:112kB writeback:0kB shmem:105664kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 174080kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3090.384139] ? zone_watermark_ok_safe+0x220/0x220 [ 3090.384164] __alloc_pages_nodemask+0x2127/0x2720 [ 3090.384175] ? retint_kernel+0x2d/0x2d [ 3090.389210] Node 1 active_anon:73736kB inactive_anon:39624kB active_file:3748kB inactive_file:3508kB unevictable:0kB isolated(anon):0kB isolated(file):48kB mapped:53020kB dirty:4kB writeback:0kB shmem:44948kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3090.392594] ? lock_acquire+0x170/0x3f0 [ 3090.392612] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3090.392629] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3090.392641] ? __mutex_unlock_slowpath+0x75/0x770 [ 3090.397659] Node 0 [ 3090.401443] alloc_pages_current+0x155/0x260 [ 3090.401456] ion_page_pool_alloc+0x118/0x1b0 [ 3090.401465] ion_system_heap_allocate+0x133/0x8c0 [ 3090.401475] ? ion_alloc+0x187/0x810 [ 3090.401486] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3090.401496] ? ion_system_contig_heap_create+0x130/0x130 [ 3090.401506] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3090.407291] DMA free:11088kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3090.409366] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3090.409378] ion_alloc+0x204/0x810 [ 3090.409391] ? ion_dma_buf_release+0x40/0x40 [ 3090.409403] ? __might_fault+0x177/0x1b0 [ 3090.409415] ion_ioctl+0xea/0x1f0 [ 3090.409424] ? ion_query_heaps+0x360/0x360 [ 3090.413619] lowmem_reserve[]: [ 3090.417364] ? ion_query_heaps+0x360/0x360 [ 3090.417377] do_vfs_ioctl+0x75a/0xff0 [ 3090.417388] ? ioctl_preallocate+0x1a0/0x1a0 [ 3090.417399] ? lock_downgrade+0x740/0x740 [ 3090.421290] 0 [ 3090.424754] ? __fget+0x225/0x360 [ 3090.424764] ? do_vfs_ioctl+0xff0/0xff0 [ 3090.424777] ? security_file_ioctl+0x83/0xb0 [ 3090.424786] SyS_ioctl+0x7f/0xb0 [ 3090.429331] 2717 [ 3090.433976] ? do_vfs_ioctl+0xff0/0xff0 [ 3090.433990] do_syscall_64+0x1d5/0x640 [ 3090.434005] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3090.434014] RIP: 0033:0x466459 [ 3090.437620] 2718 [ 3090.445317] RSP: 002b:00007f61587e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3090.445326] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3090.445331] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3090.445335] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3090.445340] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3090.445344] R13: 00007ffed7f6205f R14: 00007f61587e7300 R15: 0000000000022000 [ 3090.445567] syz-executor.4 cpuset= [ 3090.459366] 2718 [ 3090.477884] / [ 3090.501446] 2718 [ 3090.530542] mems_allowed=0-1 [ 3090.539397] / [ 3090.544556] CPU: 1 PID: 8089 Comm: syz-executor.2 Not tainted 4.14.230-syzkaller #0 [ 3090.546647] mems_allowed=0-1 [ 3090.550023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3090.550027] Call Trace: [ 3090.550046] dump_stack+0x1b2/0x281 [ 3090.550060] warn_alloc.cold+0x96/0x1cc [ 3090.550071] ? zone_watermark_ok_safe+0x220/0x220 [ 3090.550092] __alloc_pages_nodemask+0x2127/0x2720 [ 3090.550108] ? lock_acquire+0x170/0x3f0 [ 3090.550121] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3090.550137] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3090.550148] ? __mutex_unlock_slowpath+0x75/0x770 [ 3090.550164] alloc_pages_current+0x155/0x260 [ 3090.550176] ion_page_pool_alloc+0x118/0x1b0 [ 3090.550185] ion_system_heap_allocate+0x133/0x8c0 [ 3090.550195] ? ion_alloc+0x187/0x810 [ 3090.550211] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3090.550220] ? ion_system_contig_heap_create+0x130/0x130 [ 3090.550230] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3090.550240] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3090.550248] ion_alloc+0x204/0x810 [ 3090.550261] ? ion_dma_buf_release+0x40/0x40 [ 3090.586237] ? __might_fault+0x177/0x1b0 [ 3090.586251] ion_ioctl+0xea/0x1f0 [ 3090.586261] ? ion_query_heaps+0x360/0x360 [ 3090.586275] ? check_uarg_tail_zero+0xe9/0x120 [ 3090.586282] ? ion_query_heaps+0x360/0x360 [ 3090.586291] do_vfs_ioctl+0x75a/0xff0 [ 3090.586301] ? ioctl_preallocate+0x1a0/0x1a0 [ 3090.586310] ? lock_downgrade+0x740/0x740 [ 3090.586322] ? __fget+0x225/0x360 [ 3090.586330] ? do_vfs_ioctl+0xff0/0xff0 [ 3090.586341] ? security_file_ioctl+0x83/0xb0 [ 3090.586352] SyS_ioctl+0x7f/0xb0 [ 3090.633302] Node 0 [ 3090.638072] ? do_vfs_ioctl+0xff0/0xff0 [ 3090.638088] do_syscall_64+0x1d5/0x640 [ 3090.638102] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3090.638110] RIP: 0033:0x466459 [ 3090.638118] RSP: 002b:00007fc87a81d188 EFLAGS: 00000246 [ 3090.648510] DMA32 free:477340kB min:36200kB low:45248kB high:54296kB active_anon:243460kB inactive_anon:100800kB active_file:2908kB inactive_file:8532kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11456kB pagetables:14976kB bounce:0kB free_pcp:748kB local_pcp:88kB free_cma:0kB [ 3090.648660] ORIG_RAX: 0000000000000010 [ 3090.654434] lowmem_reserve[]: [ 3090.657902] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3090.657907] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3090.657912] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3090.657916] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3090.657921] R13: 00007ffd20e1ce3f R14: 00007fc87a81d300 R15: 0000000000022000 [ 3090.797032] CPU: 1 PID: 8064 Comm: syz-executor.4 Not tainted 4.14.230-syzkaller #0 [ 3090.809917] 0 [ 3090.814246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3090.814250] Call Trace: [ 3090.814269] dump_stack+0x1b2/0x281 [ 3090.814285] warn_alloc.cold+0x96/0x1cc [ 3090.822375] 0 [ 3090.829379] ? zone_watermark_ok_safe+0x220/0x220 [ 3090.829401] __alloc_pages_nodemask+0x2127/0x2720 [ 3090.829416] ? lock_acquire+0x170/0x3f0 [ 3090.829431] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3090.837942] 0 [ 3090.845219] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3090.852730] 0 [ 3090.856297] ? __mutex_unlock_slowpath+0x75/0x770 [ 3090.856317] alloc_pages_current+0x155/0x260 [ 3090.856336] ion_page_pool_alloc+0x118/0x1b0 [ 3090.858835] 0 [ 3090.860186] ion_system_heap_allocate+0x133/0x8c0 [ 3090.860195] ? ion_alloc+0x187/0x810 [ 3090.860207] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3090.865484] ? ion_system_contig_heap_create+0x130/0x130 [ 3090.865494] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3090.865507] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3090.867605] Node 0 [ 3090.875257] ion_alloc+0x204/0x810 [ 3090.875270] ? ion_dma_buf_release+0x40/0x40 [ 3090.875283] ? __might_fault+0x177/0x1b0 [ 3090.875293] ion_ioctl+0xea/0x1f0 [ 3090.875302] ? ion_query_heaps+0x360/0x360 [ 3090.878784] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3090.888102] ? sockfd_lookup_light+0xb2/0x160 [ 3090.888111] ? ion_query_heaps+0x360/0x360 [ 3090.888120] do_vfs_ioctl+0x75a/0xff0 [ 3090.888131] ? ioctl_preallocate+0x1a0/0x1a0 [ 3090.888142] ? lock_downgrade+0x740/0x740 [ 3090.891119] lowmem_reserve[]: [ 3090.894438] ? __fget+0x225/0x360 [ 3090.894448] ? do_vfs_ioctl+0xff0/0xff0 [ 3090.894462] ? security_file_ioctl+0x83/0xb0 [ 3090.898815] 0 [ 3090.903894] SyS_ioctl+0x7f/0xb0 [ 3090.903903] ? do_vfs_ioctl+0xff0/0xff0 [ 3090.903916] do_syscall_64+0x1d5/0x640 [ 3090.910530] 0 [ 3090.915903] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3090.915912] RIP: 0033:0x466459 [ 3090.915916] RSP: 002b:00007f61587c6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3090.915925] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 3090.915933] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3090.921788] 0 [ 3090.927320] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3090.927326] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 3090.927330] R13: 00007ffed7f6205f R14: 00007f61587c6300 R15: 0000000000022000 [ 3091.404701] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3091.409460] 0 0 [ 3091.421356] Node 1 Normal free:361372kB min:53696kB low:67120kB high:80544kB active_anon:73736kB inactive_anon:39624kB active_file:4276kB inactive_file:2492kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21856kB pagetables:67136kB bounce:0kB free_pcp:32kB local_pcp:0kB free_cma:0kB [ 3091.455546] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 3091.456175] lowmem_reserve[]: 0 0 0 0 0 [ 3091.466315] Node 0 DMA: 12*4kB (UE) 36*8kB (UME) 56*16kB (UME) 34*32kB (UME) 7*64kB (UME) 3*128kB (UE) 5*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 1*2048kB (M) 0*4096kB = 11088kB [ 3091.484338] Node 0 DMA32: 578*4kB (MEH) 135*8kB (UMEH) 147*16kB (UMEH) 2632*32kB (UMEH) 2*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 90096kB [ 3091.484813] CPU: 1 PID: 8091 Comm: syz-executor.2 Not tainted 4.14.230-syzkaller #0 [ 3091.501391] Node 0 [ 3091.507626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3091.507630] Call Trace: [ 3091.507650] dump_stack+0x1b2/0x281 [ 3091.507663] warn_alloc.cold+0x96/0x1cc [ 3091.512403] Normal: [ 3091.519715] ? zone_watermark_ok_safe+0x220/0x220 [ 3091.519737] __alloc_pages_nodemask+0x2127/0x2720 [ 3091.519752] ? lock_acquire+0x170/0x3f0 [ 3091.519766] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3091.519783] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3091.525166] 0*4kB [ 3091.526068] ? __mutex_unlock_slowpath+0x75/0x770 [ 3091.531431] 0*8kB [ 3091.532522] alloc_pages_current+0x155/0x260 [ 3091.532536] ion_page_pool_alloc+0x118/0x1b0 [ 3091.539218] 0*16kB [ 3091.542648] ion_system_heap_allocate+0x133/0x8c0 [ 3091.542658] ? ion_alloc+0x187/0x810 [ 3091.542671] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3091.547057] 0*32kB [ 3091.551812] ? ion_system_contig_heap_create+0x130/0x130 [ 3091.551822] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3091.551833] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3091.551843] ion_alloc+0x204/0x810 [ 3091.551855] ? ion_dma_buf_release+0x40/0x40 [ 3091.551867] ? __might_fault+0x177/0x1b0 [ 3091.551881] ion_ioctl+0xea/0x1f0 [ 3091.563717] 0*64kB [ 3091.565056] ? ion_query_heaps+0x360/0x360 [ 3091.565070] ? check_uarg_tail_zero+0xe9/0x120 [ 3091.565079] ? ion_query_heaps+0x360/0x360 [ 3091.570463] 0*128kB [ 3091.571811] do_vfs_ioctl+0x75a/0xff0 [ 3091.571824] ? ioctl_preallocate+0x1a0/0x1a0 [ 3091.576621] 0*256kB [ 3091.578537] ? lock_downgrade+0x740/0x740 [ 3091.578550] ? __fget+0x225/0x360 [ 3091.578559] ? do_vfs_ioctl+0xff0/0xff0 [ 3091.578570] ? security_file_ioctl+0x83/0xb0 [ 3091.578580] SyS_ioctl+0x7f/0xb0 [ 3091.578587] ? do_vfs_ioctl+0xff0/0xff0 [ 3091.578598] do_syscall_64+0x1d5/0x640 [ 3091.587562] 0*512kB [ 3091.592908] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3091.592917] RIP: 0033:0x466459 [ 3091.592921] RSP: 002b:00007fc87a7db188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3091.592930] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 3091.592935] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3091.592940] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3091.592945] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 3091.592950] R13: 00007ffd20e1ce3f R14: 00007fc87a7db300 R15: 0000000000022000 [ 3091.674800] warn_alloc_show_mem: 2 callbacks suppressed [ 3091.674804] Mem-Info: [ 3091.689718] 0*1024kB [ 3091.707080] active_anon:79349 inactive_anon:35120 isolated_anon:0 [ 3091.707080] active_file:1852 inactive_file:2632 isolated_file:12 [ 3091.707080] unevictable:0 dirty:18 writeback:0 unstable:0 [ 3091.707080] slab_reclaimable:14622 slab_unreclaimable:142674 [ 3091.707080] mapped:55696 shmem:37653 pagetables:20561 bounce:0 [ 3091.707080] free:103205 free_pcp:154 free_cma:0 [ 3091.713328] 0*2048kB [ 3091.716648] Node 0 active_anon:243660kB inactive_anon:100856kB active_file:3020kB inactive_file:8000kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:169704kB dirty:68kB writeback:0kB shmem:105664kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 174080kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3091.724406] 0*4096kB [ 3091.738689] Node 1 active_anon:73736kB inactive_anon:39624kB active_file:4388kB inactive_file:2628kB unevictable:0kB isolated(anon):0kB isolated(file):48kB mapped:53080kB dirty:4kB writeback:0kB shmem:44948kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3091.743234] = 0kB [ 3091.746748] Node 0 [ 3091.752656] Node 1 [ 3091.756737] DMA free:11088kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3091.762202] Normal: [ 3091.793502] lowmem_reserve[]: [ 3091.799292] 13534*4kB [ 3091.825201] 0 [ 3091.836270] (U) [ 3091.856915] 2717 [ 3091.864267] 11183*8kB [ 3091.892132] 2718 [ 3091.900123] (U) [ 3091.900309] 2718 [ 3091.903553] 3789*16kB [ 3091.904424] 2718 [ 3091.907002] (U) [ 3091.909430] Node 0 DMA32 free:45352kB min:36200kB low:45248kB high:54296kB active_anon:243504kB inactive_anon:100800kB active_file:3044kB inactive_file:8020kB unevictable:0kB writepending:104kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11456kB pagetables:14980kB bounce:0kB free_pcp:332kB local_pcp:224kB free_cma:0kB [ 3091.909451] lowmem_reserve[]: 0 0 0 0 0 [ 3091.909471] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3091.909491] lowmem_reserve[]: [ 3091.919485] 4775*32kB [ 3091.920664] 0 [ 3091.922784] (U) [ 3091.954026] 0 0 0 0 [ 3091.954044] Node 1 Normal free:357024kB min:53696kB low:67120kB high:80544kB active_anon:73736kB inactive_anon:39624kB active_file:4404kB inactive_file:2640kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21856kB pagetables:67136kB bounce:0kB free_pcp:268kB local_pcp:152kB free_cma:0kB [ 3091.954067] lowmem_reserve[]: [ 3091.965527] 0*64kB [ 3091.984781] 0 [ 3091.993345] 0*128kB [ 3091.994447] 0 [ 3091.996963] 0*256kB [ 3092.027539] 0 0 0 [ 3092.027553] Node 0 DMA: 12*4kB (UE) 36*8kB (UME) 56*16kB (UME) 34*32kB (UME) 7*64kB (UME) 3*128kB (UE) 5*256kB [ 3092.037063] 0*512kB [ 3092.037218] (UME) [ 3092.040251] 0*1024kB [ 3092.041517] 3*512kB (UE) 3*1024kB (UME) 1*2048kB (M) 0*4096kB = 11088kB [ 3092.041546] Node 0 [ 3092.043894] 0*2048kB [ 3092.054390] DMA32: 548*4kB (UMEH) 134*8kB (MEH) 146*16kB (MEH) 1205*32kB (UMEH) 2*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 44288kB [ 3092.054451] Node 0 Normal: 0*4kB 0*8kB [ 3092.064494] 0*4096kB [ 3092.068471] 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3092.068507] Node 1 Normal: 13534*4kB (U) 11183*8kB (U) 3789*16kB (U) 4775*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB [ 3092.071174] = 357024kB [ 3092.073319] 0*4096kB [ 3092.093780] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3092.123566] = 357024kB [ 3092.141610] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3092.151518] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3092.161142] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3092.170548] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3092.181593] 42190 total pagecache pages [ 3092.186201] 0 pages in swap cache [ 3092.189436] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3092.191931] Swap cache stats: add 0, delete 0, find 0/0 [ 3092.206356] Free swap = 0kB [ 3092.211046] Total swap = 0kB [ 3092.214602] 2097051 pages RAM [ 3092.217738] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3092.219900] 0 pages HighMem/MovableOnly [ 3092.227119] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3092.233262] 363848 pages reserved [ 3092.245765] 0 pages cma reserved [ 3092.254346] 42190 total pagecache pages [ 3092.262657] 0 pages in swap cache [ 3092.266386] Swap cache stats: add 0, delete 0, find 0/0 [ 3092.272631] Free swap = 0kB [ 3092.275890] Total swap = 0kB [ 3092.282899] 2097051 pages RAM [ 3092.286220] 0 pages HighMem/MovableOnly [ 3092.291335] 363848 pages reserved [ 3092.295415] 0 pages cma reserved [ 3093.372270] oom_reaper: reaped process 8091 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3093.414738] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 3093.457668] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3093.517827] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 3093.523276] CPU: 0 PID: 8091 Comm: syz-executor.2 Not tainted 4.14.230-syzkaller #0 [ 3093.531255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3093.540899] Call Trace: [ 3093.543793] dump_stack+0x1b2/0x281 [ 3093.547437] warn_alloc.cold+0x96/0x1cc [ 3093.551437] ? zone_watermark_ok_safe+0x220/0x220 [ 3093.556348] ? usleep_range+0x130/0x130 [ 3093.560514] ? try_to_free_pages+0x23f/0x6e0 [ 3093.565531] ? _find_next_bit+0xdb/0x100 [ 3093.569606] ? run_timer_softirq+0x5a0/0x5a0 [ 3093.574070] __alloc_pages_nodemask+0x2127/0x2720 [ 3093.579117] ? lock_acquire+0x170/0x3f0 [ 3093.583288] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3093.583394] systemd-journal cpuset= [ 3093.588136] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3093.588151] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3093.588169] alloc_pages_current+0x155/0x260 [ 3093.588179] ion_page_pool_alloc+0x118/0x1b0 [ 3093.588188] ion_system_heap_allocate+0x133/0x8c0 [ 3093.588201] ? ion_alloc+0x187/0x810 [ 3093.588213] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3093.621093] / [ 3093.621599] ? ion_system_contig_heap_create+0x130/0x130 [ 3093.635214] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3093.640478] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3093.641080] mems_allowed=0-1 [ 3093.645510] ion_alloc+0x204/0x810 [ 3093.652345] ? ion_dma_buf_release+0x40/0x40 [ 3093.659143] ? __might_fault+0x177/0x1b0 [ 3093.664572] ion_ioctl+0xea/0x1f0 [ 3093.668130] ? ion_query_heaps+0x360/0x360 [ 3093.672718] ? check_uarg_tail_zero+0xe9/0x120 [ 3093.677651] ? ion_query_heaps+0x360/0x360 [ 3093.682009] do_vfs_ioctl+0x75a/0xff0 [ 3093.686079] ? ioctl_preallocate+0x1a0/0x1a0 [ 3093.690590] ? lock_downgrade+0x740/0x740 [ 3093.695019] ? __fget+0x225/0x360 [ 3093.698842] ? do_vfs_ioctl+0xff0/0xff0 [ 3093.702996] ? security_file_ioctl+0x83/0xb0 [ 3093.707400] SyS_ioctl+0x7f/0xb0 [ 3093.711034] ? do_vfs_ioctl+0xff0/0xff0 [ 3093.715107] do_syscall_64+0x1d5/0x640 [ 3093.719187] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3093.725340] RIP: 0033:0x466459 [ 3093.728531] RSP: 002b:00007fc87a7db188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3093.736666] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 3093.744187] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3093.751802] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3093.759165] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 3093.766869] R13: 00007ffd20e1ce3f R14: 00007fc87a7db300 R15: 0000000000022000 [ 3093.774322] CPU: 1 PID: 7243 Comm: systemd-journal Not tainted 4.14.230-syzkaller #0 [ 3093.776233] warn_alloc_show_mem: 1 callbacks suppressed [ 3093.776236] Mem-Info: [ 3093.783192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3093.783196] Call Trace: [ 3093.783215] dump_stack+0x1b2/0x281 [ 3093.783226] dump_header+0x178/0x82f [ 3093.783235] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3093.783243] ? ___ratelimit+0x2cd/0x530 [ 3093.783252] oom_kill_process.cold+0x10/0xa40 [ 3093.783275] out_of_memory+0xe3e/0x1190 [ 3093.783287] ? oom_killer_disable+0x1c0/0x1c0 [ 3093.788960] active_anon:79330 inactive_anon:35120 isolated_anon:0 [ 3093.788960] active_file:74 inactive_file:34 isolated_file:10 [ 3093.788960] unevictable:0 dirty:11 writeback:0 unstable:0 [ 3093.788960] slab_reclaimable:14620 slab_unreclaimable:142051 [ 3093.788960] mapped:52896 shmem:37653 pagetables:20563 bounce:0 [ 3093.788960] free:13907 free_pcp:68 free_cma:0 [ 3093.791339] ? mutex_trylock+0x152/0x1a0 [ 3093.801334] Node 0 active_anon:243572kB inactive_anon:100856kB active_file:156kB inactive_file:88kB unevictable:0kB isolated(anon):0kB isolated(file):40kB mapped:164248kB dirty:24kB writeback:0kB shmem:105664kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 174080kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3093.804006] __alloc_pages_nodemask+0x23e1/0x2720 [ 3093.808073] Node 1 active_anon:73748kB inactive_anon:39624kB active_file:140kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:47336kB dirty:20kB writeback:0kB shmem:44948kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3093.811848] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3093.817617] Node 0 [ 3093.821569] alloc_pages_current+0x155/0x260 [ 3093.826214] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3093.830253] filemap_fault+0x11a1/0x1ad0 [ 3093.830275] ext4_filemap_fault+0x84/0xb0 [ 3093.834851] lowmem_reserve[]: [ 3093.869822] __do_fault+0xfa/0x380 [ 3093.869831] __handle_mm_fault+0x2497/0x4620 [ 3093.869841] ? vm_insert_page+0x7c0/0x7c0 [ 3093.869857] ? mark_held_locks+0xa6/0xf0 [ 3093.874157] 0 [ 3093.904428] handle_mm_fault+0x455/0x9c0 [ 3093.904443] __do_page_fault+0x549/0xad0 [ 3093.904455] ? spurious_fault+0x640/0x640 [ 3093.904468] ? do_page_fault+0x60/0x500 [ 3093.909760] 2717 [ 3093.939453] ? page_fault+0x2f/0x50 [ 3093.939461] page_fault+0x45/0x50 [ 3093.939469] RIP: 0001:0xffffffffffffffff [ 3093.939473] RSP: ddd981e0:00007ffc08b46d20 EFLAGS: 7ffc08b46b30 [ 3093.968369] syz-executor.2: [ 3094.050167] 2718 [ 3094.052091] Mem-Info: [ 3094.053343] 2718 [ 3094.055408] active_anon:79330 inactive_anon:35120 isolated_anon:0 [ 3094.055408] active_file:14 inactive_file:13 isolated_file:0 [ 3094.055408] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3094.055408] slab_reclaimable:14620 slab_unreclaimable:142067 [ 3094.055408] mapped:52821 shmem:37653 pagetables:20563 bounce:0 [ 3094.055408] free:14730 free_pcp:91 free_cma:0 [ 3094.072872] 2718 [ 3094.095031] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3094.109659] Node 0 active_anon:243572kB inactive_anon:100856kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:164108kB dirty:0kB writeback:0kB shmem:105664kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 174080kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3094.151052] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 3094.156381] CPU: 0 PID: 8041 Comm: syz-executor.4 Not tainted 4.14.230-syzkaller #0 [ 3094.164278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3094.171538] Node 1 active_anon:73748kB inactive_anon:39624kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:47176kB dirty:0kB writeback:0kB shmem:44948kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3094.174085] Call Trace: [ 3094.205529] dump_stack+0x1b2/0x281 [ 3094.209470] warn_alloc.cold+0x96/0x1cc [ 3094.213654] ? zone_watermark_ok_safe+0x220/0x220 [ 3094.214109] Node 0 [ 3094.218860] ? usleep_range+0x130/0x130 [ 3094.218869] ? try_to_free_pages+0x23f/0x6e0 [ 3094.218878] ? _find_next_bit+0xdb/0x100 [ 3094.218888] ? run_timer_softirq+0x5a0/0x5a0 [ 3094.218903] __alloc_pages_nodemask+0x2127/0x2720 [ 3094.218919] ? lock_acquire+0x170/0x3f0 [ 3094.218934] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3094.218943] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3094.218956] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3094.218967] ? retint_kernel+0x2d/0x2d [ 3094.218978] alloc_pages_current+0x155/0x260 [ 3094.218987] ion_page_pool_alloc+0x118/0x1b0 [ 3094.218996] ion_system_heap_allocate+0x133/0x8c0 [ 3094.219004] ? ion_alloc+0x187/0x810 [ 3094.219013] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3094.219020] ? ion_system_contig_heap_create+0x130/0x130 [ 3094.219029] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3094.219037] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3094.219046] ion_alloc+0x204/0x810 [ 3094.219057] ? ion_dma_buf_release+0x40/0x40 [ 3094.219067] ? __might_fault+0x177/0x1b0 [ 3094.219077] ion_ioctl+0xea/0x1f0 [ 3094.219085] ? ion_query_heaps+0x360/0x360 [ 3094.219096] ? ion_query_heaps+0x360/0x360 [ 3094.223723] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3094.225813] do_vfs_ioctl+0x75a/0xff0 [ 3094.230344] syz-executor.4: [ 3094.234467] ? ioctl_preallocate+0x1a0/0x1a0 [ 3094.240994] lowmem_reserve[]: [ 3094.244079] ? lock_downgrade+0x740/0x740 [ 3094.248501] page allocation failure: order:0 [ 3094.252975] ? __fget+0x225/0x360 [ 3094.260105] page allocation failure: order:0 [ 3094.263661] ? do_vfs_ioctl+0xff0/0xff0 [ 3094.268095] 0 [ 3094.272732] ? security_file_ioctl+0x83/0xb0 [ 3094.279656] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 3094.282926] SyS_ioctl+0x7f/0xb0 [ 3094.287073] (null) [ 3094.294177] ? do_vfs_ioctl+0xff0/0xff0 [ 3094.294192] do_syscall_64+0x1d5/0x640 [ 3094.294206] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3094.294213] RIP: 0033:0x466459 [ 3094.294218] RSP: 002b:00007f61587e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3094.294226] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3094.294230] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3094.294234] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3094.294239] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3094.294243] R13: 00007ffed7f6205f R14: 00007f61587e7300 R15: 0000000000022000 [ 3094.304792] Node 0 [ 3094.307306] 2717 [ 3094.314943] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 3094.320662] 2718 [ 3094.327985] (null) [ 3094.331236] syz-executor.2 cpuset= [ 3094.335683] DMA32 free:17876kB min:36200kB low:45248kB high:54296kB active_anon:243404kB inactive_anon:100800kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11456kB pagetables:14984kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3094.365065] 2718 [ 3094.376496] syz-executor.4 cpuset= [ 3094.380141] 2718 [ 3094.384634] / [ 3094.397835] mems_allowed=0-1 [ 3094.401622] / [ 3094.401758] CPU: 0 PID: 8064 Comm: syz-executor.4 Not tainted 4.14.230-syzkaller #0 [ 3094.406329] mems_allowed=0-1 [ 3094.413615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3094.413620] Call Trace: [ 3094.413642] dump_stack+0x1b2/0x281 [ 3094.413654] warn_alloc.cold+0x96/0x1cc [ 3094.413665] ? zone_watermark_ok_safe+0x220/0x220 [ 3094.413673] ? usleep_range+0x130/0x130 [ 3094.413681] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3094.413692] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3094.413703] ? run_timer_softirq+0x5a0/0x5a0 [ 3094.417275] Node 0 [ 3094.419600] __alloc_pages_nodemask+0x2127/0x2720 [ 3094.419616] ? lock_acquire+0x170/0x3f0 [ 3094.419628] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3094.419637] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3094.419651] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3094.419668] alloc_pages_current+0x155/0x260 [ 3094.419677] ion_page_pool_alloc+0x118/0x1b0 [ 3094.419686] ion_system_heap_allocate+0x133/0x8c0 [ 3094.419695] ? ion_alloc+0x187/0x810 [ 3094.426406] DMA32 free:17876kB min:36200kB low:45248kB high:54296kB active_anon:243404kB inactive_anon:100800kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11456kB pagetables:14984kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3094.429606] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3094.429616] ? ion_system_contig_heap_create+0x130/0x130 [ 3094.429625] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3094.429637] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3094.429646] ion_alloc+0x204/0x810 [ 3094.429660] ? ion_dma_buf_release+0x40/0x40 [ 3094.449380] lowmem_reserve[]: [ 3094.454296] ? __might_fault+0x177/0x1b0 [ 3094.477581] 0 [ 3094.484452] ion_ioctl+0xea/0x1f0 [ 3094.486765] 0 0 0 0 [ 3094.486779] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3094.486792] lowmem_reserve[]: 0 0 0 0 0 [ 3094.486807] Node 1 Normal free:26828kB min:53696kB low:67120kB high:80544kB active_anon:73748kB inactive_anon:39624kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21856kB pagetables:67136kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 3094.486822] lowmem_reserve[]: 0 0 0 0 0 [ 3094.486837] Node 0 DMA: 3*4kB (UE) 25*8kB (UME) 56*16kB (UME) 34*32kB (UME) 7*64kB (UME) 3*128kB (UE) 5*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 1*2048kB (M) 0*4096kB = 10964kB [ 3094.486895] Node 0 DMA32: 1506*4kB (UME) [ 3094.489006] ? ion_query_heaps+0x360/0x360 [ 3094.489019] ? sockfd_lookup_light+0xb2/0x160 [ 3094.489026] ? ion_query_heaps+0x360/0x360 [ 3094.489037] do_vfs_ioctl+0x75a/0xff0 [ 3094.489048] ? ioctl_preallocate+0x1a0/0x1a0 [ 3094.489056] ? lock_downgrade+0x740/0x740 [ 3094.489068] ? __fget+0x225/0x360 [ 3094.489076] ? do_vfs_ioctl+0xff0/0xff0 [ 3094.489090] ? security_file_ioctl+0x83/0xb0 [ 3094.508757] 443*8kB [ 3094.534666] SyS_ioctl+0x7f/0xb0 [ 3094.534676] ? do_vfs_ioctl+0xff0/0xff0 [ 3094.534687] do_syscall_64+0x1d5/0x640 [ 3094.534701] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3094.534709] RIP: 0033:0x466459 [ 3094.534714] RSP: 002b:00007f61587c6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3094.534723] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 3094.534728] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3094.534732] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3094.534743] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 3094.534747] R13: 00007ffed7f6205f R14: 00007f61587c6300 R15: 0000000000022000 [ 3094.555563] lowmem_reserve[]: [ 3094.558622] CPU: 1 PID: 8089 Comm: syz-executor.2 Not tainted 4.14.230-syzkaller #0 [ 3094.558628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3094.558631] Call Trace: [ 3094.558650] dump_stack+0x1b2/0x281 [ 3094.558663] warn_alloc.cold+0x96/0x1cc [ 3094.558675] ? zone_watermark_ok_safe+0x220/0x220 [ 3094.558686] ? usleep_range+0x130/0x130 [ 3094.562041] 0 [ 3094.571907] ? try_to_free_pages+0x23f/0x6e0 [ 3094.571917] ? _find_next_bit+0xdb/0x100 [ 3094.571928] ? run_timer_softirq+0x5a0/0x5a0 [ 3094.571944] __alloc_pages_nodemask+0x2127/0x2720 [ 3094.577931] 0 [ 3094.578298] ? lock_acquire+0x170/0x3f0 [ 3094.582238] 0 0 [ 3094.587090] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3094.591180] 0 [ 3094.596707] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3094.608788] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3094.608810] alloc_pages_current+0x155/0x260 [ 3094.611588] Node 0 [ 3094.616773] ion_page_pool_alloc+0x118/0x1b0 [ 3094.620789] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3094.625898] ion_system_heap_allocate+0x133/0x8c0 [ 3094.630509] lowmem_reserve[]: [ 3094.636270] ? ion_alloc+0x187/0x810 [ 3094.640702] 0 [ 3094.645070] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3094.649915] 0 [ 3094.653598] ? ion_system_contig_heap_create+0x130/0x130 [ 3094.697577] 0 [ 3094.699023] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3094.704189] 0 [ 3094.710117] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3094.710129] ion_alloc+0x204/0x810 [ 3094.710142] ? ion_dma_buf_release+0x40/0x40 [ 3094.710155] ? __might_fault+0x177/0x1b0 [ 3094.737579] 0 [ 3094.762083] ion_ioctl+0xea/0x1f0 [ 3094.762093] ? ion_query_heaps+0x360/0x360 [ 3094.762105] ? check_uarg_tail_zero+0xe9/0x120 [ 3094.762112] ? ion_query_heaps+0x360/0x360 [ 3094.762126] do_vfs_ioctl+0x75a/0xff0 [ 3094.801325] ? ioctl_preallocate+0x1a0/0x1a0 [ 3094.837565] Node 1 [ 3094.840256] ? lock_downgrade+0x740/0x740 [ 3094.844787] Normal free:75428kB min:53696kB low:67120kB high:80544kB active_anon:73748kB inactive_anon:39624kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21856kB pagetables:67136kB bounce:0kB free_pcp:828kB local_pcp:708kB free_cma:0kB [ 3094.849133] ? __fget+0x225/0x360 [ 3094.849142] ? do_vfs_ioctl+0xff0/0xff0 [ 3094.849153] ? security_file_ioctl+0x83/0xb0 [ 3094.849163] SyS_ioctl+0x7f/0xb0 [ 3094.867559] lowmem_reserve[]: [ 3094.871790] ? do_vfs_ioctl+0xff0/0xff0 [ 3094.876033] 0 [ 3094.881837] do_syscall_64+0x1d5/0x640 [ 3094.881852] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3094.881860] RIP: 0033:0x466459 [ 3094.881865] RSP: 002b:00007fc87a81d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3094.881876] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3094.897558] 0 [ 3094.900645] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3094.917563] 0 [ 3094.918144] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3094.927275] 0 [ 3094.935340] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3094.935345] R13: 00007ffd20e1ce3f R14: 00007fc87a81d300 R15: 0000000000022000 [ 3094.936734] (UME) [ 3094.986958] warn_alloc_show_mem: 1 callbacks suppressed [ 3094.986962] Mem-Info: [ 3094.990870] 186*16kB [ 3095.023112] active_anon:79330 inactive_anon:35120 isolated_anon:0 [ 3095.023112] active_file:13 inactive_file:239 isolated_file:0 [ 3095.023112] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3095.023112] slab_reclaimable:14620 slab_unreclaimable:142052 [ 3095.023112] mapped:52946 shmem:37653 pagetables:20563 bounce:0 [ 3095.023112] free:38400 free_pcp:210 free_cma:0 [ 3095.026302] (UME) [ 3095.031169] 0 [ 3095.033607] 16*32kB [ 3095.057573] Node 0 active_anon:243572kB inactive_anon:100856kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:164108kB dirty:0kB writeback:0kB shmem:105664kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 174080kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3095.087553] (UME) [ 3095.111144] 4*64kB [ 3095.140952] Node 0 [ 3095.177561] (U) [ 3095.197558] Node 1 active_anon:73748kB inactive_anon:39624kB active_file:4kB inactive_file:2008kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:48576kB dirty:100kB writeback:0kB shmem:44948kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3095.227538] 37*128kB [ 3095.267574] DMA: [ 3095.317552] (U) [ 3095.323784] Node 0 [ 3095.324614] 0*256kB [ 3095.326959] DMA free:10992kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3095.422034] 0*512kB [ 3095.473093] 10*4kB (UE) 25*8kB (UME) 56*16kB (UME) 34*32kB (UME) 7*64kB (UME) 3*128kB (UE) 5*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 1*2048kB (M) 0*4096kB = 10992kB [ 3095.489083] 0*1024kB 0*2048kB 0*4096kB = 18048kB [ 3095.500526] Node 0 DMA32: 1457*4kB (UME) 392*8kB (UME) 188*16kB (UME) 487*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27556kB [ 3095.503796] syz-executor.4: [ 3095.522081] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3095.531763] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3095.536905] Node 1 Normal: 56*4kB (UM) 36*8kB (UM) 455*16kB (UM) 1430*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53552kB [ 3095.565471] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3095.579378] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3095.585654] Node 1 [ 3095.596778] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3095.596999] syz-executor.4 cpuset= [ 3095.599223] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3095.614496] Normal: 56*4kB (UM) 36*8kB (UM) 455*16kB (UM) 1430*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53552kB [ 3095.627105] Node 0 DMA32 free:27244kB min:36200kB low:45248kB high:54296kB active_anon:243404kB inactive_anon:100800kB active_file:48kB inactive_file:348kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11456kB pagetables:14984kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3095.640943] / [ 3095.676860] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3095.677375] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3095.678690] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3095.693672] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3095.707519] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3095.731341] lowmem_reserve[]: 0 0 0 0 0 [ 3095.735721] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3095.745219] mems_allowed=0-1 [ 3095.790487] 38066 total pagecache pages [ 3095.794607] 0 pages in swap cache [ 3095.797540] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3095.798543] Swap cache stats: add 0, delete 0, find 0/0 [ 3095.817524] CPU: 1 PID: 8064 Comm: syz-executor.4 Not tainted 4.14.230-syzkaller #0 [ 3095.825618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3095.835373] Call Trace: [ 3095.838187] dump_stack+0x1b2/0x281 [ 3095.839644] Free swap = 0kB [ 3095.841919] warn_alloc.cold+0x96/0x1cc [ 3095.845000] Total swap = 0kB [ 3095.849045] ? zone_watermark_ok_safe+0x220/0x220 [ 3095.849064] __alloc_pages_nodemask+0x2127/0x2720 [ 3095.849079] ? lock_acquire+0x170/0x3f0 [ 3095.849093] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3095.849110] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3095.867493] lowmem_reserve[]: [ 3095.872207] ? __mutex_unlock_slowpath+0x75/0x770 [ 3095.886788] ? __list_del_entry_valid+0xb3/0xf0 [ 3095.887499] 2097051 pages RAM [ 3095.891816] alloc_pages_current+0x155/0x260 [ 3095.894986] 0 pages HighMem/MovableOnly [ 3095.899726] ion_page_pool_alloc+0x118/0x1b0 [ 3095.899735] ion_system_heap_allocate+0x133/0x8c0 [ 3095.899746] ? _raw_spin_unlock+0x29/0x40 [ 3095.899754] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3095.899761] ? ion_system_contig_heap_create+0x130/0x130 [ 3095.899774] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3095.907503] 0 [ 3095.908500] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3095.914020] 0 [ 3095.918531] ion_alloc+0x27a/0x810 [ 3095.918545] ? ion_dma_buf_release+0x40/0x40 [ 3095.918558] ? __might_fault+0x177/0x1b0 [ 3095.947493] 363848 pages reserved [ 3095.948551] ion_ioctl+0xea/0x1f0 [ 3095.952936] 0 pages cma reserved [ 3095.957777] ? ion_query_heaps+0x360/0x360 [ 3095.957789] ? sockfd_lookup_light+0xb2/0x160 [ 3095.957796] ? ion_query_heaps+0x360/0x360 [ 3095.957805] do_vfs_ioctl+0x75a/0xff0 [ 3095.957816] ? ioctl_preallocate+0x1a0/0x1a0 [ 3095.957827] ? lock_downgrade+0x740/0x740 [ 3095.971935] 0 [ 3095.973526] ? __fget+0x225/0x360 [ 3095.988285] 0 [ 3095.990715] ? do_vfs_ioctl+0xff0/0xff0 [ 3095.994958] 0 [ 3095.996843] ? security_file_ioctl+0x83/0xb0 [ 3096.013087] SyS_ioctl+0x7f/0xb0 [ 3096.016552] ? do_vfs_ioctl+0xff0/0xff0 [ 3096.020833] do_syscall_64+0x1d5/0x640 [ 3096.024755] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3096.030404] RIP: 0033:0x466459 [ 3096.033812] RSP: 002b:00007f61587c6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3096.042221] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 3096.049594] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3096.057227] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3096.064755] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 3096.064763] Node 1 [ 3096.072315] R13: 00007ffed7f6205f R14: 00007f61587c6300 R15: 0000000000022000 [ 3096.077495] 38048 total pagecache pages [ 3096.086395] 0 pages in swap cache [ 3096.117506] Swap cache stats: add 0, delete 0, find 0/0 [ 3096.123306] Free swap = 0kB [ 3096.126931] Total swap = 0kB [ 3096.147503] 2097051 pages RAM [ 3096.157512] 0 pages HighMem/MovableOnly [ 3096.161600] 363848 pages reserved [ 3096.165149] 0 pages cma reserved [ 3096.171225] Normal free:154824kB min:53696kB low:67120kB high:80544kB active_anon:73832kB inactive_anon:39624kB active_file:708kB inactive_file:688kB unevictable:0kB writepending:20kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21856kB pagetables:67136kB bounce:0kB free_pcp:928kB local_pcp:712kB free_cma:0kB [ 3096.177526] Out of memory (oom_kill_allocating_task): Kill process 7243 (systemd-journal) score 0 or sacrifice child [ 3096.230557] Killed process 7243 (systemd-journal) total-vm:46096kB, anon-rss:476kB, file-rss:4kB, shmem-rss:2248kB [ 3096.263790] oom_reaper: reaped process 8064 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3096.281507] warn_alloc_show_mem: 1 callbacks suppressed [ 3096.281512] Mem-Info: [ 3096.317484] lowmem_reserve[]: 0 0 0 0 0 [ 3096.321409] active_anon:79251 inactive_anon:35120 isolated_anon:0 [ 3096.321409] active_file:239 inactive_file:334 isolated_file:0 [ 3096.321409] unevictable:0 dirty:6 writeback:0 unstable:0 [ 3096.321409] slab_reclaimable:14620 slab_unreclaimable:142051 [ 3096.321409] mapped:52621 shmem:37653 pagetables:20563 bounce:0 [ 3096.321409] free:68172 free_pcp:551 free_cma:0 [ 3096.321613] Node 0 [ 3096.419966] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 3096.427589] DMA: 10*4kB (UE) 25*8kB (UME) 56*16kB (UME) 34*32kB (UME) 7*64kB (UME) 3*128kB (UE) 5*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 1*2048kB (M) 0*4096kB = 10992kB [ 3096.436751] Node 0 active_anon:243572kB inactive_anon:100856kB active_file:548kB inactive_file:3248kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:166408kB dirty:4kB writeback:0kB shmem:105664kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 174080kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3096.467476] Node 0 DMA32: 2101*4kB (UE) 1354*8kB (UME) 4793*16kB (UME) 2429*32kB (UME) 207*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 186900kB [ 3096.474645] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 3096.528008] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3096.568068] Node 1 Normal: 12757*4kB (UM) 4485*8kB (UM) 920*16kB (UM) 1908*32kB (UM) 182*64kB (UM) 12*128kB (UM) 7*256kB (UM) 8*512kB (U) 139*1024kB (U) 42*2048kB (U) 1*4096kB (U) = 414204kB [ 3096.609388] systemd[1]: Stopped Journal Service. [ 3096.615486] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3096.657475] Node 1 active_anon:73432kB inactive_anon:39624kB active_file:904kB inactive_file:344kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:46076kB dirty:20kB writeback:0kB shmem:44948kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3096.677460] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3096.687119] systemd[1]: Starting Journal Service... [ 3096.757481] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3096.767986] Node 0 DMA free:11184kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3096.787444] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3096.847498] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3096.847534] 39856 total pagecache pages [ 3096.852565] Node 0 DMA32 free:288092kB min:36200kB low:45248kB high:54296kB active_anon:243308kB inactive_anon:100800kB active_file:2200kB inactive_file:5148kB unevictable:0kB writepending:68kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11424kB pagetables:14864kB bounce:0kB free_pcp:1204kB local_pcp:536kB free_cma:0kB [ 3096.856575] 0 pages in swap cache [ 3096.856583] Swap cache stats: add 0, delete 0, find 0/0 [ 3096.967452] lowmem_reserve[]: 0 0 0 0 0 [ 3096.967700] Free swap = 0kB [ 3096.971698] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3096.987451] Total swap = 0kB [ 3097.041391] 2097051 pages RAM [ 3097.045944] systemd-journald[8093]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 3097.047448] lowmem_reserve[]: 0 [ 3097.067458] 0 pages HighMem/MovableOnly [ 3097.067465] 0 [ 3097.070961] 363848 pages reserved [ 3097.074942] 0 0 [ 3097.076894] 0 pages cma reserved [ 3097.097474] 0 [ 3097.099429] Node 1 Normal free:498316kB min:53696kB low:67120kB high:80544kB active_anon:73332kB inactive_anon:39620kB active_file:1040kB inactive_file:20kB unevictable:0kB writepending:24kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21856kB pagetables:67040kB bounce:0kB free_pcp:1440kB local_pcp:736kB free_cma:0kB [ 3097.181191] lowmem_reserve[]: 0 0 0 0 0 [ 3097.185381] Node 0 DMA: 13*4kB (UE) 36*8kB (UME) 56*16kB (UME) 34*32kB (UME) 8*64kB (UME) 3*128kB (UE) 5*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 1*2048kB (M) 0*4096kB = 11156kB [ 3097.185703] systemd-journald[8093]: /dev/kmsg buffer overrun, some messages lost. [ 3097.227844] Node 0 DMA32: 3503*4kB (U) 4271*8kB (UE) 6825*16kB (UE) 2804*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 247108kB [ 3097.267408] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3097.297415] Node 1 Normal: 12779*4kB (UM) 4674*8kB (UM) 1219*16kB (UM) 2585*32kB (UM) 4*64kB (UM) 6*128kB (M) 2*256kB (UM) 0*512kB 167*1024kB (U) 56*2048kB (U) 2*4096kB (U) = 486156kB [ 3097.347430] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3097.356704] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3097.377435] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3097.386810] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3097.421418] 42978 total pagecache pages [ 3097.425655] 0 pages in swap cache [ 3097.441431] Swap cache stats: add 0, delete 0, find 0/0 [ 3097.446833] Free swap = 0kB [ 3097.460288] Total swap = 0kB [ 3097.463880] 2097051 pages RAM [ 3097.466989] 0 pages HighMem/MovableOnly [ 3097.500969] 363848 pages reserved [ 3097.504694] 0 pages cma reserved [ 3097.732165] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3097.749348] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3097.790952] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 3097.796745] CPU: 0 PID: 8041 Comm: syz-executor.4 Not tainted 4.14.230-syzkaller #0 [ 3097.797407] syz-executor.2 cpuset= [ 3097.804898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3097.804905] Call Trace: [ 3097.823231] dump_stack+0x1b2/0x281 [ 3097.826965] warn_alloc.cold+0x96/0x1cc [ 3097.827441] / mems_allowed=0-1 [ 3097.831164] ? zone_watermark_ok_safe+0x220/0x220 [ 3097.831185] __alloc_pages_nodemask+0x2127/0x2720 [ 3097.845174] ? lock_acquire+0x170/0x3f0 [ 3097.850385] ? lock_acquire+0x170/0x3f0 [ 3097.854674] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3097.859866] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3097.866554] ? __mutex_unlock_slowpath+0x75/0x770 [ 3097.871972] alloc_pages_current+0x155/0x260 [ 3097.876729] ion_page_pool_alloc+0x118/0x1b0 [ 3097.881773] ion_system_heap_allocate+0x133/0x8c0 [ 3097.886750] ? _raw_spin_unlock+0x29/0x40 [ 3097.891001] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3097.896122] ? ion_system_contig_heap_create+0x130/0x130 [ 3097.901910] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3097.907295] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3097.912863] ion_alloc+0x27a/0x810 [ 3097.916686] ? ion_dma_buf_release+0x40/0x40 [ 3097.921542] ? __might_fault+0x177/0x1b0 [ 3097.925679] ion_ioctl+0xea/0x1f0 [ 3097.929218] ? ion_query_heaps+0x360/0x360 [ 3097.933465] ? ion_query_heaps+0x360/0x360 [ 3097.937709] do_vfs_ioctl+0x75a/0xff0 [ 3097.941605] ? ioctl_preallocate+0x1a0/0x1a0 [ 3097.946104] ? lock_downgrade+0x740/0x740 [ 3097.950623] ? __fget+0x225/0x360 [ 3097.954153] ? do_vfs_ioctl+0xff0/0xff0 [ 3097.958142] ? security_file_ioctl+0x83/0xb0 [ 3097.962754] SyS_ioctl+0x7f/0xb0 [ 3097.966300] ? do_vfs_ioctl+0xff0/0xff0 [ 3097.970460] do_syscall_64+0x1d5/0x640 [ 3097.974456] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3097.979644] RIP: 0033:0x466459 [ 3097.982834] RSP: 002b:00007f61587e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3097.990531] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3097.997985] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3098.005347] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3098.012622] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3098.019890] R13: 00007ffed7f6205f R14: 00007f61587e7300 R15: 0000000000022000 [ 3098.037371] CPU: 1 PID: 8089 Comm: syz-executor.2 Not tainted 4.14.230-syzkaller #0 [ 3098.045640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3098.055003] Call Trace: [ 3098.057690] dump_stack+0x1b2/0x281 [ 3098.061446] warn_alloc.cold+0x96/0x1cc [ 3098.065692] ? zone_watermark_ok_safe+0x220/0x220 [ 3098.070683] __alloc_pages_nodemask+0x2127/0x2720 [ 3098.076559] ? lock_acquire+0x170/0x3f0 [ 3098.080817] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3098.086414] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3098.091961] ? __mutex_unlock_slowpath+0x75/0x770 [ 3098.097038] ? retint_kernel+0x2d/0x2d [ 3098.101019] alloc_pages_current+0x155/0x260 [ 3098.105780] ion_page_pool_alloc+0x118/0x1b0 [ 3098.110711] ion_system_heap_allocate+0x133/0x8c0 [ 3098.115760] ? _raw_spin_unlock+0x29/0x40 [ 3098.120020] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3098.124955] ? ion_system_contig_heap_create+0x130/0x130 [ 3098.130765] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3098.136069] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3098.141027] ion_alloc+0x27a/0x810 [ 3098.145167] ? ion_dma_buf_release+0x40/0x40 [ 3098.149600] ? __might_fault+0x177/0x1b0 [ 3098.153947] ion_ioctl+0xea/0x1f0 [ 3098.157575] ? ion_query_heaps+0x360/0x360 [ 3098.161811] ? check_uarg_tail_zero+0xe9/0x120 [ 3098.166568] ? ion_query_heaps+0x360/0x360 [ 3098.171591] do_vfs_ioctl+0x75a/0xff0 [ 3098.175432] ? ioctl_preallocate+0x1a0/0x1a0 [ 3098.179932] ? lock_downgrade+0x740/0x740 [ 3098.184345] ? __fget+0x225/0x360 [ 3098.187893] ? do_vfs_ioctl+0xff0/0xff0 [ 3098.192390] ? security_file_ioctl+0x83/0xb0 [ 3098.196810] SyS_ioctl+0x7f/0xb0 [ 3098.200440] ? do_vfs_ioctl+0xff0/0xff0 [ 3098.204694] do_syscall_64+0x1d5/0x640 [ 3098.208686] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3098.214164] RIP: 0033:0x466459 [ 3098.217821] RSP: 002b:00007fc87a81d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3098.225836] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3098.233282] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3098.240992] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3098.248883] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3098.256331] R13: 00007ffd20e1ce3f R14: 00007fc87a81d300 R15: 0000000000022000 [ 3098.267148] Mem-Info: [ 3098.291142] active_anon:79313 inactive_anon:37147 isolated_anon:0 [ 3098.291142] active_file:1165 inactive_file:2071 isolated_file:0 [ 3098.291142] unevictable:0 dirty:26 writeback:0 unstable:0 [ 3098.291142] slab_reclaimable:14619 slab_unreclaimable:143277 [ 3098.291142] mapped:54752 shmem:39701 pagetables:20536 bounce:0 [ 3098.291142] free:132181 free_pcp:556 free_cma:0 [ 3098.373623] Node 0 active_anon:243864kB inactive_anon:109028kB active_file:3576kB inactive_file:8180kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:173048kB dirty:80kB writeback:0kB shmem:113856kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 174080kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3098.439859] Node 1 active_anon:73388kB inactive_anon:39560kB active_file:1084kB inactive_file:104kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:45960kB dirty:24kB writeback:0kB shmem:44948kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3098.460773] systemd[1]: Started Journal Service. [ 3098.517346] Node 0 DMA free:11028kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3098.590959] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3098.596320] Node 0 DMA32 free:150912kB min:36200kB low:45248kB high:54296kB active_anon:243696kB inactive_anon:108972kB active_file:3876kB inactive_file:8180kB unevictable:0kB writepending:80kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11424kB pagetables:14972kB bounce:0kB free_pcp:896kB local_pcp:152kB free_cma:0kB [ 3098.670859] lowmem_reserve[]: 0 0 0 0 0 [ 3098.675618] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3098.737828] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3098.767348] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 3098.773187] CPU: 0 PID: 8091 Comm: syz-executor.2 Not tainted 4.14.230-syzkaller #0 [ 3098.777350] lowmem_reserve[]: [ 3098.782905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3098.782917] 0 [ 3098.787797] Call Trace: [ 3098.787823] dump_stack+0x1b2/0x281 [ 3098.787835] warn_alloc.cold+0x96/0x1cc [ 3098.787847] ? zone_watermark_ok_safe+0x220/0x220 [ 3098.787867] __alloc_pages_nodemask+0x2127/0x2720 [ 3098.787877] ? lock_acquire+0x170/0x3f0 [ 3098.787888] ? lock_acquire+0x170/0x3f0 [ 3098.787900] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3098.787916] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3098.827324] 0 [ 3098.828622] ? __mutex_unlock_slowpath+0x75/0x770 [ 3098.828637] alloc_pages_current+0x155/0x260 [ 3098.833041] 0 [ 3098.838208] ion_page_pool_alloc+0x118/0x1b0 [ 3098.838217] ion_system_heap_allocate+0x133/0x8c0 [ 3098.838229] ? _raw_spin_unlock+0x29/0x40 [ 3098.838236] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3098.838244] ? ion_system_contig_heap_create+0x130/0x130 [ 3098.838253] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3098.838264] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3098.838273] ion_alloc+0x27a/0x810 [ 3098.838285] ? ion_dma_buf_release+0x40/0x40 [ 3098.838295] ? __might_fault+0x177/0x1b0 [ 3098.838306] ion_ioctl+0xea/0x1f0 [ 3098.854666] 0 [ 3098.856318] ? ion_query_heaps+0x360/0x360 [ 3098.886086] 0 [ 3098.888197] ? check_uarg_tail_zero+0xe9/0x120 [ 3098.888207] ? ion_query_heaps+0x360/0x360 [ 3098.888217] do_vfs_ioctl+0x75a/0xff0 [ 3098.888227] ? ioctl_preallocate+0x1a0/0x1a0 [ 3098.888235] ? lock_downgrade+0x740/0x740 [ 3098.888247] ? __fget+0x225/0x360 [ 3098.888256] ? do_vfs_ioctl+0xff0/0xff0 [ 3098.897787] ? security_file_ioctl+0x83/0xb0 [ 3098.897797] SyS_ioctl+0x7f/0xb0 [ 3098.897804] ? do_vfs_ioctl+0xff0/0xff0 [ 3098.897814] do_syscall_64+0x1d5/0x640 [ 3098.897829] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3098.897836] RIP: 0033:0x466459 [ 3098.897841] RSP: 002b:00007fc87a7db188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3098.897851] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 3098.897855] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3098.897860] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3098.897864] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 3098.897869] R13: 00007ffd20e1ce3f R14: 00007fc87a7db300 R15: 0000000000022000 [ 3099.036219] Node 1 Normal free:361768kB min:53696kB low:67120kB high:80544kB active_anon:73388kB inactive_anon:39560kB active_file:584kB inactive_file:364kB unevictable:0kB writepending:24kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21856kB pagetables:67040kB bounce:0kB free_pcp:320kB local_pcp:220kB free_cma:0kB [ 3099.067834] lowmem_reserve[]: 0 0 0 0 0 [ 3099.072817] Node 0 DMA: 13*4kB (UE) 38*8kB (UME) 56*16kB (UME) 34*32kB (UME) 6*64kB (UME) 3*128kB (UE) 5*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 1*2048kB (M) 0*4096kB = 11044kB [ 3099.127317] Node 0 DMA32: 71*4kB (ME) 79*8kB (UME) 140*16kB (UE) 1284*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 44244kB [ 3099.157112] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3099.174547] Node 1 Normal: 56*4kB (M) 4366*8kB (UM) 6749*16kB (UM) 4608*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 290592kB [ 3099.207308] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3099.216624] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3099.247304] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3099.256627] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3099.277296] 42264 total pagecache pages [ 3099.282048] 0 pages in swap cache [ 3099.285606] Swap cache stats: add 0, delete 0, find 0/0 [ 3099.307473] Free swap = 0kB [ 3099.310597] Total swap = 0kB [ 3099.313899] 2097051 pages RAM [ 3099.316999] 0 pages HighMem/MovableOnly [ 3099.337288] 363848 pages reserved [ 3099.341005] 0 pages cma reserved [ 3100.225968] syz-executor.4 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 3100.240326] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 3100.245811] CPU: 0 PID: 8064 Comm: syz-executor.4 Not tainted 4.14.230-syzkaller #0 [ 3100.254072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3100.264180] Call Trace: [ 3100.266866] dump_stack+0x1b2/0x281 [ 3100.270852] syz-executor.2: page allocation failure: order:0 [ 3100.270980] dump_header+0x178/0x82f [ 3100.270985] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3100.277159] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3100.280964] syz-executor.4: [ 3100.289112] ? ___ratelimit+0x2cd/0x530 [ 3100.289124] oom_kill_process.cold+0x10/0xa40 [ 3100.289143] out_of_memory+0xe3e/0x1190 [ 3100.289157] ? oom_killer_disable+0x1c0/0x1c0 [ 3100.289166] ? mutex_trylock+0x152/0x1a0 [ 3100.289178] __alloc_pages_nodemask+0x23e1/0x2720 [ 3100.289194] ? lock_acquire+0x170/0x3f0 [ 3100.289211] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3100.289220] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3100.289236] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3100.289252] alloc_pages_current+0x155/0x260 [ 3100.289263] ion_page_pool_alloc+0x118/0x1b0 [ 3100.289272] ion_system_heap_allocate+0x133/0x8c0 [ 3100.289283] ? _raw_spin_unlock+0x29/0x40 [ 3100.289291] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3100.289300] ? ion_system_contig_heap_create+0x130/0x130 [ 3100.289309] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3100.289320] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3100.289329] ion_alloc+0x27a/0x810 [ 3100.289341] ? ion_dma_buf_release+0x40/0x40 [ 3100.289353] ? __might_fault+0x177/0x1b0 [ 3100.289363] ion_ioctl+0xea/0x1f0 [ 3100.289374] ? ion_query_heaps+0x360/0x360 [ 3100.303502] page allocation failure: order:0 [ 3100.306766] ? sockfd_lookup_light+0xb2/0x160 [ 3100.312868] syz-executor.2 cpuset= [ 3100.315761] ? ion_query_heaps+0x360/0x360 [ 3100.326257] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 3100.329020] do_vfs_ioctl+0x75a/0xff0 [ 3100.329033] ? ioctl_preallocate+0x1a0/0x1a0 [ 3100.329042] ? lock_downgrade+0x740/0x740 [ 3100.329055] ? __fget+0x225/0x360 [ 3100.329067] ? do_vfs_ioctl+0xff0/0xff0 [ 3100.334282] (null) [ 3100.338959] ? security_file_ioctl+0x83/0xb0 [ 3100.338972] SyS_ioctl+0x7f/0xb0 [ 3100.338980] ? do_vfs_ioctl+0xff0/0xff0 [ 3100.338990] do_syscall_64+0x1d5/0x640 [ 3100.339004] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3100.339012] RIP: 0033:0x466459 [ 3100.339016] RSP: 002b:00007f61587c6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3100.339025] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 3100.339029] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3100.339034] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3100.339038] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 3100.339042] R13: 00007ffed7f6205f R14: 00007f61587c6300 R15: 0000000000022000 [ 3100.346397] Mem-Info: [ 3100.349196] / [ 3100.354120] active_anon:79317 inactive_anon:37152 isolated_anon:0 [ 3100.354120] active_file:23 inactive_file:0 isolated_file:0 [ 3100.354120] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3100.354120] slab_reclaimable:14608 slab_unreclaimable:143169 [ 3100.354120] mapped:52601 shmem:39701 pagetables:20536 bounce:0 [ 3100.354120] free:13960 free_pcp:63 free_cma:0 [ 3100.358753] mems_allowed=0-1 [ 3100.358768] CPU: 1 PID: 8091 Comm: syz-executor.2 Not tainted 4.14.230-syzkaller #0 [ 3100.358773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3100.358778] Call Trace: [ 3100.370368] Node 0 active_anon:243880kB inactive_anon:109048kB active_file:92kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:165636kB dirty:0kB writeback:0kB shmem:113856kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 174080kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3100.373815] dump_stack+0x1b2/0x281 [ 3100.379042] Node 1 active_anon:73388kB inactive_anon:39560kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44768kB dirty:0kB writeback:0kB shmem:44948kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3100.383998] warn_alloc.cold+0x96/0x1cc [ 3100.388064] Node 0 [ 3100.392916] ? zone_watermark_ok_safe+0x220/0x220 [ 3100.397849] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3100.401433] ? usleep_range+0x130/0x130 [ 3100.406357] lowmem_reserve[]: [ 3100.411043] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3100.411058] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3100.411067] ? run_timer_softirq+0x5a0/0x5a0 [ 3100.411083] __alloc_pages_nodemask+0x2127/0x2720 [ 3100.411103] ? lock_acquire+0x170/0x3f0 [ 3100.415863] 0 [ 3100.426806] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3100.426817] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3100.426833] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3100.426852] alloc_pages_current+0x155/0x260 [ 3100.431347] 2717 [ 3100.440006] ion_page_pool_alloc+0x118/0x1b0 [ 3100.440014] ion_system_heap_allocate+0x133/0x8c0 [ 3100.440026] ? _raw_spin_unlock+0x29/0x40 [ 3100.440033] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3100.440041] ? ion_system_contig_heap_create+0x130/0x130 [ 3100.440050] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3100.440061] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3100.440069] ion_alloc+0x27a/0x810 [ 3100.440080] ? ion_dma_buf_release+0x40/0x40 [ 3100.440090] ? __might_fault+0x177/0x1b0 [ 3100.440099] ion_ioctl+0xea/0x1f0 [ 3100.440106] ? ion_query_heaps+0x360/0x360 [ 3100.440118] ? check_uarg_tail_zero+0xe9/0x120 [ 3100.440126] ? ion_query_heaps+0x360/0x360 [ 3100.440135] do_vfs_ioctl+0x75a/0xff0 [ 3100.440145] ? ioctl_preallocate+0x1a0/0x1a0 [ 3100.440153] ? lock_downgrade+0x740/0x740 [ 3100.440166] ? __fget+0x225/0x360 [ 3100.447358] 2718 [ 3100.448761] ? do_vfs_ioctl+0xff0/0xff0 [ 3100.453761] 2718 2718 [ 3100.457208] ? security_file_ioctl+0x83/0xb0 [ 3100.457218] SyS_ioctl+0x7f/0xb0 [ 3100.457226] ? do_vfs_ioctl+0xff0/0xff0 [ 3100.457238] do_syscall_64+0x1d5/0x640 [ 3100.463435] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3100.468320] Node 0 [ 3100.471729] RIP: 0033:0x466459 [ 3100.475842] DMA32 free:18156kB min:36200kB low:45248kB high:54296kB active_anon:243712kB inactive_anon:108992kB active_file:92kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11392kB pagetables:14972kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 3100.479733] RSP: 002b:00007fc87a7db188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3100.479744] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 3100.479748] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3100.479752] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3100.479757] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 3100.479761] R13: 00007ffd20e1ce3f R14: 00007fc87a7db300 R15: 0000000000022000 [ 3100.485702] syz-executor.4 cpuset= [ 3100.504083] lowmem_reserve[]: [ 3100.506177] / [ 3100.512448] 0 [ 3100.520961] mems_allowed=0-1 [ 3100.538320] 0 [ 3100.540391] CPU: 1 PID: 8041 Comm: syz-executor.4 Not tainted 4.14.230-syzkaller #0 [ 3100.582779] 0 [ 3100.585784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3100.594127] 0 [ 3100.604501] Call Trace: [ 3100.604525] dump_stack+0x1b2/0x281 [ 3100.604538] warn_alloc.cold+0x96/0x1cc [ 3100.604549] ? zone_watermark_ok_safe+0x220/0x220 [ 3100.604562] ? usleep_range+0x130/0x130 [ 3100.607262] 0 [ 3100.637043] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3100.637056] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3100.637065] ? run_timer_softirq+0x5a0/0x5a0 [ 3100.637081] __alloc_pages_nodemask+0x2127/0x2720 [ 3100.637097] ? lock_acquire+0x170/0x3f0 [ 3100.640907] warn_alloc_show_mem: 2 callbacks suppressed [ 3100.640910] Mem-Info: [ 3100.672924] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3100.672934] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3100.672949] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3100.672967] alloc_pages_current+0x155/0x260 [ 3100.679527] ion_page_pool_alloc+0x118/0x1b0 [ 3100.685745] Node 0 [ 3100.714579] ion_system_heap_allocate+0x133/0x8c0 [ 3100.714592] ? _raw_spin_unlock+0x29/0x40 [ 3100.714600] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3100.714608] ? ion_system_contig_heap_create+0x130/0x130 [ 3100.714617] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3100.714630] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3100.718647] active_anon:79317 inactive_anon:37152 isolated_anon:0 [ 3100.718647] active_file:23 inactive_file:0 isolated_file:0 [ 3100.718647] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3100.718647] slab_reclaimable:14608 slab_unreclaimable:143169 [ 3100.718647] mapped:52601 shmem:39701 pagetables:20536 bounce:0 [ 3100.718647] free:13960 free_pcp:63 free_cma:0 [ 3100.722357] ion_alloc+0x27a/0x810 [ 3100.727823] Node 0 active_anon:243880kB inactive_anon:109048kB active_file:92kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:165636kB dirty:0kB writeback:0kB shmem:113856kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 174080kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3100.733428] ? ion_dma_buf_release+0x40/0x40 [ 3100.738340] Node 1 active_anon:73388kB inactive_anon:39560kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44768kB dirty:0kB writeback:0kB shmem:44948kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3100.744045] ? __might_fault+0x177/0x1b0 [ 3100.748384] Node 0 [ 3100.750228] ion_ioctl+0xea/0x1f0 [ 3100.755238] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3100.760277] ? ion_query_heaps+0x360/0x360 [ 3100.760290] ? ion_query_heaps+0x360/0x360 [ 3100.760304] do_vfs_ioctl+0x75a/0xff0 [ 3100.766530] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3100.771307] ? ioctl_preallocate+0x1a0/0x1a0 [ 3100.771317] ? lock_downgrade+0x740/0x740 [ 3100.771330] ? __fget+0x225/0x360 [ 3100.771339] ? do_vfs_ioctl+0xff0/0xff0 [ 3100.771354] ? security_file_ioctl+0x83/0xb0 [ 3100.780541] lowmem_reserve[]: [ 3100.785079] SyS_ioctl+0x7f/0xb0 [ 3100.790255] lowmem_reserve[]: [ 3100.795402] ? do_vfs_ioctl+0xff0/0xff0 [ 3100.800933] 0 [ 3100.806610] do_syscall_64+0x1d5/0x640 [ 3100.812036] 0 [ 3100.817111] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3100.820732] 2717 [ 3100.825194] RIP: 0033:0x466459 [ 3100.829394] 0 [ 3100.832875] RSP: 002b:00007f61587e7188 EFLAGS: 00000246 [ 3100.837636] 0 [ 3100.842369] ORIG_RAX: 0000000000000010 [ 3100.847561] 2718 [ 3100.851299] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3100.856052] 2718 [ 3100.861846] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3100.861852] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3100.861856] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3100.861861] R13: 00007ffed7f6205f R14: 00007f61587e7300 R15: 0000000000022000 [ 3100.927701] 0 [ 3100.937772] 2718 [ 3101.137197] 0 [ 3101.182444] Node 0 [ 3101.210751] Node 1 [ 3101.215399] DMA32 free:25556kB min:36200kB low:45248kB high:54296kB active_anon:243712kB inactive_anon:108992kB active_file:60kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11360kB pagetables:14972kB bounce:0kB free_pcp:424kB local_pcp:132kB free_cma:0kB [ 3101.232265] Normal free:509300kB min:53696kB low:67120kB high:80544kB active_anon:73388kB inactive_anon:39560kB active_file:4kB inactive_file:2100kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21856kB pagetables:67040kB bounce:0kB free_pcp:180kB local_pcp:60kB free_cma:0kB [ 3101.248936] lowmem_reserve[]: 0 0 0 0 0 [ 3101.248957] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3101.248977] lowmem_reserve[]: 0 0 0 0 0 [ 3101.248996] Node 1 Normal free:509300kB min:53696kB low:67120kB high:80544kB active_anon:73388kB inactive_anon:39560kB active_file:4kB inactive_file:2100kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21856kB pagetables:67040kB bounce:0kB free_pcp:180kB local_pcp:120kB free_cma:0kB [ 3101.249016] lowmem_reserve[]: 0 0 0 0 0 [ 3101.249033] Node 0 DMA: 3*4kB (UME) 17*8kB (UE) 50*16kB (UME) 30*32kB (UME) 3*64kB (UE) 4*128kB (UME) 5*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 1*2048kB (U) 0*4096kB = 11060kB [ 3101.249108] Node 0 DMA32: 1139*4kB (UME) [ 3101.277242] lowmem_reserve[]: [ 3101.297153] 772*8kB [ 3101.304046] 0 [ 3101.347169] (UME) [ 3101.354035] 0 [ 3101.355660] 207*16kB [ 3101.361430] 0 [ 3101.387164] (UME) [ 3101.397717] 0 [ 3101.407206] 226*32kB [ 3101.412974] 0 [ 3101.437166] (UME) [ 3101.457167] 4*64kB [ 3101.487445] Node 0 [ 3101.567152] (UM) [ 3101.589494] DMA: [ 3101.637151] 2*128kB (U) 1*256kB (M) 1*512kB (M) 1*1024kB (U) 1*2048kB (U) 0*4096kB = 25628kB [ 3101.644175] 3*4kB (UME) 17*8kB (UE) 50*16kB (UME) 30*32kB (UME) 4*64kB (UE) 4*128kB (UME) 5*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 1*2048kB (U) 0*4096kB = 11124kB [ 3101.667127] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3101.673862] Node 0 DMA32: 1308*4kB (UME) 803*8kB (UME) 294*16kB (UME) 440*32kB (UME) 18*64kB (UM) 3*128kB (U) 1*256kB (M) 1*512kB (M) 13*1024kB (U) 2*2048kB (U) 0*4096kB = 50152kB [ 3101.697123] Node 1 Normal: 1294*4kB (U) 908*8kB (U) 1326*16kB (UM) 1812*32kB (UM) 2221*64kB (UM) 330*128kB (UM) 214*256kB (U) 41*512kB (UM) 295*1024kB (UM) 144*2048kB (U) 27*4096kB (U) = 1059384kB [ 3101.703466] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3101.731513] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3101.734100] Node 1 [ 3101.742124] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3101.742131] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3101.742137] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3101.742141] 40743 total pagecache pages [ 3101.742149] 0 pages in swap cache [ 3101.742154] Swap cache stats: add 0, delete 0, find 0/0 [ 3101.742157] Free swap = 0kB [ 3101.742160] Total swap = 0kB [ 3101.742167] 2097051 pages RAM [ 3101.742170] 0 pages HighMem/MovableOnly [ 3101.742173] 363848 pages reserved [ 3101.742177] 0 pages cma reserved [ 3101.809572] Normal: 1355*4kB (UM) 959*8kB (U) 1378*16kB (UM) 1865*32kB (UM) 2274*64kB (UM) 330*128kB (UM) 214*256kB (U) 41*512kB (UM) 295*1024kB (UM) 144*2048kB (U) 27*4096kB (U) = 1065956kB [ 3101.828440] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3101.838580] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3101.847523] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3101.857017] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3101.867389] 40876 total pagecache pages [ 3101.871986] 0 pages in swap cache [ 3101.875572] Swap cache stats: add 0, delete 0, find 0/0 [ 3101.882623] Free swap = 0kB [ 3101.886256] Total swap = 0kB [ 3101.889587] 2097051 pages RAM [ 3101.892877] 0 pages HighMem/MovableOnly [ 3101.897143] 363848 pages reserved [ 3101.900700] 0 pages cma reserved [ 3101.904618] Out of memory (oom_kill_allocating_task): Kill process 8064 (syz-executor.4) score 0 or sacrifice child [ 3101.916731] Killed process 8064 (syz-executor.4) total-vm:93516kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3101.927597] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3101.939952] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 3101.945795] CPU: 1 PID: 8064 Comm: syz-executor.4 Not tainted 4.14.230-syzkaller #0 [ 3101.953613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3101.963063] Call Trace: [ 3101.966164] dump_stack+0x1b2/0x281 [ 3101.970085] warn_alloc.cold+0x96/0x1cc [ 3101.974321] ? lock_downgrade+0x740/0x740 [ 3101.978549] ? zone_watermark_ok_safe+0x220/0x220 [ 3101.983774] ? wake_up_q+0x82/0xd0 [ 3101.987563] ? wait_for_completion_io+0x10/0x10 [ 3101.992241] __alloc_pages_nodemask+0x2127/0x2720 [ 3101.997507] ? lock_acquire+0x170/0x3f0 [ 3102.001467] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3102.006465] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3102.010946] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3102.016413] alloc_pages_current+0x155/0x260 [ 3102.020913] ion_page_pool_alloc+0x118/0x1b0 [ 3102.025701] ion_system_heap_allocate+0x133/0x8c0 [ 3102.030852] ? _raw_spin_unlock+0x29/0x40 [ 3102.035264] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3102.040446] ? ion_system_contig_heap_create+0x130/0x130 [ 3102.046097] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3102.051198] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3102.056209] ion_alloc+0x27a/0x810 [ 3102.059826] ? ion_dma_buf_release+0x40/0x40 [ 3102.064308] ? __might_fault+0x177/0x1b0 [ 3102.068458] ion_ioctl+0xea/0x1f0 [ 3102.071980] ? ion_query_heaps+0x360/0x360 [ 3102.076416] ? sockfd_lookup_light+0xb2/0x160 [ 3102.081013] ? ion_query_heaps+0x360/0x360 [ 3102.086022] do_vfs_ioctl+0x75a/0xff0 [ 3102.089954] ? ioctl_preallocate+0x1a0/0x1a0 [ 3102.094569] ? lock_downgrade+0x740/0x740 [ 3102.098840] ? __fget+0x225/0x360 [ 3102.102385] ? do_vfs_ioctl+0xff0/0xff0 [ 3102.106485] ? security_file_ioctl+0x83/0xb0 [ 3102.111322] SyS_ioctl+0x7f/0xb0 [ 3102.114846] ? do_vfs_ioctl+0xff0/0xff0 [ 3102.118881] do_syscall_64+0x1d5/0x640 [ 3102.122920] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3102.128362] RIP: 0033:0x466459 [ 3102.131648] RSP: 002b:00007f61587c6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3102.140008] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 3102.147782] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3102.155295] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3102.162736] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 3102.170359] R13: 00007ffed7f6205f R14: 00007f61587c6300 R15: 0000000000022000 [ 3102.179332] warn_alloc_show_mem: 1 callbacks suppressed [ 3102.179335] Mem-Info: [ 3102.188085] active_anon:79320 inactive_anon:37152 isolated_anon:0 [ 3102.188085] active_file:80 inactive_file:1232 isolated_file:0 [ 3102.188085] unevictable:0 dirty:22 writeback:0 unstable:0 [ 3102.188085] slab_reclaimable:14592 slab_unreclaimable:144622 [ 3102.188085] mapped:53539 shmem:39701 pagetables:20499 bounce:0 [ 3102.188085] free:281261 free_pcp:453 free_cma:0 [ 3102.224257] Node 0 active_anon:243880kB inactive_anon:109048kB active_file:244kB inactive_file:2948kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:167880kB dirty:8kB writeback:0kB shmem:113856kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 174080kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3102.254952] Node 1 active_anon:73400kB inactive_anon:39560kB active_file:76kB inactive_file:1980kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:46276kB dirty:80kB writeback:0kB shmem:44948kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3102.285193] Node 0 DMA free:11184kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:100kB inactive_file:1740kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3102.315092] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3102.320912] Node 0 DMA32 free:47252kB min:36200kB low:45248kB high:54296kB active_anon:243712kB inactive_anon:108992kB active_file:244kB inactive_file:1708kB unevictable:0kB writepending:8kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11328kB pagetables:14824kB bounce:0kB free_pcp:980kB local_pcp:372kB free_cma:0kB [ 3102.352128] lowmem_reserve[]: 0 0 0 0 0 [ 3102.357326] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3102.385142] lowmem_reserve[]: 0 0 0 0 0 [ 3102.389865] Node 1 Normal free:1065956kB min:53696kB low:67120kB high:80544kB active_anon:73400kB inactive_anon:39560kB active_file:76kB inactive_file:1980kB unevictable:0kB writepending:80kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21856kB pagetables:67040kB bounce:0kB free_pcp:764kB local_pcp:52kB free_cma:0kB [ 3102.425203] lowmem_reserve[]: 0 0 0 0 0 [ 3102.429353] Node 0 DMA: 6*4kB (UME) 23*8kB (UME) 50*16kB (UME) 30*32kB (UME) 4*64kB (UE) 4*128kB (UME) 5*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 1*2048kB (U) 0*4096kB = 11184kB [ 3102.446963] Node 0 DMA32: 615*4kB (UME) 414*8kB (UME) 323*16kB (UME) 456*32kB (UME) 46*64kB (UM) 3*128kB (U) 1*256kB (M) 1*512kB (M) 13*1024kB (U) 2*2048kB (U) 0*4096kB = 47036kB [ 3102.464056] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3102.475251] Node 1 Normal: 1355*4kB (UM) 959*8kB (U) 1378*16kB (UM) 1865*32kB (UM) 2274*64kB (UM) 330*128kB (UM) 214*256kB (U) 41*512kB (UM) 295*1024kB (UM) 144*2048kB (U) 27*4096kB (U) = 1065956kB [ 3102.494419] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3102.503992] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3102.512895] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3102.521925] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3102.531368] 41690 total pagecache pages 23:48:26 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0x27}) 23:48:26 executing program 1: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f00000000c0)=0x8) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGCAUSE(r1, 0x89e0, 0x0) ioctl$SIOCRSGCAUSE(r1, 0x89e0, &(0x7f00000003c0)) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/video1\x00', 0x2, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000036c0)='/dev/dlm_plock\x00', 0x0, 0x0) getsockname$ax25(r3, 0x0, 0x0) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000340)={0x1, 0x1, 0x4, 0x4, 0x1, {0x0, 0xea60}, {0x2, 0xc, 0xff, 0xdf, 0x3f, 0x1, 'vV9F'}, 0x6, 0x2, @planes=&(0x7f0000000300)={0x6, 0x7, @userptr=0x7, 0xffff8001}, 0x7, 0x0, r3}) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000036c0)='/dev/dlm_plock\x00', 0x0, 0x0) getsockname$ax25(r4, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000280)='/dev/urandom\x00', 0x80443, 0x0) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r4, 0x111, 0x3, 0x0, 0x4) r6 = geteuid() mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x8800c2, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@access_user='access=user'}, {@loose='loose'}, {@cache_fscache='cache=fscache'}], [{@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@measure='measure'}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/urandom\x00'}}, {@context={'context', 0x3d, 'root'}}, {@audit='audit'}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x35, 0x31, 0x38, 0x34, 0x62, 0x0, 0x34], 0x2d, [0x37, 0x66, 0x61], 0x2d, [0x38, 0x33, 0x33, 0x60], 0x2d, [0x62, 0x32, 0x32, 0x66], 0x2d, [0x34, 0x35, 0x34, 0x30, 0x66, 0x33, 0x32, 0x35]}}}, {@euid_eq={'euid', 0x3d, r6}}, {@euid_lt={'euid<', 0xee01}}]}}) 23:48:26 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000006, 0x27, 0x1}) 23:48:26 executing program 3: ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f00000000c0)=0x3) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGCAUSE(r1, 0x89e0, 0x0) recvfrom$rose(r1, &(0x7f0000000100)=""/38, 0x26, 0x40001002, &(0x7f0000000140)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) accept4$ax25(r0, 0x0, 0x0, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000000)=@netrom={'nr', 0x0}, 0x10) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000080)=0xfffffffc) [ 3102.535803] 0 pages in swap cache [ 3102.540097] Swap cache stats: add 0, delete 0, find 0/0 [ 3102.546751] Free swap = 0kB [ 3102.550702] Total swap = 0kB [ 3102.554883] 2097051 pages RAM [ 3102.558151] 0 pages HighMem/MovableOnly [ 3102.562494] 363848 pages reserved [ 3102.565961] 0 pages cma reserved 23:48:26 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000006, 0x27}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000036c0)='/dev/dlm_plock\x00', 0x0, 0x0) getsockname$ax25(r1, 0x0, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000036c0)='/dev/dlm_plock\x00', 0x0, 0x0) getsockname$ax25(r2, 0x0, 0x0) sendto$ax25(r2, &(0x7f00000000c0)="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", 0x1000, 0xc060, &(0x7f00000010c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @default, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000036c0)='/dev/dlm_plock\x00', 0x0, 0x0) getsockname$ax25(r3, 0x0, 0x0) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001500)='/dev/dlm_plock\x00', 0x140, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002b00)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000002c00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b40)={0x54, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3ff}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8}, {0x8, 0x1, r4}, {0x8, 0x1, r5}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000091) 23:48:27 executing program 1: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r1, 0x80047453, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x7, 0x4) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f00000000c0)=0x8) 23:48:27 executing program 4: r0 = accept4$rose(0xffffffffffffffff, &(0x7f0000000080)=@full={0xb, @dev, @remote, 0x0, [@netrom, @rose, @bcast, @netrom, @null, @netrom]}, 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) bind$rose(r0, &(0x7f00000000c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x0, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x80080004, 0xb, 0x1}) 23:48:27 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000006}) 23:48:27 executing program 3: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000080)=0xfffffffc) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000036c0)='/dev/dlm_plock\x00', 0x0, 0x0) getsockname$ax25(r1, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000180)=0x8001) accept4$ax25(r2, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c7766646e6f3dc9547462ca78712237d101791f742c7f25dfd872c5addde670282f03a763420954cb78f48e27fca60c6251e0f33a40a30b259bfad12d81473017ac90a408533c131a0c961d371ef9a067cf3e5d000000004d4575aa0640c9cc2a4835f405fe66623d40aedbe33c378ba0e9c1c2240984", @ANYRESHEX=r2, @ANYBLOB=',fscache,version=9p2000.L,context=sysadm_u,\x00']) 23:48:27 executing program 1: ioctl$IOCTL_START_ACCEL_DEV(0xffffffffffffffff, 0x40096102, &(0x7f00000003c0)={{&(0x7f0000000340)={'Accelerator1\x00', {&(0x7f0000000000)=@adf_hex={@bank={'Bank', '2', 'InterruptCoalescingTimerNs\x00'}, {0x80}}}, {&(0x7f00000002c0)={'Accelerator\x00', {&(0x7f0000000200)=@adf_hex={@normal='NumberCyInstances\x00', {0x401}, {&(0x7f0000000140)=@adf_dec={@format={'Cy', '5', 'BankNumber\x00'}}}}}}}}}}) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGCAUSE(r0, 0x89e0, 0x0) pselect6(0x40, &(0x7f0000000480)={0x8, 0x9, 0xfff, 0x5, 0x5, 0x6, 0x4, 0x2}, &(0x7f00000004c0)={0xde, 0x7ff, 0x3, 0x1, 0x8, 0x0, 0x8, 0x7c}, &(0x7f0000000500)={0xfffffffffffffff7, 0xdcf, 0x4, 0x82, 0x3, 0x7, 0x3, 0x7}, &(0x7f0000000540)={0x77359400}, &(0x7f00000005c0)={&(0x7f0000000580)={[0xffffffffffff7fff]}, 0x8}) sendto$rose(r0, &(0x7f0000000400)="2090abfb7ef6ff85851227", 0xb, 0x81, &(0x7f0000000440)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @null}, 0x1c) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f00000000c0)=0x8) 23:48:27 executing program 1: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f00000000c0)=0x8) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000036c0)='/dev/dlm_plock\x00', 0x0, 0x0) getsockname$ax25(r1, 0x0, 0x0) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000000)=0x1f) 23:48:27 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000006}) 23:48:27 executing program 3: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x1a0740f8bddbdf85, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000036c0)='/dev/dlm_plock\x00', 0x0, 0x0) getsockname$ax25(r1, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x84000, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000100)=0x7) 23:48:27 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000006}) [ 3104.222488] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3104.225063] syz-executor.4: [ 3104.238361] syz-executor.2: [ 3104.248018] syz-executor.0 cpuset= [ 3104.251167] page allocation failure: order:4 [ 3104.255602] syz-executor.2: [ 3104.258467] / [ 3104.263293] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3104.265752] page allocation failure: order:4 [ 3104.277982] mems_allowed=0-1 [ 3104.285788] CPU: 0 PID: 8101 Comm: syz-executor.0 Not tainted 4.14.230-syzkaller #0 [ 3104.285935] page allocation failure: order:4 [ 3104.294420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3104.294426] Call Trace: [ 3104.294448] dump_stack+0x1b2/0x281 [ 3104.294461] warn_alloc.cold+0x96/0x1cc [ 3104.294472] ? zone_watermark_ok_safe+0x220/0x220 [ 3104.294503] __alloc_pages_nodemask+0x2127/0x2720 [ 3104.294518] ? lock_acquire+0x170/0x3f0 [ 3104.294531] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3104.294552] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3104.346570] ? __mutex_unlock_slowpath+0x75/0x770 [ 3104.351404] alloc_pages_current+0x155/0x260 [ 3104.355889] ion_page_pool_alloc+0x118/0x1b0 [ 3104.360390] ion_system_heap_allocate+0x133/0x8c0 [ 3104.365484] ? ion_alloc+0x187/0x810 [ 3104.369185] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3104.374880] ? ion_system_contig_heap_create+0x130/0x130 [ 3104.380583] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3104.385598] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3104.390825] ion_alloc+0x204/0x810 [ 3104.394486] ? ion_dma_buf_release+0x40/0x40 [ 3104.399505] ? __might_fault+0x177/0x1b0 [ 3104.403575] ion_ioctl+0xea/0x1f0 [ 3104.407500] ? ion_query_heaps+0x360/0x360 [ 3104.411837] ? ion_query_heaps+0x360/0x360 [ 3104.416239] do_vfs_ioctl+0x75a/0xff0 [ 3104.420135] ? ioctl_preallocate+0x1a0/0x1a0 [ 3104.424972] ? lock_downgrade+0x740/0x740 [ 3104.429154] ? __fget+0x225/0x360 [ 3104.432792] ? do_vfs_ioctl+0xff0/0xff0 [ 3104.437208] ? security_file_ioctl+0x83/0xb0 [ 3104.441953] SyS_ioctl+0x7f/0xb0 [ 3104.445444] ? do_vfs_ioctl+0xff0/0xff0 [ 3104.449857] do_syscall_64+0x1d5/0x640 [ 3104.453883] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3104.459648] RIP: 0033:0x466459 [ 3104.462964] RSP: 002b:00007f1ef2095188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3104.470844] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3104.478376] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3104.486115] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3104.493555] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3104.501525] R13: 00007fffa779c11f R14: 00007f1ef2095300 R15: 0000000000022000 [ 3104.509805] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3104.517933] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 3104.521595] syz-executor.4 cpuset= [ 3104.523253] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 3104.523510] CPU: 1 PID: 8110 Comm: syz-executor.2 Not tainted 4.14.230-syzkaller #0 [ 3104.527980] / [ 3104.534113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3104.545424] (null) [ 3104.553582] Call Trace: [ 3104.553601] dump_stack+0x1b2/0x281 [ 3104.553614] warn_alloc.cold+0x96/0x1cc [ 3104.553631] ? zone_watermark_ok_safe+0x220/0x220 [ 3104.553651] __alloc_pages_nodemask+0x2127/0x2720 [ 3104.564979] syz-executor.2 cpuset= [ 3104.566679] ? _raw_spin_unlock_irq+0x5a/0x80 [ 3104.566694] ? finish_task_switch+0x178/0x610 [ 3104.574601] mems_allowed=0-1 [ 3104.577166] ? finish_task_switch+0x14d/0x610 [ 3104.577180] ? lock_acquire+0x170/0x3f0 [ 3104.577197] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3104.577214] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3104.577225] ? __mutex_unlock_slowpath+0x75/0x770 [ 3104.585403] / [ 3104.585665] ? alloc_pages_current+0x123/0x260 [ 3104.596070] mems_allowed=0-1 [ 3104.600848] alloc_pages_current+0x155/0x260 [ 3104.600864] ion_page_pool_alloc+0x118/0x1b0 [ 3104.600873] ion_system_heap_allocate+0x133/0x8c0 [ 3104.600883] ? ion_alloc+0x187/0x810 [ 3104.648240] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3104.655797] ? ion_system_contig_heap_create+0x130/0x130 [ 3104.662507] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3104.667646] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3104.672961] ion_alloc+0x204/0x810 [ 3104.676674] ? ion_dma_buf_release+0x40/0x40 [ 3104.681162] ? __might_fault+0x177/0x1b0 [ 3104.685492] ion_ioctl+0xea/0x1f0 [ 3104.689136] ? ion_query_heaps+0x360/0x360 [ 3104.694051] ? ion_query_heaps+0x360/0x360 [ 3104.698464] do_vfs_ioctl+0x75a/0xff0 [ 3104.702354] ? ioctl_preallocate+0x1a0/0x1a0 [ 3104.707207] ? lock_downgrade+0x740/0x740 [ 3104.711470] ? __fget+0x225/0x360 [ 3104.715047] ? do_vfs_ioctl+0xff0/0xff0 [ 3104.719104] ? security_file_ioctl+0x83/0xb0 [ 3104.724038] SyS_ioctl+0x7f/0xb0 [ 3104.727489] ? do_vfs_ioctl+0xff0/0xff0 [ 3104.731636] do_syscall_64+0x1d5/0x640 [ 3104.736059] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3104.741690] RIP: 0033:0x466459 [ 3104.745146] RSP: 002b:00007fc87a7fc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3104.753471] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 3104.761048] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3104.768587] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3104.776017] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 3104.783549] R13: 00007ffd20e1ce3f R14: 00007fc87a7fc300 R15: 0000000000022000 [ 3104.791326] CPU: 0 PID: 8106 Comm: syz-executor.2 Not tainted 4.14.230-syzkaller #0 [ 3104.795241] Mem-Info: [ 3104.800821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3104.800826] Call Trace: [ 3104.800848] dump_stack+0x1b2/0x281 [ 3104.800861] warn_alloc.cold+0x96/0x1cc [ 3104.800872] ? zone_watermark_ok_safe+0x220/0x220 [ 3104.800893] __alloc_pages_nodemask+0x2127/0x2720 [ 3104.800903] ? _raw_spin_unlock_irq+0x24/0x80 [ 3104.800916] ? lock_acquire+0x170/0x3f0 [ 3104.800931] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3104.804304] active_anon:80061 inactive_anon:37152 isolated_anon:12 [ 3104.804304] active_file:1623 inactive_file:2049 isolated_file:4 [ 3104.804304] unevictable:0 dirty:94 writeback:0 unstable:0 [ 3104.804304] slab_reclaimable:14588 slab_unreclaimable:144336 [ 3104.804304] mapped:55326 shmem:39701 pagetables:20562 bounce:0 [ 3104.804304] free:294558 free_pcp:36 free_cma:0 [ 3104.813681] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3104.813692] ? __mutex_unlock_slowpath+0x75/0x770 [ 3104.813705] alloc_pages_current+0x155/0x260 [ 3104.813719] ion_page_pool_alloc+0x118/0x1b0 [ 3104.813727] ion_system_heap_allocate+0x133/0x8c0 [ 3104.813736] ? ion_alloc+0x187/0x810 [ 3104.813745] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3104.813753] ? ion_system_contig_heap_create+0x130/0x130 [ 3104.813765] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3104.816967] Node 0 active_anon:245780kB inactive_anon:109044kB active_file:3032kB inactive_file:4360kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:171876kB dirty:188kB writeback:0kB shmem:113852kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 176128kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3104.820053] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3104.820068] ion_alloc+0x204/0x810 [ 3104.824454] Node 1 active_anon:74464kB inactive_anon:39564kB active_file:3460kB inactive_file:3836kB unevictable:0kB isolated(anon):0kB isolated(file):16kB mapped:49428kB dirty:188kB writeback:0kB shmem:44952kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3104.829162] ? ion_dma_buf_release+0x40/0x40 [ 3104.829175] ? __might_fault+0x177/0x1b0 [ 3104.829185] ion_ioctl+0xea/0x1f0 [ 3104.829193] ? ion_query_heaps+0x360/0x360 [ 3104.829204] ? ion_query_heaps+0x360/0x360 [ 3104.829213] do_vfs_ioctl+0x75a/0xff0 [ 3104.829224] ? ioctl_preallocate+0x1a0/0x1a0 [ 3104.829232] ? lock_downgrade+0x740/0x740 [ 3104.829245] ? __fget+0x225/0x360 [ 3104.834671] Node 0 [ 3104.838919] ? do_vfs_ioctl+0xff0/0xff0 [ 3104.838930] ? security_file_ioctl+0x83/0xb0 [ 3104.838939] SyS_ioctl+0x7f/0xb0 [ 3104.838946] ? do_vfs_ioctl+0xff0/0xff0 [ 3104.838959] do_syscall_64+0x1d5/0x640 [ 3104.838972] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3104.838981] RIP: 0033:0x466459 [ 3104.843359] DMA free:11148kB min:204kB low:252kB high:300kB active_anon:172kB inactive_anon:56kB active_file:1624kB inactive_file:164kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3104.848104] RSP: 002b:00007fc87a81d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3104.848115] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3104.848119] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3104.848124] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3104.848128] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3104.848132] R13: 00007ffd20e1ce3f R14: 00007fc87a81d300 R15: 0000000000022000 [ 3104.858676] CPU: 0 PID: 8122 Comm: syz-executor.4 Not tainted 4.14.230-syzkaller #0 [ 3104.892625] lowmem_reserve[]: [ 3104.894898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3104.894902] Call Trace: [ 3104.894919] dump_stack+0x1b2/0x281 [ 3104.894932] warn_alloc.cold+0x96/0x1cc [ 3104.902616] 0 [ 3104.904457] ? zone_watermark_ok_safe+0x220/0x220 [ 3104.904480] __alloc_pages_nodemask+0x2127/0x2720 [ 3104.911649] 2717 [ 3104.913885] ? lock_acquire+0x170/0x3f0 [ 3104.913901] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3104.923033] 2718 [ 3104.925628] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3104.925640] ? __mutex_unlock_slowpath+0x75/0x770 [ 3104.925651] ? retint_kernel+0x2d/0x2d [ 3104.932542] 2718 [ 3104.962979] alloc_pages_current+0x155/0x260 [ 3104.962994] ion_page_pool_alloc+0x118/0x1b0 [ 3104.963003] ion_system_heap_allocate+0x133/0x8c0 [ 3104.963012] ? ion_alloc+0x187/0x810 [ 3104.963022] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3104.963031] ? ion_system_contig_heap_create+0x130/0x130 [ 3104.963039] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3104.963048] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3104.963057] ion_alloc+0x204/0x810 [ 3104.963069] ? ion_dma_buf_release+0x40/0x40 [ 3104.963081] ? __might_fault+0x177/0x1b0 [ 3104.963092] ion_ioctl+0xea/0x1f0 [ 3104.963099] ? ion_query_heaps+0x360/0x360 [ 3104.963110] ? ion_query_heaps+0x360/0x360 [ 3104.963119] do_vfs_ioctl+0x75a/0xff0 [ 3104.963135] ? ioctl_preallocate+0x1a0/0x1a0 [ 3104.972357] 2718 [ 3105.001707] ? lock_downgrade+0x740/0x740 [ 3105.001721] ? __fget+0x225/0x360 [ 3105.001730] ? do_vfs_ioctl+0xff0/0xff0 [ 3105.001740] ? security_file_ioctl+0x83/0xb0 [ 3105.001750] SyS_ioctl+0x7f/0xb0 [ 3105.001758] ? do_vfs_ioctl+0xff0/0xff0 [ 3105.001768] do_syscall_64+0x1d5/0x640 [ 3105.001781] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3105.001789] RIP: 0033:0x466459 [ 3105.001793] RSP: 002b:00007f61587e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3105.001801] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3105.001806] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3105.001810] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3105.001815] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3105.001820] R13: 00007ffed7f6205f R14: 00007f61587e7300 R15: 0000000000022000 [ 3105.382677] Node 0 DMA32 free:359076kB min:36200kB low:45248kB high:54296kB active_anon:245616kB inactive_anon:108988kB active_file:1416kB inactive_file:4232kB unevictable:0kB writepending:224kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11296kB pagetables:14760kB bounce:0kB free_pcp:112kB local_pcp:24kB free_cma:0kB [ 3105.414241] lowmem_reserve[]: 0 0 0 0 0 [ 3105.419450] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3105.481760] lowmem_reserve[]: 0 0 0 0 0 [ 3105.491765] Node 1 Normal free:494176kB min:53696kB low:67120kB high:80544kB active_anon:74464kB inactive_anon:39564kB active_file:3460kB inactive_file:3836kB unevictable:0kB writepending:192kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21984kB pagetables:67356kB bounce:0kB free_pcp:16kB local_pcp:0kB free_cma:0kB [ 3105.563716] lowmem_reserve[]: 0 0 0 0 0 [ 3105.573229] Node 0 DMA: 44*4kB (UME) 29*8kB (UME) 54*16kB (UME) 27*32kB (UE) 3*64kB (UME) 3*128kB (UE) 5*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 1*2048kB (U) 0*4096kB = 11160kB [ 3105.610811] Node 0 DMA32: 451*4kB (E) 83*8kB (ME) 151*16kB (ME) 2632*32kB (UE) 18*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 90260kB [ 3105.625607] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3105.653299] Node 1 Normal: 13018*4kB (UM) 12329*8kB (UM) 8287*16kB (UM) 6439*32kB (UM) 9*64kB (U) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 490048kB [ 3105.696291] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3105.717555] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3105.748662] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3105.771623] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3105.793009] 43398 total pagecache pages [ 3105.804159] 0 pages in swap cache [ 3105.812560] Swap cache stats: add 0, delete 0, find 0/0 [ 3105.825778] Free swap = 0kB [ 3105.834037] Total swap = 0kB [ 3105.841610] 2097051 pages RAM [ 3105.850319] 0 pages HighMem/MovableOnly [ 3105.861509] 363848 pages reserved [ 3105.870420] 0 pages cma reserved [ 3106.803586] oom_reaper: reaped process 8122 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3106.873747] oom_reaper: reaped process 8101 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3106.938898] oom_reaper: reaped process 8110 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3107.008814] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 3107.023743] systemd-journal cpuset=/ mems_allowed=0-1 [ 3107.035205] CPU: 0 PID: 8093 Comm: systemd-journal Not tainted 4.14.230-syzkaller #0 [ 3107.043579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3107.053120] Call Trace: [ 3107.055951] dump_stack+0x1b2/0x281 [ 3107.059583] dump_header+0x178/0x82f [ 3107.063853] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3107.069304] ? ___ratelimit+0x2cd/0x530 [ 3107.073753] oom_kill_process.cold+0x10/0xa40 [ 3107.078779] out_of_memory+0xe3e/0x1190 [ 3107.083251] ? oom_killer_disable+0x1c0/0x1c0 [ 3107.087918] ? mutex_trylock+0x152/0x1a0 [ 3107.092225] __alloc_pages_nodemask+0x23e1/0x2720 [ 3107.097059] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3107.102110] alloc_pages_current+0x155/0x260 [ 3107.106698] filemap_fault+0x11a1/0x1ad0 [ 3107.110764] ext4_filemap_fault+0x84/0xb0 [ 3107.115765] __do_fault+0xfa/0x380 [ 3107.119376] __handle_mm_fault+0x2497/0x4620 [ 3107.123942] ? vm_insert_page+0x7c0/0x7c0 [ 3107.128081] ? mark_held_locks+0xa6/0xf0 [ 3107.132144] handle_mm_fault+0x455/0x9c0 [ 3107.136365] __do_page_fault+0x549/0xad0 [ 3107.140593] ? spurious_fault+0x640/0x640 [ 3107.144817] ? do_page_fault+0x60/0x500 [ 3107.148858] ? page_fault+0x2f/0x50 [ 3107.152742] page_fault+0x45/0x50 [ 3107.156189] RIP: 0001:0xffffffffffffffff [ 3107.160246] RSP: e41e51e0:00007ffe86ed7fc0 EFLAGS: 7ffe86ed7dd0 [ 3107.160666] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3107.168847] syz-executor.2: [ 3107.180165] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 3107.183229] syz-executor.2: [ 3107.188534] CPU: 0 PID: 8122 Comm: syz-executor.4 Not tainted 4.14.230-syzkaller #0 [ 3107.188539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3107.188543] Call Trace: [ 3107.188562] dump_stack+0x1b2/0x281 [ 3107.188577] warn_alloc.cold+0x96/0x1cc [ 3107.188588] ? zone_watermark_ok_safe+0x220/0x220 [ 3107.188598] ? usleep_range+0x130/0x130 [ 3107.188607] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3107.188618] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3107.188629] ? run_timer_softirq+0x5a0/0x5a0 [ 3107.191654] syz-executor.0: [ 3107.199500] __alloc_pages_nodemask+0x2127/0x2720 [ 3107.199515] ? lock_acquire+0x170/0x3f0 [ 3107.199528] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3107.199537] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3107.199552] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3107.199566] ? retint_kernel+0x2d/0x2d [ 3107.199580] alloc_pages_current+0x155/0x260 [ 3107.199591] ion_page_pool_alloc+0x118/0x1b0 [ 3107.199600] ion_system_heap_allocate+0x133/0x8c0 [ 3107.199610] ? ion_alloc+0x187/0x810 [ 3107.199620] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3107.199628] ? ion_system_contig_heap_create+0x130/0x130 [ 3107.199636] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3107.199647] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3107.219248] page allocation failure: order:0 [ 3107.220228] ion_alloc+0x204/0x810 [ 3107.225227] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 3107.229520] ? ion_dma_buf_release+0x40/0x40 [ 3107.229533] ? __might_fault+0x177/0x1b0 [ 3107.229543] ion_ioctl+0xea/0x1f0 [ 3107.229552] ? ion_query_heaps+0x360/0x360 [ 3107.234773] Mem-Info: [ 3107.240121] ? ion_query_heaps+0x360/0x360 [ 3107.240130] do_vfs_ioctl+0x75a/0xff0 [ 3107.240142] ? ioctl_preallocate+0x1a0/0x1a0 [ 3107.240153] ? lock_downgrade+0x740/0x740 [ 3107.244548] page allocation failure: order:0 [ 3107.247559] ? __fget+0x225/0x360 [ 3107.247568] ? do_vfs_ioctl+0xff0/0xff0 [ 3107.247582] ? security_file_ioctl+0x83/0xb0 [ 3107.252417] active_anon:79500 inactive_anon:37152 isolated_anon:0 [ 3107.252417] active_file:36 inactive_file:0 isolated_file:0 [ 3107.252417] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3107.252417] slab_reclaimable:14576 slab_unreclaimable:144777 [ 3107.252417] mapped:52669 shmem:39701 pagetables:20562 bounce:0 [ 3107.252417] free:13968 free_pcp:59 free_cma:0 [ 3107.256370] SyS_ioctl+0x7f/0xb0 [ 3107.261322] page allocation failure: order:0 [ 3107.265770] ? do_vfs_ioctl+0xff0/0xff0 [ 3107.265780] do_syscall_64+0x1d5/0x640 [ 3107.265793] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3107.265800] RIP: 0033:0x466459 [ 3107.265804] RSP: 002b:00007f61587e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3107.265812] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3107.265816] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3107.265820] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3107.265824] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3107.265828] R13: 00007ffed7f6205f R14: 00007f61587e7300 R15: 0000000000022000 [ 3107.266031] warn_alloc_show_mem: 3 callbacks suppressed [ 3107.266033] Mem-Info: [ 3107.282268] (null) [ 3107.284683] active_anon:79500 inactive_anon:37152 isolated_anon:0 [ 3107.284683] active_file:36 inactive_file:0 isolated_file:0 [ 3107.284683] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3107.284683] slab_reclaimable:14576 slab_unreclaimable:144777 [ 3107.284683] mapped:52669 shmem:39701 pagetables:20562 bounce:0 [ 3107.284683] free:13968 free_pcp:59 free_cma:0 [ 3107.290924] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 3107.295478] Node 0 active_anon:243704kB inactive_anon:109044kB active_file:128kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:165880kB dirty:0kB writeback:0kB shmem:113852kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 176128kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3107.304139] Node 0 active_anon:243704kB inactive_anon:109044kB active_file:128kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:165880kB dirty:0kB writeback:0kB shmem:113852kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 176128kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3107.306443] Node 1 active_anon:74296kB inactive_anon:39564kB active_file:16kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44796kB dirty:0kB writeback:0kB shmem:44952kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3107.312394] syz-executor.2 cpuset= [ 3107.316207] Node 0 [ 3107.324882] (null) [ 3107.334090] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 3107.336749] Node 1 active_anon:74296kB inactive_anon:39564kB active_file:16kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44796kB dirty:0kB writeback:0kB shmem:44952kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3107.340693] (null) [ 3107.344266] Node 0 [ 3107.350444] syz-executor.0 cpuset= [ 3107.356748] / [ 3107.695765] / [ 3107.699940] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:172kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3107.711698] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:172kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3107.739623] lowmem_reserve[]: [ 3107.755809] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 3107.755834] CPU: 0 PID: 8106 Comm: syz-executor.2 Not tainted 4.14.230-syzkaller #0 [ 3107.755840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3107.755844] Call Trace: [ 3107.755865] dump_stack+0x1b2/0x281 [ 3107.755878] warn_alloc.cold+0x96/0x1cc [ 3107.755889] ? zone_watermark_ok_safe+0x220/0x220 [ 3107.755899] ? usleep_range+0x130/0x130 [ 3107.755910] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3107.769980] 0 [ 3107.773101] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3107.782598] 2717 [ 3107.785291] ? run_timer_softirq+0x5a0/0x5a0 [ 3107.788919] 2718 [ 3107.792868] __alloc_pages_nodemask+0x2127/0x2720 [ 3107.797700] 2718 [ 3107.801665] ? lock_acquire+0x170/0x3f0 [ 3107.806845] 2718 [ 3107.808827] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3107.815937] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3107.820358] Node 0 [ 3107.822478] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3107.827421] DMA32 free:18064kB min:36200kB low:45248kB high:54296kB active_anon:243532kB inactive_anon:108988kB active_file:28kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11296kB pagetables:14760kB bounce:0kB free_pcp:32kB local_pcp:32kB free_cma:0kB [ 3107.829625] alloc_pages_current+0x155/0x260 [ 3107.833803] lowmem_reserve[]: [ 3107.835873] ion_page_pool_alloc+0x118/0x1b0 [ 3107.840924] 0 [ 3107.845543] ion_system_heap_allocate+0x133/0x8c0 [ 3107.847778] 0 [ 3107.853658] ? ion_alloc+0x187/0x810 [ 3107.882699] 0 [ 3107.887178] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3107.887188] ? ion_system_contig_heap_create+0x130/0x130 [ 3107.887203] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3107.887214] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3107.887225] ion_alloc+0x204/0x810 [ 3107.890415] 0 [ 3107.895267] ? ion_dma_buf_release+0x40/0x40 [ 3107.897167] 0 [ 3107.902210] ? __might_fault+0x177/0x1b0 [ 3107.907928] ion_ioctl+0xea/0x1f0 [ 3107.907937] ? ion_query_heaps+0x360/0x360 [ 3107.907948] ? ion_query_heaps+0x360/0x360 [ 3107.907958] do_vfs_ioctl+0x75a/0xff0 [ 3107.909857] Node 0 [ 3107.915564] ? ioctl_preallocate+0x1a0/0x1a0 [ 3107.921477] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3107.926886] ? lock_downgrade+0x740/0x740 [ 3107.926899] ? __fget+0x225/0x360 [ 3107.926909] ? do_vfs_ioctl+0xff0/0xff0 [ 3107.932083] lowmem_reserve[]: [ 3107.935703] ? security_file_ioctl+0x83/0xb0 [ 3107.935713] SyS_ioctl+0x7f/0xb0 [ 3107.937515] 0 [ 3107.941907] ? do_vfs_ioctl+0xff0/0xff0 [ 3107.943690] 0 [ 3107.947828] do_syscall_64+0x1d5/0x640 [ 3107.947843] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3107.947851] RIP: 0033:0x466459 [ 3107.947858] RSP: 002b:00007fc87a81d188 EFLAGS: 00000246 [ 3107.951297] 0 [ 3107.955679] ORIG_RAX: 0000000000000010 [ 3107.955686] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3107.960010] 0 [ 3107.964038] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3107.967022] 0 [ 3107.971379] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3108.001237] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3108.001244] R13: 00007ffd20e1ce3f R14: 00007fc87a81d300 R15: 0000000000022000 [ 3108.004850] Node 1 [ 3108.009685] lowmem_reserve[]: [ 3108.013710] Normal free:26848kB min:53696kB low:67120kB high:80544kB active_anon:74296kB inactive_anon:39564kB active_file:12kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21984kB pagetables:67356kB bounce:0kB free_pcp:204kB local_pcp:84kB free_cma:0kB [ 3108.016601] 0 [ 3108.031033] lowmem_reserve[]: [ 3108.032050] 2717 [ 3108.044396] 0 [ 3108.046216] 2718 [ 3108.048125] 0 0 0 0 [ 3108.048140] Node 0 DMA: 1*4kB (E) 12*8kB (UME) 9*16kB (UME) 7*32kB (UME) 4*64kB (ME) 2*128kB (UE) 5*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10964kB [ 3108.049010] Node 0 DMA32: 1308*4kB (UME) 336*8kB (ME) 153*16kB (UME) 133*32kB (UE) 20*64kB [ 3108.053243] 2718 [ 3108.068173] (U) [ 3108.073479] 2718 [ 3108.087003] 2*128kB [ 3108.094413] (U) [ 3108.096640] Node 0 [ 3108.107016] mems_allowed=0-1 [ 3108.132917] DMA32 free:18208kB min:36200kB low:45248kB high:54296kB active_anon:243496kB inactive_anon:108988kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11296kB pagetables:14760kB bounce:0kB free_pcp:32kB local_pcp:0kB free_cma:0kB [ 3108.138113] 0*256kB [ 3108.143076] lowmem_reserve[]: [ 3108.143592] 0*512kB [ 3108.166887] 0 [ 3108.171187] CPU: 1 PID: 8110 Comm: syz-executor.2 Not tainted 4.14.230-syzkaller #0 [ 3108.172918] 0 [ 3108.175102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3108.182835] 0 [ 3108.185063] Call Trace: [ 3108.222446] 0 [ 3108.222676] dump_stack+0x1b2/0x281 [ 3108.224571] 0 [ 3108.232356] warn_alloc.cold+0x96/0x1cc [ 3108.232368] ? zone_watermark_ok_safe+0x220/0x220 [ 3108.232378] ? usleep_range+0x130/0x130 [ 3108.232385] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3108.232396] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3108.232406] ? run_timer_softirq+0x5a0/0x5a0 [ 3108.232420] __alloc_pages_nodemask+0x2127/0x2720 [ 3108.232434] ? lock_acquire+0x170/0x3f0 [ 3108.243726] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3108.243735] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3108.243749] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3108.243766] alloc_pages_current+0x155/0x260 [ 3108.243777] ion_page_pool_alloc+0x118/0x1b0 [ 3108.243786] ion_system_heap_allocate+0x133/0x8c0 [ 3108.243794] ? ion_alloc+0x187/0x810 [ 3108.243804] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3108.243813] ? ion_system_contig_heap_create+0x130/0x130 [ 3108.243828] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3108.243839] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3108.252965] Node 0 [ 3108.253698] ion_alloc+0x204/0x810 [ 3108.255486] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3108.259534] ? ion_dma_buf_release+0x40/0x40 [ 3108.259545] ? __might_fault+0x177/0x1b0 [ 3108.259555] ion_ioctl+0xea/0x1f0 [ 3108.259563] ? ion_query_heaps+0x360/0x360 [ 3108.259577] ? ion_query_heaps+0x360/0x360 [ 3108.264572] lowmem_reserve[]: [ 3108.268563] do_vfs_ioctl+0x75a/0xff0 [ 3108.268574] ? ioctl_preallocate+0x1a0/0x1a0 [ 3108.268583] ? lock_downgrade+0x740/0x740 [ 3108.268594] ? __fget+0x225/0x360 [ 3108.268603] ? do_vfs_ioctl+0xff0/0xff0 [ 3108.268614] ? security_file_ioctl+0x83/0xb0 [ 3108.268622] SyS_ioctl+0x7f/0xb0 [ 3108.268629] ? do_vfs_ioctl+0xff0/0xff0 [ 3108.268640] do_syscall_64+0x1d5/0x640 [ 3108.268655] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3108.268663] RIP: 0033:0x466459 [ 3108.268667] RSP: 002b:00007fc87a7fc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3108.268677] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 3108.268685] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3108.281564] 0 [ 3108.283859] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3108.291096] 0 [ 3108.293186] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 3108.303724] 0 [ 3108.308602] R13: 00007ffd20e1ce3f R14: 00007fc87a7fc300 R15: 0000000000022000 [ 3108.317069] 0*1024kB [ 3108.319969] 0 [ 3108.325976] 1*2048kB [ 3108.326281] 0 [ 3108.337551] (M) [ 3108.342892] 0*4096kB [ 3108.347960] Node 1 Normal free:26860kB min:53696kB low:67120kB high:80544kB active_anon:74232kB inactive_anon:39564kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21984kB pagetables:67352kB bounce:0kB free_pcp:204kB local_pcp:120kB free_cma:0kB [ 3108.347981] lowmem_reserve[]: 0 0 0 0 0 [ 3108.348001] Node 0 DMA: 1*4kB (E) 12*8kB (UME) 9*16kB (UME) 7*32kB (UME) 4*64kB (ME) 2*128kB (UE) 5*256kB (UME) [ 3108.359184] = 18208kB [ 3108.381428] Mem-Info: [ 3108.392409] Node 0 [ 3108.393079] active_anon:79474 inactive_anon:37152 isolated_anon:0 [ 3108.393079] active_file:12 inactive_file:12 isolated_file:0 [ 3108.393079] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3108.393079] slab_reclaimable:14567 slab_unreclaimable:144751 [ 3108.393079] mapped:52669 shmem:39701 pagetables:20561 bounce:0 [ 3108.393079] free:14008 free_pcp:59 free_cma:0 [ 3108.403882] Normal: [ 3108.406628] Node 0 active_anon:243664kB inactive_anon:109044kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:165880kB dirty:0kB writeback:0kB shmem:113852kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 174080kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3108.412890] 0*4kB [ 3108.413816] Node 1 active_anon:74232kB inactive_anon:39564kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44796kB dirty:0kB writeback:0kB shmem:44952kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3108.423604] 0*8kB [ 3108.426841] mems_allowed=0-1 [ 3108.434699] 0*16kB [ 3108.434875] CPU: 0 PID: 8101 Comm: syz-executor.0 Not tainted 4.14.230-syzkaller #0 [ 3108.439459] 0*32kB [ 3108.443722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3108.443727] Call Trace: [ 3108.449052] 0*64kB [ 3108.452198] dump_stack+0x1b2/0x281 [ 3108.460020] 0*128kB [ 3108.467610] warn_alloc.cold+0x96/0x1cc [ 3108.467625] ? zone_watermark_ok_safe+0x220/0x220 [ 3108.475410] 0*256kB [ 3108.477744] ? usleep_range+0x130/0x130 [ 3108.477754] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3108.477765] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3108.477774] ? run_timer_softirq+0x5a0/0x5a0 [ 3108.477791] __alloc_pages_nodemask+0x2127/0x2720 [ 3108.485453] 0*512kB [ 3108.487344] ? lock_acquire+0x170/0x3f0 [ 3108.487359] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3108.487375] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3108.495164] 0*1024kB [ 3108.496957] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3108.496975] ? alloc_pages_current+0xe3/0x260 [ 3108.516693] 0*2048kB [ 3108.518359] alloc_pages_current+0x155/0x260 [ 3108.576682] 0*4096kB [ 3108.606070] ion_page_pool_alloc+0x118/0x1b0 [ 3108.606080] ion_system_heap_allocate+0x133/0x8c0 [ 3108.606092] ? ion_alloc+0x187/0x810 [ 3108.646682] = 0kB [ 3108.672146] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3108.672158] ? ion_system_contig_heap_create+0x130/0x130 [ 3108.672167] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3108.672178] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3108.672191] ion_alloc+0x204/0x810 [ 3108.696676] Node 1 [ 3108.700312] ? ion_dma_buf_release+0x40/0x40 [ 3108.703019] Normal: [ 3108.705486] ? __might_fault+0x177/0x1b0 [ 3108.726672] 133*4kB [ 3108.728172] ion_ioctl+0xea/0x1f0 [ 3108.733427] (UM) [ 3108.738435] ? ion_query_heaps+0x360/0x360 [ 3108.738447] ? ion_query_heaps+0x360/0x360 [ 3108.738456] do_vfs_ioctl+0x75a/0xff0 [ 3108.738468] ? ioctl_preallocate+0x1a0/0x1a0 [ 3108.756664] 73*8kB [ 3108.760411] ? lock_downgrade+0x740/0x740 [ 3108.764886] (UM) [ 3108.767492] ? __fget+0x225/0x360 [ 3108.767502] ? do_vfs_ioctl+0xff0/0xff0 [ 3108.767512] ? security_file_ioctl+0x83/0xb0 [ 3108.767522] SyS_ioctl+0x7f/0xb0 [ 3108.796680] 39*16kB [ 3108.797522] ? do_vfs_ioctl+0xff0/0xff0 [ 3108.801414] (UM) [ 3108.803480] do_syscall_64+0x1d5/0x640 [ 3108.816657] 665*32kB [ 3108.820501] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3108.825663] (UM) [ 3108.829292] RIP: 0033:0x466459 [ 3108.829296] RSP: 002b:00007f1ef2095188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3108.829306] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3108.829310] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3108.829315] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3108.829319] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3108.829326] R13: 00007fffa779c11f R14: 00007f1ef2095300 R15: 0000000000022000 [ 3108.846656] 34*64kB [ 3108.851300] 3*512kB [ 3108.881544] Node 0 [ 3108.884162] (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10964kB [ 3108.884186] Node 0 DMA32: 1286*4kB (UME) 8215*8kB (UME) [ 3108.895778] (UM) [ 3108.899980] 5155*16kB (UME) 1122*32kB (UE) 19*64kB (U) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 192768kB [ 3108.900029] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB [ 3108.909990] 5*128kB [ 3108.914148] 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3108.914175] Node 1 Normal: 154*4kB (UM) 82*8kB (UM) 41*16kB (UM) 666*32kB (UM) 34*64kB (UM) 5*128kB (M) 4*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27080kB [ 3108.914237] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3108.914242] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3108.914248] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3108.914254] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3108.914258] 40836 total pagecache pages [ 3108.914266] 0 pages in swap cache [ 3108.914271] Swap cache stats: add 0, delete 0, find 0/0 [ 3108.914274] Free swap = 0kB [ 3108.914276] Total swap = 0kB [ 3108.914282] 2097051 pages RAM [ 3108.914285] 0 pages HighMem/MovableOnly [ 3108.914287] 363848 pages reserved [ 3108.914291] 0 pages cma reserved [ 3108.985055] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3109.073786] (M) [ 3109.107732] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3109.137083] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3109.149716] Node 0 DMA32 free:232396kB min:36200kB low:45248kB high:54296kB active_anon:243496kB inactive_anon:108988kB active_file:40kB inactive_file:5540kB unevictable:0kB writepending:148kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11296kB pagetables:14760kB bounce:0kB free_pcp:688kB local_pcp:0kB free_cma:0kB [ 3109.181903] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 3109.187270] CPU: 0 PID: 8122 Comm: syz-executor.4 Not tainted 4.14.230-syzkaller #0 [ 3109.195592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3109.205231] Call Trace: [ 3109.206635] 4*256kB (M) 0*512kB [ 3109.207827] dump_stack+0x1b2/0x281 [ 3109.207840] warn_alloc.cold+0x96/0x1cc [ 3109.211561] 0*1024kB [ 3109.215451] ? zone_watermark_ok_safe+0x220/0x220 [ 3109.226636] 0*2048kB 0*4096kB = 26860kB [ 3109.227310] __alloc_pages_nodemask+0x2127/0x2720 [ 3109.231283] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3109.236652] ? lock_acquire+0x170/0x3f0 [ 3109.236663] ? lock_acquire+0x170/0x3f0 [ 3109.236677] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3109.236693] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3109.236705] ? __mutex_unlock_slowpath+0x75/0x770 [ 3109.257426] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3109.259282] alloc_pages_current+0x155/0x260 [ 3109.265062] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3109.269957] ion_page_pool_alloc+0x118/0x1b0 [ 3109.269966] ion_system_heap_allocate+0x133/0x8c0 [ 3109.269978] ? _raw_spin_unlock+0x29/0x40 [ 3109.269986] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3109.269994] ? ion_system_contig_heap_create+0x130/0x130 [ 3109.270005] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3109.306631] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3109.311396] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3109.326906] 41132 total pagecache pages [ 3109.331423] ion_alloc+0x27a/0x810 [ 3109.336427] 0 pages in swap cache [ 3109.340486] ? ion_dma_buf_release+0x40/0x40 [ 3109.340498] ? __might_fault+0x177/0x1b0 [ 3109.340509] ion_ioctl+0xea/0x1f0 [ 3109.340517] ? ion_query_heaps+0x360/0x360 [ 3109.340528] ? ion_query_heaps+0x360/0x360 [ 3109.340536] do_vfs_ioctl+0x75a/0xff0 [ 3109.340547] ? ioctl_preallocate+0x1a0/0x1a0 [ 3109.356631] Swap cache stats: add 0, delete 0, find 0/0 [ 3109.360149] ? lock_downgrade+0x740/0x740 [ 3109.364469] Free swap = 0kB [ 3109.368866] ? __fget+0x225/0x360 [ 3109.368875] ? do_vfs_ioctl+0xff0/0xff0 [ 3109.368886] ? security_file_ioctl+0x83/0xb0 [ 3109.368896] SyS_ioctl+0x7f/0xb0 [ 3109.368905] ? do_vfs_ioctl+0xff0/0xff0 [ 3109.368915] do_syscall_64+0x1d5/0x640 [ 3109.386630] Total swap = 0kB [ 3109.387136] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3109.390492] 2097051 pages RAM [ 3109.394513] RIP: 0033:0x466459 [ 3109.416620] 0 pages HighMem/MovableOnly [ 3109.419391] RSP: 002b:00007f61587e7188 EFLAGS: 00000246 [ 3109.425281] 363848 pages reserved [ 3109.428546] ORIG_RAX: 0000000000000010 [ 3109.428552] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3109.428556] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3109.428560] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3109.428564] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3109.428569] R13: 00007ffed7f6205f R14: 00007f61587e7300 R15: 0000000000022000 [ 3109.429890] lowmem_reserve[]: [ 3109.446761] 0 pages cma reserved [ 3109.449810] 0 [ 3109.476638] Out of memory (oom_kill_allocating_task): Kill process 8093 (systemd-journal) score 0 or sacrifice child [ 3109.480543] 0 [ 3109.506659] Killed process 8093 (systemd-journal) total-vm:46096kB, anon-rss:468kB, file-rss:4kB, shmem-rss:1760kB [ 3109.507996] 0 [ 3109.510909] oom_reaper: reaped process 8093 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1760kB [ 3109.520525] 0 0 [ 3109.520536] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3109.520554] lowmem_reserve[]: 0 0 0 0 0 [ 3109.566499] Node 1 Normal free:269316kB min:53696kB low:67120kB high:80544kB active_anon:74232kB inactive_anon:39564kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21984kB pagetables:67352kB bounce:0kB free_pcp:724kB local_pcp:0kB free_cma:0kB [ 3109.573389] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 3109.599200] lowmem_reserve[]: 0 0 0 0 0 [ 3109.608718] Node 0 DMA: 17*4kB (UE) 26*8kB (UME) 16*16kB (UME) 10*32kB (UME) 5*64kB (UME) 1*128kB (E) 4*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11028kB [ 3109.625962] Node 0 DMA32: 571*4kB (UE) 15153*8kB (UME) 10460*16kB (UME) 3739*32kB (UME) 3*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 410708kB [ 3109.642321] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3109.644369] warn_alloc_show_mem: 1 callbacks suppressed [ 3109.644373] Mem-Info: [ 3109.658221] Node 1 [ 3109.663824] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 3109.665968] Normal: [ 3109.672246] syz-executor.2: [ 3109.677962] 10129*4kB [ 3109.680758] page allocation failure: order:4 [ 3109.683358] (UM) 8212*8kB (UM) 5423*16kB (UM) 2990*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 288660kB [ 3109.683407] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3109.683413] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3109.683418] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3109.683423] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3109.683427] 41798 total pagecache pages [ 3109.683436] 0 pages in swap cache [ 3109.683444] Swap cache stats: add 0, delete 0, find 0/0 [ 3109.721454] active_anon:79374 inactive_anon:37152 isolated_anon:0 [ 3109.721454] active_file:62 inactive_file:1987 isolated_file:0 [ 3109.721454] unevictable:0 dirty:25 writeback:0 unstable:0 [ 3109.721454] slab_reclaimable:14567 slab_unreclaimable:144287 [ 3109.721454] mapped:53769 shmem:39701 pagetables:20561 bounce:0 [ 3109.721454] free:178413 free_pcp:13 free_cma:0 [ 3109.721469] Node 0 active_anon:243264kB inactive_anon:109044kB active_file:240kB inactive_file:7940kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:170280kB dirty:100kB writeback:0kB shmem:113852kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 174080kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3109.721487] Node 1 active_anon:74232kB inactive_anon:39564kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44796kB dirty:0kB writeback:0kB shmem:44952kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3109.731769] systemd[1]: Stopped Journal Service. [ 3109.806608] Node 0 [ 3109.820506] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3109.820515] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 3109.820537] CPU: 0 PID: 8110 Comm: syz-executor.2 Not tainted 4.14.230-syzkaller #0 [ 3109.820541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3109.820545] Call Trace: [ 3109.820561] dump_stack+0x1b2/0x281 [ 3109.820575] warn_alloc.cold+0x96/0x1cc [ 3109.820587] ? zone_watermark_ok_safe+0x220/0x220 [ 3109.820609] __alloc_pages_nodemask+0x2127/0x2720 [ 3109.820621] ? lock_acquire+0x170/0x3f0 [ 3109.820634] ? lock_acquire+0x170/0x3f0 [ 3109.820656] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3109.820674] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3109.820687] ? __mutex_unlock_slowpath+0x75/0x770 [ 3109.820702] alloc_pages_current+0x155/0x260 [ 3109.820716] ion_page_pool_alloc+0x118/0x1b0 [ 3109.820725] ion_system_heap_allocate+0x133/0x8c0 [ 3109.820736] ? _raw_spin_unlock+0x29/0x40 [ 3109.820745] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3109.820754] ? ion_system_contig_heap_create+0x130/0x130 [ 3109.820764] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3109.820786] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3109.820795] ion_alloc+0x27a/0x810 [ 3109.820809] ? ion_dma_buf_release+0x40/0x40 [ 3109.820819] ? __might_fault+0x177/0x1b0 [ 3109.820831] ion_ioctl+0xea/0x1f0 [ 3109.820839] ? ion_query_heaps+0x360/0x360 [ 3109.820850] ? ion_query_heaps+0x360/0x360 [ 3109.820860] do_vfs_ioctl+0x75a/0xff0 [ 3109.820871] ? ioctl_preallocate+0x1a0/0x1a0 [ 3109.820877] ? lock_downgrade+0x740/0x740 [ 3109.820890] ? __fget+0x225/0x360 [ 3109.820898] ? do_vfs_ioctl+0xff0/0xff0 [ 3109.820908] ? security_file_ioctl+0x83/0xb0 [ 3109.820922] SyS_ioctl+0x7f/0xb0 [ 3110.025580] ? do_vfs_ioctl+0xff0/0xff0 [ 3110.029862] do_syscall_64+0x1d5/0x640 [ 3110.033871] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3110.039055] RIP: 0033:0x466459 [ 3110.042685] RSP: 002b:00007fc87a7fc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3110.050563] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 3110.057942] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3110.065288] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3110.072770] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 3110.080207] R13: 00007ffd20e1ce3f R14: 00007fc87a7fc300 R15: 0000000000022000 [ 3110.088400] DMA free:10988kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3110.089187] Free swap = 0kB [ 3110.118711] Total swap = 0kB [ 3110.121950] 2097051 pages RAM [ 3110.125489] 0 pages HighMem/MovableOnly [ 3110.130543] 363848 pages reserved [ 3110.134547] 0 pages cma reserved [ 3110.156605] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3110.162112] Node 0 DMA32 free:349896kB min:36200kB low:45248kB high:54296kB active_anon:243100kB inactive_anon:108988kB active_file:496kB inactive_file:8944kB unevictable:0kB writepending:148kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11328kB pagetables:14912kB bounce:0kB free_pcp:328kB local_pcp:212kB free_cma:0kB [ 3110.164949] systemd[1]: Starting Journal Service... [ 3110.271383] lowmem_reserve[]: 0 0 0 0 0 [ 3110.276169] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3110.307892] lowmem_reserve[]: 0 0 0 0 0 [ 3110.314136] Node 1 Normal free:288588kB min:53696kB low:67120kB high:80544kB active_anon:74232kB inactive_anon:39564kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21984kB pagetables:67352kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3110.349564] lowmem_reserve[]: 0 0 0 0 0 [ 3110.354680] Node 0 DMA: 59*4kB (UE) 26*8kB (UME) 15*16kB (UME) 10*32kB (UME) 4*64kB (ME) 2*128kB (UE) 3*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10988kB [ 3110.377691] Node 0 DMA32: 3803*4kB (U) 2127*8kB (U) 10448*16kB (UE) 3854*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 322724kB [ 3110.398644] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3110.415355] Node 1 Normal: 10129*4kB (UM) 8210*8kB (UM) 5424*16kB (UM) 2989*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 288628kB [ 3110.435971] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3110.456791] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3110.472455] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3110.482368] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3110.510351] 42689 total pagecache pages [ 3110.514469] 0 pages in swap cache [ 3110.531980] Swap cache stats: add 0, delete 0, find 0/0 [ 3110.537877] Free swap = 0kB [ 3110.541181] Total swap = 0kB [ 3110.544471] 2097051 pages RAM [ 3110.566606] systemd-journald[8146]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 3110.570219] 0 pages HighMem/MovableOnly [ 3110.612435] 363848 pages reserved [ 3110.615916] 0 pages cma reserved [ 3110.690509] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3110.694331] systemd-journald[8146]: /dev/kmsg buffer overrun, some messages lost. [ 3110.720252] syz-executor.0 cpuset= [ 3110.720256] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 3110.724184] / mems_allowed=0-1 [ 3110.756598] (null) [ 3110.758985] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 3110.764395] CPU: 0 PID: 8106 Comm: syz-executor.2 Not tainted 4.14.230-syzkaller #0 [ 3110.772723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3110.782162] Call Trace: [ 3110.784839] dump_stack+0x1b2/0x281 [ 3110.788464] warn_alloc.cold+0x96/0x1cc [ 3110.792623] ? zone_watermark_ok_safe+0x220/0x220 [ 3110.797948] __alloc_pages_nodemask+0x2127/0x2720 [ 3110.802994] ? lock_acquire+0x170/0x3f0 [ 3110.807101] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3110.811977] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3110.817807] ? __mutex_unlock_slowpath+0x75/0x770 [ 3110.823153] alloc_pages_current+0x155/0x260 [ 3110.827898] ion_page_pool_alloc+0x118/0x1b0 [ 3110.832294] ion_system_heap_allocate+0x133/0x8c0 [ 3110.837342] ? _raw_spin_unlock+0x29/0x40 [ 3110.841579] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3110.846507] ? ion_system_contig_heap_create+0x130/0x130 [ 3110.851962] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3110.857065] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3110.861987] ion_alloc+0x27a/0x810 [ 3110.865694] ? ion_dma_buf_release+0x40/0x40 [ 3110.870359] ? __might_fault+0x177/0x1b0 [ 3110.874424] ion_ioctl+0xea/0x1f0 [ 3110.877879] ? ion_query_heaps+0x360/0x360 [ 3110.882211] ? ion_query_heaps+0x360/0x360 [ 3110.886453] do_vfs_ioctl+0x75a/0xff0 [ 3110.890821] ? ioctl_preallocate+0x1a0/0x1a0 [ 3110.895538] ? lock_downgrade+0x740/0x740 [ 3110.900472] ? __fget+0x225/0x360 [ 3110.904356] ? do_vfs_ioctl+0xff0/0xff0 [ 3110.908432] ? security_file_ioctl+0x83/0xb0 [ 3110.912953] SyS_ioctl+0x7f/0xb0 [ 3110.916350] ? do_vfs_ioctl+0xff0/0xff0 [ 3110.920423] do_syscall_64+0x1d5/0x640 [ 3110.924399] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3110.929837] RIP: 0033:0x466459 [ 3110.933025] RSP: 002b:00007fc87a81d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3110.941137] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3110.949127] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3110.956484] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3110.964542] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3110.971949] R13: 00007ffd20e1ce3f R14: 00007fc87a81d300 R15: 0000000000022000 [ 3110.979884] CPU: 1 PID: 8101 Comm: syz-executor.0 Not tainted 4.14.230-syzkaller #0 [ 3110.987936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3110.998530] Call Trace: [ 3111.001141] dump_stack+0x1b2/0x281 [ 3111.004866] warn_alloc.cold+0x96/0x1cc [ 3111.009120] ? zone_watermark_ok_safe+0x220/0x220 [ 3111.014990] __alloc_pages_nodemask+0x2127/0x2720 [ 3111.020077] ? io_schedule_timeout+0x140/0x140 [ 3111.024866] ? lock_acquire+0x170/0x3f0 [ 3111.028957] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3111.034006] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3111.039554] ? __mutex_unlock_slowpath+0x75/0x770 [ 3111.044418] alloc_pages_current+0x155/0x260 [ 3111.049191] ion_page_pool_alloc+0x118/0x1b0 [ 3111.053608] ion_system_heap_allocate+0x133/0x8c0 [ 3111.059171] ? _raw_spin_unlock+0x29/0x40 [ 3111.063424] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3111.068387] ? ion_system_contig_heap_create+0x130/0x130 [ 3111.074254] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3111.079365] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3111.084221] ion_alloc+0x27a/0x810 [ 3111.087792] ? ion_dma_buf_release+0x40/0x40 [ 3111.092647] ? __might_fault+0x177/0x1b0 [ 3111.096709] ion_ioctl+0xea/0x1f0 [ 3111.100979] ? ion_query_heaps+0x360/0x360 [ 3111.105236] ? ion_query_heaps+0x360/0x360 [ 3111.109600] do_vfs_ioctl+0x75a/0xff0 [ 3111.113654] ? ioctl_preallocate+0x1a0/0x1a0 [ 3111.118531] ? lock_downgrade+0x740/0x740 [ 3111.122953] ? __fget+0x225/0x360 [ 3111.126490] ? do_vfs_ioctl+0xff0/0xff0 [ 3111.130661] ? security_file_ioctl+0x83/0xb0 [ 3111.135636] SyS_ioctl+0x7f/0xb0 [ 3111.139369] ? do_vfs_ioctl+0xff0/0xff0 [ 3111.143519] do_syscall_64+0x1d5/0x640 [ 3111.147503] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3111.152962] RIP: 0033:0x466459 [ 3111.156354] RSP: 002b:00007f1ef2095188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3111.164154] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3111.171438] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3111.179479] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3111.186959] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3111.194406] R13: 00007fffa779c11f R14: 00007f1ef2095300 R15: 0000000000022000 [ 3111.306697] warn_alloc_show_mem: 2 callbacks suppressed [ 3111.306701] Mem-Info: [ 3111.314979] active_anon:79470 inactive_anon:39181 isolated_anon:0 [ 3111.314979] active_file:654 inactive_file:2405 isolated_file:0 [ 3111.314979] unevictable:0 dirty:43 writeback:0 unstable:0 [ 3111.314979] slab_reclaimable:14564 slab_unreclaimable:143976 [ 3111.314979] mapped:54483 shmem:41749 pagetables:20584 bounce:0 [ 3111.314979] free:40458 free_pcp:125 free_cma:0 [ 3111.397788] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 3111.426497] systemd-journal cpuset=/ mems_allowed=0-1 [ 3111.432297] CPU: 0 PID: 8146 Comm: systemd-journal Not tainted 4.14.230-syzkaller #0 [ 3111.436526] Node 0 active_anon:243720kB inactive_anon:117160kB active_file:3444kB inactive_file:3616kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:171836kB dirty:172kB writeback:0kB shmem:122044kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 174080kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3111.440554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3111.440559] Call Trace: [ 3111.440578] dump_stack+0x1b2/0x281 [ 3111.440591] dump_header+0x178/0x82f [ 3111.489911] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3111.495269] ? ___ratelimit+0x2cd/0x530 [ 3111.499234] oom_kill_process.cold+0x10/0xa40 [ 3111.504303] out_of_memory+0xe3e/0x1190 [ 3111.508364] ? oom_killer_disable+0x1c0/0x1c0 [ 3111.512933] ? mutex_trylock+0x152/0x1a0 [ 3111.516983] __alloc_pages_nodemask+0x23e1/0x2720 [ 3111.522111] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3111.527197] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3111.532834] ? debug_check_no_obj_freed+0x2c0/0x680 [ 3111.537942] ? cache_grow_begin+0x3f/0x700 [ 3111.542770] cache_grow_begin+0x91/0x700 [ 3111.546815] fallback_alloc+0x207/0x2c0 [ 3111.550891] kmem_cache_alloc+0x1e5/0x3c0 [ 3111.555284] getname_flags+0xc8/0x550 [ 3111.559259] user_path_at_empty+0x2a/0x50 [ 3111.563435] SyS_faccessat+0x21b/0x680 [ 3111.567780] ? SyS_fallocate+0x80/0x80 [ 3111.572032] ? do_syscall_64+0x4c/0x640 [ 3111.576192] ? SyS_faccessat+0x680/0x680 [ 3111.580410] do_syscall_64+0x1d5/0x640 [ 3111.584723] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3111.590530] RIP: 0033:0x7fb93d12b9c7 [ 3111.594481] RSP: 002b:00007fffe1e57608 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 3111.602425] RAX: ffffffffffffffda RBX: 00007fffe1e5a630 RCX: 00007fb93d12b9c7 [ 3111.610049] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055fcd0c539a3 [ 3111.618122] RBP: 00007fffe1e57750 R08: 000055fcd0c493e5 R09: 0000000000000018 [ 3111.625953] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 3111.633414] R13: 0000000000000000 R14: 000055fcd0f24d60 R15: 00007fffe1e57c40 [ 3111.650823] Mem-Info: [ 3111.655269] active_anon:79470 inactive_anon:39181 isolated_anon:0 [ 3111.655269] active_file:669 inactive_file:716 isolated_file:32 [ 3111.655269] unevictable:0 dirty:43 writeback:0 unstable:0 [ 3111.655269] slab_reclaimable:14564 slab_unreclaimable:143872 [ 3111.655269] mapped:53858 shmem:41749 pagetables:20584 bounce:0 [ 3111.655269] free:14051 free_pcp:86 free_cma:0 [ 3111.693631] Node 1 active_anon:74160kB inactive_anon:39564kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44796kB dirty:0kB writeback:0kB shmem:44952kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3111.695215] Node 0 active_anon:243720kB inactive_anon:117160kB active_file:2324kB inactive_file:2544kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:169936kB dirty:172kB writeback:0kB shmem:122044kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 174080kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3111.755411] Node 1 active_anon:74160kB inactive_anon:39564kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44796kB dirty:0kB writeback:0kB shmem:44952kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3111.784441] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3111.784462] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3111.784479] Node 0 DMA32 free:18372kB min:36200kB low:45248kB high:54296kB active_anon:243552kB inactive_anon:117104kB active_file:2980kB inactive_file:2660kB unevictable:0kB writepending:172kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11296kB pagetables:14852kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3111.784497] lowmem_reserve[]: 0 0 0 0 0 [ 3111.784514] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3111.784529] lowmem_reserve[]: 0 0 0 0 [ 3111.856238] Node 0 DMA free:10948kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3111.899934] 0 [ 3111.917595] lowmem_reserve[]: [ 3111.918738] Node 1 [ 3111.918740] 0 2717 [ 3111.921928] Normal free:26840kB min:53696kB low:67120kB high:80544kB active_anon:74160kB inactive_anon:39564kB active_file:8kB inactive_file:32kB unevictable:0kB writepending:24kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21984kB pagetables:67352kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3111.924140] 2718 2718 [ 3111.926364] lowmem_reserve[]: 0 0 0 0 0 [ 3111.966220] Node 0 DMA: 33*4kB (UE) 34*8kB (UME) 15*16kB (UME) 10*32kB (UME) 4*64kB (ME) 2*128kB (UE) 3*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10948kB [ 3111.984903] 2718 [ 3111.985567] Node 0 DMA32: 1297*4kB (ME) 346*8kB (UME) 17*16kB (UM) 302*32kB (UME) 4*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18148kB [ 3111.989812] Node 0 [ 3112.004186] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3112.020169] DMA32 free:17560kB min:36200kB low:45248kB high:54296kB active_anon:243572kB inactive_anon:117120kB active_file:452kB inactive_file:460kB unevictable:0kB writepending:168kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11296kB pagetables:14764kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3112.027048] Node 1 [ 3112.052015] lowmem_reserve[]: 0 0 0 0 0 [ 3112.056485] Normal: 22*4kB (UM) 16*8kB (UM) 4*16kB (M) 791*32kB [ 3112.058400] Node 0 [ 3112.058406] (UM) [ 3112.064770] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3112.070563] 12*64kB [ 3112.099755] lowmem_reserve[]: 0 0 0 0 0 [ 3112.106344] Node 1 Normal free:26840kB min:53696kB low:67120kB high:80544kB active_anon:74160kB inactive_anon:39564kB active_file:8kB inactive_file:32kB unevictable:0kB writepending:24kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21984kB pagetables:67352kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3112.119905] (U) [ 3112.141661] lowmem_reserve[]: 0 0 0 0 0 [ 3112.148087] Node 0 DMA: 33*4kB (UE) 34*8kB (UME) 15*16kB (UME) 10*32kB (UME) 4*64kB (ME) 2*128kB (UE) 3*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10948kB [ 3112.154660] 2*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26872kB [ 3112.170275] Node 0 DMA32: 1297*4kB (ME) 346*8kB (UME) 17*16kB (UM) 302*32kB (UME) 4*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18148kB [ 3112.172411] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3112.192683] Node 0 Normal: [ 3112.196747] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3112.196756] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3112.199682] 0*4kB [ 3112.209435] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3112.225398] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3112.245458] 41852 total pagecache pages [ 3112.247135] Node 1 Normal: 22*4kB (UM) 16*8kB (UM) 4*16kB (M) 791*32kB (UM) 12*64kB (U) 2*128kB (U) 1*256kB (U) [ 3112.249501] 0 pages in swap cache [ 3112.249503] 0*512kB 0*1024kB [ 3112.260356] Swap cache stats: add 0, delete 0, find 0/0 [ 3112.271518] 0*2048kB 0*4096kB = 26872kB [ 3112.276431] Free swap = 0kB [ 3112.278360] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3112.279598] Total swap = 0kB [ 3112.296318] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3112.303635] 2097051 pages RAM [ 3112.307190] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3112.308491] 0 pages HighMem/MovableOnly [ 3112.321914] 363848 pages reserved [ 3112.323632] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3112.325367] 0 pages cma reserved [ 3112.334413] 41852 total pagecache pages [ 3112.334421] 0 pages in swap cache [ 3112.334425] Swap cache stats: add 0, delete 0, find 0/0 [ 3112.334428] Free swap = 0kB [ 3112.334431] Total swap = 0kB [ 3112.334438] 2097051 pages RAM [ 3112.362842] 0 pages HighMem/MovableOnly [ 3112.367080] 363848 pages reserved [ 3112.370528] 0 pages cma reserved [ 3112.373986] Out of memory (oom_kill_allocating_task): Kill process 8146 (systemd-journal) score 0 or sacrifice child [ 3112.384832] Killed process 8146 (systemd-journal) total-vm:46096kB, anon-rss:444kB, file-rss:0kB, shmem-rss:1052kB [ 3112.399956] oom_reaper: reaped process 8146 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1052kB [ 3112.477854] rs:main Q:Reg invoked oom-killer: gfp_mask=0x1c200ca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), nodemask=(null), order=0, oom_score_adj=0 [ 3112.538780] rs:main Q:Reg cpuset=/ mems_allowed=0-1 [ 3112.545025] CPU: 1 PID: 7942 Comm: rs:main Q:Reg Not tainted 4.14.230-syzkaller #0 [ 3112.552894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3112.562345] Call Trace: [ 3112.564951] dump_stack+0x1b2/0x281 [ 3112.568756] dump_header+0x178/0x82f [ 3112.572548] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3112.577763] ? ___ratelimit+0x2cd/0x530 [ 3112.582180] oom_kill_process.cold+0x10/0xa40 [ 3112.587305] out_of_memory+0xe3e/0x1190 [ 3112.592447] ? oom_killer_disable+0x1c0/0x1c0 [ 3112.597810] ? mutex_trylock+0x152/0x1a0 [ 3112.601971] __alloc_pages_nodemask+0x23e1/0x2720 [ 3112.607274] ? trace_hardirqs_on+0x10/0x10 [ 3112.612087] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3112.617025] ? __radix_tree_lookup+0x1b5/0x2e0 [ 3112.621975] alloc_pages_current+0x155/0x260 [ 3112.626701] pagecache_get_page+0x3f5/0xab0 [ 3112.631334] grab_cache_page_write_begin+0x63/0x90 [ 3112.637354] ext4_da_write_begin+0x249/0xe70 [ 3112.641860] ? __ext4_journal_stop+0xe7/0x1b0 [ 3112.646363] ? ext4_write_begin+0x1260/0x1260 [ 3112.650855] ? balance_dirty_pages_ratelimited+0x8ad/0x1800 [ 3112.657684] generic_perform_write+0x1c9/0x420 [ 3112.662454] ? __mnt_drop_write_file+0x5f/0x90 [ 3112.667250] ? filemap_page_mkwrite+0x2d0/0x2d0 [ 3112.672183] ? current_time+0xb0/0xb0 [ 3112.675987] ? ext4_file_write_iter+0x1cc/0xd20 [ 3112.676428] syz-executor.2: page allocation failure: order:0 [ 3112.680790] __generic_file_write_iter+0x227/0x590 [ 3112.680804] ext4_file_write_iter+0x276/0xd20 [ 3112.693852] syz-executor.4: [ 3112.696567] ? aa_file_perm+0x304/0xab0 [ 3112.696578] ? ext4_file_read_iter+0x330/0x330 [ 3112.696588] ? trace_hardirqs_on+0x10/0x10 [ 3112.696597] ? iov_iter_init+0xa6/0x1c0 [ 3112.696606] __vfs_write+0x44c/0x630 [ 3112.696616] ? kernel_read+0x110/0x110 [ 3112.700405] page allocation failure: order:0 [ 3112.704374] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3112.721628] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 3112.725271] vfs_write+0x17f/0x4d0 [ 3112.737962] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 3112.743273] SyS_write+0xf2/0x210 [ 3112.753409] (null) [ 3112.753930] ? SyS_read+0x210/0x210 [ 3112.757485] syz-executor.2: [ 3112.759591] ? __do_page_fault+0x159/0xad0 [ 3112.763541] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 3112.766577] ? do_syscall_64+0x4c/0x640 [ 3112.766587] ? SyS_read+0x210/0x210 [ 3112.766594] do_syscall_64+0x1d5/0x640 [ 3112.766607] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3112.766614] RIP: 0033:0x7f75157e61cd [ 3112.766618] RSP: 002b:00007f7512da1590 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 3112.766626] RAX: ffffffffffffffda RBX: 00007f7508022ac0 RCX: 00007f75157e61cd [ 3112.766630] RDX: 0000000000000d92 RSI: 00007f7508022ac0 RDI: 0000000000000006 [ 3112.766634] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f7508022bc0 [ 3112.766638] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f7508022840 [ 3112.766642] R13: 00007f7512da15b0 R14: 000055a4165373a0 R15: 0000000000000d92 [ 3112.808310] Mem-Info: [ 3112.833976] syz-executor.2 cpuset= [ 3112.840463] syz-executor.0: [ 3112.848563] (null) [ 3112.853762] page allocation failure: order:0 [ 3112.854138] syz-executor.4 cpuset= [ 3112.857388] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3112.866212] / [ 3112.869410] syz-executor.0 cpuset= [ 3112.875920] / [ 3112.877729] active_anon:79360 inactive_anon:39185 isolated_anon:0 [ 3112.877729] active_file:15 inactive_file:16 isolated_file:0 [ 3112.877729] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3112.877729] slab_reclaimable:14556 slab_unreclaimable:143875 [ 3112.877729] mapped:52543 shmem:41749 pagetables:20562 bounce:0 [ 3112.877729] free:13746 free_pcp:33 free_cma:0 [ 3112.888976] mems_allowed=0-1 [ 3112.923616] / mems_allowed=0-1 [ 3112.925133] mems_allowed=0-1 [ 3112.927228] CPU: 1 PID: 8101 Comm: syz-executor.0 Not tainted 4.14.230-syzkaller #0 [ 3112.938429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3112.949006] Call Trace: [ 3112.951843] dump_stack+0x1b2/0x281 [ 3112.955486] warn_alloc.cold+0x96/0x1cc [ 3112.959738] ? zone_watermark_ok_safe+0x220/0x220 [ 3112.959995] (null) [ 3112.964755] ? usleep_range+0x130/0x130 [ 3112.970966] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3112.976420] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3112.981551] ? run_timer_softirq+0x5a0/0x5a0 [ 3112.986443] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 3112.986593] __alloc_pages_nodemask+0x2127/0x2720 [ 3112.986610] ? lock_acquire+0x170/0x3f0 [ 3113.002557] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3113.007599] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3113.012442] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3113.018357] alloc_pages_current+0x155/0x260 [ 3113.022810] ion_page_pool_alloc+0x118/0x1b0 [ 3113.027563] ion_system_heap_allocate+0x133/0x8c0 [ 3113.033678] ? _raw_spin_unlock+0x29/0x40 [ 3113.038443] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3113.043517] ? ion_system_contig_heap_create+0x130/0x130 [ 3113.049219] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3113.054591] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3113.060424] ion_alloc+0x27a/0x810 [ 3113.064307] ? ion_dma_buf_release+0x40/0x40 [ 3113.068792] ? __might_fault+0x177/0x1b0 [ 3113.072838] ion_ioctl+0xea/0x1f0 [ 3113.076414] ? ion_query_heaps+0x360/0x360 [ 3113.080911] ? ion_query_heaps+0x360/0x360 [ 3113.085563] do_vfs_ioctl+0x75a/0xff0 [ 3113.089442] ? ioctl_preallocate+0x1a0/0x1a0 [ 3113.094114] ? lock_downgrade+0x740/0x740 [ 3113.098431] ? __fget+0x225/0x360 [ 3113.102159] ? do_vfs_ioctl+0xff0/0xff0 [ 3113.106503] ? security_file_ioctl+0x83/0xb0 [ 3113.111087] SyS_ioctl+0x7f/0xb0 [ 3113.114441] ? do_vfs_ioctl+0xff0/0xff0 [ 3113.118590] do_syscall_64+0x1d5/0x640 [ 3113.123363] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3113.128896] RIP: 0033:0x466459 [ 3113.132157] RSP: 002b:00007f1ef2095188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3113.141099] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3113.149858] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3113.157395] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3113.164933] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3113.172643] R13: 00007fffa779c11f R14: 00007f1ef2095300 R15: 0000000000022000 [ 3113.180368] CPU: 0 PID: 8106 Comm: syz-executor.2 Not tainted 4.14.230-syzkaller #0 [ 3113.187817] Node 0 active_anon:243280kB inactive_anon:117176kB active_file:56kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:165376kB dirty:0kB writeback:0kB shmem:122044kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 174080kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3113.188255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3113.226576] Call Trace: [ 3113.229175] dump_stack+0x1b2/0x281 [ 3113.232974] warn_alloc.cold+0x96/0x1cc [ 3113.237146] ? zone_watermark_ok_safe+0x220/0x220 [ 3113.242377] ? usleep_range+0x130/0x130 [ 3113.246363] Node 1 active_anon:74160kB inactive_anon:39564kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44796kB dirty:0kB writeback:0kB shmem:44952kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3113.246430] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3113.279892] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3113.284900] ? run_timer_softirq+0x5a0/0x5a0 [ 3113.289408] __alloc_pages_nodemask+0x2127/0x2720 [ 3113.294776] ? lock_acquire+0x170/0x3f0 [ 3113.298757] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3113.303702] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3113.306344] Node 0 DMA free:10948kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3113.308304] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3113.308323] alloc_pages_current+0x155/0x260 [ 3113.345464] ion_page_pool_alloc+0x118/0x1b0 [ 3113.349858] ion_system_heap_allocate+0x133/0x8c0 [ 3113.354778] ? _raw_spin_unlock+0x29/0x40 [ 3113.359029] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3113.364036] ? ion_system_contig_heap_create+0x130/0x130 [ 3113.366329] lowmem_reserve[]: [ 3113.369556] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3113.369568] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3113.372857] 0 [ 3113.378336] ion_alloc+0x27a/0x810 [ 3113.378422] ? ion_dma_buf_release+0x40/0x40 [ 3113.378441] ? __might_fault+0x177/0x1b0 [ 3113.378452] ion_ioctl+0xea/0x1f0 [ 3113.396381] 2717 [ 3113.397690] ? ion_query_heaps+0x360/0x360 [ 3113.401456] 2718 [ 3113.403824] ? ion_query_heaps+0x360/0x360 [ 3113.415307] do_vfs_ioctl+0x75a/0xff0 [ 3113.419192] ? ioctl_preallocate+0x1a0/0x1a0 [ 3113.423767] ? lock_downgrade+0x740/0x740 [ 3113.426339] 2718 2718 [ 3113.428191] ? __fget+0x225/0x360 [ 3113.430781] ? do_vfs_ioctl+0xff0/0xff0 [ 3113.434983] Node 0 [ 3113.439030] ? security_file_ioctl+0x83/0xb0 [ 3113.439041] SyS_ioctl+0x7f/0xb0 [ 3113.439049] ? do_vfs_ioctl+0xff0/0xff0 [ 3113.439060] do_syscall_64+0x1d5/0x640 [ 3113.456337] DMA32 free:17640kB min:36200kB low:45248kB high:54296kB active_anon:243112kB inactive_anon:117120kB active_file:56kB inactive_file:68kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11296kB pagetables:14764kB bounce:0kB free_pcp:132kB local_pcp:0kB free_cma:0kB [ 3113.457570] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3113.492360] RIP: 0033:0x466459 [ 3113.495623] RSP: 002b:00007fc87a81d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3113.504189] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3113.511772] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3113.516368] lowmem_reserve[]: [ 3113.519536] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3113.519543] 0 [ 3113.522626] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3113.522634] R13: 00007ffd20e1ce3f R14: 00007fc87a81d300 R15: 0000000000022000 [ 3113.546318] 0 0 0 0 [ 3113.549030] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3113.551656] CPU: 0 PID: 8110 Comm: syz-executor.2 Not tainted 4.14.230-syzkaller #0 [ 3113.583131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3113.586334] lowmem_reserve[]: [ 3113.592914] Call Trace: [ 3113.592921] 0 [ 3113.596018] dump_stack+0x1b2/0x281 [ 3113.604360] warn_alloc.cold+0x96/0x1cc [ 3113.606351] 0 0 [ 3113.608456] ? zone_watermark_ok_safe+0x220/0x220 [ 3113.608463] 0 [ 3113.610437] ? usleep_range+0x130/0x130 [ 3113.615435] 0 [ 3113.617227] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3113.617239] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3113.617248] ? run_timer_softirq+0x5a0/0x5a0 [ 3113.617267] __alloc_pages_nodemask+0x2127/0x2720 [ 3113.621539] warn_alloc_show_mem: 1 callbacks suppressed [ 3113.621541] Mem-Info: [ 3113.623417] ? lock_acquire+0x170/0x3f0 [ 3113.636387] active_anon:79360 inactive_anon:39185 isolated_anon:0 [ 3113.636387] active_file:15 inactive_file:16 isolated_file:0 [ 3113.636387] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3113.636387] slab_reclaimable:14556 slab_unreclaimable:143875 [ 3113.636387] mapped:52543 shmem:41749 pagetables:20562 bounce:0 [ 3113.636387] free:13746 free_pcp:33 free_cma:0 [ 3113.639336] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3113.644349] Node 0 active_anon:243280kB inactive_anon:117176kB active_file:56kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:165376kB dirty:0kB writeback:0kB shmem:122044kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 174080kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3113.649914] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3113.649931] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3113.649951] alloc_pages_current+0x155/0x260 [ 3113.695292] ion_page_pool_alloc+0x118/0x1b0 [ 3113.695302] ion_system_heap_allocate+0x133/0x8c0 [ 3113.695317] ? _raw_spin_unlock+0x29/0x40 [ 3113.706329] Node 1 active_anon:74160kB inactive_anon:39564kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44796kB dirty:0kB writeback:0kB shmem:44952kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3113.732771] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3113.732781] ? ion_system_contig_heap_create+0x130/0x130 [ 3113.732791] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3113.732802] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3113.732814] ion_alloc+0x27a/0x810 [ 3113.766425] Node 1 [ 3113.791454] ? ion_dma_buf_release+0x40/0x40 [ 3113.791467] ? __might_fault+0x177/0x1b0 [ 3113.791476] ion_ioctl+0xea/0x1f0 [ 3113.791483] ? ion_query_heaps+0x360/0x360 [ 3113.791494] ? ion_query_heaps+0x360/0x360 [ 3113.791503] do_vfs_ioctl+0x75a/0xff0 [ 3113.791513] ? ioctl_preallocate+0x1a0/0x1a0 [ 3113.791522] ? lock_downgrade+0x740/0x740 [ 3113.791537] ? __fget+0x225/0x360 [ 3113.791546] ? do_vfs_ioctl+0xff0/0xff0 [ 3113.791558] ? security_file_ioctl+0x83/0xb0 [ 3113.791568] SyS_ioctl+0x7f/0xb0 [ 3113.791577] ? do_vfs_ioctl+0xff0/0xff0 [ 3113.791590] do_syscall_64+0x1d5/0x640 [ 3113.791605] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3113.791613] RIP: 0033:0x466459 [ 3113.791618] RSP: 002b:00007fc87a7fc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3113.791629] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 3113.791634] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3113.791639] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3113.791644] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 3113.791650] R13: 00007ffd20e1ce3f R14: 00007fc87a7fc300 R15: 0000000000022000 [ 3113.927556] CPU: 0 PID: 8122 Comm: syz-executor.4 Not tainted 4.14.230-syzkaller #0 [ 3113.938532] Node 0 [ 3113.943153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3113.943166] DMA free:11396kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3113.943172] lowmem_reserve[]: [ 3113.945600] Call Trace: [ 3113.955363] 0 [ 3113.982496] dump_stack+0x1b2/0x281 [ 3113.982513] warn_alloc.cold+0x96/0x1cc [ 3113.985600] 2717 [ 3113.988187] ? zone_watermark_ok_safe+0x220/0x220 [ 3113.988197] ? usleep_range+0x130/0x130 [ 3113.988204] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3113.988217] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3113.990087] 2718 [ 3113.993898] ? run_timer_softirq+0x5a0/0x5a0 [ 3113.998000] 2718 [ 3114.000064] __alloc_pages_nodemask+0x2127/0x2720 [ 3114.005210] 2718 [ 3114.009605] ? lock_acquire+0x170/0x3f0 [ 3114.009620] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3114.009631] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3114.026989] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3114.029198] Node 0 [ 3114.034333] alloc_pages_current+0x155/0x260 [ 3114.056326] DMA32 free:95240kB min:36200kB low:45248kB high:54296kB active_anon:243112kB inactive_anon:117120kB active_file:64kB inactive_file:260kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11296kB pagetables:14764kB bounce:0kB free_pcp:724kB local_pcp:696kB free_cma:0kB [ 3114.058614] ion_page_pool_alloc+0x118/0x1b0 [ 3114.063229] lowmem_reserve[]: [ 3114.093423] ion_system_heap_allocate+0x133/0x8c0 [ 3114.093436] ? _raw_spin_unlock+0x29/0x40 [ 3114.093444] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3114.093451] ? ion_system_contig_heap_create+0x130/0x130 [ 3114.093460] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3114.093474] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3114.131742] ion_alloc+0x27a/0x810 [ 3114.135478] ? ion_dma_buf_release+0x40/0x40 [ 3114.136316] 0 0 [ 3114.139987] ? __might_fault+0x177/0x1b0 [ 3114.140000] ion_ioctl+0xea/0x1f0 [ 3114.141966] 0 [ 3114.146309] ? ion_query_heaps+0x360/0x360 [ 3114.146319] ? ion_query_heaps+0x360/0x360 [ 3114.146329] do_vfs_ioctl+0x75a/0xff0 [ 3114.146339] ? ioctl_preallocate+0x1a0/0x1a0 [ 3114.146347] ? lock_downgrade+0x740/0x740 [ 3114.146360] ? __fget+0x225/0x360 [ 3114.166304] 0 [ 3114.169633] ? do_vfs_ioctl+0xff0/0xff0 [ 3114.174276] 0 [ 3114.177909] ? security_file_ioctl+0x83/0xb0 [ 3114.177920] SyS_ioctl+0x7f/0xb0 [ 3114.177928] ? do_vfs_ioctl+0xff0/0xff0 [ 3114.177939] do_syscall_64+0x1d5/0x640 [ 3114.177953] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3114.196313] Normal free:93212kB min:53696kB low:67120kB high:80544kB active_anon:74160kB inactive_anon:39564kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21984kB pagetables:67352kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3114.198623] RIP: 0033:0x466459 [ 3114.202582] lowmem_reserve[]: [ 3114.207773] RSP: 002b:00007f61587e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3114.207782] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3114.207787] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3114.207791] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3114.207796] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3114.207801] R13: 00007ffed7f6205f R14: 00007f61587e7300 R15: 0000000000022000 [ 3114.308318] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3114.367610] lowmem_reserve[]: 0 0 0 0 0 [ 3114.371753] Node 1 Normal free:394236kB min:53696kB low:67120kB high:80544kB active_anon:74160kB inactive_anon:39564kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21952kB pagetables:67352kB bounce:0kB free_pcp:1320kB local_pcp:656kB free_cma:0kB [ 3114.408954] lowmem_reserve[]: 0 0 0 0 0 [ 3114.413145] Node 0 DMA: 53*4kB (UE) 40*8kB (UME) 19*16kB (UME) 18*32kB (UME) 6*64kB (UME) 3*128kB (UE) 4*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11908kB [ 3114.433699] Node 0 DMA32: 4322*4kB (UME) 3141*8kB (UME) 3044*16kB (UM) 924*32kB (UME) 410*64kB (U) 21*128kB (U) 2*256kB (U) 1*512kB (U) 4*1024kB (U) 0*2048kB 0*4096kB = 154736kB [ 3114.455396] 0 0 0 0 0 [ 3114.458190] Node 0 DMA: 53*4kB (UE) 40*8kB (UME) 19*16kB (UME) 18*32kB (UME) 6*64kB (UME) 3*128kB (UE) 4*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11908kB [ 3114.499525] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3114.512130] Node 0 DMA32: 4322*4kB (UME) 3141*8kB (UME) 3044*16kB (UM) 924*32kB (UME) 824*64kB (UM) 116*128kB (UM) 48*256kB (U) 8*512kB (U) 6*1024kB (U) 0*2048kB 0*4096kB = 210800kB [ 3114.536339] Node 1 Normal: 2736*4kB (UM) 4679*8kB (UM) 2535*16kB (UM) 1684*32kB (UM) 3682*64kB (UM) 280*128kB (UM) 162*256kB (U) 74*512kB (U) 284*1024kB (U) 80*2048kB (U) 11*4096kB (U) = 993384kB [ 3114.559857] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3114.576316] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3114.585284] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3114.586282] Node 1 Normal: 2736*4kB (UM) 4679*8kB (UM) 2535*16kB (UM) 1684*32kB (UM) 4492*64kB (UM) 871*128kB (UM) 287*256kB (U) 102*512kB (U) 285*1024kB (U) 80*2048kB (U) 11*4096kB (U) = 1168232kB [ 3114.616316] warn_alloc_show_mem: 2 callbacks suppressed [ 3114.616320] Mem-Info: [ 3114.625002] active_anon:79360 inactive_anon:39185 isolated_anon:0 [ 3114.625002] active_file:16 inactive_file:241 isolated_file:0 [ 3114.625002] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3114.625002] slab_reclaimable:14553 slab_unreclaimable:143875 [ 3114.625002] mapped:52693 shmem:41749 pagetables:20562 bounce:0 [ 3114.625002] free:377103 free_pcp:643 free_cma:0 [ 3114.646288] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3114.662358] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3114.662365] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3114.662369] 42040 total pagecache pages [ 3114.662379] 0 pages in swap cache [ 3114.662384] Swap cache stats: add 0, delete 0, find 0/0 [ 3114.662387] Free swap = 0kB [ 3114.662390] Total swap = 0kB [ 3114.662397] 2097051 pages RAM [ 3114.662400] 0 pages HighMem/MovableOnly [ 3114.662403] 363848 pages reserved [ 3114.662407] 0 pages cma reserved [ 3114.666704] Node 0 active_anon:243280kB inactive_anon:117176kB active_file:64kB inactive_file:960kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:165976kB dirty:0kB writeback:0kB shmem:122044kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 174080kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3114.718116] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3114.718124] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3114.718128] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3114.718132] 42040 total pagecache pages [ 3114.718141] 0 pages in swap cache [ 3114.718145] Swap cache stats: add 0, delete 0, find 0/0 [ 3114.718149] Free swap = 0kB [ 3114.718152] Total swap = 0kB [ 3114.718161] 2097051 pages RAM [ 3114.721899] Node 1 active_anon:74160kB inactive_anon:39564kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44796kB dirty:0kB writeback:0kB shmem:44952kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3114.725193] 0 pages HighMem/MovableOnly [ 3114.755400] Node 0 [ 3114.816283] 363848 pages reserved [ 3114.879912] 0 pages cma reserved [ 3114.883669] Out of memory (oom_kill_allocating_task): Kill process 7942 (rs:main Q:Reg) score 0 or sacrifice child [ 3114.906321] DMA free:12164kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3114.916324] Killed process 7896 (rsyslogd) total-vm:254332kB, anon-rss:808kB, file-rss:0kB, shmem-rss:0kB [ 3114.966314] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3114.971645] Node 0 DMA32 free:409608kB min:36200kB low:45248kB high:54296kB active_anon:243112kB inactive_anon:117120kB active_file:84kB inactive_file:1012kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11232kB pagetables:14764kB bounce:0kB free_pcp:1300kB local_pcp:680kB free_cma:0kB [ 3115.004071] oom_reaper: reaped process 7896 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3115.020761] lowmem_reserve[]: 0 0 0 0 0 [ 3115.037023] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3115.073965] lowmem_reserve[]: 0 0 0 0 0 [ 3115.095159] Node 1 Normal free:2037036kB min:53696kB low:67120kB high:80544kB active_anon:74160kB inactive_anon:39564kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21888kB pagetables:67056kB bounce:0kB free_pcp:1396kB local_pcp:696kB free_cma:0kB [ 3115.133428] systemd[1]: systemd-journald.service: Main process exited, code=killed, status=9/KILL 23:48:39 executing program 0: r0 = accept4$rose(0xffffffffffffffff, &(0x7f0000000080)=@full={0xb, @dev, @remote, 0x0, [@netrom, @rose, @bcast, @netrom, @null, @netrom]}, 0x0, 0x80800) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f00000000c0)=@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x80000006, 0x27}) 23:48:39 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x40240, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000006, 0x27}) 23:48:39 executing program 5: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x1a0740f8bddbdf85, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000036c0)='/dev/dlm_plock\x00', 0x0, 0x0) getsockname$ax25(r1, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x84000, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000100)=0x7) 23:48:39 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xce) ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f0000000400)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, 0x401, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) kexec_load(0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000140)="900111fcb603d0dc7628c50b0d51adbb46dbb5266a49aad62a70fbd9055217352212b7859fb2307c6656cf7b4cecc074f34469f8470e9ebef22b7217c8f528a50920d54e7b875fce152dc57c9cdfbd9c349206813c83ed63b6d18586e6edb99fb365c61ee7ef4eeed0ab550c87581ecc43275099d705641ba20916f420e95ae1da8f2f168ea30fb1b50fd0ddd4bb4253b1ea267fc4fac7ca03f4524b93b28eecc332d9", 0xa3, 0xfffffffffffffe00, 0x8}, {&(0x7f0000000200)="7a455dee7085ca777afb4499914d6afc1e6c6b74b863eaabdac7f2ac2f7f0afc7f5ab21f09b694e191cb39688bed83ad716e3e21d84f7bc35d1cadcd331831f530d0396774b959d734b55a7eae0920f9ad1151fe75dc3cda4bac1deb58582f893b17d34051f23edbf740a380f5a87d158d9e093e1c65657157c0480cd209a1e718bea7f711023d1885667b6dcc0981175539a86525abab4318f8b866b79722330ed4caa066768ae03688d5eed33188c680e71d3f", 0xb4, 0xffffffffffff8000, 0x7}, {&(0x7f00000002c0)="4feeb2f1fd43f66c8ed8ddf2833b06f5c633101cb24f8afd1c9edc8115c7925930f0e7c37075abee5113e0e98ef15d4e164406a05b05817a4024155483da1a628d48642a598c79e07c3e0869414dcdb81f93894fc74de5ca52d6aa18ba3a731f936fb940a0303f0f71a3aa792326abf61af1ac54727fa40625179603b0a47e78374e2e47d1b37fdbc4cb8df0ef7db8cf85f2", 0x92, 0x7, 0xffff}], 0x2) r2 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r2, 0x111, 0x3, 0x1, 0x4) socketpair(0x10, 0x3, 0x4, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCSFLAGS(r4, 0x40047459, &(0x7f0000000000)=0x80160) syz_init_net_socket$ax25(0x3, 0x3, 0x8) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r5, 0x80047453, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$PPPIOCGMRU(r5, 0x80047453, &(0x7f0000000040)) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f00000000c0)=0x8) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000540)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0x4e, @mcast2, 0xff}}}, 0x3a) [ 3115.171905] systemd[1]: Failed to start Journal Service. [ 3115.195933] lowmem_reserve[]: 0 0 0 0 0 [ 3115.205074] systemd[1]: systemd-journald.service: Unit entered failed state. [ 3115.216421] Node 0 DMA: 67*4kB (UE) 40*8kB (UME) 19*16kB (UME) 18*32kB (UME) 10*64kB (UME) 3*128kB (UE) 4*256kB (UME) 3*512kB (UE) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 11196kB [ 3115.244156] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 3115.285283] Node 0 DMA32: 4223*4kB (UME) 3469*8kB (UE) 5442*16kB (UM) 4341*32kB (UME) 1511*64kB (UM) 203*128kB (UM) 57*256kB (UM) 9*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 412516kB [ 3115.291258] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 3115.341373] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3115.375617] Node 1 Normal: 14980*4kB (UM) 10511*8kB (UM) 4592*16kB (UM) 2343*32kB (UM) 6324*64kB (UM) 1520*128kB (UM) 674*256kB (U) 184*512kB (U) 1*1024kB (U) 130*2048kB (U) 39*4096kB (U) = 1585512kB [ 3115.405835] systemd[1]: rsyslog.service: Unit entered failed state. [ 3115.413902] systemd[1]: rsyslog.service: Failed with result 'signal'. [ 3115.428299] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 3115.442595] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3115.452768] systemd[1]: Stopped Journal Service. [ 3115.462996] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3115.488837] systemd[1]: Starting Journal Service... [ 3115.494394] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3115.515140] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3115.542012] 45314 total pagecache pages [ 3115.554252] 0 pages in swap cache [ 3115.566499] Swap cache stats: add 0, delete 0, find 0/0 [ 3115.578973] Free swap = 0kB [ 3115.582228] Total swap = 0kB [ 3115.591937] 2097051 pages RAM [ 3115.598756] 0 pages HighMem/MovableOnly [ 3115.611787] 363848 pages reserved [ 3115.622226] 0 pages cma reserved [ 3115.669965] systemd-journald[8161]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. 23:48:40 executing program 3: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000036c0)='/dev/dlm_plock\x00', 0x0, 0x0) getsockname$ax25(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x9, &(0x7f0000000300)=@raw=[@jmp={0x5, 0x0, 0xb76beb4bd026bcf9, 0xb, 0x9, 0xfffffffffffffffe, 0x4}, @jmp={0x5, 0x0, 0x1, 0x1, 0x0, 0xfffffffffffffff0, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @call={0x85, 0x0, 0x0, 0x8}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x30}, @func, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}], &(0x7f00000000c0)='GPL\x00', 0xfffff800, 0xf1, &(0x7f0000000100)=""/241, 0x40f00, 0xa, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x0, 0x8000, 0x1}, 0x10}, 0xfffffffffffffcf6) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000080)=0xfffffffc) 23:48:40 executing program 1: ioctl$SIOCRSGL2CALL(0xffffffffffffffff, 0x89e5, &(0x7f0000000000)=@bcast) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) gettid() r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000036c0)='/dev/dlm_plock\x00', 0x0, 0x0) getsockname$ax25(r1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', r1) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f00000000c0)=0x8) 23:48:40 executing program 5: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x1a0740f8bddbdf85, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000036c0)='/dev/dlm_plock\x00', 0x0, 0x0) getsockname$ax25(r1, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x84000, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000100)=0x7) 23:48:40 executing program 4: syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGCAUSE(r0, 0x89e0, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGCAUSE(r1, 0x89e0, 0x0) accept4$rose(r1, &(0x7f0000000080)=@full={0xb, @dev, @remote, 0x0, [@netrom, @rose, @bcast, @netrom, @null, @netrom]}, 0x0, 0x80800) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGCAUSE(r2, 0x89e0, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r2, 0x89e4) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x80000006, 0x27}) 23:48:40 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000006, 0x27}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000036c0)='/dev/dlm_plock\x00', 0x0, 0x0) getsockname$ax25(r1, 0x0, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000036c0)='/dev/dlm_plock\x00', 0x0, 0x0) getsockname$ax25(r2, 0x0, 0x0) sendto$ax25(r2, &(0x7f00000000c0)="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", 0x1000, 0xc060, &(0x7f00000010c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @default, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000036c0)='/dev/dlm_plock\x00', 0x0, 0x0) getsockname$ax25(r3, 0x0, 0x0) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001500)='/dev/dlm_plock\x00', 0x140, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002b00)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000002c00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b40)={0x54, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3ff}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8}, {0x8, 0x1, r4}, {0x8, 0x1, r5}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000091) 23:48:40 executing program 4: r0 = accept4$rose(0xffffffffffffffff, &(0x7f0000000080)=@full={0xb, @dev, @remote, 0x0, [@netrom, @rose, @bcast, @netrom, @null, @netrom]}, 0x0, 0x1000) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) connect$rose(r0, &(0x7f00000000c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x40) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x80000006, 0x27}) 23:48:40 executing program 1: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f00000000c0)=0x8) [ 3116.116709] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3116.161519] syz-executor.0 cpuset=/ mems_allowed=0-1 23:48:40 executing program 3: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x4000, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) accept4$ax25(r2, 0x0, 0x0, 0x0) r3 = geteuid() r4 = geteuid() mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x200c02, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@fscache='fscache'}, {@noextend='noextend'}, {@access_uid={'access', 0x3d, r3}}], [{@euid_lt={'euid<'}}, {@fsmagic={'fsmagic', 0x3d, 0x7}}, {@uid_gt={'uid>', r4}}, {@dont_appraise='dont_appraise'}, {@euid_gt={'euid>', 0xee00}}]}}) semctl$SEM_STAT_ANY(0xffffffffffffffff, 0x0, 0x14, &(0x7f00000000c0)=""/119) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000080)=0xfffffffc) [ 3116.193393] CPU: 0 PID: 8150 Comm: syz-executor.0 Not tainted 4.14.230-syzkaller #0 [ 3116.201584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3116.211517] Call Trace: [ 3116.214134] dump_stack+0x1b2/0x281 [ 3116.217825] warn_alloc.cold+0x96/0x1cc [ 3116.221936] ? zone_watermark_ok_safe+0x220/0x220 [ 3116.226897] __alloc_pages_nodemask+0x2127/0x2720 [ 3116.231847] ? io_schedule_timeout+0x140/0x140 [ 3116.236466] ? lock_acquire+0x170/0x3f0 [ 3116.240853] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3116.246096] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3116.251669] ? __mutex_unlock_slowpath+0x75/0x770 [ 3116.256522] ? __sanitizer_cov_trace_pc+0x3d/0x50 [ 3116.261379] alloc_pages_current+0x155/0x260 [ 3116.265929] ion_page_pool_alloc+0x118/0x1b0 [ 3116.270356] ion_system_heap_allocate+0x133/0x8c0 [ 3116.275392] ? ion_alloc+0x187/0x810 [ 3116.279160] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3116.284713] ? ion_system_contig_heap_create+0x130/0x130 [ 3116.290434] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3116.295722] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3116.300686] ion_alloc+0x204/0x810 [ 3116.304258] ? ion_dma_buf_release+0x40/0x40 [ 3116.309732] ? __might_fault+0x177/0x1b0 [ 3116.313827] ion_ioctl+0xea/0x1f0 [ 3116.317413] ? ion_query_heaps+0x360/0x360 [ 3116.322115] ? ion_query_heaps+0x360/0x360 [ 3116.326547] do_vfs_ioctl+0x75a/0xff0 [ 3116.330364] ? ioctl_preallocate+0x1a0/0x1a0 [ 3116.334875] ? lock_downgrade+0x740/0x740 [ 3116.339229] ? __fget+0x225/0x360 [ 3116.340889] syz-executor.5: page allocation failure: order:4 [ 3116.342724] ? do_vfs_ioctl+0xff0/0xff0 [ 3116.342737] ? security_file_ioctl+0x83/0xb0 [ 3116.357288] SyS_ioctl+0x7f/0xb0 [ 3116.358020] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 3116.360673] ? do_vfs_ioctl+0xff0/0xff0 [ 3116.360687] do_syscall_64+0x1d5/0x640 [ 3116.360701] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3116.360711] RIP: 0033:0x466459 [ 3116.384618] RSP: 002b:00007f1ef2095188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3116.388875] (null) [ 3116.392430] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3116.392436] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3116.392441] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3116.392447] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3116.392452] R13: 00007fffa779c11f R14: 00007f1ef2095300 R15: 0000000000022000 [ 3116.419322] syz-executor.4: [ 3116.429595] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3116.452717] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3116.474580] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 3116.495906] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 3116.497738] CPU: 1 PID: 8170 Comm: syz-executor.2 Not tainted 4.14.230-syzkaller #0 [ 3116.509148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3116.519243] Call Trace: [ 3116.522122] dump_stack+0x1b2/0x281 [ 3116.525887] warn_alloc.cold+0x96/0x1cc [ 3116.529956] ? zone_watermark_ok_safe+0x220/0x220 [ 3116.534942] __alloc_pages_nodemask+0x2127/0x2720 [ 3116.539973] ? lock_acquire+0x170/0x3f0 [ 3116.543978] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3116.548844] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3116.554406] ? __mutex_unlock_slowpath+0x75/0x770 [ 3116.559271] alloc_pages_current+0x155/0x260 [ 3116.563924] ion_page_pool_alloc+0x118/0x1b0 [ 3116.568368] ion_system_heap_allocate+0x133/0x8c0 [ 3116.573301] ? ion_alloc+0x187/0x810 [ 3116.577253] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3116.582720] ? ion_system_contig_heap_create+0x130/0x130 [ 3116.588270] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3116.593671] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3116.598983] ion_alloc+0x204/0x810 [ 3116.602728] ? ion_dma_buf_release+0x40/0x40 [ 3116.607333] ? __might_fault+0x177/0x1b0 [ 3116.611407] ion_ioctl+0xea/0x1f0 [ 3116.615158] ? ion_query_heaps+0x360/0x360 [ 3116.619488] ? _raw_spin_unlock+0x29/0x40 [ 3116.623644] ? ion_query_heaps+0x360/0x360 [ 3116.627987] do_vfs_ioctl+0x75a/0xff0 [ 3116.631884] ? ioctl_preallocate+0x1a0/0x1a0 [ 3116.636301] ? lock_downgrade+0x740/0x740 [ 3116.641025] ? __fget+0x225/0x360 [ 3116.644587] ? do_vfs_ioctl+0xff0/0xff0 [ 3116.649003] ? security_file_ioctl+0x83/0xb0 [ 3116.654655] SyS_ioctl+0x7f/0xb0 [ 3116.658209] ? do_vfs_ioctl+0xff0/0xff0 [ 3116.662542] do_syscall_64+0x1d5/0x640 [ 3116.666636] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3116.671834] RIP: 0033:0x466459 [ 3116.675167] RSP: 002b:00007fc87a7db188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3116.683061] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 3116.690765] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3116.698045] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3116.705807] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 3116.713429] R13: 00007ffd20e1ce3f R14: 00007fc87a7db300 R15: 0000000000022000 [ 3116.721533] CPU: 0 PID: 8185 Comm: syz-executor.4 Not tainted 4.14.230-syzkaller #0 [ 3116.729544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3116.733262] syz-executor.5 cpuset= [ 3116.739276] Call Trace: [ 3116.739298] dump_stack+0x1b2/0x281 [ 3116.739312] warn_alloc.cold+0x96/0x1cc [ 3116.739323] ? zone_watermark_ok_safe+0x220/0x220 [ 3116.739343] __alloc_pages_nodemask+0x2127/0x2720 [ 3116.749777] / [ 3116.753480] ? lock_acquire+0x170/0x3f0 [ 3116.768763] mems_allowed=0-1 [ 3116.770436] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3116.770454] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3116.770466] ? __mutex_unlock_slowpath+0x75/0x770 [ 3116.789007] alloc_pages_current+0x155/0x260 [ 3116.793783] ion_page_pool_alloc+0x118/0x1b0 [ 3116.798202] ion_system_heap_allocate+0x133/0x8c0 [ 3116.803423] ? ion_alloc+0x187/0x810 [ 3116.807250] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3116.812787] ? ion_system_contig_heap_create+0x130/0x130 [ 3116.818509] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3116.823879] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3116.828742] ion_alloc+0x204/0x810 [ 3116.832461] ? ion_dma_buf_release+0x40/0x40 [ 3116.836883] ? __might_fault+0x177/0x1b0 [ 3116.841209] ion_ioctl+0xea/0x1f0 [ 3116.844835] ? ion_query_heaps+0x360/0x360 [ 3116.849348] ? ion_query_heaps+0x360/0x360 [ 3116.854303] do_vfs_ioctl+0x75a/0xff0 [ 3116.859209] ? ioctl_preallocate+0x1a0/0x1a0 [ 3116.864004] ? lock_downgrade+0x740/0x740 [ 3116.868430] ? __fget+0x225/0x360 [ 3116.872581] ? do_vfs_ioctl+0xff0/0xff0 [ 3116.876754] ? security_file_ioctl+0x83/0xb0 [ 3116.881277] SyS_ioctl+0x7f/0xb0 [ 3116.884928] ? do_vfs_ioctl+0xff0/0xff0 [ 3116.889089] do_syscall_64+0x1d5/0x640 [ 3116.893279] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3116.898572] RIP: 0033:0x466459 [ 3116.902250] RSP: 002b:00007f61587e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3116.910929] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3116.918837] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3116.926601] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3116.934507] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3116.942054] R13: 00007ffed7f6205f R14: 00007f61587e7300 R15: 0000000000022000 [ 3116.950412] CPU: 1 PID: 8180 Comm: syz-executor.5 Not tainted 4.14.230-syzkaller #0 [ 3116.958761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3116.968395] Call Trace: [ 3116.970995] dump_stack+0x1b2/0x281 [ 3116.974644] warn_alloc.cold+0x96/0x1cc [ 3116.978830] ? zone_watermark_ok_safe+0x220/0x220 [ 3116.983793] __alloc_pages_nodemask+0x2127/0x2720 [ 3116.988745] ? lock_acquire+0x170/0x3f0 [ 3116.992897] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3116.998212] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3117.003771] ? __mutex_unlock_slowpath+0x75/0x770 [ 3117.008786] ? cache_alloc_refill+0x1da/0x350 [ 3117.013462] alloc_pages_current+0x155/0x260 [ 3117.017927] ion_page_pool_alloc+0x118/0x1b0 [ 3117.022785] ion_system_heap_allocate+0x133/0x8c0 [ 3117.027904] ? ion_alloc+0x187/0x810 [ 3117.031738] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3117.037658] ? ion_system_contig_heap_create+0x130/0x130 [ 3117.043125] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3117.048594] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3117.053813] ion_alloc+0x204/0x810 [ 3117.057761] ? ion_dma_buf_release+0x40/0x40 [ 3117.062714] ? __might_fault+0x177/0x1b0 [ 3117.066984] ion_ioctl+0xea/0x1f0 [ 3117.070575] ? ion_query_heaps+0x360/0x360 [ 3117.075200] ? ion_query_heaps+0x360/0x360 [ 3117.079964] do_vfs_ioctl+0x75a/0xff0 [ 3117.084137] ? ioctl_preallocate+0x1a0/0x1a0 [ 3117.088764] ? lock_downgrade+0x740/0x740 [ 3117.093478] ? __fget+0x225/0x360 [ 3117.097130] ? do_vfs_ioctl+0xff0/0xff0 [ 3117.102173] ? security_file_ioctl+0x83/0xb0 [ 3117.107109] SyS_ioctl+0x7f/0xb0 [ 3117.111345] ? do_vfs_ioctl+0xff0/0xff0 [ 3117.115793] do_syscall_64+0x1d5/0x640 [ 3117.119714] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3117.125590] RIP: 0033:0x466459 [ 3117.125853] Mem-Info: [ 3117.129042] RSP: 002b:00007ff493160188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3117.129051] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3117.129056] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3117.129060] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3117.129065] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3117.129069] R13: 00007fff6312dd3f R14: 00007ff493160300 R15: 0000000000022000 [ 3117.159143] syz-executor.2: [ 3117.176129] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3117.203335] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3117.224093] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 3117.226771] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 3117.239382] CPU: 0 PID: 8197 Comm: syz-executor.4 Not tainted 4.14.230-syzkaller #0 [ 3117.247641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3117.257578] Call Trace: [ 3117.260531] dump_stack+0x1b2/0x281 [ 3117.264196] warn_alloc.cold+0x96/0x1cc [ 3117.268179] ? zone_watermark_ok_safe+0x220/0x220 [ 3117.273125] __alloc_pages_nodemask+0x2127/0x2720 [ 3117.278069] ? lock_acquire+0x170/0x3f0 [ 3117.282155] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3117.287019] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3117.292666] ? __mutex_unlock_slowpath+0x75/0x770 [ 3117.297996] alloc_pages_current+0x155/0x260 [ 3117.302574] ion_page_pool_alloc+0x118/0x1b0 [ 3117.306971] ion_system_heap_allocate+0x133/0x8c0 [ 3117.311889] ? ion_alloc+0x187/0x810 [ 3117.315954] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3117.321505] ? ion_system_contig_heap_create+0x130/0x130 [ 3117.327061] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3117.332656] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3117.338004] ion_alloc+0x204/0x810 [ 3117.341787] ? ion_dma_buf_release+0x40/0x40 [ 3117.346299] ? __might_fault+0x177/0x1b0 [ 3117.350789] ion_ioctl+0xea/0x1f0 [ 3117.354462] ? ion_query_heaps+0x360/0x360 [ 3117.359264] ? _raw_spin_unlock+0x29/0x40 [ 3117.363699] ? ion_query_heaps+0x360/0x360 [ 3117.368052] do_vfs_ioctl+0x75a/0xff0 [ 3117.371872] ? ioctl_preallocate+0x1a0/0x1a0 [ 3117.376463] ? lock_downgrade+0x740/0x740 [ 3117.380764] ? __fget+0x225/0x360 [ 3117.384685] ? do_vfs_ioctl+0xff0/0xff0 [ 3117.388950] ? security_file_ioctl+0x83/0xb0 [ 3117.393447] SyS_ioctl+0x7f/0xb0 [ 3117.396809] ? do_vfs_ioctl+0xff0/0xff0 [ 3117.400874] do_syscall_64+0x1d5/0x640 [ 3117.404769] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3117.409967] RIP: 0033:0x466459 [ 3117.413153] RSP: 002b:00007f6158763188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3117.420862] RAX: ffffffffffffffda RBX: 000000000056c200 RCX: 0000000000466459 [ 3117.428222] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3117.436427] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3117.444233] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c200 [ 3117.451928] R13: 00007ffed7f6205f R14: 00007f6158763300 R15: 0000000000022000 [ 3117.461601] CPU: 1 PID: 8153 Comm: syz-executor.2 Not tainted 4.14.230-syzkaller #0 [ 3117.469550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3117.479007] Call Trace: [ 3117.481953] dump_stack+0x1b2/0x281 [ 3117.482160] active_anon:79710 inactive_anon:41217 isolated_anon:0 [ 3117.482160] active_file:2084 inactive_file:2524 isolated_file:0 [ 3117.482160] unevictable:0 dirty:115 writeback:0 unstable:0 [ 3117.482160] slab_reclaimable:14634 slab_unreclaimable:144631 [ 3117.482160] mapped:55666 shmem:43797 pagetables:20589 bounce:0 [ 3117.482160] free:244500 free_pcp:245 free_cma:0 [ 3117.485601] warn_alloc.cold+0x96/0x1cc [ 3117.485612] ? zone_watermark_ok_safe+0x220/0x220 [ 3117.485636] __alloc_pages_nodemask+0x2127/0x2720 [ 3117.534986] ? __schedule+0x893/0x1de0 [ 3117.538902] ? lock_acquire+0x170/0x3f0 [ 3117.542898] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3117.548029] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3117.553590] ? __mutex_unlock_slowpath+0x75/0x770 [ 3117.558580] alloc_pages_current+0x155/0x260 [ 3117.563381] ion_page_pool_alloc+0x118/0x1b0 [ 3117.567905] ion_system_heap_allocate+0x133/0x8c0 [ 3117.572776] ? ion_alloc+0x187/0x810 [ 3117.575644] Node 0 active_anon:244948kB inactive_anon:125308kB active_file:8336kB inactive_file:10092kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:177968kB dirty:456kB writeback:0kB shmem:130240kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 174080kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3117.576641] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3117.576651] ? ion_system_contig_heap_create+0x130/0x130 [ 3117.576662] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3117.576673] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3117.576682] ion_alloc+0x204/0x810 [ 3117.576695] ? ion_dma_buf_release+0x40/0x40 [ 3117.576707] ? __might_fault+0x177/0x1b0 [ 3117.576719] ion_ioctl+0xea/0x1f0 [ 3117.576726] ? ion_query_heaps+0x360/0x360 [ 3117.576737] ? ion_query_heaps+0x360/0x360 [ 3117.652729] Node 1 active_anon:73892kB inactive_anon:39560kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44796kB dirty:4kB writeback:0kB shmem:44948kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3117.652997] do_vfs_ioctl+0x75a/0xff0 [ 3117.686699] ? ioctl_preallocate+0x1a0/0x1a0 [ 3117.692294] ? lock_downgrade+0x740/0x740 [ 3117.696640] ? __fget+0x225/0x360 [ 3117.700109] ? do_vfs_ioctl+0xff0/0xff0 [ 3117.704107] ? security_file_ioctl+0x83/0xb0 [ 3117.708742] SyS_ioctl+0x7f/0xb0 [ 3117.712262] ? do_vfs_ioctl+0xff0/0xff0 [ 3117.716345] do_syscall_64+0x1d5/0x640 [ 3117.720625] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3117.726013] RIP: 0033:0x466459 [ 3117.728669] Node 0 [ 3117.729285] RSP: 002b:00007fc87a81d188 EFLAGS: 00000246 [ 3117.729305] DMA free:11132kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3117.731596] ORIG_RAX: 0000000000000010 [ 3117.731602] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3117.731607] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3117.731612] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3117.731617] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3117.731624] R13: 00007ffd20e1ce3f R14: 00007fc87a81d300 R15: 0000000000022000 [ 3117.758490] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3117.989418] Node 0 DMA32 free:291492kB min:36200kB low:45248kB high:54296kB active_anon:244800kB inactive_anon:125244kB active_file:8336kB inactive_file:10092kB unevictable:0kB writepending:460kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11520kB pagetables:15184kB bounce:0kB free_pcp:384kB local_pcp:192kB free_cma:0kB [ 3118.022780] lowmem_reserve[]: 0 0 0 0 0 [ 3118.027183] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3118.055034] lowmem_reserve[]: 0 0 0 0 0 [ 3118.059679] Node 1 Normal free:426788kB min:53696kB low:67120kB high:80544kB active_anon:73892kB inactive_anon:39560kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21856kB pagetables:67040kB bounce:0kB free_pcp:1348kB local_pcp:656kB free_cma:0kB [ 3118.148642] lowmem_reserve[]: 0 0 0 0 0 [ 3118.179573] Node 0 DMA: 43*4kB (UE) 52*8kB (UME) 57*16kB (UME) 25*32kB (UME) 4*64kB (ME) 1*128kB (E) 3*256kB (UME) 3*512kB (UE) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 11132kB [ 3118.233343] Node 0 DMA32: 17*4kB (UME) 67*8kB (ME) 8*16kB (UM) 2674*32kB (UE) 45*64kB (U) 5*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 89820kB [ 3118.254018] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3118.265659] Node 1 Normal: 14060*4kB (UM) 12242*8kB (UM) 7407*16kB (UM) 4752*32kB (U) 94*64kB (U) 2*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 431280kB [ 3118.319721] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3118.334013] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3118.353983] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3118.372644] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3118.417953] 48411 total pagecache pages [ 3118.423145] 0 pages in swap cache [ 3118.430563] Swap cache stats: add 0, delete 0, find 0/0 [ 3118.469484] Free swap = 0kB [ 3118.479251] Total swap = 0kB [ 3118.491570] 2097051 pages RAM [ 3118.499930] 0 pages HighMem/MovableOnly [ 3118.508843] 363848 pages reserved [ 3118.516977] 0 pages cma reserved [ 3119.388179] oom_reaper: reaped process 8197 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3119.421229] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3119.433686] syz-executor.4 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 3119.438510] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3119.467601] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 3119.475682] CPU: 1 PID: 8185 Comm: syz-executor.4 Not tainted 4.14.230-syzkaller #0 [ 3119.483052] syz-executor.4 cpuset= [ 3119.483643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3119.483649] / [ 3119.487343] Call Trace: [ 3119.501380] dump_stack+0x1b2/0x281 [ 3119.502133] mems_allowed=0-1 [ 3119.505007] dump_header+0x178/0x82f [ 3119.511884] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3119.517146] ? ___ratelimit+0x2cd/0x530 [ 3119.521396] oom_kill_process.cold+0x10/0xa40 [ 3119.525949] out_of_memory+0xe3e/0x1190 [ 3119.529942] ? oom_killer_disable+0x1c0/0x1c0 [ 3119.534577] ? mutex_trylock+0x152/0x1a0 [ 3119.538723] __alloc_pages_nodemask+0x23e1/0x2720 [ 3119.543673] ? lock_acquire+0x170/0x3f0 [ 3119.548029] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3119.552861] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3119.557367] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3119.563101] alloc_pages_current+0x155/0x260 [ 3119.567558] ion_page_pool_alloc+0x118/0x1b0 [ 3119.572068] ion_system_heap_allocate+0x133/0x8c0 [ 3119.576912] ? ion_alloc+0x187/0x810 [ 3119.580762] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3119.586474] ? ion_system_contig_heap_create+0x130/0x130 [ 3119.592189] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3119.597515] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3119.602363] ion_alloc+0x204/0x810 [ 3119.606268] ? ion_dma_buf_release+0x40/0x40 [ 3119.610668] ? __might_fault+0x177/0x1b0 [ 3119.614719] ion_ioctl+0xea/0x1f0 [ 3119.618282] ? ion_query_heaps+0x360/0x360 [ 3119.622692] ? ion_query_heaps+0x360/0x360 [ 3119.627028] do_vfs_ioctl+0x75a/0xff0 [ 3119.631348] ? ioctl_preallocate+0x1a0/0x1a0 [ 3119.635740] ? lock_downgrade+0x740/0x740 [ 3119.640061] ? __fget+0x225/0x360 [ 3119.643607] ? do_vfs_ioctl+0xff0/0xff0 [ 3119.647775] ? security_file_ioctl+0x83/0xb0 [ 3119.652486] SyS_ioctl+0x7f/0xb0 [ 3119.658165] ? do_vfs_ioctl+0xff0/0xff0 [ 3119.662248] do_syscall_64+0x1d5/0x640 [ 3119.666416] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3119.672266] RIP: 0033:0x466459 [ 3119.675453] RSP: 002b:00007f61587e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3119.681932] syz-executor.0 cpuset= [ 3119.683366] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3119.683377] / [ 3119.687003] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3119.704777] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3119.712425] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3119.720092] R13: 00007ffed7f6205f R14: 00007f61587e7300 R15: 0000000000022000 [ 3119.721568] mems_allowed=0-1 [ 3119.729876] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3119.731535] CPU: 0 PID: 8197 Comm: syz-executor.4 Not tainted 4.14.230-syzkaller #0 [ 3119.751432] Mem-Info: [ 3119.751632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3119.754049] active_anon:79704 inactive_anon:41217 isolated_anon:0 [ 3119.754049] active_file:42 inactive_file:8 isolated_file:25 [ 3119.754049] unevictable:0 dirty:5 writeback:0 unstable:0 [ 3119.754049] slab_reclaimable:14587 slab_unreclaimable:147012 [ 3119.754049] mapped:52706 shmem:43797 pagetables:20589 bounce:0 [ 3119.754049] free:13859 free_pcp:30 free_cma:0 [ 3119.763727] Call Trace: [ 3119.763748] dump_stack+0x1b2/0x281 [ 3119.763761] warn_alloc.cold+0x96/0x1cc [ 3119.763784] ? zone_watermark_ok_safe+0x220/0x220 [ 3119.798680] syz-executor.5 cpuset= [ 3119.801213] ? usleep_range+0x130/0x130 [ 3119.804816] / [ 3119.808870] ? try_to_free_pages+0x23f/0x6e0 [ 3119.813719] mems_allowed=0-1 [ 3119.817209] ? _find_next_bit+0xdb/0x100 [ 3119.817218] ? run_timer_softirq+0x5a0/0x5a0 [ 3119.817236] __alloc_pages_nodemask+0x2127/0x2720 [ 3119.845943] Node 0 active_anon:244888kB inactive_anon:125308kB active_file:168kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):100kB mapped:166028kB dirty:8kB writeback:0kB shmem:130240kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 174080kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3119.846702] ? lock_acquire+0x170/0x3f0 [ 3119.880414] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3119.885463] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3119.890385] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3119.895829] alloc_pages_current+0x155/0x260 [ 3119.900269] ion_page_pool_alloc+0x118/0x1b0 [ 3119.904966] ion_system_heap_allocate+0x133/0x8c0 [ 3119.905965] Node 1 active_anon:73928kB inactive_anon:39560kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44796kB dirty:12kB writeback:0kB shmem:44948kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3119.909900] ? ion_alloc+0x187/0x810 [ 3119.944519] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3119.950784] ? ion_system_contig_heap_create+0x130/0x130 [ 3119.956477] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3119.961749] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3119.967050] ion_alloc+0x204/0x810 [ 3119.970955] ? ion_dma_buf_release+0x40/0x40 [ 3119.975520] ? __might_fault+0x177/0x1b0 [ 3119.975919] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3119.980038] ion_ioctl+0xea/0x1f0 [ 3119.980049] ? ion_query_heaps+0x360/0x360 [ 3120.015907] ? _raw_spin_unlock+0x29/0x40 [ 3120.020049] ? ion_query_heaps+0x360/0x360 [ 3120.024280] do_vfs_ioctl+0x75a/0xff0 [ 3120.028266] ? ioctl_preallocate+0x1a0/0x1a0 [ 3120.032766] ? lock_downgrade+0x740/0x740 [ 3120.035971] lowmem_reserve[]: 0 [ 3120.037009] ? __fget+0x225/0x360 [ 3120.037016] 2717 [ 3120.041025] ? do_vfs_ioctl+0xff0/0xff0 [ 3120.044572] 2718 [ 3120.046806] ? security_file_ioctl+0x83/0xb0 [ 3120.046821] SyS_ioctl+0x7f/0xb0 [ 3120.046830] ? do_vfs_ioctl+0xff0/0xff0 [ 3120.046840] do_syscall_64+0x1d5/0x640 [ 3120.046855] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3120.065907] 2718 [ 3120.071025] RIP: 0033:0x466459 [ 3120.082964] RSP: 002b:00007f6158763188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3120.085946] 2718 [ 3120.091731] RAX: ffffffffffffffda RBX: 000000000056c200 RCX: 0000000000466459 [ 3120.094028] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3120.094037] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3120.116555] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c200 [ 3120.124080] R13: 00007ffed7f6205f R14: 00007f6158763300 R15: 0000000000022000 [ 3120.125906] Node 0 DMA32 free:17664kB min:36200kB low:45248kB high:54296kB active_anon:244720kB inactive_anon:125252kB active_file:84kB inactive_file:68kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11488kB pagetables:15184kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3120.138525] CPU: 0 PID: 8150 Comm: syz-executor.0 Not tainted 4.14.230-syzkaller #0 [ 3120.170229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3120.180202] Call Trace: [ 3120.182822] dump_stack+0x1b2/0x281 [ 3120.186622] warn_alloc.cold+0x96/0x1cc [ 3120.190768] ? zone_watermark_ok_safe+0x220/0x220 [ 3120.195792] ? wait_for_completion_io+0x10/0x10 [ 3120.200543] __alloc_pages_nodemask+0x2127/0x2720 [ 3120.205674] ? lock_acquire+0x170/0x3f0 [ 3120.205897] lowmem_reserve[]: 0 [ 3120.212345] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3120.212351] 0 [ 3120.215640] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3120.228478] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3120.234010] alloc_pages_current+0x155/0x260 [ 3120.235890] 0 0 [ 3120.238423] ion_page_pool_alloc+0x118/0x1b0 [ 3120.238428] 0 [ 3120.240396] ion_system_heap_allocate+0x133/0x8c0 [ 3120.246794] ? ion_alloc+0x187/0x810 [ 3120.246805] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3120.246813] ? ion_system_contig_heap_create+0x130/0x130 [ 3120.246824] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3120.265887] Node 0 [ 3120.266681] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3120.271948] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3120.274303] ion_alloc+0x204/0x810 [ 3120.295881] lowmem_reserve[]: [ 3120.304735] ? ion_dma_buf_release+0x40/0x40 [ 3120.315892] 0 0 0 [ 3120.316126] ? __might_fault+0x177/0x1b0 [ 3120.316139] ion_ioctl+0xea/0x1f0 [ 3120.318267] 0 [ 3120.322408] ? ion_query_heaps+0x360/0x360 [ 3120.332214] ? ion_query_heaps+0x360/0x360 [ 3120.335878] 0 [ 3120.336558] do_vfs_ioctl+0x75a/0xff0 [ 3120.336569] ? ioctl_preallocate+0x1a0/0x1a0 [ 3120.338356] Node 1 [ 3120.342403] ? lock_downgrade+0x740/0x740 [ 3120.353619] ? __fget+0x225/0x360 [ 3120.355890] Normal free:26836kB min:53696kB low:67120kB high:80544kB active_anon:73928kB inactive_anon:39560kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21856kB pagetables:67040kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 3120.357150] ? do_vfs_ioctl+0xff0/0xff0 [ 3120.391700] ? security_file_ioctl+0x83/0xb0 [ 3120.396261] SyS_ioctl+0x7f/0xb0 [ 3120.399636] ? do_vfs_ioctl+0xff0/0xff0 [ 3120.403950] do_syscall_64+0x1d5/0x640 [ 3120.407932] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3120.413281] RIP: 0033:0x466459 [ 3120.416540] RSP: 002b:00007f1ef2095188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3120.424494] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3120.425878] lowmem_reserve[]: [ 3120.431755] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3120.431762] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3120.434982] 0 [ 3120.442337] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3120.442343] R13: 00007fffa779c11f R14: 00007f1ef2095300 R15: 0000000000022000 [ 3120.449649] warn_alloc_show_mem: 5 callbacks suppressed [ 3120.449653] Mem-Info: [ 3120.472596] CPU: 1 PID: 8180 Comm: syz-executor.5 Not tainted 4.14.230-syzkaller #0 [ 3120.481658] active_anon:79704 inactive_anon:41217 isolated_anon:0 [ 3120.481658] active_file:13 inactive_file:13 isolated_file:0 [ 3120.481658] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3120.481658] slab_reclaimable:14587 slab_unreclaimable:146894 [ 3120.481658] mapped:52684 shmem:43797 pagetables:20589 bounce:0 [ 3120.481658] free:14023 free_pcp:49 free_cma:0 [ 3120.483695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3120.524247] Node 0 active_anon:244888kB inactive_anon:125308kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:165940kB dirty:0kB writeback:0kB shmem:130240kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 174080kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3120.528068] Call Trace: [ 3120.528087] dump_stack+0x1b2/0x281 [ 3120.528099] warn_alloc.cold+0x96/0x1cc [ 3120.528111] ? zone_watermark_ok_safe+0x220/0x220 [ 3120.528120] ? usleep_range+0x130/0x130 [ 3120.528128] ? try_to_free_pages+0x23f/0x6e0 [ 3120.528141] ? _find_next_bit+0xdb/0x100 [ 3120.563152] Node 1 active_anon:73928kB inactive_anon:39560kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44796kB dirty:0kB writeback:0kB shmem:44948kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3120.563671] ? run_timer_softirq+0x5a0/0x5a0 [ 3120.567680] Node 0 [ 3120.572659] __alloc_pages_nodemask+0x2127/0x2720 [ 3120.615998] DMA free:11724kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3120.618180] ? lock_acquire+0x170/0x3f0 [ 3120.620428] lowmem_reserve[]: [ 3120.625392] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3120.667696] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3120.672815] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3120.678378] alloc_pages_current+0x155/0x260 [ 3120.682890] ion_page_pool_alloc+0x118/0x1b0 [ 3120.687405] ion_system_heap_allocate+0x133/0x8c0 [ 3120.692440] ? ion_alloc+0x187/0x810 [ 3120.696971] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3120.702830] ? ion_system_contig_heap_create+0x130/0x130 [ 3120.708463] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3120.713796] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3120.718674] ion_alloc+0x204/0x810 [ 3120.722313] ? ion_dma_buf_release+0x40/0x40 [ 3120.726818] ? __might_fault+0x177/0x1b0 [ 3120.731149] ion_ioctl+0xea/0x1f0 [ 3120.735223] ? ion_query_heaps+0x360/0x360 [ 3120.739479] ? ion_query_heaps+0x360/0x360 [ 3120.743900] do_vfs_ioctl+0x75a/0xff0 [ 3120.748197] ? ioctl_preallocate+0x1a0/0x1a0 [ 3120.752830] ? lock_downgrade+0x740/0x740 [ 3120.756994] ? __fget+0x225/0x360 [ 3120.760982] ? do_vfs_ioctl+0xff0/0xff0 [ 3120.764968] ? security_file_ioctl+0x83/0xb0 [ 3120.769746] SyS_ioctl+0x7f/0xb0 [ 3120.773215] ? do_vfs_ioctl+0xff0/0xff0 [ 3120.777374] do_syscall_64+0x1d5/0x640 [ 3120.781450] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3120.786733] RIP: 0033:0x466459 [ 3120.790084] RSP: 002b:00007ff493160188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3120.796442] 0 [ 3120.799134] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3120.799141] 2717 [ 3120.801372] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3120.801380] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3120.826713] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3120.834204] R13: 00007fff6312dd3f R14: 00007ff493160300 R15: 0000000000022000 [ 3120.836402] 2718 2718 2718 [ 3120.877598] Node 0 DMA32 free:36132kB min:36200kB low:45248kB high:54296kB active_anon:244720kB inactive_anon:125252kB active_file:348kB inactive_file:928kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11488kB pagetables:15184kB bounce:0kB free_pcp:792kB local_pcp:672kB free_cma:0kB [ 3120.895877] 0 [ 3120.917779] lowmem_reserve[]: 0 0 0 0 0 [ 3120.924178] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3120.940971] 0 [ 3120.950313] lowmem_reserve[]: 0 0 0 0 0 [ 3120.950334] Node 1 Normal free:53936kB min:53696kB low:67120kB high:80544kB active_anon:73928kB inactive_anon:39560kB active_file:508kB inactive_file:880kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21856kB pagetables:67040kB bounce:0kB free_pcp:1012kB local_pcp:284kB free_cma:0kB [ 3120.950355] lowmem_reserve[]: 0 0 0 0 0 [ 3120.950375] Node 0 DMA: 21*4kB (UE) 14*8kB (UME) 35*16kB (UME) 25*32kB (UME) 4*64kB (ME) 2*128kB (UE) 5*256kB (UME) 3*512kB (UE) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 11028kB [ 3120.950453] Node 0 DMA32: 545*4kB (UME) 472*8kB (UME) 559*16kB (UM) 679*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36628kB [ 3120.950507] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB [ 3120.958124] 0 [ 3121.013692] 0*256kB [ 3121.027944] 0 [ 3121.043528] Node 0 DMA: 21*4kB (UE) 14*8kB (UME) 35*16kB (UME) 25*32kB (UME) 4*64kB (ME) 2*128kB [ 3121.043588] 0*512kB 0*1024kB [ 3121.052920] (UE) 5*256kB (UME) 3*512kB (UE) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 11028kB [ 3121.059865] 0*2048kB 0*4096kB = 0kB [ 3121.068631] Node 1 Normal: 2*4kB (M) 1*8kB (M) 25*16kB (UM) 1655*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53376kB [ 3121.076353] Node 0 DMA32: 705*4kB (UME) 293*8kB (ME) 559*16kB (UM) 679*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35836kB [ 3121.086410] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3121.097109] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3121.117700] Node 1 Normal: 2*4kB (M) 1*8kB (M) 25*16kB (UM) 1655*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53376kB [ 3121.118460] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3121.131119] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3121.131126] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3121.131133] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3121.131140] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3121.131144] 43871 total pagecache pages [ 3121.131154] 0 pages in swap cache [ 3121.143404] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3121.148972] Swap cache stats: add 0, delete 0, find 0/0 [ 3121.162459] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3121.167895] Free swap = 0kB [ 3121.194246] 43871 total pagecache pages [ 3121.201007] Total swap = 0kB [ 3121.211799] 0 pages in swap cache [ 3121.215549] 2097051 pages RAM [ 3121.218856] Swap cache stats: add 0, delete 0, find 0/0 [ 3121.222318] 0 pages HighMem/MovableOnly [ 3121.225496] Free swap = 0kB [ 3121.231142] 363848 pages reserved [ 3121.231146] 0 pages cma reserved [ 3121.231154] Out of memory (oom_kill_allocating_task): Kill process 8185 (syz-executor.4) score 0 or sacrifice child [ 3121.231176] Killed process 8185 (syz-executor.4) total-vm:93780kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3121.268755] Total swap = 0kB [ 3121.271811] 2097051 pages RAM [ 3121.275197] 0 pages HighMem/MovableOnly [ 3121.280260] 363848 pages reserved [ 3121.284089] 0 pages cma reserved [ 3121.308743] oom_reaper: reaped process 8150 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3121.382225] oom_reaper: reaped process 8180 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3121.491268] oom_reaper: reaped process 8170 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3121.614670] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3121.627260] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3121.666402] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 3121.671751] CPU: 0 PID: 8180 Comm: syz-executor.5 Not tainted 4.14.230-syzkaller #0 [ 3121.679773] syz-executor.4 cpuset= [ 3121.680340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3121.680347] / [ 3121.684505] Call Trace: [ 3121.698854] dump_stack+0x1b2/0x281 [ 3121.702687] warn_alloc.cold+0x96/0x1cc [ 3121.707021] ? zone_watermark_ok_safe+0x220/0x220 [ 3121.712168] __alloc_pages_nodemask+0x2127/0x2720 [ 3121.717017] ? check_preemption_disabled+0x35/0x240 [ 3121.722128] ? lock_acquire+0x170/0x3f0 [ 3121.726302] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3121.731627] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3121.737386] ? __mutex_unlock_slowpath+0x75/0x770 [ 3121.742599] alloc_pages_current+0x155/0x260 [ 3121.745831] mems_allowed=0-1 [ 3121.747322] ion_page_pool_alloc+0x118/0x1b0 [ 3121.755168] ion_system_heap_allocate+0x133/0x8c0 [ 3121.760278] ? _raw_spin_unlock+0x29/0x40 [ 3121.764713] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3121.770030] ? ion_system_contig_heap_create+0x130/0x130 [ 3121.775683] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3121.781022] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3121.786305] ion_alloc+0x27a/0x810 [ 3121.789935] ? ion_dma_buf_release+0x40/0x40 [ 3121.795335] ? __might_fault+0x177/0x1b0 [ 3121.799494] ion_ioctl+0xea/0x1f0 [ 3121.802957] ? ion_query_heaps+0x360/0x360 [ 3121.807278] ? ion_query_heaps+0x360/0x360 [ 3121.811672] do_vfs_ioctl+0x75a/0xff0 [ 3121.815563] ? ioctl_preallocate+0x1a0/0x1a0 [ 3121.820409] ? lock_downgrade+0x740/0x740 [ 3121.824862] ? __fget+0x225/0x360 [ 3121.828316] ? do_vfs_ioctl+0xff0/0xff0 [ 3121.832795] ? security_file_ioctl+0x83/0xb0 [ 3121.837273] SyS_ioctl+0x7f/0xb0 [ 3121.840624] ? do_vfs_ioctl+0xff0/0xff0 [ 3121.844640] do_syscall_64+0x1d5/0x640 [ 3121.848865] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3121.854150] RIP: 0033:0x466459 [ 3121.857411] RSP: 002b:00007ff493160188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3121.865279] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3121.872704] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3121.880129] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3121.887480] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3121.895177] R13: 00007fff6312dd3f R14: 00007ff493160300 R15: 0000000000022000 [ 3121.902848] CPU: 1 PID: 8197 Comm: syz-executor.4 Not tainted 4.14.230-syzkaller #0 [ 3121.906852] warn_alloc_show_mem: 2 callbacks suppressed [ 3121.906855] Mem-Info: [ 3121.910999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3121.916867] active_anon:79654 inactive_anon:41217 isolated_anon:0 [ 3121.916867] active_file:36 inactive_file:55 isolated_file:13 [ 3121.916867] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3121.916867] slab_reclaimable:14586 slab_unreclaimable:146875 [ 3121.916867] mapped:52705 shmem:43797 pagetables:20589 bounce:0 [ 3121.916867] free:13741 free_pcp:60 free_cma:0 [ 3121.919652] Call Trace: [ 3121.929446] Node 0 active_anon:244688kB inactive_anon:125308kB active_file:44kB inactive_file:120kB unevictable:0kB isolated(anon):0kB isolated(file):52kB mapped:166020kB dirty:0kB writeback:0kB shmem:130240kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 174080kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3121.964153] dump_stack+0x1b2/0x281 [ 3121.964166] warn_alloc.cold+0x96/0x1cc [ 3121.964177] ? zone_watermark_ok_safe+0x220/0x220 [ 3121.964198] __alloc_pages_nodemask+0x2127/0x2720 [ 3121.964208] ? lock_acquire+0x170/0x3f0 [ 3121.964224] ? lock_acquire+0x170/0x3f0 [ 3121.966871] Node 1 active_anon:73928kB inactive_anon:39560kB active_file:100kB inactive_file:100kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44800kB dirty:0kB writeback:0kB shmem:44948kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3121.996789] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3121.996806] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3121.996818] ? __mutex_unlock_slowpath+0x75/0x770 [ 3121.996832] alloc_pages_current+0x155/0x260 [ 3121.996857] ion_page_pool_alloc+0x118/0x1b0 [ 3122.001163] Node 0 [ 3122.005163] ion_system_heap_allocate+0x133/0x8c0 [ 3122.010256] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3122.015357] ? _raw_spin_unlock+0x29/0x40 [ 3122.021821] lowmem_reserve[]: [ 3122.024240] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3122.024249] ? ion_system_contig_heap_create+0x130/0x130 [ 3122.024260] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3122.024270] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3122.024280] ion_alloc+0x27a/0x810 [ 3122.024294] ? ion_dma_buf_release+0x40/0x40 [ 3122.053825] syz-executor.2 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 3122.058141] ? __might_fault+0x177/0x1b0 [ 3122.058156] ion_ioctl+0xea/0x1f0 [ 3122.058165] ? ion_query_heaps+0x360/0x360 [ 3122.058178] ? _raw_spin_unlock+0x29/0x40 [ 3122.058188] ? ion_query_heaps+0x360/0x360 [ 3122.063814] (null) [ 3122.068954] do_vfs_ioctl+0x75a/0xff0 [ 3122.068965] ? ioctl_preallocate+0x1a0/0x1a0 [ 3122.068974] ? lock_downgrade+0x740/0x740 [ 3122.068986] ? __fget+0x225/0x360 [ 3122.068993] ? do_vfs_ioctl+0xff0/0xff0 [ 3122.069003] ? security_file_ioctl+0x83/0xb0 [ 3122.069012] SyS_ioctl+0x7f/0xb0 [ 3122.069018] ? do_vfs_ioctl+0xff0/0xff0 [ 3122.069030] do_syscall_64+0x1d5/0x640 [ 3122.069044] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3122.069053] RIP: 0033:0x466459 [ 3122.073719] , order=0, oom_score_adj=1000 [ 3122.078189] RSP: 002b:00007f6158763188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3122.078199] RAX: ffffffffffffffda RBX: 000000000056c200 RCX: 0000000000466459 [ 3122.078204] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3122.078209] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3122.078214] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c200 [ 3122.078219] R13: 00007ffed7f6205f R14: 00007f6158763300 R15: 0000000000022000 [ 3122.088176] syz-executor.0: [ 3122.113407] 0 2717 [ 3122.117621] syz-executor.2: [ 3122.120722] 2718 [ 3122.125726] page allocation failure: order:0 [ 3122.131671] 2718 [ 3122.136752] syz-executor.4: [ 3122.143555] 2718 [ 3122.158117] page allocation failure: order:0 [ 3122.162968] syz-executor.2 cpuset= [ 3122.176179] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 3122.186651] / [ 3122.194709] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 3122.212174] page allocation failure: order:4 [ 3122.222153] Node 0 [ 3122.223365] (null) [ 3122.228774] DMA32 free:17360kB min:36200kB low:45248kB high:54296kB active_anon:244452kB inactive_anon:125252kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11488kB pagetables:15184kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3122.228777] lowmem_reserve[]: 0 0 0 0 0 [ 3122.228797] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3122.228816] lowmem_reserve[]: [ 3122.237569] (null) [ 3122.250981] mems_allowed=0-1 [ 3122.254478] syz-executor.4 cpuset= [ 3122.261030] 0 [ 3122.273543] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 3122.283825] CPU: 0 PID: 8170 Comm: syz-executor.2 Not tainted 4.14.230-syzkaller #0 [ 3122.284069] syz-executor.2 cpuset= [ 3122.287321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3122.287325] Call Trace: [ 3122.287346] dump_stack+0x1b2/0x281 [ 3122.287358] dump_header+0x178/0x82f [ 3122.287371] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3122.289723] (null) [ 3122.292723] ? ___ratelimit+0x2cd/0x530 [ 3122.295022] syz-executor.0 cpuset= [ 3122.299509] oom_kill_process.cold+0x10/0xa40 [ 3122.299528] out_of_memory+0xe3e/0x1190 [ 3122.299543] ? oom_killer_disable+0x1c0/0x1c0 [ 3122.301871] / [ 3122.305130] ? mutex_trylock+0x152/0x1a0 [ 3122.307322] / [ 3122.312135] __alloc_pages_nodemask+0x23e1/0x2720 [ 3122.316089] mems_allowed=0-1 [ 3122.323239] ? lock_acquire+0x170/0x3f0 [ 3122.325762] mems_allowed=0-1 [ 3122.332303] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3122.337089] / [ 3122.339377] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3122.341607] mems_allowed=0-1 [ 3122.371472] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3122.371485] ? retint_kernel+0x2d/0x2d [ 3122.371498] alloc_pages_current+0x155/0x260 [ 3122.371515] ion_page_pool_alloc+0x118/0x1b0 [ 3122.542459] ion_system_heap_allocate+0x133/0x8c0 [ 3122.548017] ? ion_alloc+0x187/0x810 [ 3122.551909] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3122.557740] ? ion_system_contig_heap_create+0x130/0x130 [ 3122.563436] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3122.568611] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3122.573612] ion_alloc+0x204/0x810 [ 3122.577489] ? ion_dma_buf_release+0x40/0x40 [ 3122.581883] ? __might_fault+0x177/0x1b0 [ 3122.585930] ion_ioctl+0xea/0x1f0 [ 3122.589465] ? ion_query_heaps+0x360/0x360 [ 3122.594398] ? _raw_spin_unlock+0x29/0x40 [ 3122.598534] ? ion_query_heaps+0x360/0x360 [ 3122.602951] do_vfs_ioctl+0x75a/0xff0 [ 3122.607017] ? ioctl_preallocate+0x1a0/0x1a0 [ 3122.611764] ? lock_downgrade+0x740/0x740 [ 3122.616074] ? __fget+0x225/0x360 [ 3122.619784] ? do_vfs_ioctl+0xff0/0xff0 [ 3122.623988] ? security_file_ioctl+0x83/0xb0 [ 3122.628644] SyS_ioctl+0x7f/0xb0 [ 3122.632373] ? do_vfs_ioctl+0xff0/0xff0 [ 3122.636420] do_syscall_64+0x1d5/0x640 [ 3122.640294] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3122.645566] RIP: 0033:0x466459 [ 3122.648737] RSP: 002b:00007fc87a7db188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3122.658833] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 3122.666450] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3122.674139] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3122.681765] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 3122.689238] R13: 00007ffd20e1ce3f R14: 00007fc87a7db300 R15: 0000000000022000 [ 3122.696858] CPU: 1 PID: 8153 Comm: syz-executor.2 Not tainted 4.14.230-syzkaller #0 [ 3122.704878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3122.713519] 0 0 [ 3122.714525] Call Trace: [ 3122.714544] dump_stack+0x1b2/0x281 [ 3122.723114] warn_alloc.cold+0x96/0x1cc [ 3122.727522] ? zone_watermark_ok_safe+0x220/0x220 [ 3122.732618] ? usleep_range+0x130/0x130 [ 3122.736767] ? try_to_free_pages+0x23f/0x6e0 [ 3122.741174] ? _find_next_bit+0xdb/0x100 [ 3122.743010] 0 0 [ 3122.745603] ? run_timer_softirq+0x5a0/0x5a0 [ 3122.745620] __alloc_pages_nodemask+0x2127/0x2720 [ 3122.752291] ? lock_acquire+0x170/0x3f0 [ 3122.761525] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3122.766869] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3122.771710] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3122.777428] alloc_pages_current+0x155/0x260 [ 3122.781974] ion_page_pool_alloc+0x118/0x1b0 [ 3122.783314] Node 1 [ 3122.786503] ion_system_heap_allocate+0x133/0x8c0 [ 3122.786512] ? ion_alloc+0x187/0x810 [ 3122.786523] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3122.786531] ? ion_system_contig_heap_create+0x130/0x130 [ 3122.786541] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3122.786551] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3122.786562] ion_alloc+0x204/0x810 [ 3122.789155] Normal free:26764kB min:53696kB low:67120kB high:80544kB active_anon:73884kB inactive_anon:39560kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21856kB pagetables:67040kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 3122.794147] ? ion_dma_buf_release+0x40/0x40 [ 3122.822940] lowmem_reserve[]: [ 3122.823638] ? __might_fault+0x177/0x1b0 [ 3122.864744] ion_ioctl+0xea/0x1f0 [ 3122.868478] ? ion_query_heaps+0x360/0x360 [ 3122.872703] ? ion_query_heaps+0x360/0x360 [ 3122.877238] do_vfs_ioctl+0x75a/0xff0 [ 3122.881576] ? ioctl_preallocate+0x1a0/0x1a0 [ 3122.886240] ? lock_downgrade+0x740/0x740 [ 3122.891443] ? __fget+0x225/0x360 [ 3122.894933] ? do_vfs_ioctl+0xff0/0xff0 [ 3122.898992] ? security_file_ioctl+0x83/0xb0 [ 3122.903482] SyS_ioctl+0x7f/0xb0 [ 3122.907020] ? do_vfs_ioctl+0xff0/0xff0 [ 3122.907567] 0 0 [ 3122.911079] do_syscall_64+0x1d5/0x640 [ 3122.911094] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3122.913055] 0 [ 3122.917195] RIP: 0033:0x466459 [ 3122.917199] RSP: 002b:00007fc87a81d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3122.917207] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3122.917211] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3122.917216] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3122.917220] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3122.917225] R13: 00007ffd20e1ce3f R14: 00007fc87a81d300 R15: 0000000000022000 [ 3122.924017] syz-executor.4: [ 3122.924804] CPU: 0 PID: 8185 Comm: syz-executor.4 Not tainted 4.14.230-syzkaller #0 [ 3122.933835] page allocation failure: order:0 [ 3122.936501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3122.936505] Call Trace: [ 3122.936522] dump_stack+0x1b2/0x281 [ 3122.936540] warn_alloc.cold+0x96/0x1cc [ 3122.943983] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 3122.951792] ? zone_watermark_ok_safe+0x220/0x220 [ 3122.951802] ? usleep_range+0x130/0x130 [ 3122.951810] ? try_to_free_pages+0x23f/0x6e0 [ 3122.951823] ? _find_next_bit+0xdb/0x100 [ 3122.985712] (null) [ 3122.989307] ? run_timer_softirq+0x5a0/0x5a0 [ 3123.015712] syz-executor.4 cpuset= [ 3123.016583] __alloc_pages_nodemask+0x2127/0x2720 [ 3123.021569] / [ 3123.025540] ? lock_acquire+0x170/0x3f0 [ 3123.045755] mems_allowed=0-1 [ 3123.050851] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3123.065042] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3123.069617] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3123.075345] alloc_pages_current+0x155/0x260 [ 3123.080202] ion_page_pool_alloc+0x118/0x1b0 [ 3123.085042] ion_system_heap_allocate+0x133/0x8c0 [ 3123.090198] ? ion_alloc+0x187/0x810 [ 3123.093924] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3123.099789] ? ion_system_contig_heap_create+0x130/0x130 [ 3123.105583] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3123.110597] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3123.115967] ion_alloc+0x204/0x810 [ 3123.119510] ? ion_dma_buf_release+0x40/0x40 [ 3123.124459] ? __might_fault+0x177/0x1b0 [ 3123.128897] ion_ioctl+0xea/0x1f0 [ 3123.132784] ? ion_query_heaps+0x360/0x360 [ 3123.137362] ? ion_query_heaps+0x360/0x360 [ 3123.141673] do_vfs_ioctl+0x75a/0xff0 [ 3123.145465] ? ioctl_preallocate+0x1a0/0x1a0 [ 3123.150051] ? lock_downgrade+0x740/0x740 [ 3123.154401] ? __fget+0x225/0x360 [ 3123.158378] ? do_vfs_ioctl+0xff0/0xff0 [ 3123.162644] ? security_file_ioctl+0x83/0xb0 [ 3123.167288] SyS_ioctl+0x7f/0xb0 [ 3123.170920] ? do_vfs_ioctl+0xff0/0xff0 [ 3123.175011] do_syscall_64+0x1d5/0x640 [ 3123.178933] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3123.184115] RIP: 0033:0x466459 [ 3123.187381] RSP: 002b:00007f61587e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3123.195844] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3123.203470] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3123.210921] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3123.218203] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3123.226191] R13: 00007ffed7f6205f R14: 00007f61587e7300 R15: 0000000000022000 [ 3123.233833] CPU: 1 PID: 8197 Comm: syz-executor.4 Not tainted 4.14.230-syzkaller #0 [ 3123.236612] 0 [ 3123.241830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3123.241832] 0 [ 3123.243623] Call Trace: [ 3123.254138] Node 0 [ 3123.256176] dump_stack+0x1b2/0x281 [ 3123.256189] warn_alloc.cold+0x96/0x1cc [ 3123.256200] ? zone_watermark_ok_safe+0x220/0x220 [ 3123.256209] ? usleep_range+0x130/0x130 [ 3123.256220] ? try_to_free_pages+0x23f/0x6e0 [ 3123.261194] DMA: [ 3123.261692] ? _find_next_bit+0xdb/0x100 [ 3123.265638] 1*4kB [ 3123.269781] ? run_timer_softirq+0x5a0/0x5a0 [ 3123.269798] __alloc_pages_nodemask+0x2127/0x2720 [ 3123.269814] ? lock_acquire+0x170/0x3f0 [ 3123.269827] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3123.269838] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3123.275022] (E) [ 3123.279544] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3123.279562] alloc_pages_current+0x155/0x260 [ 3123.279574] ion_page_pool_alloc+0x118/0x1b0 [ 3123.279582] ion_system_heap_allocate+0x133/0x8c0 [ 3123.279596] ? _raw_spin_unlock+0x29/0x40 [ 3123.285714] 12*8kB [ 3123.286339] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3123.290821] (UME) [ 3123.293165] ? ion_system_contig_heap_create+0x130/0x130 [ 3123.298925] 9*16kB [ 3123.303450] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3123.307451] (UME) [ 3123.313449] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3123.319907] 9*32kB [ 3123.320064] ion_alloc+0x27a/0x810 [ 3123.325591] (UME) [ 3123.330174] ? ion_dma_buf_release+0x40/0x40 [ 3123.330186] ? __might_fault+0x177/0x1b0 [ 3123.330196] ion_ioctl+0xea/0x1f0 [ 3123.330204] ? ion_query_heaps+0x360/0x360 [ 3123.330216] ? _raw_spin_unlock+0x29/0x40 [ 3123.330224] ? ion_query_heaps+0x360/0x360 [ 3123.335065] 5*64kB [ 3123.340150] do_vfs_ioctl+0x75a/0xff0 [ 3123.340161] ? ioctl_preallocate+0x1a0/0x1a0 [ 3123.340169] ? lock_downgrade+0x740/0x740 [ 3123.340181] ? __fget+0x225/0x360 [ 3123.340189] ? do_vfs_ioctl+0xff0/0xff0 [ 3123.340199] ? security_file_ioctl+0x83/0xb0 [ 3123.340209] SyS_ioctl+0x7f/0xb0 [ 3123.346382] (UME) [ 3123.346837] ? do_vfs_ioctl+0xff0/0xff0 [ 3123.352294] 1*128kB [ 3123.354534] do_syscall_64+0x1d5/0x640 [ 3123.360999] (E) [ 3123.362808] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3123.370527] 5*256kB [ 3123.370936] RIP: 0033:0x466459 [ 3123.376588] (UME) [ 3123.378908] RSP: 002b:00007f6158763188 EFLAGS: 00000246 [ 3123.382980] 3*512kB (UE) [ 3123.385120] ORIG_RAX: 0000000000000010 [ 3123.391889] 3*1024kB [ 3123.394001] RAX: ffffffffffffffda RBX: 000000000056c200 RCX: 0000000000466459 [ 3123.397523] (UME) [ 3123.401806] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3123.408587] 2*2048kB [ 3123.411012] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3123.413259] (UM) [ 3123.417524] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c200 [ 3123.417530] R13: 00007ffed7f6205f R14: 00007f6158763300 R15: 0000000000022000 [ 3123.430638] CPU: 1 PID: 8150 Comm: syz-executor.0 Not tainted 4.14.230-syzkaller #0 [ 3123.432546] 0*4096kB [ 3123.434683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3123.439672] = 10964kB [ 3123.443141] Call Trace: [ 3123.445290] Node 0 [ 3123.449355] dump_stack+0x1b2/0x281 [ 3123.449370] warn_alloc.cold+0x96/0x1cc [ 3123.449382] ? zone_watermark_ok_safe+0x220/0x220 [ 3123.449402] __alloc_pages_nodemask+0x2127/0x2720 [ 3123.449411] ? mark_held_locks+0xa6/0xf0 [ 3123.449424] ? _raw_spin_unlock_irq+0x24/0x80 [ 3123.453719] DMA32: [ 3123.455650] ? lock_acquire+0x170/0x3f0 [ 3123.457669] 871*4kB [ 3123.462991] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3123.467647] (UME) [ 3123.468962] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3123.471211] 304*8kB [ 3123.476677] ? __mutex_unlock_slowpath+0x75/0x770 [ 3123.476687] ? ion_page_pool_remove+0x111/0x280 [ 3123.476700] alloc_pages_current+0x155/0x260 [ 3123.476711] ion_page_pool_alloc+0x118/0x1b0 [ 3123.476720] ion_system_heap_allocate+0x133/0x8c0 [ 3123.476731] ? _raw_spin_unlock+0x29/0x40 [ 3123.476741] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3123.479687] (UME) [ 3123.483917] ? ion_system_contig_heap_create+0x130/0x130 [ 3123.489050] 32*16kB [ 3123.494119] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3123.496393] (UM) [ 3123.503796] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3123.508114] 347*32kB [ 3123.513574] ion_alloc+0x27a/0x810 [ 3123.515923] (UE) [ 3123.523532] ? ion_dma_buf_release+0x40/0x40 [ 3123.532909] 0*64kB [ 3123.538946] ? __might_fault+0x177/0x1b0 [ 3123.538958] ion_ioctl+0xea/0x1f0 [ 3123.538973] ? ion_query_heaps+0x360/0x360 [ 3123.538984] ? ion_query_heaps+0x360/0x360 [ 3123.541509] 0*128kB [ 3123.551409] do_vfs_ioctl+0x75a/0xff0 [ 3123.551423] ? ioctl_preallocate+0x1a0/0x1a0 [ 3123.551431] ? lock_downgrade+0x740/0x740 [ 3123.551443] ? __fget+0x225/0x360 [ 3123.551450] ? do_vfs_ioctl+0xff0/0xff0 [ 3123.551460] ? security_file_ioctl+0x83/0xb0 [ 3123.551469] SyS_ioctl+0x7f/0xb0 [ 3123.551476] ? do_vfs_ioctl+0xff0/0xff0 [ 3123.551486] do_syscall_64+0x1d5/0x640 [ 3123.551500] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3123.556035] 0*256kB [ 3123.556830] RIP: 0033:0x466459 [ 3123.559149] 0*512kB [ 3123.562784] RSP: 002b:00007f1ef2095188 EFLAGS: 00000246 [ 3123.567194] 0*1024kB [ 3123.571953] ORIG_RAX: 0000000000000010 [ 3123.578929] 0*2048kB [ 3123.581239] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3123.585863] 0*4096kB [ 3123.588108] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3123.592055] = 17532kB [ 3123.594373] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3123.601204] warn_alloc_show_mem: 1 callbacks suppressed [ 3123.601207] Mem-Info: [ 3123.602636] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3123.608321] Node 0 [ 3123.610609] R13: 00007fffa779c11f R14: 00007f1ef2095300 R15: 0000000000022000 [ 3123.695219] active_anon:79651 inactive_anon:41217 isolated_anon:0 [ 3123.695219] active_file:13 inactive_file:688 isolated_file:0 [ 3123.695219] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3123.695219] slab_reclaimable:14578 slab_unreclaimable:146859 [ 3123.695219] mapped:53134 shmem:43797 pagetables:20589 bounce:0 [ 3123.695219] free:28407 free_pcp:58 free_cma:0 [ 3123.700079] Mem-Info: [ 3123.744460] Node 0 active_anon:244620kB inactive_anon:125308kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:165940kB dirty:0kB writeback:0kB shmem:130240kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 174080kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3123.835730] active_anon:79651 inactive_anon:41217 isolated_anon:0 [ 3123.835730] active_file:14 inactive_file:1045 isolated_file:0 [ 3123.835730] unevictable:0 dirty:50 writeback:0 unstable:0 [ 3123.835730] slab_reclaimable:14578 slab_unreclaimable:146892 [ 3123.835730] mapped:53415 shmem:43797 pagetables:20589 bounce:0 [ 3123.835730] free:94528 free_pcp:82 free_cma:0 [ 3123.963193] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3123.994547] Node 1 Normal: 0*4kB 2*8kB (UM) 2*16kB (UM) 753*32kB (UM) 1644*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 12*2048kB (U) 0*4096kB = 153936kB [ 3124.013904] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3124.045735] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3124.079008] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3124.085694] Node 1 active_anon:74004kB inactive_anon:39560kB active_file:52kB inactive_file:4136kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:47812kB dirty:212kB writeback:0kB shmem:44948kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3124.089319] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3124.149454] Node 0 active_anon:244620kB inactive_anon:125308kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:165940kB dirty:4kB writeback:0kB shmem:130240kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 174080kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3124.186009] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3124.241947] 44563 total pagecache pages [ 3124.259841] 0 pages in swap cache [ 3124.266808] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3124.273253] Node 0 DMA32 free:25532kB min:36200kB low:45248kB high:54296kB active_anon:244452kB inactive_anon:125252kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:4kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11456kB pagetables:15184kB bounce:0kB free_pcp:248kB local_pcp:232kB free_cma:0kB [ 3124.273621] Swap cache stats: add 0, delete 0, find 0/0 [ 3124.321449] Node 1 active_anon:74004kB inactive_anon:39560kB active_file:500kB inactive_file:460kB unevictable:0kB isolated(anon):0kB isolated(file):136kB mapped:45912kB dirty:12kB writeback:0kB shmem:44948kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3124.345656] lowmem_reserve[]: 0 0 0 0 0 [ 3124.355560] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3124.368761] Free swap = 0kB [ 3124.391122] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3124.406284] syz-executor.2: [ 3124.425087] Total swap = 0kB [ 3124.433180] 2097051 pages RAM [ 3124.440706] 0 pages HighMem/MovableOnly [ 3124.445146] 363848 pages reserved [ 3124.445817] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3124.448777] lowmem_reserve[]: [ 3124.472674] 0 pages cma reserved [ 3124.485318] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 3124.494964] lowmem_reserve[]: 0 0 0 0 0 [ 3124.505652] 0 2717 2718 2718 2718 [ 3124.507515] CPU: 1 PID: 8153 Comm: syz-executor.2 Not tainted 4.14.230-syzkaller #0 [ 3124.509916] Node 0 [ 3124.519096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3124.519102] Call Trace: [ 3124.519125] dump_stack+0x1b2/0x281 [ 3124.519137] warn_alloc.cold+0x96/0x1cc [ 3124.519149] ? zone_watermark_ok_safe+0x220/0x220 [ 3124.519168] __alloc_pages_nodemask+0x2127/0x2720 [ 3124.519179] ? _raw_spin_unlock_irq+0x24/0x80 [ 3124.519193] ? lock_acquire+0x170/0x3f0 [ 3124.519208] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3124.519224] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3124.519235] ? __mutex_unlock_slowpath+0x75/0x770 [ 3124.519248] alloc_pages_current+0x155/0x260 [ 3124.519261] ion_page_pool_alloc+0x118/0x1b0 [ 3124.550818] DMA32 free:18092kB min:36200kB low:45248kB high:54296kB active_anon:244452kB inactive_anon:125252kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:4kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11456kB pagetables:15184kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3124.552640] ion_system_heap_allocate+0x133/0x8c0 [ 3124.572545] lowmem_reserve[]: [ 3124.572906] ? _raw_spin_unlock+0x29/0x40 [ 3124.590819] 0 [ 3124.618002] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3124.618012] ? ion_system_contig_heap_create+0x130/0x130 [ 3124.618022] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3124.618032] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3124.618041] ion_alloc+0x27a/0x810 [ 3124.618054] ? ion_dma_buf_release+0x40/0x40 [ 3124.618065] ? __might_fault+0x177/0x1b0 [ 3124.618076] ion_ioctl+0xea/0x1f0 [ 3124.618082] ? ion_query_heaps+0x360/0x360 [ 3124.618093] ? ion_query_heaps+0x360/0x360 [ 3124.618102] do_vfs_ioctl+0x75a/0xff0 [ 3124.618113] ? ioctl_preallocate+0x1a0/0x1a0 [ 3124.618122] ? lock_downgrade+0x740/0x740 [ 3124.618134] ? __fget+0x225/0x360 [ 3124.618143] ? do_vfs_ioctl+0xff0/0xff0 [ 3124.618155] ? security_file_ioctl+0x83/0xb0 [ 3124.618166] SyS_ioctl+0x7f/0xb0 [ 3124.635304] 0 [ 3124.637445] ? do_vfs_ioctl+0xff0/0xff0 [ 3124.637460] do_syscall_64+0x1d5/0x640 [ 3124.637474] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3124.637481] RIP: 0033:0x466459 [ 3124.637485] RSP: 002b:00007fc87a81d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3124.637493] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3124.637498] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3124.637502] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3124.637506] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3124.637510] R13: 00007ffd20e1ce3f R14: 00007fc87a81d300 R15: 0000000000022000 [ 3124.645197] Node 1 [ 3124.654133] syz-executor.5: [ 3124.667581] Normal free:26820kB min:53696kB low:67120kB high:80544kB active_anon:74004kB inactive_anon:39560kB active_file:268kB inactive_file:56kB unevictable:0kB writepending:212kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21856kB pagetables:67040kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3124.675517] page allocation failure: order:0 [ 3124.676593] syz-executor.0: [ 3124.680946] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 3124.684810] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 3124.697118] 0 [ 3124.703316] lowmem_reserve[]: [ 3124.712097] 0 [ 3124.712164] 0 [ 3124.718263] (null) [ 3124.725806] 0 [ 3124.731336] 0 [ 3124.743344] (null) [ 3124.752651] syz-executor.5 cpuset= [ 3124.753240] syz-executor.0 cpuset= [ 3124.761918] / [ 3124.774884] 0 [ 3124.815829] / [ 3124.827607] mems_allowed=0-1 [ 3124.829711] mems_allowed=0-1 [ 3124.852473] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3124.855609] 0 [ 3124.863980] CPU: 0 PID: 8180 Comm: syz-executor.5 Not tainted 4.14.230-syzkaller #0 [ 3124.875601] 0 [ 3124.900244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3124.900250] Call Trace: [ 3124.900271] dump_stack+0x1b2/0x281 [ 3124.900283] warn_alloc.cold+0x96/0x1cc [ 3124.900296] ? zone_watermark_ok_safe+0x220/0x220 [ 3124.927749] ? usleep_range+0x130/0x130 [ 3124.931701] Node 0 [ 3124.936971] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3124.936984] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3124.936994] ? run_timer_softirq+0x5a0/0x5a0 [ 3124.955614] warn_alloc_show_mem: 3 callbacks suppressed [ 3124.955618] Mem-Info: [ 3124.956079] __alloc_pages_nodemask+0x2127/0x2720 [ 3124.960649] active_anon:79657 inactive_anon:41217 isolated_anon:0 [ 3124.960649] active_file:12 inactive_file:13 isolated_file:0 [ 3124.960649] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3124.960649] slab_reclaimable:14577 slab_unreclaimable:146860 [ 3124.960649] mapped:52707 shmem:43797 pagetables:20589 bounce:0 [ 3124.960649] free:14287 free_pcp:39 free_cma:0 [ 3124.966109] ? lock_acquire+0x170/0x3f0 [ 3124.966124] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3124.966135] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3124.968752] DMA: [ 3124.975230] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3125.025602] Node 0 active_anon:244624kB inactive_anon:125308kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:166032kB dirty:0kB writeback:0kB shmem:130240kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 174080kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3125.025779] alloc_pages_current+0x155/0x260 [ 3125.027818] Node 1 active_anon:74004kB inactive_anon:39560kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44796kB dirty:0kB writeback:0kB shmem:44948kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3125.033811] ion_page_pool_alloc+0x118/0x1b0 [ 3125.095580] 3*4kB [ 3125.097084] ion_system_heap_allocate+0x133/0x8c0 [ 3125.097097] ? _raw_spin_unlock+0x29/0x40 [ 3125.097104] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3125.097112] ? ion_system_contig_heap_create+0x130/0x130 [ 3125.097121] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3125.097131] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3125.097141] ion_alloc+0x27a/0x810 [ 3125.101868] (UE) [ 3125.104113] ? ion_dma_buf_release+0x40/0x40 [ 3125.109167] Node 0 [ 3125.113613] ? __might_fault+0x177/0x1b0 [ 3125.125594] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3125.129610] ion_ioctl+0xea/0x1f0 [ 3125.134617] lowmem_reserve[]: [ 3125.138536] ? ion_query_heaps+0x360/0x360 [ 3125.138548] ? ion_query_heaps+0x360/0x360 [ 3125.138562] do_vfs_ioctl+0x75a/0xff0 [ 3125.145613] 12*8kB [ 3125.146089] ? ioctl_preallocate+0x1a0/0x1a0 [ 3125.148594] (UME) [ 3125.153423] ? lock_downgrade+0x740/0x740 [ 3125.153437] ? __fget+0x225/0x360 [ 3125.195585] 0 [ 3125.195974] ? do_vfs_ioctl+0xff0/0xff0 [ 3125.199748] 2717 [ 3125.202230] ? security_file_ioctl+0x83/0xb0 [ 3125.215565] 2718 [ 3125.216570] SyS_ioctl+0x7f/0xb0 [ 3125.218521] 2718 [ 3125.222743] ? do_vfs_ioctl+0xff0/0xff0 [ 3125.225237] 2718 [ 3125.229890] do_syscall_64+0x1d5/0x640 [ 3125.229905] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3125.229912] RIP: 0033:0x466459 [ 3125.229916] RSP: 002b:00007ff493160188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3125.245570] 9*16kB [ 3125.247838] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3125.253044] (UME) [ 3125.256409] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3125.256414] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3125.256418] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3125.256423] R13: 00007fff6312dd3f R14: 00007ff493160300 R15: 0000000000022000 [ 3125.268613] lowmem_reserve[]: [ 3125.288794] 0 [ 3125.293422] CPU: 1 PID: 8150 Comm: syz-executor.0 Not tainted 4.14.230-syzkaller #0 [ 3125.311789] 0 [ 3125.313443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3125.332903] 0 0 [ 3125.333257] Call Trace: [ 3125.333278] dump_stack+0x1b2/0x281 [ 3125.335420] 0 [ 3125.338485] warn_alloc.cold+0x96/0x1cc [ 3125.338495] ? virtblk_serial_show+0x130/0x260 [ 3125.338505] ? zone_watermark_ok_safe+0x220/0x220 [ 3125.338514] ? usleep_range+0x130/0x130 [ 3125.338522] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3125.338533] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3125.338542] ? run_timer_softirq+0x5a0/0x5a0 [ 3125.338558] __alloc_pages_nodemask+0x2127/0x2720 [ 3125.348702] ? lock_acquire+0x170/0x3f0 [ 3125.348717] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3125.348726] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3125.348742] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3125.348754] ? retint_kernel+0x2d/0x2d [ 3125.348767] alloc_pages_current+0x155/0x260 [ 3125.348777] ion_page_pool_alloc+0x118/0x1b0 [ 3125.348787] ion_system_heap_allocate+0x133/0x8c0 [ 3125.348798] ? _raw_spin_unlock+0x29/0x40 [ 3125.348805] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3125.348816] ? ion_system_contig_heap_create+0x130/0x130 [ 3125.363784] Node 1 [ 3125.367589] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3125.367602] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3125.367614] ion_alloc+0x27a/0x810 [ 3125.367627] ? ion_dma_buf_release+0x40/0x40 [ 3125.367638] ? __might_fault+0x177/0x1b0 [ 3125.367649] ion_ioctl+0xea/0x1f0 [ 3125.372756] Normal free:27276kB min:53696kB low:67120kB high:80544kB active_anon:74004kB inactive_anon:39560kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21856kB pagetables:67040kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3125.377402] ? ion_query_heaps+0x360/0x360 [ 3125.377412] ? ion_query_heaps+0x360/0x360 [ 3125.377423] do_vfs_ioctl+0x75a/0xff0 [ 3125.377433] ? ioctl_preallocate+0x1a0/0x1a0 [ 3125.377441] ? lock_downgrade+0x740/0x740 [ 3125.377454] ? __fget+0x225/0x360 [ 3125.377462] ? do_vfs_ioctl+0xff0/0xff0 [ 3125.377473] ? security_file_ioctl+0x83/0xb0 [ 3125.377483] SyS_ioctl+0x7f/0xb0 [ 3125.377490] ? do_vfs_ioctl+0xff0/0xff0 [ 3125.377502] do_syscall_64+0x1d5/0x640 [ 3125.377516] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3125.392565] lowmem_reserve[]: [ 3125.396440] RIP: 0033:0x466459 [ 3125.396445] RSP: 002b:00007f1ef2095188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3125.396454] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3125.396458] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3125.396462] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3125.396467] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3125.396472] R13: 00007fffa779c11f R14: 00007f1ef2095300 R15: 0000000000022000 [ 3125.398350] Node 0 [ 3125.402297] 0 [ 3125.407271] 9*32kB (UME) 5*64kB (UME) 1*128kB (E) 5*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10972kB [ 3125.407322] Node 0 DMA32: 875*4kB (UME) 332*8kB (UME) 34*16kB (UM) 371*32kB (UE) [ 3125.422390] 0 [ 3125.428370] DMA32 free:18900kB min:36200kB low:45248kB high:54296kB active_anon:244456kB inactive_anon:125252kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11456kB pagetables:15184kB bounce:0kB free_pcp:156kB local_pcp:144kB free_cma:0kB [ 3125.434998] 0 [ 3125.438115] lowmem_reserve[]: 0 0 0 0 0 [ 3125.438136] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3125.438155] lowmem_reserve[]: 0 0 0 0 0 [ 3125.450991] 0 [ 3125.452742] Node 1 [ 3125.455129] 0 [ 3125.460476] 2*64kB [ 3125.475638] Node 0 [ 3125.501325] Normal free:27276kB min:53696kB low:67120kB high:80544kB active_anon:74004kB inactive_anon:39560kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21856kB pagetables:67040kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3125.516145] DMA: [ 3125.518659] lowmem_reserve[]: [ 3125.521635] 3*4kB [ 3125.525350] 0 [ 3125.540302] (UE) [ 3125.543975] (U) [ 3125.551319] 12*8kB [ 3125.551612] 2*128kB [ 3125.554894] (UME) [ 3125.559681] 0 [ 3125.577391] 9*16kB [ 3125.584062] (U) [ 3125.602279] (UME) [ 3125.615591] 0 [ 3125.665617] 9*32kB [ 3125.668076] 0*256kB [ 3125.668957] (UME) [ 3125.685202] 0*512kB [ 3125.745565] 5*64kB (UME) 1*128kB (E) 5*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10972kB [ 3125.821941] Node 0 DMA32: 875*4kB (UME) 496*8kB (UME) 46*16kB (UM) 371*32kB (UE) 2*64kB (U) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20460kB [ 3125.835557] 0 0 [ 3125.838690] Node 0 DMA: 3*4kB (UE) 13*8kB (UME) 9*16kB (UME) 9*32kB (UME) 5*64kB (UME) 1*128kB (E) 5*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10980kB [ 3125.840349] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3125.875994] Node 0 DMA32: 875*4kB (UME) 618*8kB (UME) 50*16kB (UM) 375*32kB (UE) 2*64kB (U) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 21628kB [ 3125.894061] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 1*16kB (U) 633*32kB (U) 1*64kB (M) 0*128kB 0*256kB 1*512kB (M) 176*1024kB (UM) 81*2048kB (U) 3*4096kB (U) = 379264kB [ 3125.895588] 0*1024kB [ 3125.915735] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3125.929253] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3125.945579] 0*2048kB 0*4096kB = 18956kB [ 3125.949854] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3125.955598] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3125.961346] Node 1 [ 3125.985645] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3125.988910] Normal: [ 3125.997355] Node 1 Normal: 1*4kB (U) 0*8kB 1*16kB (M) 544*32kB (U) 90*64kB (UM) 1*128kB (M) 1*256kB (M) 0*512kB 257*1024kB (UM) 84*2048kB (U) 5*4096kB (U) = 479252kB [ 3126.015560] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3126.025550] 1*4kB (U) 1*8kB (U) 2*16kB (UM) 545*32kB (U) 431*64kB (UM) 1*128kB (M) 1*256kB (M) 0*512kB 257*1024kB (UM) 84*2048kB (U) 5*4096kB (U) = 501132kB [ 3126.035907] 45389 total pagecache pages [ 3126.045035] 0 pages in swap cache [ 3126.059356] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3126.065608] Swap cache stats: add 0, delete 0, find 0/0 [ 3126.068634] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3126.074406] Free swap = 0kB [ 3126.096078] warn_alloc_show_mem: 1 callbacks suppressed [ 3126.096082] Mem-Info: [ 3126.098440] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3126.101583] active_anon:79598 inactive_anon:41217 isolated_anon:0 [ 3126.101583] active_file:12 inactive_file:1567 isolated_file:0 [ 3126.101583] unevictable:0 dirty:21 writeback:0 unstable:0 [ 3126.101583] slab_reclaimable:14481 slab_unreclaimable:148602 [ 3126.101583] mapped:53968 shmem:43797 pagetables:20589 bounce:0 [ 3126.101583] free:160835 free_pcp:381 free_cma:0 [ 3126.104064] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3126.113442] Total swap = 0kB [ 3126.169383] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3126.176143] Node 0 active_anon:244472kB inactive_anon:125308kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:166160kB dirty:4kB writeback:0kB shmem:130240kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 174080kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3126.185562] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3126.245602] Node 1 active_anon:73920kB inactive_anon:39560kB active_file:4kB inactive_file:6224kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:49712kB dirty:80kB writeback:0kB shmem:44948kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3126.255551] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3126.276430] 2097051 pages RAM [ 3126.287375] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3126.295866] 0 pages HighMem/MovableOnly [ 3126.300476] 363848 pages reserved [ 3126.303933] 0 pages cma reserved [ 3126.319389] 45389 total pagecache pages [ 3126.323494] 0 pages in swap cache [ 3126.325611] Out of memory (oom_kill_allocating_task): Kill process 8170 (syz-executor.2) score 0 or sacrifice child [ 3126.335542] Swap cache stats: add 0, delete 0, find 0/0 [ 3126.338499] Node 0 [ 3126.343536] Free swap = 0kB [ 3126.343549] DMA free:11044kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3126.343554] lowmem_reserve[]: [ 3126.355564] 45389 total pagecache pages [ 3126.386132] Killed process 8153 (syz-executor.2) total-vm:93516kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3126.387633] Total swap = 0kB [ 3126.407849] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3126.415565] 2097051 pages RAM [ 3126.423549] 0 pages HighMem/MovableOnly [ 3126.431815] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 3126.435774] 363848 pages reserved [ 3126.440892] 0 pages cma reserved [ 3126.448007] CPU: 0 PID: 8170 Comm: syz-executor.2 Not tainted 4.14.230-syzkaller #0 [ 3126.452645] 0 pages in swap cache [ 3126.456284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 23:48:50 executing program 3: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xffff, 0x5, 0x9, 0x20, 0x7fffffff, 0x0, 0x3, 0xa7}, &(0x7f0000000100)={0x2, 0x1, 0x7fffffff, 0xfffffffffffffffe, 0xffff, 0x1, 0x9, 0x200}, &(0x7f0000000140)={0x1, 0x5, 0x5, 0x7fff, 0x2, 0x4, 0x8, 0xd68}, &(0x7f00000001c0)={r1, r2+10000000}, &(0x7f0000000240)={&(0x7f0000000200)={[0x4]}, 0x8}) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000080)=0xfffffffc) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x3, 0x4) ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000000)=0x1400820) [ 3126.456289] Call Trace: [ 3126.456306] dump_stack+0x1b2/0x281 [ 3126.456319] warn_alloc.cold+0x96/0x1cc [ 3126.456329] ? lock_downgrade+0x740/0x740 [ 3126.456338] ? zone_watermark_ok_safe+0x220/0x220 [ 3126.456348] ? wake_up_q+0x82/0xd0 [ 3126.456364] ? wait_for_completion_io+0x10/0x10 [ 3126.456377] __alloc_pages_nodemask+0x2127/0x2720 [ 3126.456391] ? lock_acquire+0x170/0x3f0 [ 3126.456407] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3126.456417] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3126.456432] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3126.456445] ? retint_kernel+0x2d/0x2d [ 3126.456457] alloc_pages_current+0x155/0x260 [ 3126.456467] ion_page_pool_alloc+0x118/0x1b0 [ 3126.456478] ion_system_heap_allocate+0x133/0x8c0 [ 3126.470868] Swap cache stats: add 0, delete 0, find 0/0 [ 3126.472261] ? ion_alloc+0x187/0x810 [ 3126.472274] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3126.486377] Free swap = 0kB [ 3126.488985] ? ion_system_contig_heap_create+0x130/0x130 [ 3126.488999] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3126.508056] Total swap = 0kB [ 3126.512267] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3126.512280] ion_alloc+0x204/0x810 [ 3126.534246] 2097051 pages RAM [ 3126.535176] ? ion_dma_buf_release+0x40/0x40 [ 3126.554334] 0 pages HighMem/MovableOnly [ 3126.555200] ? __might_fault+0x177/0x1b0 [ 3126.565874] 363848 pages reserved [ 3126.569030] ion_ioctl+0xea/0x1f0 [ 3126.569041] ? ion_query_heaps+0x360/0x360 [ 3126.578678] 0 pages cma reserved [ 3126.580703] ? _raw_spin_unlock+0x29/0x40 [ 3126.580715] ? ion_query_heaps+0x360/0x360 [ 3126.620487] do_vfs_ioctl+0x75a/0xff0 [ 3126.624474] ? ioctl_preallocate+0x1a0/0x1a0 [ 3126.628978] ? lock_downgrade+0x740/0x740 [ 3126.633405] ? __fget+0x225/0x360 [ 3126.636866] ? do_vfs_ioctl+0xff0/0xff0 [ 3126.640966] ? security_file_ioctl+0x83/0xb0 [ 3126.645382] SyS_ioctl+0x7f/0xb0 [ 3126.648889] ? do_vfs_ioctl+0xff0/0xff0 [ 3126.653593] do_syscall_64+0x1d5/0x640 [ 3126.658453] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3126.663862] RIP: 0033:0x466459 [ 3126.667229] RSP: 002b:00007fc87a7db188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3126.675646] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 3126.683105] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3126.691127] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3126.698515] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 3126.706224] R13: 00007ffd20e1ce3f R14: 00007fc87a7db300 R15: 0000000000022000 [ 3126.725528] 0 2717 2718 2718 2718 [ 3126.729127] Node 0 DMA32 free:178100kB min:36200kB low:45248kB high:54296kB active_anon:244404kB inactive_anon:125252kB active_file:44kB inactive_file:3144kB unevictable:0kB writepending:4kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11456kB pagetables:15184kB bounce:0kB free_pcp:1264kB local_pcp:636kB free_cma:0kB [ 3126.805536] lowmem_reserve[]: 0 0 0 0 0 [ 3126.809775] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3126.856933] lowmem_reserve[]: 0 0 0 0 0 [ 3126.861056] Node 1 Normal free:1063620kB min:53696kB low:67120kB high:80544kB active_anon:73908kB inactive_anon:39560kB active_file:4kB inactive_file:6284kB unevictable:0kB writepending:92kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21856kB pagetables:67040kB bounce:0kB free_pcp:1064kB local_pcp:340kB free_cma:0kB [ 3126.894440] lowmem_reserve[]: 0 0 0 0 0 [ 3126.900282] Node 0 DMA: 22*4kB (UE) 19*8kB (UME) 37*16kB (UME) 22*32kB (UME) 11*64kB (UME) 3*128kB (UE) 5*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 12608kB [ 3126.920420] Node 0 DMA32: 773*4kB (UE) 2170*8kB (UME) 1393*16kB (UM) 515*32kB (UE) 1613*64kB (U) 264*128kB (U) 32*256kB (U) 2*512kB (U) 11*1024kB (U) 0*2048kB 0*4096kB = 216724kB [ 3126.942799] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3126.957694] Node 1 Normal: 61*4kB (UM) 137*8kB (UM) 780*16kB (UM) 932*32kB (UM) 5095*64kB (UM) 909*128kB (UM) 320*256kB (UM) 86*512kB (U) 220*1024kB (UM) 84*2048kB (U) 5*4096kB (U) = 1029820kB [ 3126.986119] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3126.995365] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3127.035544] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3127.044568] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3127.058001] 46322 total pagecache pages [ 3127.062017] 0 pages in swap cache [ 3127.066944] Swap cache stats: add 0, delete 0, find 0/0 [ 3127.072627] Free swap = 0kB [ 3127.080558] Total swap = 0kB [ 3127.083614] 2097051 pages RAM [ 3127.088010] 0 pages HighMem/MovableOnly [ 3127.092219] 363848 pages reserved [ 3127.098964] 0 pages cma reserved [ 3127.535469] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3127.575451] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 3127.581126] CPU: 1 PID: 8185 Comm: syz-executor.4 Not tainted 4.14.230-syzkaller #0 [ 3127.589105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3127.598815] Call Trace: [ 3127.601518] dump_stack+0x1b2/0x281 [ 3127.605345] warn_alloc.cold+0x96/0x1cc [ 3127.609709] ? zone_watermark_ok_safe+0x220/0x220 [ 3127.614674] __alloc_pages_nodemask+0x2127/0x2720 [ 3127.619629] ? lock_acquire+0x170/0x3f0 [ 3127.623891] ? lock_acquire+0x170/0x3f0 [ 3127.628231] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3127.633093] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3127.638989] ? __mutex_unlock_slowpath+0x75/0x770 [ 3127.643947] alloc_pages_current+0x155/0x260 [ 3127.648549] ion_page_pool_alloc+0x118/0x1b0 [ 3127.655257] ion_system_heap_allocate+0x133/0x8c0 [ 3127.660226] ? _raw_spin_unlock+0x29/0x40 [ 3127.664682] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3127.669642] ? ion_system_contig_heap_create+0x130/0x130 [ 3127.675356] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3127.685639] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3127.690671] ion_alloc+0x27a/0x810 [ 3127.694841] ? ion_dma_buf_release+0x40/0x40 [ 3127.699648] ? __might_fault+0x177/0x1b0 [ 3127.703717] ion_ioctl+0xea/0x1f0 [ 3127.707195] ? ion_query_heaps+0x360/0x360 [ 3127.711791] ? ion_query_heaps+0x360/0x360 [ 3127.716555] do_vfs_ioctl+0x75a/0xff0 [ 3127.720624] ? ioctl_preallocate+0x1a0/0x1a0 [ 3127.725300] ? lock_downgrade+0x740/0x740 [ 3127.729548] ? __fget+0x225/0x360 [ 3127.733095] ? do_vfs_ioctl+0xff0/0xff0 [ 3127.737254] ? security_file_ioctl+0x83/0xb0 [ 3127.741774] SyS_ioctl+0x7f/0xb0 [ 3127.745343] ? do_vfs_ioctl+0xff0/0xff0 [ 3127.750021] do_syscall_64+0x1d5/0x640 [ 3127.754011] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3127.759497] RIP: 0033:0x466459 [ 3127.762836] RSP: 002b:00007f61587e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3127.770664] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3127.778169] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3127.786211] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3127.793918] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3127.801452] R13: 00007ffed7f6205f R14: 00007f61587e7300 R15: 0000000000022000 [ 3127.812580] warn_alloc_show_mem: 1 callbacks suppressed [ 3127.812584] Mem-Info: [ 3127.820700] active_anon:79624 inactive_anon:41217 isolated_anon:0 [ 3127.820700] active_file:187 inactive_file:164 isolated_file:58 [ 3127.820700] unevictable:0 dirty:16 writeback:0 unstable:0 [ 3127.820700] slab_reclaimable:14421 slab_unreclaimable:149658 [ 3127.820700] mapped:53167 shmem:43797 pagetables:20537 bounce:0 [ 3127.820700] free:14136 free_pcp:181 free_cma:0 [ 3127.856350] Node 0 active_anon:244588kB inactive_anon:125308kB active_file:616kB inactive_file:652kB unevictable:0kB isolated(anon):0kB isolated(file):92kB mapped:167572kB dirty:64kB writeback:0kB shmem:130240kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 174080kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3127.885820] Node 1 active_anon:73908kB inactive_anon:39560kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44796kB dirty:0kB writeback:0kB shmem:44948kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3127.915292] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3127.942947] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3127.948050] Node 0 DMA32 free:18064kB min:36200kB low:45248kB high:54296kB active_anon:244420kB inactive_anon:125252kB active_file:744kB inactive_file:652kB unevictable:0kB writepending:64kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11392kB pagetables:14976kB bounce:0kB free_pcp:680kB local_pcp:0kB free_cma:0kB [ 3127.978877] lowmem_reserve[]: 0 0 0 0 0 [ 3127.982880] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3128.009406] lowmem_reserve[]: 0 0 0 0 0 [ 3128.013509] Node 1 Normal free:26780kB min:53696kB low:67120kB high:80544kB active_anon:73908kB inactive_anon:39560kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21856kB pagetables:67040kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 3128.044048] lowmem_reserve[]: 0 0 0 0 0 [ 3128.048235] Node 0 DMA: 10*4kB (UE) 19*8kB (UME) 37*16kB (UME) 22*32kB (UME) 4*64kB (ME) 2*128kB (UE) 5*256kB (UME) 3*512kB (UE) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 10960kB [ 3128.065123] Node 0 DMA32: 891*4kB (ME) 284*8kB (ME) 30*16kB (M) 68*32kB (UE) 0*64kB 1*128kB (U) 32*256kB (U) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 17836kB [ 3128.080277] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3128.091523] Node 1 Normal: 8*4kB (M) 1*8kB (U) 21*16kB (UM) 5*32kB (UM) 20*64kB (M) 5*128kB (UM) 1*256kB (U) 37*512kB (U) 3*1024kB (M) 1*2048kB (M) 0*4096kB = 26776kB [ 3128.107060] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3128.116365] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3128.124953] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3128.134086] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3128.143050] 43850 total pagecache pages [ 3128.147375] 0 pages in swap cache [ 3128.150843] Swap cache stats: add 0, delete 0, find 0/0 [ 3128.156296] Free swap = 0kB [ 3128.159486] Total swap = 0kB [ 3128.162635] 2097051 pages RAM [ 3128.165791] 0 pages HighMem/MovableOnly [ 3128.169851] 363848 pages reserved [ 3128.173399] 0 pages cma reserved [ 3128.177421] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3128.190911] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 3128.196206] CPU: 1 PID: 8170 Comm: syz-executor.2 Not tainted 4.14.230-syzkaller #0 [ 3128.204347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3128.214155] Call Trace: [ 3128.216936] dump_stack+0x1b2/0x281 [ 3128.220752] warn_alloc.cold+0x96/0x1cc [ 3128.224737] ? zone_watermark_ok_safe+0x220/0x220 [ 3128.229865] __alloc_pages_nodemask+0x2127/0x2720 [ 3128.234782] ? lock_acquire+0x170/0x3f0 [ 3128.238835] ? lock_acquire+0x170/0x3f0 [ 3128.242971] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3128.247933] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3128.253565] ? __mutex_unlock_slowpath+0x75/0x770 [ 3128.259034] alloc_pages_current+0x155/0x260 [ 3128.263527] ion_page_pool_alloc+0x118/0x1b0 [ 3128.268450] ion_system_heap_allocate+0x133/0x8c0 [ 3128.273889] ? _raw_spin_unlock+0x29/0x40 [ 3128.278109] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3128.283303] ? ion_system_contig_heap_create+0x130/0x130 [ 3128.289461] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3128.295104] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3128.299931] ion_alloc+0x27a/0x810 [ 3128.303466] ? ion_dma_buf_release+0x40/0x40 [ 3128.308120] ? __might_fault+0x177/0x1b0 [ 3128.312732] ion_ioctl+0xea/0x1f0 [ 3128.316179] ? ion_query_heaps+0x360/0x360 [ 3128.320671] ? _raw_spin_unlock+0x29/0x40 [ 3128.324886] ? ion_query_heaps+0x360/0x360 [ 3128.329328] do_vfs_ioctl+0x75a/0xff0 [ 3128.333133] ? ioctl_preallocate+0x1a0/0x1a0 [ 3128.338582] ? lock_downgrade+0x740/0x740 [ 3128.342901] ? __fget+0x225/0x360 [ 3128.346435] ? do_vfs_ioctl+0xff0/0xff0 [ 3128.350481] ? security_file_ioctl+0x83/0xb0 [ 3128.354871] SyS_ioctl+0x7f/0xb0 [ 3128.358227] ? do_vfs_ioctl+0xff0/0xff0 [ 3128.362272] do_syscall_64+0x1d5/0x640 [ 3128.366585] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3128.371758] RIP: 0033:0x466459 [ 3128.375235] RSP: 002b:00007fc87a7db188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3128.383016] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 3128.390372] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3128.398320] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3128.405574] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 3128.413000] R13: 00007ffd20e1ce3f R14: 00007fc87a7db300 R15: 0000000000022000 [ 3128.425634] syz-executor.2 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 3128.440791] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 3128.446318] CPU: 1 PID: 8153 Comm: syz-executor.2 Not tainted 4.14.230-syzkaller #0 [ 3128.454407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3128.464292] Call Trace: [ 3128.466903] dump_stack+0x1b2/0x281 [ 3128.470949] dump_header+0x178/0x82f [ 3128.474868] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3128.480763] ? ___ratelimit+0x2cd/0x530 [ 3128.484868] oom_kill_process.cold+0x10/0xa40 [ 3128.489618] out_of_memory+0xe3e/0x1190 [ 3128.493805] ? oom_killer_disable+0x1c0/0x1c0 [ 3128.498651] ? mutex_trylock+0x152/0x1a0 [ 3128.503063] __alloc_pages_nodemask+0x23e1/0x2720 [ 3128.508186] ? lock_acquire+0x170/0x3f0 [ 3128.512154] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3128.517246] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3128.522200] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3128.527729] alloc_pages_current+0x155/0x260 [ 3128.532349] ion_page_pool_alloc+0x118/0x1b0 [ 3128.536952] ion_system_heap_allocate+0x133/0x8c0 [ 3128.542335] ? _raw_spin_unlock+0x29/0x40 [ 3128.546681] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3128.551682] ? ion_system_contig_heap_create+0x130/0x130 [ 3128.557474] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3128.562484] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3128.567399] ion_alloc+0x27a/0x810 [ 3128.571017] ? ion_dma_buf_release+0x40/0x40 [ 3128.576381] ? __might_fault+0x177/0x1b0 [ 3128.580556] ion_ioctl+0xea/0x1f0 [ 3128.583995] ? ion_query_heaps+0x360/0x360 [ 3128.588214] ? ion_query_heaps+0x360/0x360 [ 3128.592433] do_vfs_ioctl+0x75a/0xff0 [ 3128.596865] ? ioctl_preallocate+0x1a0/0x1a0 [ 3128.601538] ? lock_downgrade+0x740/0x740 [ 3128.605804] ? __fget+0x225/0x360 [ 3128.609259] ? do_vfs_ioctl+0xff0/0xff0 [ 3128.613312] ? security_file_ioctl+0x83/0xb0 [ 3128.618225] SyS_ioctl+0x7f/0xb0 [ 3128.621577] ? do_vfs_ioctl+0xff0/0xff0 [ 3128.625805] do_syscall_64+0x1d5/0x640 [ 3128.629680] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3128.634941] RIP: 0033:0x466459 [ 3128.638220] RSP: 002b:00007fc87a81d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3128.646186] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3128.655461] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3128.662891] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3128.670692] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3128.678319] R13: 00007ffd20e1ce3f R14: 00007fc87a81d300 R15: 0000000000022000 [ 3128.702059] Mem-Info: [ 3128.704702] active_anon:79624 inactive_anon:41217 isolated_anon:0 [ 3128.704702] active_file:21 inactive_file:3 isolated_file:23 [ 3128.704702] unevictable:0 dirty:16 writeback:0 unstable:0 [ 3128.704702] slab_reclaimable:14421 slab_unreclaimable:149658 [ 3128.704702] mapped:52817 shmem:43797 pagetables:20537 bounce:0 [ 3128.704702] free:13868 free_pcp:30 free_cma:0 [ 3128.740707] Node 0 active_anon:244588kB inactive_anon:125308kB active_file:80kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):92kB mapped:166472kB dirty:64kB writeback:0kB shmem:130240kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 174080kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3128.771747] Node 1 active_anon:73908kB inactive_anon:39560kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44796kB dirty:0kB writeback:0kB shmem:44948kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3128.801467] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3128.875025] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3128.880806] Node 0 DMA32 free:218688kB min:36200kB low:45248kB high:54296kB active_anon:244420kB inactive_anon:125252kB active_file:52kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11392kB pagetables:14976kB bounce:0kB free_pcp:168kB local_pcp:116kB free_cma:0kB [ 3128.916729] lowmem_reserve[]: 0 0 0 0 0 [ 3128.945424] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3129.059363] lowmem_reserve[]: 0 0 0 0 0 [ 3129.063556] Node 1 Normal free:468076kB min:53696kB low:67120kB high:80544kB active_anon:73908kB inactive_anon:39560kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21856kB pagetables:67040kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3129.179242] lowmem_reserve[]: 0 0 0 0 0 [ 3129.183407] Node 0 DMA: 10*4kB (UE) 20*8kB (UME) 37*16kB (UME) 22*32kB (UME) 15*64kB (UME) 4*128kB (UE) 5*256kB (UME) 3*512kB (UE) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 11928kB [ 3129.235402] Node 0 DMA32: 273*4kB (E) 173*8kB (ME) 30*16kB (M) 9*32kB (E) 1471*64kB (UME) 811*128kB (U) 221*256kB (U) 26*512kB (U) 7*1024kB (U) 0*2048kB 0*4096kB = 278252kB [ 3129.255412] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3129.285357] Node 1 Normal: 9*4kB (UM) 10*8kB (U) 29*16kB (UM) 178*32kB (UM) 1509*64kB (UM) 290*128kB (UM) 186*256kB (UM) 173*512kB (U) 349*1024kB (UM) 32*2048kB (UM) 0*4096kB = 699076kB [ 3129.305395] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3129.325525] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3129.334861] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3129.365342] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3129.374135] 44736 total pagecache pages [ 3129.379387] 0 pages in swap cache [ 3129.383039] Swap cache stats: add 0, delete 0, find 0/0 [ 3129.389804] Free swap = 0kB [ 3129.392830] Total swap = 0kB [ 3129.396926] 2097051 pages RAM [ 3129.400545] 0 pages HighMem/MovableOnly [ 3129.404705] 363848 pages reserved [ 3129.410061] 0 pages cma reserved [ 3129.413622] Out of memory (oom_kill_allocating_task): Kill process 8153 (syz-executor.2) score 0 or sacrifice child [ 3129.426530] Killed process 8153 (syz-executor.2) total-vm:93516kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3129.438934] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3129.455384] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 3129.460959] CPU: 1 PID: 8153 Comm: syz-executor.2 Not tainted 4.14.230-syzkaller #0 [ 3129.468931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3129.478469] Call Trace: [ 3129.481164] dump_stack+0x1b2/0x281 [ 3129.484993] warn_alloc.cold+0x96/0x1cc [ 3129.489066] ? zone_watermark_ok_safe+0x220/0x220 [ 3129.493921] ? wait_for_completion_io+0x10/0x10 [ 3129.498779] __alloc_pages_nodemask+0x2127/0x2720 [ 3129.503882] ? lock_acquire+0x170/0x3f0 [ 3129.508104] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3129.513133] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3129.517741] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3129.523645] alloc_pages_current+0x155/0x260 [ 3129.528245] ion_page_pool_alloc+0x118/0x1b0 [ 3129.532660] ion_system_heap_allocate+0x133/0x8c0 [ 3129.537696] ? _raw_spin_unlock+0x29/0x40 [ 3129.542397] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3129.547337] ? ion_system_contig_heap_create+0x130/0x130 [ 3129.553340] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3129.558491] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3129.563353] ion_alloc+0x27a/0x810 [ 3129.566991] ? ion_dma_buf_release+0x40/0x40 [ 3129.571499] ? __might_fault+0x177/0x1b0 [ 3129.575769] ion_ioctl+0xea/0x1f0 [ 3129.579237] ? ion_query_heaps+0x360/0x360 [ 3129.583568] ? ion_query_heaps+0x360/0x360 [ 3129.587895] do_vfs_ioctl+0x75a/0xff0 [ 3129.591925] ? ioctl_preallocate+0x1a0/0x1a0 [ 3129.596426] ? lock_downgrade+0x740/0x740 [ 3129.600874] ? __fget+0x225/0x360 [ 3129.604430] ? do_vfs_ioctl+0xff0/0xff0 [ 3129.608417] ? security_file_ioctl+0x83/0xb0 [ 3129.612928] SyS_ioctl+0x7f/0xb0 [ 3129.616386] ? do_vfs_ioctl+0xff0/0xff0 [ 3129.620888] do_syscall_64+0x1d5/0x640 [ 3129.626353] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3129.632437] RIP: 0033:0x466459 [ 3129.635838] RSP: 002b:00007fc87a81d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3129.643735] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3129.651010] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3129.661366] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3129.668856] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3129.676677] R13: 00007ffd20e1ce3f R14: 00007fc87a81d300 R15: 0000000000022000 [ 3129.705166] warn_alloc_show_mem: 1 callbacks suppressed [ 3129.705170] Mem-Info: [ 3129.713304] active_anon:79624 inactive_anon:41217 isolated_anon:0 [ 3129.713304] active_file:376 inactive_file:531 isolated_file:0 [ 3129.713304] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3129.713304] slab_reclaimable:14421 slab_unreclaimable:149906 [ 3129.713304] mapped:53570 shmem:43797 pagetables:20537 bounce:0 [ 3129.713304] free:133966 free_pcp:140 free_cma:0 [ 3129.754989] Node 0 active_anon:244588kB inactive_anon:125308kB active_file:1500kB inactive_file:2120kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:169484kB dirty:0kB writeback:0kB shmem:130240kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 174080kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3129.789979] Node 1 active_anon:73908kB inactive_anon:39560kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44796kB dirty:0kB writeback:0kB shmem:44948kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3129.826012] Node 0 DMA free:11108kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3129.899112] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3129.904480] Node 0 DMA32 free:43076kB min:36200kB low:45248kB high:54296kB active_anon:244432kB inactive_anon:125252kB active_file:1544kB inactive_file:2176kB unevictable:0kB writepending:88kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11392kB pagetables:14976kB bounce:0kB free_pcp:352kB local_pcp:128kB free_cma:0kB [ 3129.940287] lowmem_reserve[]: 0 0 0 0 0 [ 3129.944400] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3129.975707] lowmem_reserve[]: 0 0 0 0 0 [ 3129.979935] Node 1 Normal free:182408kB min:53696kB low:67120kB high:80544kB active_anon:73908kB inactive_anon:39560kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:12kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21856kB pagetables:67040kB bounce:0kB free_pcp:184kB local_pcp:184kB free_cma:0kB [ 3130.027706] lowmem_reserve[]: 0 0 0 0 0 [ 3130.031828] Node 0 DMA: 1*4kB (E) 12*8kB (UME) 8*16kB (ME) 14*32kB (UME) 15*64kB (UME) 4*128kB (UE) 5*256kB (UME) 3*512kB (UE) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 11108kB [ 3130.079020] Node 0 DMA32: 273*4kB (E) 174*8kB (UME) 31*16kB (UM) 10*32kB (UE) 13*64kB (ME) 1*128kB (U) 70*256kB (U) 26*512kB (U) 7*1024kB (U) 0*2048kB 0*4096kB = 42660kB [ 3130.145328] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3130.174895] Node 1 Normal: 11*4kB (UM) 10*8kB (M) 19*16kB (UM) 6*32kB (UM) 17*64kB (UM) 3*128kB (M) 2*256kB (UM) 1*512kB (U) 3*1024kB (M) 10*2048kB (UM) 0*4096kB = 26668kB [ 3130.213644] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3130.220020] syz-executor.2 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 3130.241366] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 3130.241518] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3130.251031] CPU: 1 PID: 8170 Comm: syz-executor.2 Not tainted 4.14.230-syzkaller #0 [ 3130.263826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3130.265938] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3130.273438] Call Trace: [ 3130.284500] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3130.285194] dump_stack+0x1b2/0x281 [ 3130.295538] syz-executor.4: page allocation failure: order:0 [ 3130.299133] dump_header+0x178/0x82f [ 3130.299138] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3130.305024] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3130.310957] 43871 total pagecache pages [ 3130.317502] ? ___ratelimit+0x2cd/0x530 [ 3130.317514] oom_kill_process.cold+0x10/0xa40 [ 3130.317535] out_of_memory+0xe3e/0x1190 [ 3130.317548] ? oom_killer_disable+0x1c0/0x1c0 [ 3130.317561] ? mutex_trylock+0x152/0x1a0 [ 3130.324033] syz-executor.4 cpuset= [ 3130.328222] __alloc_pages_nodemask+0x23e1/0x2720 [ 3130.328239] ? lock_acquire+0x170/0x3f0 [ 3130.328252] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3130.328261] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3130.328276] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3130.328284] ? check_preemption_disabled+0x35/0x240 [ 3130.328301] alloc_pages_current+0x155/0x260 [ 3130.328311] ion_page_pool_alloc+0x118/0x1b0 [ 3130.328320] ion_system_heap_allocate+0x133/0x8c0 [ 3130.328333] ? _raw_spin_unlock+0x29/0x40 [ 3130.334311] / [ 3130.336897] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3130.341204] 0 pages in swap cache [ 3130.345698] ? ion_system_contig_heap_create+0x130/0x130 [ 3130.345709] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3130.345720] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3130.345730] ion_alloc+0x27a/0x810 [ 3130.345743] ? ion_dma_buf_release+0x40/0x40 [ 3130.345754] ? __might_fault+0x177/0x1b0 [ 3130.345776] ion_ioctl+0xea/0x1f0 [ 3130.352169] Swap cache stats: add 0, delete 0, find 0/0 [ 3130.354611] ? ion_query_heaps+0x360/0x360 [ 3130.360277] mems_allowed=0-1 [ 3130.363580] ? _raw_spin_unlock+0x29/0x40 [ 3130.368713] Free swap = 0kB [ 3130.373126] ? ion_query_heaps+0x360/0x360 [ 3130.397021] Total swap = 0kB [ 3130.398029] do_vfs_ioctl+0x75a/0xff0 [ 3130.402435] 2097051 pages RAM [ 3130.404151] ? ioctl_preallocate+0x1a0/0x1a0 [ 3130.425353] 0 pages HighMem/MovableOnly [ 3130.428963] ? lock_downgrade+0x740/0x740 [ 3130.432709] 363848 pages reserved [ 3130.437281] ? __fget+0x225/0x360 [ 3130.437291] ? do_vfs_ioctl+0xff0/0xff0 [ 3130.437303] ? security_file_ioctl+0x83/0xb0 [ 3130.437312] SyS_ioctl+0x7f/0xb0 [ 3130.437321] ? do_vfs_ioctl+0xff0/0xff0 [ 3130.437331] do_syscall_64+0x1d5/0x640 [ 3130.437346] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3130.457393] 0 pages cma reserved [ 3130.458700] RIP: 0033:0x466459 [ 3130.534524] RSP: 002b:00007fc87a7db188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3130.542590] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 3130.550134] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3130.557648] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3130.565099] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 3130.573008] R13: 00007ffd20e1ce3f R14: 00007fc87a7db300 R15: 0000000000022000 [ 3130.595293] CPU: 0 PID: 8185 Comm: syz-executor.4 Not tainted 4.14.230-syzkaller #0 [ 3130.603144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3130.612859] Call Trace: [ 3130.615805] dump_stack+0x1b2/0x281 [ 3130.619551] warn_alloc.cold+0x96/0x1cc [ 3130.623802] ? zone_watermark_ok_safe+0x220/0x220 [ 3130.629031] ? usleep_range+0x130/0x130 [ 3130.633478] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3130.638864] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3130.643985] ? run_timer_softirq+0x5a0/0x5a0 [ 3130.648855] __alloc_pages_nodemask+0x2127/0x2720 [ 3130.655399] ? lock_acquire+0x170/0x3f0 [ 3130.659491] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3130.664610] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3130.669222] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3130.675006] alloc_pages_current+0x155/0x260 [ 3130.680597] ion_page_pool_alloc+0x118/0x1b0 [ 3130.685468] ion_system_heap_allocate+0x133/0x8c0 [ 3130.690837] ? _raw_spin_unlock+0x29/0x40 [ 3130.695259] Mem-Info: [ 3130.695323] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3130.697739] active_anon:79627 inactive_anon:41217 isolated_anon:0 [ 3130.697739] active_file:52 inactive_file:855 isolated_file:0 [ 3130.697739] unevictable:0 dirty:25 writeback:0 unstable:0 [ 3130.697739] slab_reclaimable:14393 slab_unreclaimable:149798 [ 3130.697739] mapped:53403 shmem:43797 pagetables:20537 bounce:0 [ 3130.697739] free:120888 free_pcp:25 free_cma:0 [ 3130.702669] ? ion_system_contig_heap_create+0x130/0x130 [ 3130.747308] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3130.752520] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3130.757705] ion_alloc+0x27a/0x810 [ 3130.761443] ? ion_dma_buf_release+0x40/0x40 [ 3130.766330] ? __might_fault+0x177/0x1b0 [ 3130.770428] ion_ioctl+0xea/0x1f0 [ 3130.773999] ? ion_query_heaps+0x360/0x360 [ 3130.778690] ? ion_query_heaps+0x360/0x360 [ 3130.783905] do_vfs_ioctl+0x75a/0xff0 [ 3130.785266] Node 0 active_anon:244600kB inactive_anon:125308kB active_file:144kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:166616kB dirty:88kB writeback:0kB shmem:130240kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 174080kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3130.787979] ? ioctl_preallocate+0x1a0/0x1a0 [ 3130.822153] ? lock_downgrade+0x740/0x740 [ 3130.826849] ? __fget+0x225/0x360 [ 3130.830548] ? do_vfs_ioctl+0xff0/0xff0 [ 3130.834727] ? security_file_ioctl+0x83/0xb0 [ 3130.839448] SyS_ioctl+0x7f/0xb0 [ 3130.842918] ? do_vfs_ioctl+0xff0/0xff0 [ 3130.846913] do_syscall_64+0x1d5/0x640 [ 3130.851205] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3130.855262] Node 1 active_anon:73908kB inactive_anon:39560kB active_file:64kB inactive_file:3356kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:46996kB dirty:12kB writeback:0kB shmem:44948kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3130.856583] RIP: 0033:0x466459 [ 3130.889944] RSP: 002b:00007f61587e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3130.898760] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3130.906721] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3130.915000] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3130.923716] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3130.925244] Node 0 [ 3130.931537] R13: 00007ffed7f6205f R14: 00007f61587e7300 R15: 0000000000022000 [ 3130.931558] DMA free:11096kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3131.005250] Mem-Info: [ 3131.015274] active_anon:79628 inactive_anon:41217 isolated_anon:0 [ 3131.015274] active_file:13 inactive_file:852 isolated_file:0 [ 3131.015274] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3131.015274] slab_reclaimable:14393 slab_unreclaimable:149824 [ 3131.015274] mapped:53399 shmem:43797 pagetables:20537 bounce:0 [ 3131.015274] free:235762 free_pcp:216 free_cma:0 [ 3131.035258] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3131.069571] Node 0 DMA32 free:109172kB min:36200kB low:45248kB high:54296kB active_anon:244436kB inactive_anon:125252kB active_file:48kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11392kB pagetables:14976kB bounce:0kB free_pcp:692kB local_pcp:656kB free_cma:0kB [ 3131.085304] Node 0 active_anon:244604kB inactive_anon:125308kB active_file:48kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:166540kB dirty:0kB writeback:0kB shmem:130240kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 174080kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3131.155373] Node 1 active_anon:73908kB inactive_anon:39560kB active_file:4kB inactive_file:3364kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:47056kB dirty:0kB writeback:0kB shmem:44948kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3131.158680] lowmem_reserve[]: [ 3131.183931] Node 0 [ 3131.187454] 0 0 0 0 0 [ 3131.192394] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3131.196038] DMA free:11096kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3131.223741] lowmem_reserve[]: [ 3131.247761] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3131.256364] Node 0 DMA32 free:108864kB min:36200kB low:45248kB high:54296kB active_anon:244436kB inactive_anon:125252kB active_file:48kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11392kB pagetables:14976kB bounce:0kB free_pcp:692kB local_pcp:36kB free_cma:0kB [ 3131.256388] 0 [ 3131.295255] lowmem_reserve[]: 0 0 0 0 0 [ 3131.305915] 0 0 0 0 [ 3131.307304] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3131.308305] Node 1 Normal free:909492kB min:53696kB low:67120kB high:80544kB active_anon:73908kB inactive_anon:39560kB active_file:4kB inactive_file:3364kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21856kB pagetables:67040kB bounce:0kB free_pcp:1416kB local_pcp:700kB free_cma:0kB [ 3131.365228] lowmem_reserve[]: 0 0 0 0 0 [ 3131.370666] Node 1 Normal free:920492kB min:53696kB low:67120kB high:80544kB active_anon:73908kB inactive_anon:39560kB active_file:4kB inactive_file:3364kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21856kB pagetables:67040kB bounce:0kB free_pcp:1320kB local_pcp:620kB free_cma:0kB [ 3131.370909] lowmem_reserve[]: 0 0 0 0 0 [ 3131.411557] Node 0 DMA: 13*4kB (UE) 12*8kB (UME) 9*16kB (UME) 9*32kB (UME) 15*64kB (UME) 5*128kB (UE) 5*256kB (UME) 3*512kB (UE) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 11140kB [ 3131.432869] Node 0 DMA32: 2495*4kB (UME) 1886*8kB (UME) 2676*16kB (UM) 1027*32kB (UE) 676*64kB (UME) 37*128kB (UM) 18*256kB (U) 8*512kB (U) 8*1024kB (U) 0*2048kB 0*4096kB = 165644kB [ 3131.454880] lowmem_reserve[]: 0 0 0 0 0 [ 3131.459652] Node 0 DMA: 13*4kB (UE) 12*8kB (UME) 9*16kB (UME) 9*32kB (UME) 15*64kB (UME) 5*128kB (UE) 5*256kB (UME) 3*512kB (UE) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 11140kB [ 3131.480834] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3131.493706] Node 1 Normal: 5466*4kB (UM) 5581*8kB (U) 2739*16kB (UM) 1378*32kB (UM) 4149*64kB (UM) 542*128kB (UM) 168*256kB (U) 20*512kB (U) 236*1024kB (UM) 96*2048kB (UM) 4*4096kB (U) = 997248kB [ 3131.517137] Node 0 DMA32: 1861*4kB (UME) 4871*8kB (UME) 4626*16kB (UM) 1282*32kB (UE) 677*64kB (UME) 37*128kB (UM) 18*256kB (U) 8*512kB (U) 8*1024kB (U) 0*2048kB 0*4096kB = 226412kB [ 3131.535202] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3131.536284] Node 0 [ 3131.544252] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3131.544263] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3131.550510] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3131.575240] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3131.583122] Node 1 Normal: 6758*4kB (UM) 5577*8kB (U) 2736*16kB (UM) 1391*32kB (UM) 4148*64kB (UM) 544*128kB (UM) 169*256kB (U) 20*512kB (U) 236*1024kB (UM) 96*2048kB (UM) 4*4096kB (U) = 1003200kB [ 3131.615208] 44665 total pagecache pages [ 3131.618361] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3131.619983] 0 pages in swap cache [ 3131.630610] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3131.647519] Swap cache stats: add 0, delete 0, find 0/0 [ 3131.657235] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3131.671146] Free swap = 0kB [ 3131.677561] Total swap = 0kB [ 3131.680966] 2097051 pages RAM [ 3131.684157] 0 pages HighMem/MovableOnly [ 3131.692267] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3131.702933] 363848 pages reserved [ 3131.709567] 44665 total pagecache pages [ 3131.713679] 0 pages in swap cache [ 3131.720454] 0 pages cma reserved [ 3131.723874] Out of memory (oom_kill_allocating_task): Kill process 8170 (syz-executor.2) score 0 or sacrifice child [ 3131.735175] Swap cache stats: add 0, delete 0, find 0/0 [ 3131.739827] Killed process 8170 (syz-executor.2) total-vm:93516kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3131.740812] Free swap = 0kB [ 3131.753895] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3131.771189] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 3131.775200] Total swap = 0kB [ 3131.777400] CPU: 1 PID: 8170 Comm: syz-executor.2 Not tainted 4.14.230-syzkaller #0 [ 3131.779567] 2097051 pages RAM [ 3131.789011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3131.789017] Call Trace: [ 3131.789039] dump_stack+0x1b2/0x281 [ 3131.789051] warn_alloc.cold+0x96/0x1cc [ 3131.789063] ? zone_watermark_ok_safe+0x220/0x220 [ 3131.789080] ? wait_for_completion_io+0x10/0x10 [ 3131.789093] __alloc_pages_nodemask+0x2127/0x2720 [ 3131.789108] ? lock_acquire+0x170/0x3f0 [ 3131.789120] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3131.789133] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3131.805293] 0 pages HighMem/MovableOnly [ 3131.808895] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3131.813189] 363848 pages reserved [ 3131.818296] ? check_preemption_disabled+0x35/0x240 [ 3131.818314] alloc_pages_current+0x155/0x260 [ 3131.818327] ion_page_pool_alloc+0x118/0x1b0 [ 3131.818336] ion_system_heap_allocate+0x133/0x8c0 [ 3131.818348] ? _raw_spin_unlock+0x29/0x40 [ 3131.845209] 0 pages cma reserved [ 3131.846210] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3131.888184] ? ion_system_contig_heap_create+0x130/0x130 [ 3131.893740] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3131.898920] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3131.903872] ion_alloc+0x27a/0x810 [ 3131.908073] ? ion_dma_buf_release+0x40/0x40 [ 3131.912830] ? __might_fault+0x177/0x1b0 [ 3131.917231] ion_ioctl+0xea/0x1f0 [ 3131.920711] ? ion_query_heaps+0x360/0x360 [ 3131.925139] ? _raw_spin_unlock+0x29/0x40 [ 3131.929333] ? ion_query_heaps+0x360/0x360 [ 3131.933693] do_vfs_ioctl+0x75a/0xff0 [ 3131.937519] ? ioctl_preallocate+0x1a0/0x1a0 [ 3131.942250] ? lock_downgrade+0x740/0x740 [ 3131.946623] ? __fget+0x225/0x360 [ 3131.950089] ? do_vfs_ioctl+0xff0/0xff0 [ 3131.954157] ? security_file_ioctl+0x83/0xb0 [ 3131.958668] SyS_ioctl+0x7f/0xb0 [ 3131.962045] ? do_vfs_ioctl+0xff0/0xff0 [ 3131.966034] do_syscall_64+0x1d5/0x640 [ 3131.970157] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3131.975460] RIP: 0033:0x466459 [ 3131.978660] RSP: 002b:00007fc87a7db188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3131.986995] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 3131.994544] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3132.002782] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3132.010370] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 3132.017783] R13: 00007ffd20e1ce3f R14: 00007fc87a7db300 R15: 0000000000022000 [ 3132.052524] Mem-Info: [ 3132.060422] active_anon:79628 inactive_anon:41217 isolated_anon:0 [ 3132.060422] active_file:13 inactive_file:1080 isolated_file:0 [ 3132.060422] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3132.060422] slab_reclaimable:14393 slab_unreclaimable:149589 [ 3132.060422] mapped:53483 shmem:43797 pagetables:20500 bounce:0 [ 3132.060422] free:490950 free_pcp:664 free_cma:0 [ 3132.102547] Node 0 active_anon:244604kB inactive_anon:125308kB active_file:48kB inactive_file:1544kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:167272kB dirty:0kB writeback:0kB shmem:130240kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 174080kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3132.152885] Node 1 active_anon:73908kB inactive_anon:39560kB active_file:4kB inactive_file:3376kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:47060kB dirty:0kB writeback:0kB shmem:44948kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3132.186718] Node 0 DMA free:12632kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3132.219031] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3132.224717] Node 0 DMA32 free:538084kB min:36200kB low:45248kB high:54296kB active_anon:244436kB inactive_anon:125252kB active_file:48kB inactive_file:2844kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11328kB pagetables:14828kB bounce:0kB free_pcp:1188kB local_pcp:544kB free_cma:0kB [ 3132.261613] lowmem_reserve[]: 0 0 0 0 0 [ 3132.266170] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3132.299749] lowmem_reserve[]: 0 0 0 0 0 [ 3132.304158] Node 1 Normal free:1897256kB min:53696kB low:67120kB high:80544kB active_anon:73908kB inactive_anon:39560kB active_file:4kB inactive_file:3376kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21856kB pagetables:67040kB bounce:0kB free_pcp:1368kB local_pcp:700kB free_cma:0kB [ 3132.342508] lowmem_reserve[]: 0 0 0 0 0 [ 3132.347987] Node 0 DMA: 20*4kB (UE) 14*8kB (UME) 11*16kB (UME) 11*32kB (UME) 15*64kB (UME) 4*128kB (UE) 5*256kB (UME) 4*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 12688kB [ 3132.371261] Node 0 DMA32: 18393*4kB (UME) 20488*8kB (UME) 11917*16kB (UM) 3394*32kB (UME) 1865*64kB (UME) 230*128kB (UM) 43*256kB (U) 12*512kB (U) 18*1024kB (U) 1*2048kB (U) 0*4096kB = 723188kB [ 3132.397309] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3132.412479] Node 1 Normal: 11617*4kB (UM) 7751*8kB (UM) 5209*16kB (UM) 3526*32kB (UM) 5128*64kB (UM) 1346*128kB (UM) 504*256kB (U) 116*512kB (U) 373*1024kB (UM) 177*2048kB (UM) 41*4096kB (U) = 1905932kB [ 3132.441505] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3132.452584] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3132.468978] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3132.481747] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3132.497989] 47435 total pagecache pages [ 3132.503675] 0 pages in swap cache [ 3132.511903] Swap cache stats: add 0, delete 0, find 0/0 [ 3132.521458] Free swap = 0kB [ 3132.528139] Total swap = 0kB [ 3132.533067] 2097051 pages RAM [ 3132.539686] 0 pages HighMem/MovableOnly [ 3132.543992] 363848 pages reserved [ 3132.552071] 0 pages cma reserved 23:48:57 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000006, 0x27}) recvfrom$rose(r0, &(0x7f0000000100)=""/5, 0x5, 0x1101, &(0x7f00000000c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, 0x6, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) 23:48:57 executing program 0: ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f00000000c0)=0x3) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGCAUSE(r1, 0x89e0, 0x0) recvfrom$rose(r1, &(0x7f0000000100)=""/38, 0x26, 0x40001002, &(0x7f0000000140)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) accept4$ax25(r0, 0x0, 0x0, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000000)=@netrom={'nr', 0x0}, 0x10) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000080)=0xfffffffc) 23:48:57 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r0, 0x80047453, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @hyper}, 0x10) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x1, 0x4) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f00000000c0)=0x8) 23:48:57 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x18, 0x67c2cf5b, 0x10000, 0x6, 0x450, 0x1, 0xe32, [], 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x1}, 0x40) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000036c0)='/dev/dlm_plock\x00', 0x0, 0x0) getsockname$ax25(r2, 0x0, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf17, 0x0, 0x0, 0x0, 0xffff}}, &(0x7f0000000240)='GPL\x00', 0xffff8000, 0xb2, &(0x7f0000000280)=""/178, 0x41100, 0x11, [], 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0x4, 0x2, 0x9}, 0x10, 0x2356f}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x7, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x9}, [@alu={0x4, 0x1, 0x9, 0x6, 0x7, 0xfffffffffffffff8, 0x4}, @jmp={0x5, 0x0, 0x6, 0x9, 0x6, 0xc, 0x10}, @map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000100)='syzkaller\x00', 0x455, 0x29, &(0x7f0000000140)=""/41, 0x41100, 0xb, [], 0x0, 0x3, r2, 0x8, &(0x7f0000000180)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0x3, 0x2, 0x14}, 0x10, 0x0, r3}, 0x78) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000006, 0x27}) 23:48:57 executing program 4: r0 = accept4$rose(0xffffffffffffffff, &(0x7f0000000080)=@full={0xb, @dev, @remote, 0x0, [@netrom, @rose, @bcast, @netrom, @null, @netrom]}, 0x0, 0x80800) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0xa02, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGCAUSE(r2, 0x89e0, 0x0) bind$rose(r2, &(0x7f0000000180)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) bind$rose(r1, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x2, [@default, @default, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x40) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f0000000140)) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGCAUSE(r4, 0x89e0, 0x0) accept4$rose(r4, &(0x7f00000001c0)=@full={0xb, @dev, @netrom, 0x0, [@bcast, @default, @bcast, @default, @null, @null]}, &(0x7f0000000200)=0x40, 0x80800) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x80000006, 0x27}) 23:48:57 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x40240, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000006, 0x27}) 23:48:57 executing program 3: ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000000)=0x1) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000040)={0xdfb, 0xa4, "f11958ce5670387ae0e79111092237abd260fca8df7244a0d553af30f4083a7a4b25ca7f0acbc5766f326708d3714bb40045c7eb9f1c344b07194ab9008a47618cf37a0fdda442a9fdd28acbb72564009c40c69078e2ad4c0e92b60b6ee734edd7048eed630c4622195819175d05167dee8ec47c00b78ef38d8186f7ca399dfbd217288f0e06283faa0851a2062d37b766032276f171f96a0e47cced083be725477fbc55"}) prctl$PR_SET_FPEMU(0xa, 0x3) 23:48:57 executing program 1: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f00000000c0)=0x8) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000036c0)='/dev/dlm_plock\x00', 0x0, 0x0) getsockname$ax25(r1, 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000000)={0x6, 0x3, "ab510f"}) 23:48:57 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x8000, 0x0) write$6lowpan_enable(r0, &(0x7f00000000c0)='0', 0x1) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x149242, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000080)=0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x28}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x80}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x200}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000004}, 0x48001) 23:48:57 executing program 1: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f00000000c0)=0x8) openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x4000, 0x0) 23:48:57 executing program 1: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f00000000c0)=0x8) r1 = geteuid() mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x800, &(0x7f0000000140)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@uname={'uname', 0x3d, '1//)!\'@'}}], [{@obj_role={'obj_role', 0x3d, '[{^-!:-E'}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/urandom\x00'}}, {@fowner_gt={'fowner>'}}, {@subj_type={'subj_type', 0x3d, '#)@:,%\\'}}, {@fowner_eq={'fowner', 0x3d, r1}}]}}) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, &(0x7f0000000080)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, r1}) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000036c0)='/dev/dlm_plock\x00', 0x0, 0x0) getsockname$ax25(r2, 0x0, 0x0) write$6lowpan_enable(r2, &(0x7f0000000200)='0', 0x1) 23:48:57 executing program 1: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000000)=0x53) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f00000000c0)=0x8) semtimedop(0x0, &(0x7f0000000040)=[{0x4, 0x6}, {0x3, 0x39, 0x1000}, {0x1, 0xa00, 0x800}, {0x4, 0xff}, {0x2, 0x20e, 0x1000}, {0x2, 0x0, 0x1800}, {0x1, 0xffff}, {0x4, 0x4, 0x1000}, {0x2, 0xfffd, 0x400}, {0x0, 0x9, 0x1800}], 0xa, &(0x7f0000000080)={0x77359400}) 23:48:57 executing program 1: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f00000000c0)=0x8) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none}, 0x8) [ 3133.793746] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3133.826997] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 3133.845962] CPU: 1 PID: 8211 Comm: syz-executor.0 Not tainted 4.14.230-syzkaller #0 [ 3133.854059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3133.863666] Call Trace: [ 3133.866367] dump_stack+0x1b2/0x281 [ 3133.870093] warn_alloc.cold+0x96/0x1cc [ 3133.874260] ? zone_watermark_ok_safe+0x220/0x220 [ 3133.879299] __alloc_pages_nodemask+0x2127/0x2720 [ 3133.885397] ? lock_acquire+0x170/0x3f0 [ 3133.889479] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3133.894375] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3133.900079] ? __mutex_unlock_slowpath+0x75/0x770 [ 3133.905158] alloc_pages_current+0x155/0x260 [ 3133.909770] ion_page_pool_alloc+0x118/0x1b0 [ 3133.914364] ion_system_heap_allocate+0x133/0x8c0 [ 3133.920115] ? ion_alloc+0x187/0x810 [ 3133.924022] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3133.930184] ? ion_system_contig_heap_create+0x130/0x130 [ 3133.935907] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3133.941113] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3133.946050] ion_alloc+0x204/0x810 [ 3133.949599] ? ion_dma_buf_release+0x40/0x40 [ 3133.954014] ? __might_fault+0x177/0x1b0 [ 3133.958080] ion_ioctl+0xea/0x1f0 [ 3133.961734] ? ion_query_heaps+0x360/0x360 [ 3133.966079] ? ion_query_heaps+0x360/0x360 [ 3133.970412] do_vfs_ioctl+0x75a/0xff0 [ 3133.974308] ? ioctl_preallocate+0x1a0/0x1a0 [ 3133.978826] ? lock_downgrade+0x740/0x740 [ 3133.983206] ? __fget+0x225/0x360 [ 3133.986697] ? do_vfs_ioctl+0xff0/0xff0 [ 3133.990780] ? security_file_ioctl+0x83/0xb0 [ 3133.995473] SyS_ioctl+0x7f/0xb0 [ 3133.998874] ? do_vfs_ioctl+0xff0/0xff0 [ 3134.002867] do_syscall_64+0x1d5/0x640 [ 3134.007076] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3134.012657] RIP: 0033:0x466459 [ 3134.015859] RSP: 002b:00007f1ef2095188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3134.023675] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3134.031045] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3134.038679] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3134.046858] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3134.054418] R13: 00007fffa779c11f R14: 00007f1ef2095300 R15: 0000000000022000 [ 3134.131692] Mem-Info: [ 3134.134459] active_anon:80278 inactive_anon:41217 isolated_anon:0 [ 3134.134459] active_file:1121 inactive_file:4856 isolated_file:0 [ 3134.134459] unevictable:0 dirty:59 writeback:0 unstable:0 [ 3134.134459] slab_reclaimable:14378 slab_unreclaimable:149860 [ 3134.134459] mapped:57073 shmem:43797 pagetables:20590 bounce:0 [ 3134.134459] free:285805 free_pcp:371 free_cma:0 [ 3134.225218] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3134.257509] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 3134.262947] CPU: 1 PID: 8204 Comm: syz-executor.2 Not tainted 4.14.230-syzkaller #0 [ 3134.271761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3134.273379] syz-executor.2: [ 3134.281409] Call Trace: [ 3134.281432] dump_stack+0x1b2/0x281 [ 3134.281445] warn_alloc.cold+0x96/0x1cc [ 3134.281458] ? zone_watermark_ok_safe+0x220/0x220 [ 3134.281480] __alloc_pages_nodemask+0x2127/0x2720 [ 3134.281494] ? lock_acquire+0x170/0x3f0 [ 3134.281508] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3134.314239] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3134.319897] ? __mutex_unlock_slowpath+0x75/0x770 [ 3134.324780] alloc_pages_current+0x155/0x260 [ 3134.326013] page allocation failure: order:4 [ 3134.329303] ion_page_pool_alloc+0x118/0x1b0 [ 3134.329315] ion_system_heap_allocate+0x133/0x8c0 [ 3134.329323] ? ion_alloc+0x187/0x810 [ 3134.329336] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3134.348135] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 3134.354030] ? ion_system_contig_heap_create+0x130/0x130 [ 3134.354041] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3134.354053] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3134.354064] ion_alloc+0x204/0x810 [ 3134.354078] ? ion_dma_buf_release+0x40/0x40 [ 3134.354088] ? __might_fault+0x177/0x1b0 [ 3134.354099] ion_ioctl+0xea/0x1f0 [ 3134.370647] syz-executor.4: [ 3134.372002] ? ion_query_heaps+0x360/0x360 [ 3134.372015] ? ion_query_heaps+0x360/0x360 [ 3134.372027] do_vfs_ioctl+0x75a/0xff0 [ 3134.402174] page allocation failure: order:4 [ 3134.404472] ? ioctl_preallocate+0x1a0/0x1a0 [ 3134.404483] ? lock_downgrade+0x740/0x740 [ 3134.404496] ? __fget+0x225/0x360 [ 3134.424949] ? do_vfs_ioctl+0xff0/0xff0 [ 3134.426518] (null) [ 3134.429106] ? security_file_ioctl+0x83/0xb0 [ 3134.429119] SyS_ioctl+0x7f/0xb0 [ 3134.429129] ? do_vfs_ioctl+0xff0/0xff0 [ 3134.429141] do_syscall_64+0x1d5/0x640 [ 3134.429156] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3134.435364] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 3134.435896] RIP: 0033:0x466459 [ 3134.435901] RSP: 002b:00007fc87a81d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3134.445484] syz-executor.2 cpuset= [ 3134.447288] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3134.447294] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3134.447298] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3134.447302] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3134.447307] R13: 00007ffd20e1ce3f R14: 00007fc87a81d300 R15: 0000000000022000 [ 3134.458807] Node 0 active_anon:247352kB inactive_anon:125308kB active_file:3760kB inactive_file:16500kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:180600kB dirty:232kB writeback:0kB shmem:130240kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 176128kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3134.467031] (null) [ 3134.489276] Node 1 active_anon:73760kB inactive_anon:39560kB active_file:1224kB inactive_file:2156kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:47692kB dirty:4kB writeback:0kB shmem:44948kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3134.504514] / [ 3134.509694] Node 0 [ 3134.537692] mems_allowed=0-1 [ 3134.546663] DMA free:11116kB min:204kB low:252kB high:300kB active_anon:2216kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3134.579977] syz-executor.4 cpuset= [ 3134.585586] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3134.628437] Node 0 DMA32 free:652464kB min:36200kB low:45248kB high:54296kB active_anon:245136kB inactive_anon:125252kB active_file:3764kB inactive_file:16864kB unevictable:0kB writepending:232kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11456kB pagetables:15188kB bounce:0kB free_pcp:1316kB local_pcp:672kB free_cma:0kB [ 3134.667864] lowmem_reserve[]: 0 0 0 0 0 [ 3134.669157] / mems_allowed=0-1 [ 3134.681713] CPU: 0 PID: 8214 Comm: syz-executor.2 Not tainted 4.14.230-syzkaller #0 [ 3134.689720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3134.691262] Node 0 [ 3134.699516] Call Trace: [ 3134.699538] dump_stack+0x1b2/0x281 [ 3134.699552] warn_alloc.cold+0x96/0x1cc [ 3134.699563] ? zone_watermark_ok_safe+0x220/0x220 [ 3134.699585] __alloc_pages_nodemask+0x2127/0x2720 [ 3134.699593] ? __schedule+0x893/0x1de0 [ 3134.699607] ? lock_acquire+0x170/0x3f0 [ 3134.699625] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3134.717813] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3134.722598] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3134.722611] ? __mutex_unlock_slowpath+0x75/0x770 [ 3134.741722] lowmem_reserve[]: [ 3134.761867] alloc_pages_current+0x155/0x260 [ 3134.761882] ion_page_pool_alloc+0x118/0x1b0 [ 3134.761892] ion_system_heap_allocate+0x133/0x8c0 [ 3134.761902] ? ion_alloc+0x187/0x810 [ 3134.761912] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3134.761919] ? ion_system_contig_heap_create+0x130/0x130 [ 3134.761928] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3134.761938] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3134.761946] ion_alloc+0x204/0x810 [ 3134.761958] ? ion_dma_buf_release+0x40/0x40 [ 3134.761969] ? __might_fault+0x177/0x1b0 [ 3134.761980] ion_ioctl+0xea/0x1f0 [ 3134.761987] ? ion_query_heaps+0x360/0x360 [ 3134.761998] ? ion_query_heaps+0x360/0x360 [ 3134.762007] do_vfs_ioctl+0x75a/0xff0 [ 3134.762017] ? ioctl_preallocate+0x1a0/0x1a0 [ 3134.762029] ? lock_downgrade+0x740/0x740 [ 3134.831781] 0 [ 3134.832161] ? __fget+0x225/0x360 [ 3134.850668] 0 [ 3134.853412] ? do_vfs_ioctl+0xff0/0xff0 [ 3134.853423] ? security_file_ioctl+0x83/0xb0 [ 3134.853433] SyS_ioctl+0x7f/0xb0 [ 3134.870544] 0 [ 3134.873147] ? do_vfs_ioctl+0xff0/0xff0 [ 3134.873162] do_syscall_64+0x1d5/0x640 [ 3134.873176] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3134.873188] RIP: 0033:0x466459 [ 3134.890332] 0 [ 3134.893049] RSP: 002b:00007fc87a7fc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3134.893058] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 3134.893064] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3134.893069] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3134.893075] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 3134.893080] R13: 00007ffd20e1ce3f R14: 00007fc87a7fc300 R15: 0000000000022000 [ 3134.898896] CPU: 0 PID: 8210 Comm: syz-executor.4 Not tainted 4.14.230-syzkaller #0 [ 3134.915091] 0 [ 3134.920024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3134.920028] Call Trace: [ 3134.920050] dump_stack+0x1b2/0x281 [ 3134.920063] warn_alloc.cold+0x96/0x1cc [ 3134.920090] ? zone_watermark_ok_safe+0x220/0x220 [ 3134.962462] __alloc_pages_nodemask+0x2127/0x2720 [ 3134.962479] ? lock_acquire+0x170/0x3f0 [ 3134.980976] Node 1 [ 3134.984379] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3134.984397] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3135.001709] ? __mutex_unlock_slowpath+0x75/0x770 [ 3135.007004] alloc_pages_current+0x155/0x260 [ 3135.012117] ion_page_pool_alloc+0x118/0x1b0 [ 3135.012775] Normal free:563528kB min:53696kB low:67120kB high:80544kB active_anon:73760kB inactive_anon:39560kB active_file:1224kB inactive_file:2156kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21856kB pagetables:67040kB bounce:0kB free_pcp:620kB local_pcp:620kB free_cma:0kB [ 3135.017174] ion_system_heap_allocate+0x133/0x8c0 [ 3135.017184] ? ion_alloc+0x187/0x810 [ 3135.017194] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3135.017202] ? ion_system_contig_heap_create+0x130/0x130 [ 3135.017211] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3135.017223] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3135.017231] ion_alloc+0x204/0x810 [ 3135.017243] ? ion_dma_buf_release+0x40/0x40 [ 3135.017255] ? __might_fault+0x177/0x1b0 [ 3135.091517] ion_ioctl+0xea/0x1f0 [ 3135.095150] ? ion_query_heaps+0x360/0x360 [ 3135.099510] ? ion_query_heaps+0x360/0x360 [ 3135.103754] do_vfs_ioctl+0x75a/0xff0 [ 3135.107567] ? ioctl_preallocate+0x1a0/0x1a0 [ 3135.112273] ? lock_downgrade+0x740/0x740 [ 3135.116628] ? __fget+0x225/0x360 [ 3135.120210] ? do_vfs_ioctl+0xff0/0xff0 [ 3135.124390] ? security_file_ioctl+0x83/0xb0 [ 3135.129016] SyS_ioctl+0x7f/0xb0 [ 3135.132495] ? do_vfs_ioctl+0xff0/0xff0 [ 3135.136478] do_syscall_64+0x1d5/0x640 [ 3135.140532] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3135.145899] RIP: 0033:0x466459 [ 3135.149090] RSP: 002b:00007f61587e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3135.157195] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3135.164629] lowmem_reserve[]: [ 3135.165007] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000004 [ 3135.165012] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3135.165016] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3135.165021] R13: 00007ffed7f6205f R14: 00007f61587e7300 R15: 0000000000022000 [ 3135.176374] warn_alloc_show_mem: 1 callbacks suppressed [ 3135.176378] Mem-Info: [ 3135.201118] 0 [ 3135.211889] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3135.231516] 0 0 0 0 [ 3135.237227] Node 0 DMA: 130*4kB (UE) 49*8kB (UME) 35*16kB (UME) 18*32kB (UME) 4*64kB (ME) 1*128kB (E) 4*256kB (UME) 3*512kB (UE) 2*1024kB (ME) 2*2048kB (U) 0*4096kB = 11136kB [ 3135.258525] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 3135.270768] CPU: 1 PID: 8212 Comm: syz-executor.5 Not tainted 4.14.230-syzkaller #0 [ 3135.278682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3135.288480] Call Trace: [ 3135.291147] dump_stack+0x1b2/0x281 [ 3135.295025] warn_alloc.cold+0x96/0x1cc [ 3135.299167] ? zone_watermark_ok_safe+0x220/0x220 [ 3135.304301] __alloc_pages_nodemask+0x2127/0x2720 [ 3135.309304] ? io_schedule_timeout+0x140/0x140 [ 3135.313875] ? lock_acquire+0x170/0x3f0 [ 3135.318385] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3135.323478] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3135.329135] ? __mutex_unlock_slowpath+0x75/0x770 [ 3135.334433] ? retint_kernel+0x2d/0x2d [ 3135.338763] alloc_pages_current+0x155/0x260 [ 3135.343334] ion_page_pool_alloc+0x118/0x1b0 [ 3135.347903] ion_system_heap_allocate+0x133/0x8c0 [ 3135.353249] ? ion_alloc+0x187/0x810 [ 3135.356947] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3135.362493] ? ion_system_contig_heap_create+0x130/0x130 [ 3135.368285] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3135.373292] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3135.378306] ion_alloc+0x204/0x810 [ 3135.381920] ? ion_dma_buf_release+0x40/0x40 [ 3135.387036] ? __might_fault+0x177/0x1b0 [ 3135.391342] ion_ioctl+0xea/0x1f0 [ 3135.394968] ? ion_query_heaps+0x360/0x360 [ 3135.399744] ? check_uarg_tail_zero+0xe9/0x120 [ 3135.404396] ? ion_query_heaps+0x360/0x360 [ 3135.408615] do_vfs_ioctl+0x75a/0xff0 [ 3135.412489] ? ioctl_preallocate+0x1a0/0x1a0 [ 3135.416950] ? lock_downgrade+0x740/0x740 [ 3135.421418] ? __fget+0x225/0x360 [ 3135.425258] ? do_vfs_ioctl+0xff0/0xff0 [ 3135.429405] ? security_file_ioctl+0x83/0xb0 [ 3135.434460] SyS_ioctl+0x7f/0xb0 [ 3135.438517] ? do_vfs_ioctl+0xff0/0xff0 [ 3135.443815] do_syscall_64+0x1d5/0x640 [ 3135.447893] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3135.453070] RIP: 0033:0x466459 [ 3135.456608] RSP: 002b:00007ff493160188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3135.464497] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3135.471936] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3135.479542] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3135.486971] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3135.494258] R13: 00007fff6312dd3f R14: 00007ff493160300 R15: 0000000000022000 [ 3135.514977] active_anon:80303 inactive_anon:41217 isolated_anon:12 [ 3135.514977] active_file:1261 inactive_file:4544 isolated_file:0 [ 3135.514977] unevictable:0 dirty:84 writeback:0 unstable:0 [ 3135.514977] slab_reclaimable:14378 slab_unreclaimable:150411 [ 3135.514977] mapped:57185 shmem:43797 pagetables:20590 bounce:0 [ 3135.514977] free:274986 free_pcp:97 free_cma:0 [ 3135.519096] Node 0 [ 3135.564412] Node 0 active_anon:247452kB inactive_anon:125308kB active_file:3820kB inactive_file:16020kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:181048kB dirty:332kB writeback:0kB shmem:130240kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 176128kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3135.599241] DMA32: 258*4kB (ME) 14694*8kB (UME) 14440*16kB (UME) 5743*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 533400kB [ 3135.618857] Node 1 active_anon:73760kB inactive_anon:39560kB active_file:1224kB inactive_file:2156kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:47692kB dirty:4kB writeback:0kB shmem:44948kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3135.634475] Node 0 [ 3135.649164] Node 0 DMA free:11136kB min:204kB low:252kB high:300kB active_anon:2216kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3135.655954] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3135.712267] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3135.723181] Node 0 DMA32 free:454524kB min:36200kB low:45248kB high:54296kB active_anon:245236kB inactive_anon:125252kB active_file:3820kB inactive_file:16200kB unevictable:0kB writepending:380kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11456kB pagetables:15188kB bounce:0kB free_pcp:392kB local_pcp:144kB free_cma:0kB [ 3135.723315] Node 1 [ 3135.757059] lowmem_reserve[]: 0 0 0 0 0 [ 3135.777706] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3135.806832] Normal: 14350*4kB (UM) 12529*8kB (UM) 8529*16kB (UM) 6642*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 506640kB [ 3135.833433] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3135.835643] lowmem_reserve[]: 0 0 0 0 0 [ 3135.854985] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3135.860386] Node 1 Normal free:506640kB min:53696kB low:67120kB high:80544kB active_anon:73728kB inactive_anon:39560kB active_file:1252kB inactive_file:2128kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21856kB pagetables:67040kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3135.883750] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3135.913122] lowmem_reserve[]: 0 0 0 0 0 [ 3135.926126] Node 0 DMA: 130*4kB (UE) 49*8kB (UME) 35*16kB (UME) 18*32kB (UME) 4*64kB (ME) 1*128kB (E) 4*256kB (UME) 3*512kB (UE) 2*1024kB (ME) 2*2048kB (U) 0*4096kB = 11136kB [ 3135.951243] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3135.962424] Node 0 DMA32: 267*4kB (UME) 65*8kB (ME) 6709*16kB (UME) 5744*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 292740kB [ 3135.974675] 49617 total pagecache pages [ 3135.988688] 0 pages in swap cache [ 3135.993505] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3135.995978] Swap cache stats: add 0, delete 0, find 0/0 [ 3136.018294] Node 1 Normal: 14350*4kB (UM) 12529*8kB (UM) 8529*16kB (UM) 6642*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 506640kB [ 3136.034373] Free swap = 0kB [ 3136.041441] Total swap = 0kB [ 3136.050068] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3136.068497] 2097051 pages RAM [ 3136.071740] 0 pages HighMem/MovableOnly [ 3136.074894] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3136.086016] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3136.094960] 363848 pages reserved [ 3136.095548] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3136.099472] 0 pages cma reserved [ 3136.126693] 49617 total pagecache pages [ 3136.130696] 0 pages in swap cache [ 3136.134267] Swap cache stats: add 0, delete 0, find 0/0 [ 3136.155026] Free swap = 0kB [ 3136.164958] Total swap = 0kB [ 3136.168428] 2097051 pages RAM [ 3136.175225] 0 pages HighMem/MovableOnly [ 3136.179400] 363848 pages reserved [ 3136.182931] 0 pages cma reserved [ 3137.022066] oom_reaper: reaped process 8211 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3137.056976] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 3137.075231] systemd-journal cpuset=/ mems_allowed=0-1 [ 3137.080553] CPU: 0 PID: 8161 Comm: systemd-journal Not tainted 4.14.230-syzkaller #0 [ 3137.090092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3137.100211] Call Trace: [ 3137.103110] dump_stack+0x1b2/0x281 [ 3137.107157] dump_header+0x178/0x82f [ 3137.111656] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3137.117371] ? ___ratelimit+0x2cd/0x530 [ 3137.122431] oom_kill_process.cold+0x10/0xa40 [ 3137.127491] out_of_memory+0xe3e/0x1190 [ 3137.131474] ? oom_killer_disable+0x1c0/0x1c0 [ 3137.136819] ? mutex_trylock+0x152/0x1a0 [ 3137.140957] __alloc_pages_nodemask+0x23e1/0x2720 [ 3137.146436] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3137.153213] alloc_pages_current+0x155/0x260 [ 3137.158331] filemap_fault+0x11a1/0x1ad0 [ 3137.162673] ext4_filemap_fault+0x84/0xb0 [ 3137.166906] __do_fault+0xfa/0x380 [ 3137.170528] __handle_mm_fault+0x2497/0x4620 [ 3137.175200] ? vm_insert_page+0x7c0/0x7c0 [ 3137.179333] ? mark_held_locks+0xa6/0xf0 [ 3137.183462] handle_mm_fault+0x455/0x9c0 [ 3137.187631] __do_page_fault+0x549/0xad0 [ 3137.191697] ? spurious_fault+0x640/0x640 [ 3137.195968] ? do_page_fault+0x60/0x500 [ 3137.200013] ? page_fault+0x2f/0x50 [ 3137.203719] page_fault+0x45/0x50 [ 3137.207264] RIP: 0001:0xffffffffffffffff [ 3137.211301] RSP: 690041e0:00007ffe4d0a7f10 EFLAGS: 7ffe4d0a7d20 [ 3137.212103] Mem-Info: [ 3137.221020] active_anon:80282 inactive_anon:41217 isolated_anon:0 [ 3137.221020] active_file:11 inactive_file:14 isolated_file:0 [ 3137.221020] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3137.221020] slab_reclaimable:14369 slab_unreclaimable:150549 [ 3137.221020] mapped:52884 shmem:43797 pagetables:20590 bounce:0 [ 3137.221020] free:13802 free_pcp:83 free_cma:0 [ 3137.225061] syz-executor.0: [ 3137.255290] Node 0 active_anon:247404kB inactive_anon:125308kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:166740kB dirty:0kB writeback:0kB shmem:130240kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 176128kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3137.255304] Node 1 active_anon:73724kB inactive_anon:39560kB active_file:0kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44796kB dirty:0kB writeback:0kB shmem:44948kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3137.255308] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:2216kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3137.255324] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3137.255344] Node 0 DMA32 free:17496kB min:36200kB low:45248kB high:54296kB active_anon:245188kB inactive_anon:125252kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11456kB pagetables:15188kB bounce:0kB free_pcp:128kB local_pcp:120kB free_cma:0kB [ 3137.255361] lowmem_reserve[]: 0 0 0 0 0 [ 3137.255379] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3137.271438] page allocation failure: order:0 [ 3137.287291] lowmem_reserve[]: 0 0 0 0 0 [ 3137.287315] Node 1 Normal free:26756kB min:53696kB low:67120kB high:80544kB active_anon:73724kB inactive_anon:39560kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21856kB pagetables:67040kB bounce:0kB free_pcp:204kB local_pcp:84kB free_cma:0kB [ 3137.287335] lowmem_reserve[]: 0 0 0 0 0 [ 3137.287353] Node 0 DMA: 85*4kB (UE) 49*8kB (UME) 35*16kB (UME) 18*32kB (UME) 4*64kB (ME) 1*128kB (E) 4*256kB (UME) 3*512kB (UE) [ 3137.328539] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 3137.344297] 2*1024kB [ 3137.368598] (null) [ 3137.379359] (ME) 2*2048kB (U) 0*4096kB = 10956kB [ 3137.379386] Node 0 DMA32: 1122*4kB (ME) 406*8kB (UME) 96*16kB (ME) 33*32kB (ME) 28*64kB (UM) 12*128kB (UM) 9*256kB (UM) 3*512kB (M) 0*1024kB 0*2048kB 0*4096kB [ 3137.396459] syz-executor.0 cpuset= [ 3137.410327] = 17496kB [ 3137.410333] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3137.410387] Node 1 Normal: 15*4kB (UM) 7*8kB [ 3137.427383] / [ 3137.449210] (UM) [ 3137.472908] mems_allowed=0-1 [ 3137.475812] 23*16kB [ 3137.485101] CPU: 1 PID: 8211 Comm: syz-executor.0 Not tainted 4.14.230-syzkaller #0 [ 3137.499066] (M) [ 3137.502402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3137.502415] Call Trace: [ 3137.504905] 749*32kB [ 3137.515917] dump_stack+0x1b2/0x281 [ 3137.515931] warn_alloc.cold+0x96/0x1cc [ 3137.515943] ? zone_watermark_ok_safe+0x220/0x220 [ 3137.520420] (UM) [ 3137.522223] ? usleep_range+0x130/0x130 [ 3137.524261] 18*64kB [ 3137.527467] ? try_to_free_pages+0x23f/0x6e0 [ 3137.527478] ? _find_next_bit+0xdb/0x100 [ 3137.527488] ? run_timer_softirq+0x5a0/0x5a0 [ 3137.527502] __alloc_pages_nodemask+0x2127/0x2720 [ 3137.527520] ? lock_acquire+0x170/0x3f0 [ 3137.529820] (UM) [ 3137.537789] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3137.537799] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3137.537813] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3137.537828] ? alloc_pages_current+0x84/0x260 [ 3137.539779] 1*128kB [ 3137.549208] alloc_pages_current+0x155/0x260 [ 3137.549219] ion_page_pool_alloc+0x118/0x1b0 [ 3137.549228] ion_system_heap_allocate+0x133/0x8c0 [ 3137.549237] ? ion_alloc+0x187/0x810 [ 3137.549246] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3137.549255] ? ion_system_contig_heap_create+0x130/0x130 [ 3137.551911] (M) [ 3137.554310] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3137.558036] 2*256kB [ 3137.562185] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3137.567307] (M) [ 3137.569590] ion_alloc+0x204/0x810 [ 3137.573723] 1*512kB [ 3137.576143] ? ion_dma_buf_release+0x40/0x40 [ 3137.576155] ? __might_fault+0x177/0x1b0 [ 3137.576165] ion_ioctl+0xea/0x1f0 [ 3137.576173] ? ion_query_heaps+0x360/0x360 [ 3137.576185] ? ion_query_heaps+0x360/0x360 [ 3137.576197] do_vfs_ioctl+0x75a/0xff0 [ 3137.580856] (M) [ 3137.584932] ? ioctl_preallocate+0x1a0/0x1a0 [ 3137.584942] ? lock_downgrade+0x740/0x740 [ 3137.584955] ? __fget+0x225/0x360 [ 3137.584963] ? do_vfs_ioctl+0xff0/0xff0 [ 3137.584975] ? security_file_ioctl+0x83/0xb0 [ 3137.589460] 0*1024kB [ 3137.594722] SyS_ioctl+0x7f/0xb0 [ 3137.598988] 0*2048kB [ 3137.601096] ? do_vfs_ioctl+0xff0/0xff0 [ 3137.606497] 0*4096kB [ 3137.610521] do_syscall_64+0x1d5/0x640 [ 3137.616153] = 26756kB [ 3137.621205] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3137.623661] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3137.628440] RIP: 0033:0x466459 [ 3137.628445] RSP: 002b:00007f1ef2095188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3137.628454] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3137.628459] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3137.628463] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3137.628467] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3137.628471] R13: 00007fffa779c11f R14: 00007f1ef2095300 R15: 0000000000022000 [ 3137.651161] warn_alloc_show_mem: 2 callbacks suppressed [ 3137.651165] Mem-Info: [ 3137.655600] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3137.655609] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3137.655615] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3137.655619] 43822 total pagecache pages [ 3137.655627] 0 pages in swap cache [ 3137.655632] Swap cache stats: add 0, delete 0, find 0/0 [ 3137.655635] Free swap = 0kB [ 3137.655638] Total swap = 0kB [ 3137.655646] 2097051 pages RAM [ 3137.672495] active_anon:80282 inactive_anon:41217 isolated_anon:0 [ 3137.672495] active_file:11 inactive_file:14 isolated_file:0 [ 3137.672495] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3137.672495] slab_reclaimable:14369 slab_unreclaimable:150549 [ 3137.672495] mapped:52884 shmem:43797 pagetables:20590 bounce:0 [ 3137.672495] free:13802 free_pcp:83 free_cma:0 [ 3137.676146] 0 pages HighMem/MovableOnly [ 3137.676151] 363848 pages reserved [ 3137.676154] 0 pages cma reserved [ 3137.676162] Out of memory (oom_kill_allocating_task): Kill process 8161 (systemd-journal) score 0 or sacrifice child [ 3137.676192] Killed process 8161 (systemd-journal) total-vm:46096kB, anon-rss:468kB, file-rss:0kB, shmem-rss:2464kB [ 3137.678685] systemd-journal: [ 3137.681670] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 3137.683212] page allocation failure: order:0 [ 3137.702922] Node 0 active_anon:247404kB inactive_anon:125308kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:166740kB dirty:0kB writeback:0kB shmem:130240kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 176128kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3137.704542] , mode:0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 3137.713969] (null) [ 3137.715709] (null) [ 3137.715714] systemd-journal cpuset=/ mems_allowed=0-1 [ 3137.715736] CPU: 0 PID: 8161 Comm: systemd-journal Not tainted 4.14.230-syzkaller #0 [ 3137.715740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3137.715744] Call Trace: [ 3137.715761] dump_stack+0x1b2/0x281 [ 3137.715773] warn_alloc.cold+0x96/0x1cc [ 3137.728488] , order=0, oom_score_adj=0 [ 3137.730717] ? zone_watermark_ok_safe+0x220/0x220 [ 3137.734154] syz-fuzzer cpuset= [ 3137.736841] ? wait_for_completion_io+0x10/0x10 [ 3137.736853] __alloc_pages_nodemask+0x2127/0x2720 [ 3137.736872] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3137.736892] alloc_pages_current+0x155/0x260 [ 3137.736903] filemap_fault+0x11a1/0x1ad0 [ 3137.736921] ext4_filemap_fault+0x84/0xb0 [ 3137.736930] __do_fault+0xfa/0x380 [ 3137.736939] __handle_mm_fault+0x2497/0x4620 [ 3137.736947] ? vm_insert_page+0x7c0/0x7c0 [ 3137.736962] ? mark_held_locks+0xa6/0xf0 [ 3137.736972] handle_mm_fault+0x455/0x9c0 [ 3137.736985] __do_page_fault+0x549/0xad0 [ 3137.736996] ? spurious_fault+0x640/0x640 [ 3137.741382] Node 1 active_anon:73724kB inactive_anon:39560kB active_file:0kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44796kB dirty:0kB writeback:0kB shmem:44948kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3137.743759] ? do_page_fault+0x60/0x500 [ 3137.748017] Node 0 [ 3137.750386] ? page_fault+0x2f/0x50 [ 3137.756004] / [ 3137.765401] page_fault+0x45/0x50 [ 3137.768747] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:2216kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3137.776458] RIP: 0001:0xffffffffffffffff [ 3137.776462] RSP: 690041e0:00007ffe4d0a7f10 EFLAGS: 7ffe4d0a7d20 [ 3137.777278] mems_allowed=0-1 [ 3137.784003] lowmem_reserve[]: [ 3137.791932] CPU: 0 PID: 7998 Comm: syz-fuzzer Not tainted 4.14.230-syzkaller #0 [ 3137.791937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3137.791941] Call Trace: [ 3137.791955] dump_stack+0x1b2/0x281 [ 3137.791967] dump_header+0x178/0x82f [ 3137.791978] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3137.791987] ? ___ratelimit+0x2cd/0x530 [ 3137.791995] oom_kill_process.cold+0x10/0xa40 [ 3137.792013] out_of_memory+0xe3e/0x1190 [ 3137.792025] ? oom_killer_disable+0x1c0/0x1c0 [ 3137.792031] ? mutex_trylock+0x152/0x1a0 [ 3137.792040] __alloc_pages_nodemask+0x23e1/0x2720 [ 3137.792060] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3137.792086] alloc_pages_current+0x155/0x260 [ 3137.792096] filemap_fault+0x11a1/0x1ad0 [ 3137.792115] ext4_filemap_fault+0x84/0xb0 [ 3137.792125] __do_fault+0xfa/0x380 [ 3137.792135] __handle_mm_fault+0x2497/0x4620 [ 3137.792145] ? vm_insert_page+0x7c0/0x7c0 [ 3137.792154] ? lock_downgrade+0x740/0x740 [ 3137.792169] ? mark_held_locks+0xa6/0xf0 [ 3137.792181] handle_mm_fault+0x455/0x9c0 [ 3137.792195] __do_page_fault+0x549/0xad0 [ 3137.792207] ? spurious_fault+0x640/0x640 [ 3137.792215] ? do_page_fault+0x60/0x500 [ 3137.792223] ? page_fault+0x2f/0x50 [ 3137.792231] page_fault+0x45/0x50 [ 3137.792237] RIP: 0000:0x940aec [ 3137.792242] RSP: 2e000:000000c00003dec8 EFLAGS: 0043b6a0 [ 3137.792253] Mem-Info: [ 3137.792270] active_anon:80282 inactive_anon:41217 isolated_anon:0 [ 3137.792270] active_file:11 inactive_file:14 isolated_file:0 [ 3137.792270] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3137.792270] slab_reclaimable:14369 slab_unreclaimable:150549 [ 3137.792270] mapped:52884 shmem:43797 pagetables:20590 bounce:0 [ 3137.792270] free:13802 free_pcp:83 free_cma:0 [ 3137.792284] Node 0 active_anon:247404kB inactive_anon:125308kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:166740kB dirty:0kB writeback:0kB shmem:130240kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 176128kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3137.792297] Node 1 active_anon:73724kB inactive_anon:39560kB active_file:0kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44796kB dirty:0kB writeback:0kB shmem:44948kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3137.792300] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:2216kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3137.792316] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3137.792333] Node 0 DMA32 free:17496kB min:36200kB low:45248kB high:54296kB active_anon:245188kB inactive_anon:125252kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11456kB pagetables:15188kB bounce:0kB free_pcp:128kB local_pcp:120kB free_cma:0kB [ 3137.792351] lowmem_reserve[]: 0 0 0 0 0 [ 3137.792369] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3137.792385] lowmem_reserve[]: 0 0 0 0 0 [ 3137.792404] Node 1 Normal free:26756kB min:53696kB low:67120kB high:80544kB active_anon:73724kB inactive_anon:39560kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21856kB pagetables:67040kB bounce:0kB free_pcp:204kB local_pcp:84kB free_cma:0kB [ 3137.792419] lowmem_reserve[]: 0 0 0 0 0 [ 3137.792436] Node 0 DMA: [ 3137.824057] 0 [ 3137.832557] 85*4kB [ 3137.852870] 2717 [ 3137.860608] (UE) [ 3137.872004] 2718 [ 3137.873883] 49*8kB [ 3137.916605] 2718 [ 3137.929711] (UME) [ 3137.936631] 2718 [ 3137.954826] 35*16kB [ 3138.002693] (UME) [ 3138.009243] Node 0 [ 3138.028290] 18*32kB [ 3138.035740] DMA32 free:17496kB min:36200kB low:45248kB high:54296kB active_anon:245188kB inactive_anon:125252kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11456kB pagetables:15188kB bounce:0kB free_pcp:128kB local_pcp:8kB free_cma:0kB [ 3138.049053] (UME) [ 3138.056293] lowmem_reserve[]: [ 3138.067997] 4*64kB [ 3138.078026] 0 [ 3138.083273] (ME) [ 3138.083598] 0 [ 3138.092717] 1*128kB [ 3138.098045] 0 [ 3138.108515] (E) [ 3138.119009] 0 [ 3138.149429] 4*256kB [ 3138.158704] 0 [ 3138.190330] (UME) [ 3138.214403] 3*512kB [ 3138.229427] Node 0 [ 3138.238444] (UE) [ 3138.244373] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3138.249209] 2*1024kB [ 3138.257038] lowmem_reserve[]: [ 3138.264522] (ME) [ 3138.274871] 0 [ 3138.280612] 2*2048kB [ 3138.284013] 0 [ 3138.288646] (U) 0*4096kB = 10956kB [ 3138.288657] Node 0 DMA32: 1122*4kB (ME) 406*8kB (UME) 96*16kB (ME) 33*32kB (ME) 28*64kB (UM) 12*128kB (UM) 9*256kB (UM) 3*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 17496kB [ 3138.288720] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3138.288763] Node 1 Normal: 15*4kB (UM) 7*8kB (UM) 23*16kB (M) 749*32kB [ 3138.308309] 0 [ 3138.316069] (UM) [ 3138.326207] 0 [ 3138.328280] 18*64kB [ 3138.330091] 0 [ 3138.333367] (UM) [ 3138.382527] 1*128kB [ 3138.423685] Node 1 [ 3138.440677] (M) [ 3138.471492] Normal free:26756kB min:53696kB low:67120kB high:80544kB active_anon:73724kB inactive_anon:39560kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21856kB pagetables:67040kB bounce:0kB free_pcp:204kB local_pcp:120kB free_cma:0kB [ 3138.509641] 2*256kB [ 3138.540576] lowmem_reserve[]: [ 3138.575107] (M) [ 3138.585895] 0 [ 3138.594566] 1*512kB [ 3138.594622] 0 [ 3138.597112] (M) 0*1024kB 0*2048kB 0*4096kB = 26756kB [ 3138.597135] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3138.597141] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3138.597150] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3138.607470] 0 [ 3138.642692] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3138.652595] 0 [ 3138.663600] 43822 total pagecache pages [ 3138.664922] 0 [ 3138.667361] 0 pages in swap cache [ 3138.669628] Node 0 [ 3138.672260] Swap cache stats: add 0, delete 0, find 0/0 [ 3138.674498] DMA: [ 3138.711940] Free swap = 0kB [ 3138.720749] 85*4kB [ 3138.747076] Total swap = 0kB [ 3138.757032] (UE) [ 3138.773041] 2097051 pages RAM [ 3138.782862] 49*8kB [ 3138.789664] 0 pages HighMem/MovableOnly [ 3138.823438] (UME) [ 3138.832736] 363848 pages reserved [ 3138.842258] 35*16kB [ 3138.844069] 0 pages cma reserved [ 3138.853731] (UME) [ 3138.873505] Out of memory (oom_kill_allocating_task): Kill process 7998 (syz-fuzzer) score 0 or sacrifice child [ 3138.882850] 18*32kB [ 3138.884212] Killed process 7282 (syz-executor.3) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 3138.969047] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 3138.977758] (UME) 4*64kB (ME) 1*128kB (E) 4*256kB (UME) 3*512kB (UE) 2*1024kB (ME) 2*2048kB (U) 0*4096kB = 10956kB [ 3138.984089] syz-fuzzer cpuset= [ 3138.997457] syz-executor.2: [ 3139.000797] Node 0 [ 3139.000984] page allocation failure: order:0 [ 3139.004167] DMA32: [ 3139.006729] syz-executor.2: [ 3139.011293] 1122*4kB [ 3139.013622] page allocation failure: order:0 [ 3139.025163] (ME) [ 3139.025972] / [ 3139.029603] 421*8kB [ 3139.031780] mems_allowed=0-1 [ 3139.033489] (UME) [ 3139.037840] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3139.044362] 98*16kB (UME) 33*32kB (ME) 28*64kB (UM) 12*128kB (UM) 9*256kB (UM) 3*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 17648kB [ 3139.054105] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 3139.071171] CPU: 0 PID: 7998 Comm: syz-fuzzer Not tainted 4.14.230-syzkaller #0 [ 3139.072794] Node 0 [ 3139.078987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3139.078991] Call Trace: [ 3139.079012] dump_stack+0x1b2/0x281 [ 3139.079023] dump_header+0x178/0x82f [ 3139.079035] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3139.086687] Normal: [ 3139.088906] ? ___ratelimit+0x2cd/0x530 [ 3139.098773] 0*4kB [ 3139.101527] oom_kill_process.cold+0x10/0xa40 [ 3139.105958] 0*8kB [ 3139.109845] out_of_memory+0xe3e/0x1190 [ 3139.115133] 0*16kB [ 3139.117707] ? oom_killer_disable+0x1c0/0x1c0 [ 3139.121937] 0*32kB [ 3139.124422] ? mutex_trylock+0x152/0x1a0 [ 3139.128909] 0*64kB [ 3139.131031] __alloc_pages_nodemask+0x23e1/0x2720 [ 3139.135098] 0*128kB [ 3139.137579] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3139.142041] 0*256kB [ 3139.144314] alloc_pages_current+0x155/0x260 [ 3139.148368] 0*512kB [ 3139.150609] filemap_fault+0x11a1/0x1ad0 [ 3139.155445] 0*1024kB [ 3139.157923] ext4_filemap_fault+0x84/0xb0 [ 3139.162886] 0*2048kB [ 3139.165199] __do_fault+0xfa/0x380 [ 3139.165209] __handle_mm_fault+0x2497/0x4620 [ 3139.165218] ? vm_insert_page+0x7c0/0x7c0 [ 3139.170131] 0*4096kB [ 3139.172614] ? lock_downgrade+0x740/0x740 [ 3139.176670] = 0kB [ 3139.179136] ? mark_held_locks+0xa6/0xf0 [ 3139.183349] Node 1 [ 3139.185858] handle_mm_fault+0x455/0x9c0 [ 3139.185871] __do_page_fault+0x549/0xad0 [ 3139.185883] ? spurious_fault+0x640/0x640 [ 3139.189406] Normal: [ 3139.193888] ? do_page_fault+0x60/0x500 [ 3139.198192] 15*4kB [ 3139.200597] ? page_fault+0x2f/0x50 [ 3139.205307] (UM) [ 3139.207418] page_fault+0x45/0x50 [ 3139.211623] 7*8kB (UM) [ 3139.214035] RIP: 0000:0x940aec [ 3139.218762] 23*16kB [ 3139.222965] RSP: 2e000:000000c00003dec8 EFLAGS: 0043b6a0 [ 3139.227221] (M) [ 3139.235913] syz-executor.2 cpuset= [ 3139.245920] (null) [ 3139.249758] / [ 3139.252075] syz-executor.2 cpuset= [ 3139.254502] mems_allowed=0-1 [ 3139.254514] CPU: 0 PID: 8204 Comm: syz-executor.2 Not tainted 4.14.230-syzkaller #0 [ 3139.260450] 749*32kB [ 3139.262350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3139.265986] (UM) [ 3139.268116] Call Trace: [ 3139.269913] 18*64kB (UM) [ 3139.273477] dump_stack+0x1b2/0x281 [ 3139.276669] / [ 3139.284718] warn_alloc.cold+0x96/0x1cc [ 3139.287230] 1*128kB [ 3139.296995] ? zone_watermark_ok_safe+0x220/0x220 [ 3139.297004] ? usleep_range+0x130/0x130 [ 3139.297014] ? try_to_free_pages+0x23f/0x6e0 [ 3139.299084] mems_allowed=0-1 [ 3139.301699] ? _find_next_bit+0xdb/0x100 [ 3139.314672] (M) [ 3139.316468] ? run_timer_softirq+0x5a0/0x5a0 [ 3139.321373] 2*256kB [ 3139.325381] __alloc_pages_nodemask+0x2127/0x2720 [ 3139.325399] ? lock_acquire+0x170/0x3f0 [ 3139.344655] (M) [ 3139.346311] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3139.351631] 1*512kB [ 3139.355966] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3139.355981] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3139.356001] alloc_pages_current+0x155/0x260 [ 3139.364678] (M) [ 3139.365764] ion_page_pool_alloc+0x118/0x1b0 [ 3139.370235] 0*1024kB [ 3139.375761] ion_system_heap_allocate+0x133/0x8c0 [ 3139.375770] ? ion_alloc+0x187/0x810 [ 3139.375784] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3139.404654] 0*2048kB 0*4096kB [ 3139.405091] ? ion_system_contig_heap_create+0x130/0x130 [ 3139.405102] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3139.408370] = 26756kB [ 3139.414299] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3139.427382] ion_alloc+0x204/0x810 [ 3139.432047] ? ion_dma_buf_release+0x40/0x40 [ 3139.434678] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3139.436631] ? __might_fault+0x177/0x1b0 [ 3139.450280] ion_ioctl+0xea/0x1f0 [ 3139.453909] ? ion_query_heaps+0x360/0x360 [ 3139.454672] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3139.459453] ? ion_query_heaps+0x360/0x360 [ 3139.476917] do_vfs_ioctl+0x75a/0xff0 [ 3139.481857] ? ioctl_preallocate+0x1a0/0x1a0 [ 3139.484718] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3139.487623] ? lock_downgrade+0x740/0x740 [ 3139.502092] ? __fget+0x225/0x360 [ 3139.506158] ? do_vfs_ioctl+0xff0/0xff0 [ 3139.510662] ? security_file_ioctl+0x83/0xb0 [ 3139.514659] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3139.515405] SyS_ioctl+0x7f/0xb0 [ 3139.524155] 43822 total pagecache pages [ 3139.527602] ? do_vfs_ioctl+0xff0/0xff0 [ 3139.527615] do_syscall_64+0x1d5/0x640 [ 3139.527629] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3139.527638] RIP: 0033:0x466459 [ 3139.544655] 0 pages in swap cache [ 3139.544773] RSP: 002b:00007fc87a81d188 EFLAGS: 00000246 [ 3139.548386] Swap cache stats: add 0, delete 0, find 0/0 [ 3139.552536] ORIG_RAX: 0000000000000010 [ 3139.552544] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3139.574651] Free swap = 0kB [ 3139.575212] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3139.578215] Total swap = 0kB [ 3139.585718] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3139.585723] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3139.585728] R13: 00007ffd20e1ce3f R14: 00007fc87a81d300 R15: 0000000000022000 [ 3139.592062] Mem-Info: [ 3139.608402] CPU: 1 PID: 8214 Comm: syz-executor.2 Not tainted 4.14.230-syzkaller #0 [ 3139.617463] active_anon:80282 inactive_anon:41217 isolated_anon:0 [ 3139.617463] active_file:4 inactive_file:6 isolated_file:0 [ 3139.617463] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3139.617463] slab_reclaimable:14355 slab_unreclaimable:150497 [ 3139.617463] mapped:52884 shmem:43797 pagetables:20590 bounce:0 [ 3139.617463] free:13828 free_pcp:129 free_cma:0 [ 3139.623763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3139.666483] Node 0 active_anon:247404kB inactive_anon:125308kB active_file:16kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:166740kB dirty:0kB writeback:0kB shmem:130240kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 176128kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3139.671663] Call Trace: [ 3139.704236] dump_stack+0x1b2/0x281 [ 3139.707231] Node 1 active_anon:73724kB inactive_anon:39560kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44796kB dirty:0kB writeback:0kB shmem:44948kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3139.708217] warn_alloc.cold+0x96/0x1cc [ 3139.740800] ? zone_watermark_ok_safe+0x220/0x220 [ 3139.742179] Node 0 [ 3139.746085] ? usleep_range+0x130/0x130 [ 3139.746095] ? try_to_free_pages+0x23f/0x6e0 [ 3139.746104] ? _find_next_bit+0xdb/0x100 [ 3139.746114] ? run_timer_softirq+0x5a0/0x5a0 [ 3139.746129] __alloc_pages_nodemask+0x2127/0x2720 [ 3139.746144] ? lock_acquire+0x170/0x3f0 [ 3139.748507] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:2216kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3139.752477] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3139.763358] lowmem_reserve[]: [ 3139.767028] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3139.767043] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3139.767062] alloc_pages_current+0x155/0x260 [ 3139.767073] ion_page_pool_alloc+0x118/0x1b0 [ 3139.774505] 0 [ 3139.778647] ion_system_heap_allocate+0x133/0x8c0 [ 3139.778657] ? ion_alloc+0x187/0x810 [ 3139.778667] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3139.778769] ? ion_system_contig_heap_create+0x130/0x130 [ 3139.778786] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3139.778802] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3139.778812] ion_alloc+0x204/0x810 [ 3139.778826] ? ion_dma_buf_release+0x40/0x40 [ 3139.778924] ? __might_fault+0x177/0x1b0 [ 3139.811743] 2717 [ 3139.814550] ion_ioctl+0xea/0x1f0 [ 3139.819173] 2718 [ 3139.824742] ? ion_query_heaps+0x360/0x360 [ 3139.824754] ? ion_query_heaps+0x360/0x360 [ 3139.824764] do_vfs_ioctl+0x75a/0xff0 [ 3139.824774] ? ioctl_preallocate+0x1a0/0x1a0 [ 3139.824784] ? lock_downgrade+0x740/0x740 [ 3139.824797] ? __fget+0x225/0x360 [ 3139.824805] ? do_vfs_ioctl+0xff0/0xff0 [ 3139.824817] ? security_file_ioctl+0x83/0xb0 [ 3139.834573] 2718 [ 3139.835563] SyS_ioctl+0x7f/0xb0 [ 3139.835571] ? do_vfs_ioctl+0xff0/0xff0 [ 3139.835582] do_syscall_64+0x1d5/0x640 [ 3139.835596] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3139.835605] RIP: 0033:0x466459 [ 3139.840610] 2718 [ 3139.844459] RSP: 002b:00007fc87a7fc188 EFLAGS: 00000246 [ 3139.853899] warn_alloc_show_mem: 1 callbacks suppressed [ 3139.853902] Mem-Info: [ 3139.855514] ORIG_RAX: 0000000000000010 [ 3139.855519] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 3139.855524] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3139.855529] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3139.855533] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 3139.855538] R13: 00007ffd20e1ce3f R14: 00007fc87a7fc300 R15: 0000000000022000 [ 3139.870306] 2097051 pages RAM [ 3139.884553] 0 pages HighMem/MovableOnly [ 3139.888932] Node 0 [ 3139.892736] 363848 pages reserved [ 3139.903776] active_anon:80282 inactive_anon:41217 isolated_anon:0 [ 3139.903776] active_file:12 inactive_file:13 isolated_file:0 [ 3139.903776] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3139.903776] slab_reclaimable:14352 slab_unreclaimable:150482 [ 3139.903776] mapped:52884 shmem:43797 pagetables:20590 bounce:0 [ 3139.903776] free:13840 free_pcp:129 free_cma:0 [ 3139.913849] 0 pages cma reserved [ 3139.921213] DMA32 free:17648kB min:36200kB low:45248kB high:54296kB active_anon:245188kB inactive_anon:125252kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11456kB pagetables:15188kB bounce:0kB free_pcp:312kB local_pcp:144kB free_cma:0kB [ 3140.104658] Node 0 active_anon:247304kB inactive_anon:125308kB active_file:548kB inactive_file:748kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:167240kB dirty:0kB writeback:0kB shmem:130240kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 176128kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3140.219275] Node 1 active_anon:73724kB inactive_anon:39560kB active_file:0kB inactive_file:80kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44896kB dirty:0kB writeback:0kB shmem:44948kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3140.250325] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3140.279101] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3140.295980] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 3140.301765] CPU: 0 PID: 8214 Comm: syz-executor.2 Not tainted 4.14.230-syzkaller #0 [ 3140.302238] syz-executor.0 cpuset= [ 3140.310088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3140.310093] Call Trace: [ 3140.310110] dump_stack+0x1b2/0x281 [ 3140.310124] warn_alloc.cold+0x96/0x1cc [ 3140.310134] ? zone_watermark_ok_safe+0x220/0x220 [ 3140.310154] __alloc_pages_nodemask+0x2127/0x2720 [ 3140.310164] ? lock_acquire+0x170/0x3f0 [ 3140.310175] ? lock_acquire+0x170/0x3f0 [ 3140.310189] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3140.310205] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3140.310218] ? __mutex_unlock_slowpath+0x75/0x770 [ 3140.344970] / [ 3140.345216] alloc_pages_current+0x155/0x260 [ 3140.349788] mems_allowed=0-1 [ 3140.353916] ion_page_pool_alloc+0x118/0x1b0 [ 3140.384626] ion_system_heap_allocate+0x133/0x8c0 [ 3140.389831] ? _raw_spin_unlock+0x29/0x40 [ 3140.394253] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3140.399707] ? ion_system_contig_heap_create+0x130/0x130 [ 3140.405442] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3140.410550] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3140.415559] ion_alloc+0x27a/0x810 [ 3140.419812] ? ion_dma_buf_release+0x40/0x40 [ 3140.424316] ? __might_fault+0x177/0x1b0 [ 3140.428399] ion_ioctl+0xea/0x1f0 [ 3140.432055] ? ion_query_heaps+0x360/0x360 [ 3140.436549] ? ion_query_heaps+0x360/0x360 [ 3140.441251] do_vfs_ioctl+0x75a/0xff0 [ 3140.445280] ? ioctl_preallocate+0x1a0/0x1a0 [ 3140.450167] ? lock_downgrade+0x740/0x740 [ 3140.454896] ? __fget+0x225/0x360 [ 3140.458558] ? do_vfs_ioctl+0xff0/0xff0 [ 3140.462535] ? security_file_ioctl+0x83/0xb0 [ 3140.467028] SyS_ioctl+0x7f/0xb0 [ 3140.470408] ? do_vfs_ioctl+0xff0/0xff0 [ 3140.474385] do_syscall_64+0x1d5/0x640 [ 3140.478479] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3140.484113] RIP: 0033:0x466459 [ 3140.487395] RSP: 002b:00007fc87a7fc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3140.495798] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 3140.503156] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3140.511063] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3140.518357] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 3140.525879] R13: 00007ffd20e1ce3f R14: 00007fc87a7fc300 R15: 0000000000022000 [ 3140.533237] CPU: 1 PID: 8211 Comm: syz-executor.0 Not tainted 4.14.230-syzkaller #0 [ 3140.538090] Node 0 [ 3140.541038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3140.541051] DMA free:10984kB min:204kB low:252kB high:300kB active_anon:2216kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3140.541057] lowmem_reserve[]: [ 3140.543449] Call Trace: [ 3140.553741] 0 [ 3140.580814] dump_stack+0x1b2/0x281 [ 3140.580827] warn_alloc.cold+0x96/0x1cc [ 3140.580838] ? zone_watermark_ok_safe+0x220/0x220 [ 3140.580859] __alloc_pages_nodemask+0x2127/0x2720 [ 3140.580874] ? lock_acquire+0x170/0x3f0 [ 3140.580888] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3140.580905] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3140.580917] ? __mutex_unlock_slowpath+0x75/0x770 [ 3140.587495] 2717 [ 3140.588466] alloc_pages_current+0x155/0x260 [ 3140.592154] 2718 [ 3140.596314] ion_page_pool_alloc+0x118/0x1b0 [ 3140.596324] ion_system_heap_allocate+0x133/0x8c0 [ 3140.596335] ? _raw_spin_unlock+0x29/0x40 [ 3140.596343] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3140.596351] ? ion_system_contig_heap_create+0x130/0x130 [ 3140.596364] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3140.603008] 2718 [ 3140.608007] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3140.608016] ion_alloc+0x27a/0x810 [ 3140.608030] ? ion_dma_buf_release+0x40/0x40 [ 3140.608041] ? __might_fault+0x177/0x1b0 [ 3140.608051] ion_ioctl+0xea/0x1f0 [ 3140.608060] ? ion_query_heaps+0x360/0x360 [ 3140.608071] ? ion_query_heaps+0x360/0x360 [ 3140.608081] do_vfs_ioctl+0x75a/0xff0 [ 3140.608092] ? ioctl_preallocate+0x1a0/0x1a0 [ 3140.614606] 2718 [ 3140.617129] ? lock_downgrade+0x740/0x740 [ 3140.627648] ? __fget+0x225/0x360 [ 3140.627658] ? do_vfs_ioctl+0xff0/0xff0 [ 3140.627669] ? security_file_ioctl+0x83/0xb0 [ 3140.627678] SyS_ioctl+0x7f/0xb0 [ 3140.627686] ? do_vfs_ioctl+0xff0/0xff0 [ 3140.627696] do_syscall_64+0x1d5/0x640 [ 3140.627710] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3140.627718] RIP: 0033:0x466459 [ 3140.627723] RSP: 002b:00007f1ef2095188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3140.633222] Node 0 [ 3140.634353] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3140.636608] DMA32 free:19488kB min:36200kB low:45248kB high:54296kB active_anon:245088kB inactive_anon:125252kB active_file:136kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11456kB pagetables:15188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3140.640935] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3140.649607] lowmem_reserve[]: [ 3140.650359] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3140.657594] 0 [ 3140.663230] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3140.672199] lowmem_reserve[]: [ 3140.675194] R13: 00007fffa779c11f R14: 00007f1ef2095300 R15: 0000000000022000 [ 3140.844346] 0 0 0 0 [ 3140.847465] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3140.881808] lowmem_reserve[]: 0 0 0 0 0 [ 3140.886187] Node 1 Normal free:26792kB min:53696kB low:67120kB high:80544kB active_anon:73724kB inactive_anon:39560kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21856kB pagetables:67040kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 3140.933542] lowmem_reserve[]: 0 0 0 0 0 [ 3140.938600] Node 0 DMA: 88*4kB (UE) 49*8kB (UME) 35*16kB (UME) 18*32kB (UME) 4*64kB (ME) 1*128kB (E) 4*256kB (UME) 3*512kB (UE) 2*1024kB (ME) 2*2048kB (U) 0*4096kB = 10968kB [ 3140.961638] Node 0 DMA32: 1108*4kB (ME) 494*8kB (UME) 146*16kB (UME) 172*32kB (UME) 11*64kB (M) 5*128kB (UM) 2*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18080kB [ 3140.963896] 0 [ 3140.985913] syz-executor.2: [ 3140.987885] syz-executor.0: [ 3140.987913] page allocation failure: order:0 [ 3140.991119] page allocation failure: order:0 [ 3140.994234] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 3141.003175] 0 [ 3141.006569] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3141.015570] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 3141.030680] (null) [ 3141.033072] 0 [ 3141.038191] syz-executor.2 cpuset= [ 3141.040340] 0 [ 3141.042196] / [ 3141.046295] (null) [ 3141.052258] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 3141.053894] Node 1 Normal: 20*4kB (M) 21*8kB (M) 21*16kB (M) 817*32kB (UM) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26792kB [ 3141.065983] 0 [ 3141.080369] mems_allowed=0-1 [ 3141.083869] CPU: 0 PID: 8214 Comm: syz-executor.2 Not tainted 4.14.230-syzkaller #0 [ 3141.092022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3141.094556] Node 0 [ 3141.101899] Call Trace: [ 3141.101916] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3141.104326] dump_stack+0x1b2/0x281 [ 3141.124550] lowmem_reserve[]: [ 3141.134452] warn_alloc.cold+0x96/0x1cc [ 3141.144544] 0 0 [ 3141.145810] ? zone_watermark_ok_safe+0x220/0x220 [ 3141.145815] 0 [ 3141.147864] ? usleep_range+0x130/0x130 [ 3141.152853] 0 [ 3141.154642] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3141.154654] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3141.154666] ? run_timer_softirq+0x5a0/0x5a0 [ 3141.174563] 0 [ 3141.175759] __alloc_pages_nodemask+0x2127/0x2720 [ 3141.177539] Node 1 Normal free:26792kB min:53696kB low:67120kB high:80544kB active_anon:73724kB inactive_anon:39560kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21856kB pagetables:67040kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 3141.183200] ? lock_acquire+0x170/0x3f0 [ 3141.183220] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3141.223251] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3141.228194] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3141.233916] alloc_pages_current+0x155/0x260 [ 3141.238483] ion_page_pool_alloc+0x118/0x1b0 [ 3141.242961] ion_system_heap_allocate+0x133/0x8c0 [ 3141.248063] ? _raw_spin_unlock+0x29/0x40 [ 3141.252199] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3141.254538] lowmem_reserve[]: [ 3141.257486] ? ion_system_contig_heap_create+0x130/0x130 [ 3141.257492] 0 [ 3141.260868] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3141.274229] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3141.279358] ion_alloc+0x27a/0x810 [ 3141.282964] ? ion_dma_buf_release+0x40/0x40 [ 3141.284552] 0 0 [ 3141.287824] ? __might_fault+0x177/0x1b0 [ 3141.287837] ion_ioctl+0xea/0x1f0 [ 3141.290236] 0 [ 3141.295091] ? ion_query_heaps+0x360/0x360 [ 3141.295103] ? ion_query_heaps+0x360/0x360 [ 3141.295112] do_vfs_ioctl+0x75a/0xff0 [ 3141.295123] ? ioctl_preallocate+0x1a0/0x1a0 [ 3141.295134] ? lock_downgrade+0x740/0x740 [ 3141.314577] 0 [ 3141.317511] ? __fget+0x225/0x360 [ 3141.323426] ? do_vfs_ioctl+0xff0/0xff0 [ 3141.330987] ? security_file_ioctl+0x83/0xb0 [ 3141.334533] Node 0 DMA: [ 3141.335641] SyS_ioctl+0x7f/0xb0 [ 3141.335650] ? do_vfs_ioctl+0xff0/0xff0 [ 3141.338760] 88*4kB [ 3141.342131] do_syscall_64+0x1d5/0x640 [ 3141.352556] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3141.354530] (UE) [ 3141.357857] RIP: 0033:0x466459 [ 3141.357860] 49*8kB (UME) [ 3141.360317] RSP: 002b:00007fc87a7fc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3141.363770] 35*16kB [ 3141.366505] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 3141.366511] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3141.366515] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3141.366520] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 3141.366525] R13: 00007ffd20e1ce3f R14: 00007fc87a7fc300 R15: 0000000000022000 [ 3141.376009] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3141.390516] CPU: 1 PID: 8211 Comm: syz-executor.0 Not tainted 4.14.230-syzkaller #0 [ 3141.393583] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3141.400912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3141.400916] Call Trace: [ 3141.400937] dump_stack+0x1b2/0x281 [ 3141.400949] warn_alloc.cold+0x96/0x1cc [ 3141.400961] ? zone_watermark_ok_safe+0x220/0x220 [ 3141.400970] ? usleep_range+0x130/0x130 [ 3141.400977] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3141.400990] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3141.409120] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3141.416240] ? run_timer_softirq+0x5a0/0x5a0 [ 3141.416259] __alloc_pages_nodemask+0x2127/0x2720 [ 3141.416275] ? lock_acquire+0x170/0x3f0 [ 3141.416290] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3141.425181] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3141.433098] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3141.441875] 43831 total pagecache pages [ 3141.451440] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3141.451460] alloc_pages_current+0x155/0x260 [ 3141.451473] ion_page_pool_alloc+0x118/0x1b0 [ 3141.454167] 0 pages in swap cache [ 3141.457783] ion_system_heap_allocate+0x133/0x8c0 [ 3141.457796] ? _raw_spin_unlock+0x29/0x40 [ 3141.457804] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3141.457812] ? ion_system_contig_heap_create+0x130/0x130 [ 3141.457824] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3141.461963] Swap cache stats: add 0, delete 0, find 0/0 [ 3141.467307] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3141.467318] ion_alloc+0x27a/0x810 [ 3141.467330] ? ion_dma_buf_release+0x40/0x40 [ 3141.467341] ? __might_fault+0x177/0x1b0 [ 3141.467352] ion_ioctl+0xea/0x1f0 [ 3141.471504] Free swap = 0kB [ 3141.476602] ? ion_query_heaps+0x360/0x360 [ 3141.476613] ? ion_query_heaps+0x360/0x360 [ 3141.476623] do_vfs_ioctl+0x75a/0xff0 [ 3141.476637] ? ioctl_preallocate+0x1a0/0x1a0 [ 3141.481751] Total swap = 0kB [ 3141.490659] ? lock_downgrade+0x740/0x740 [ 3141.490671] ? __fget+0x225/0x360 [ 3141.490680] ? do_vfs_ioctl+0xff0/0xff0 [ 3141.490691] ? security_file_ioctl+0x83/0xb0 [ 3141.490699] SyS_ioctl+0x7f/0xb0 [ 3141.490707] ? do_vfs_ioctl+0xff0/0xff0 [ 3141.490717] do_syscall_64+0x1d5/0x640 [ 3141.490733] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3141.495428] 2097051 pages RAM [ 3141.500489] RIP: 0033:0x466459 [ 3141.504459] 0 pages HighMem/MovableOnly [ 3141.509279] RSP: 002b:00007f1ef2095188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3141.509289] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3141.509294] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3141.509298] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3141.509303] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3141.509308] R13: 00007fffa779c11f R14: 00007f1ef2095300 R15: 0000000000022000 [ 3141.519216] (UME) [ 3141.527047] 363848 pages reserved [ 3141.535011] 18*32kB [ 3141.538010] 0 pages cma reserved [ 3141.541784] (UME) 4*64kB (ME) 1*128kB (E) 4*256kB (UME) 3*512kB (UE) 2*1024kB (ME) 2*2048kB (U) 0*4096kB = 10968kB [ 3141.761906] Node 0 DMA32: 1077*4kB (ME) 494*8kB (UME) 146*16kB (UME) 172*32kB (UME) 11*64kB (M) 5*128kB (UM) 2*256kB (U) 0*512kB 18*1024kB (U) 0*2048kB 0*4096kB = 36388kB [ 3141.807831] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3141.834640] warn_alloc_show_mem: 3 callbacks suppressed [ 3141.834643] Mem-Info: [ 3141.839746] Node 1 [ 3141.854563] active_anon:80277 inactive_anon:41217 isolated_anon:0 [ 3141.854563] active_file:20 inactive_file:1078 isolated_file:0 [ 3141.854563] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3141.854563] slab_reclaimable:14348 slab_unreclaimable:150142 [ 3141.854563] mapped:53720 shmem:43797 pagetables:20590 bounce:0 [ 3141.854563] free:82189 free_pcp:121 free_cma:0 [ 3141.857938] Normal: [ 3141.984589] Node 0 active_anon:247352kB inactive_anon:125308kB active_file:68kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:166748kB dirty:0kB writeback:0kB shmem:130240kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 176128kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3141.994633] 0*4kB 2*8kB (UM) 1*16kB (M) 1*32kB (M) 447*64kB (UM) 0*128kB 40*256kB (UM) 12*512kB (U) 132*1024kB (U) 29*2048kB (U) 0*4096kB = 239616kB [ 3142.084538] Node 1 active_anon:73756kB inactive_anon:39560kB active_file:12kB inactive_file:4240kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:48132kB dirty:0kB writeback:0kB shmem:44948kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3142.104519] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3142.165107] Node 0 DMA free:11032kB min:204kB low:252kB high:300kB active_anon:2216kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3142.166855] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3142.244516] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3142.249757] Node 0 DMA32 free:36228kB min:36200kB low:45248kB high:54296kB active_anon:245136kB inactive_anon:125252kB active_file:68kB inactive_file:72kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11456kB pagetables:15188kB bounce:0kB free_pcp:276kB local_pcp:144kB free_cma:0kB [ 3142.298826] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3142.310556] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3142.331054] 43849 total pagecache pages [ 3142.335335] syz-executor.2: [ 3142.335339] 0 pages in swap cache [ 3142.335347] Swap cache stats: add 0, delete 0, find 0/0 [ 3142.338538] page allocation failure: order:4 [ 3142.341972] Free swap = 0kB [ 3142.341978] Total swap = 0kB [ 3142.353089] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 3142.359428] 2097051 pages RAM [ 3142.363845] (null) [ 3142.366972] 0 pages HighMem/MovableOnly [ 3142.372032] lowmem_reserve[]: [ 3142.372385] 363848 pages reserved [ 3142.378492] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 3142.387081] 0 pages cma reserved [ 3142.390475] 0 0 0 0 0 [ 3142.392396] Out of memory (oom_kill_allocating_task): Kill process 7998 (syz-fuzzer) score 0 or sacrifice child [ 3142.394346] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3142.394363] lowmem_reserve[]: 0 0 0 0 0 [ 3142.394381] Node 1 Normal free:26824kB min:53696kB low:67120kB high:80544kB active_anon:73756kB inactive_anon:39560kB active_file:212kB inactive_file:348kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21856kB pagetables:67040kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3142.394399] lowmem_reserve[]: 0 0 0 0 0 [ 3142.394419] Node 0 DMA: 88*4kB (UE) [ 3142.412925] Killed process 7585 (syz-executor.2) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 3142.494520] CPU: 0 PID: 8204 Comm: syz-executor.2 Not tainted 4.14.230-syzkaller #0 [ 3142.497414] oom_reaper: reaped process 8161 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:2640kB [ 3142.502611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3142.522060] oom_reaper: reaped process 7585 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3142.523178] Call Trace: [ 3142.536142] dump_stack+0x1b2/0x281 [ 3142.539765] warn_alloc.cold+0x96/0x1cc [ 3142.543723] ? zone_watermark_ok_safe+0x220/0x220 [ 3142.548657] __alloc_pages_nodemask+0x2127/0x2720 [ 3142.554024] ? retint_kernel+0x2d/0x2d [ 3142.557919] ? lock_acquire+0x170/0x3f0 [ 3142.562094] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3142.567550] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3142.573468] ? __mutex_unlock_slowpath+0x75/0x770 [ 3142.578868] ? retint_kernel+0x2d/0x2d [ 3142.582918] alloc_pages_current+0x155/0x260 [ 3142.587589] ion_page_pool_alloc+0x118/0x1b0 [ 3142.592081] ion_system_heap_allocate+0x133/0x8c0 [ 3142.596922] ? _raw_spin_unlock+0x29/0x40 [ 3142.601073] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3142.606161] ? ion_system_contig_heap_create+0x130/0x130 [ 3142.611693] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3142.617257] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3142.622102] ion_alloc+0x27a/0x810 [ 3142.625718] ? ion_dma_buf_release+0x40/0x40 [ 3142.630640] ? __might_fault+0x177/0x1b0 [ 3142.634685] ion_ioctl+0xea/0x1f0 [ 3142.638207] ? ion_query_heaps+0x360/0x360 [ 3142.642455] ? ion_query_heaps+0x360/0x360 [ 3142.646759] do_vfs_ioctl+0x75a/0xff0 [ 3142.651755] ? ioctl_preallocate+0x1a0/0x1a0 [ 3142.657926] ? lock_downgrade+0x740/0x740 [ 3142.662239] ? __fget+0x225/0x360 [ 3142.665849] ? do_vfs_ioctl+0xff0/0xff0 [ 3142.670086] ? security_file_ioctl+0x83/0xb0 [ 3142.675408] SyS_ioctl+0x7f/0xb0 [ 3142.679109] ? do_vfs_ioctl+0xff0/0xff0 [ 3142.683278] do_syscall_64+0x1d5/0x640 [ 3142.687191] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3142.692470] RIP: 0033:0x466459 [ 3142.695646] RSP: 002b:00007fc87a81d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3142.703544] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3142.710910] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3142.718769] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3142.726207] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3142.733725] R13: 00007ffd20e1ce3f R14: 00007fc87a81d300 R15: 0000000000022000 [ 3142.745158] 49*8kB (UME) 35*16kB (UME) 18*32kB (UME) 5*64kB (UME) 1*128kB (E) 4*256kB (UME) 3*512kB (UE) 2*1024kB (ME) 2*2048kB (U) 0*4096kB = 11032kB [ 3142.760040] Node 0 DMA32: 1118*4kB (UME) 373*8kB (UME) 68*16kB (UME) 18*32kB (UME) 12*64kB (UM) 4*128kB (M) 31*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18336kB [ 3142.776444] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3142.792735] Node 1 Normal: 21*4kB (M) 10*8kB (M) 25*16kB (UM) 6*32kB (UM) 59*64kB (UM) 21*128kB (UM) 41*256kB (UM) 14*512kB (UM) 0*1024kB 1*2048kB (M) 0*4096kB = 26932kB [ 3142.811507] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3142.820692] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3142.831693] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3142.840688] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3142.852179] 43829 total pagecache pages [ 3142.856463] 0 pages in swap cache [ 3142.859927] Swap cache stats: add 0, delete 0, find 0/0 [ 3142.866554] oom_reaper: reaped process 8214 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3142.867624] Free swap = 0kB [ 3142.880376] Total swap = 0kB [ 3142.883394] 2097051 pages RAM [ 3142.888900] 0 pages HighMem/MovableOnly [ 3142.892902] 363848 pages reserved [ 3142.897050] 0 pages cma reserved [ 3142.906622] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 3142.959859] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 3142.971330] CPU: 0 PID: 8001 Comm: syz-fuzzer Not tainted 4.14.230-syzkaller #0 [ 3142.979091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3142.988963] Call Trace: [ 3142.991683] dump_stack+0x1b2/0x281 [ 3142.995623] dump_header+0x178/0x82f [ 3142.999436] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3143.005228] ? ___ratelimit+0x2cd/0x530 [ 3143.009575] oom_kill_process.cold+0x10/0xa40 [ 3143.014259] out_of_memory+0xe3e/0x1190 [ 3143.018736] ? oom_killer_disable+0x1c0/0x1c0 [ 3143.023543] ? mutex_trylock+0x152/0x1a0 [ 3143.028081] __alloc_pages_nodemask+0x23e1/0x2720 [ 3143.033523] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3143.038596] alloc_pages_current+0x155/0x260 [ 3143.043143] filemap_fault+0x11a1/0x1ad0 [ 3143.047299] ext4_filemap_fault+0x84/0xb0 [ 3143.051668] __do_fault+0xfa/0x380 [ 3143.055717] __handle_mm_fault+0x2497/0x4620 [ 3143.060198] ? vm_insert_page+0x7c0/0x7c0 [ 3143.064383] ? mark_held_locks+0xa6/0xf0 [ 3143.068752] handle_mm_fault+0x455/0x9c0 [ 3143.073121] __do_page_fault+0x549/0xad0 [ 3143.077377] ? spurious_fault+0x640/0x640 [ 3143.081527] ? do_page_fault+0x60/0x500 [ 3143.085640] ? page_fault+0x2f/0x50 [ 3143.089351] page_fault+0x45/0x50 [ 3143.092804] RIP: ac480:0x4 [ 3143.095729] RSP: 0252:000000c0002b7e40 EFLAGS: 00000003 [ 3143.188823] Mem-Info: [ 3143.225026] active_anon:79567 inactive_anon:41217 isolated_anon:0 [ 3143.225026] active_file:25 inactive_file:16 isolated_file:5 [ 3143.225026] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3143.225026] slab_reclaimable:14323 slab_unreclaimable:150067 [ 3143.225026] mapped:34859 shmem:43797 pagetables:20513 bounce:0 [ 3143.225026] free:26398 free_pcp:167 free_cma:0 [ 3143.259833] warn_alloc_show_mem: 1 callbacks suppressed [ 3143.259837] Mem-Info: [ 3143.267483] syz-executor.3 (7283) used greatest stack depth: 24592 bytes left [ 3143.272727] active_anon:79567 inactive_anon:41217 isolated_anon:0 [ 3143.272727] active_file:25 inactive_file:16 isolated_file:31 [ 3143.272727] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3143.272727] slab_reclaimable:14323 slab_unreclaimable:150067 [ 3143.272727] mapped:34859 shmem:43797 pagetables:20513 bounce:0 [ 3143.272727] free:28792 free_pcp:179 free_cma:0 [ 3143.276471] Node 0 active_anon:244508kB inactive_anon:125308kB active_file:116kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):124kB mapped:104540kB dirty:0kB writeback:0kB shmem:130240kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 174080kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3143.341607] Node 1 active_anon:73760kB inactive_anon:39560kB active_file:0kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34896kB dirty:0kB writeback:0kB shmem:44948kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3143.370398] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3143.372164] Node 0 active_anon:244508kB inactive_anon:125308kB active_file:116kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):124kB mapped:104540kB dirty:0kB writeback:0kB shmem:130240kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 174080kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3143.398906] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3143.432564] Node 1 active_anon:73760kB inactive_anon:39560kB active_file:0kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34896kB dirty:0kB writeback:0kB shmem:44948kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3143.433143] Node 0 DMA32 free:36064kB min:36200kB low:45248kB high:54296kB active_anon:244340kB inactive_anon:125252kB active_file:40kB inactive_file:616kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11328kB pagetables:14880kB bounce:0kB free_pcp:888kB local_pcp:668kB free_cma:0kB [ 3143.474426] Node 0 [ 3143.493585] lowmem_reserve[]: 0 0 0 0 0 [ 3143.500628] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3143.505197] DMA free:11068kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3143.529251] lowmem_reserve[]: 0 0 0 0 0 [ 3143.563404] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3143.575052] Node 1 Normal free:45832kB min:53696kB low:67120kB high:80544kB active_anon:73760kB inactive_anon:39560kB active_file:0kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21856kB pagetables:67040kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3143.594429] Node 0 [ 3143.607896] lowmem_reserve[]: 0 0 0 0 0 [ 3143.615551] Node 0 DMA: 8*4kB (UE) 12*8kB (UME) 9*16kB (UME) 6*32kB (ME) 4*64kB (ME) 1*128kB (E) 2*256kB (ME) 3*512kB (UE) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 11088kB [ 3143.619453] DMA32 free:36044kB min:36200kB low:45248kB high:54296kB active_anon:244340kB inactive_anon:125252kB active_file:40kB inactive_file:616kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11328kB pagetables:14880kB bounce:0kB free_pcp:60kB local_pcp:0kB free_cma:0kB [ 3143.632693] Node 0 DMA32: 4110*4kB (UME) 477*8kB (UME) 88*16kB (UME) 28*32kB (UME) 26*64kB (UM) 10*128kB (UM) 37*256kB (U) 3*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 36512kB [ 3143.681409] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3143.686609] lowmem_reserve[]: 0 0 0 0 0 [ 3143.692633] Node 1 Normal: 32*4kB (UM) 402*8kB (UM) 1015*16kB (UM) 6*32kB (UM) 59*64kB (UM) 21*128kB (UM) 41*256kB (UM) 14*512kB (UM) 0*1024kB 1*2048kB (M) 0*4096kB = 45952kB [ 3143.700283] Node 0 [ 3143.714247] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3143.714256] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3143.720752] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3143.726851] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3143.754941] lowmem_reserve[]: [ 3143.763058] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3143.775218] 0 0 0 0 0 [ 3143.784236] 43839 total pagecache pages [ 3143.789873] Node 1 Normal free:45832kB min:53696kB low:67120kB high:80544kB active_anon:73760kB inactive_anon:39560kB active_file:0kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21856kB pagetables:67040kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3143.792617] 0 pages in swap cache [ 3143.826929] lowmem_reserve[]: 0 0 0 0 0 [ 3143.827141] Swap cache stats: add 0, delete 0, find 0/0 [ 3143.831206] Node 0 [ 3143.837154] Free swap = 0kB [ 3143.837157] Total swap = 0kB [ 3143.837164] 2097051 pages RAM [ 3143.837167] 0 pages HighMem/MovableOnly [ 3143.837170] 363848 pages reserved [ 3143.837173] 0 pages cma reserved [ 3143.837179] Out of memory (oom_kill_allocating_task): Kill process 8001 (syz-fuzzer) score 0 or sacrifice child [ 3143.837238] Killed process 6249 (syz-executor.1) total-vm:84924kB, anon-rss:60kB, file-rss:0kB, shmem-rss:0kB [ 3143.850229] oom_reaper: reaped process 6249 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3143.854758] DMA: 8*4kB (UE) 12*8kB (UME) 9*16kB (UME) 6*32kB (ME) 4*64kB (ME) 1*128kB (E) 2*256kB (ME) 3*512kB (UE) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 11088kB [ 3143.975993] Node 0 DMA32: 6323*4kB (UME) 845*8kB (UME) 93*16kB (UME) 30*32kB (UME) 26*64kB (UM) 10*128kB (UM) 37*256kB (U) 3*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 48452kB [ 3144.018314] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3144.044785] Node 1 Normal: 33*4kB (UM) 402*8kB (UM) 1015*16kB (UM) 6*32kB (UM) 59*64kB (UM) 21*128kB (UM) 41*256kB (UM) 14*512kB (UM) 0*1024kB 1*2048kB (M) 0*4096kB = 45956kB [ 3144.076710] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3144.094471] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3144.103273] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3144.127359] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3144.142020] 44635 total pagecache pages [ 3144.147112] 0 pages in swap cache [ 3144.150924] Swap cache stats: add 0, delete 0, find 0/0 [ 3144.160153] Free swap = 0kB [ 3144.163320] Total swap = 0kB [ 3144.166686] 2097051 pages RAM [ 3144.169800] 0 pages HighMem/MovableOnly [ 3144.174063] 363848 pages reserved [ 3144.181420] 0 pages cma reserved [ 3144.273864] oom_reaper: reaped process 8210 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3144.455656] oom_reaper: reaped process 8212 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3144.470234] systemd-udevd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=-1000 [ 3144.484447] systemd-udevd cpuset=/ mems_allowed=0-1 [ 3144.489592] CPU: 0 PID: 4627 Comm: systemd-udevd Not tainted 4.14.230-syzkaller #0 [ 3144.490888] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3144.497391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3144.497394] Call Trace: [ 3144.497411] dump_stack+0x1b2/0x281 [ 3144.497422] dump_header+0x178/0x82f [ 3144.497433] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3144.497441] ? ___ratelimit+0x2cd/0x530 [ 3144.497451] oom_kill_process.cold+0x10/0xa40 [ 3144.497462] ? lock_downgrade+0x740/0x740 [ 3144.497481] out_of_memory+0x2dc/0x1190 [ 3144.497493] ? oom_killer_disable+0x1c0/0x1c0 [ 3144.497500] ? mutex_trylock+0x152/0x1a0 [ 3144.497510] __alloc_pages_nodemask+0x23e1/0x2720 [ 3144.561066] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3144.566007] alloc_pages_current+0x155/0x260 [ 3144.570763] filemap_fault+0x11a1/0x1ad0 [ 3144.575191] ext4_filemap_fault+0x84/0xb0 [ 3144.579335] __do_fault+0xfa/0x380 [ 3144.582869] __handle_mm_fault+0x2497/0x4620 [ 3144.588079] ? vm_insert_page+0x7c0/0x7c0 [ 3144.592399] ? lock_downgrade+0x740/0x740 [ 3144.596822] ? mark_held_locks+0xa6/0xf0 [ 3144.600958] handle_mm_fault+0x455/0x9c0 [ 3144.605332] __do_page_fault+0x549/0xad0 [ 3144.609384] ? spurious_fault+0x640/0x640 [ 3144.613517] ? do_page_fault+0x60/0x500 [ 3144.617567] ? page_fault+0x2f/0x50 [ 3144.621371] page_fault+0x45/0x50 [ 3144.624939] RIP: be213620:0x55cbbe213600 [ 3144.629257] RSP: 4d701bf0:00007ffc4d701be8 EFLAGS: 55cbbe2257c0 [ 3144.629367] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3144.648656] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3144.657858] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3144.666847] device bridge_slave_1 left promiscuous mode [ 3144.672737] bridge0: port 2(bridge_slave_1) entered disabled state [ 3144.682958] Mem-Info: [ 3144.690064] active_anon:79489 inactive_anon:41216 isolated_anon:0 [ 3144.690064] active_file:13 inactive_file:32 isolated_file:0 [ 3144.690064] unevictable:0 dirty:10 writeback:0 unstable:0 [ 3144.690064] slab_reclaimable:14316 slab_unreclaimable:149664 [ 3144.690064] mapped:26127 shmem:43797 pagetables:20415 bounce:0 [ 3144.690064] free:13948 free_pcp:46 free_cma:0 [ 3144.725616] Node 0 active_anon:244212kB inactive_anon:125304kB active_file:88kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:69648kB dirty:36kB writeback:0kB shmem:130240kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 174080kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3144.755773] Node 1 active_anon:73744kB inactive_anon:39560kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:4kB writeback:0kB shmem:44948kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3144.785126] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3144.821267] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3144.826813] Node 0 DMA32 free:18056kB min:36200kB low:45248kB high:54296kB active_anon:244144kB inactive_anon:125248kB active_file:144kB inactive_file:120kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11232kB pagetables:14512kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3144.919810] lowmem_reserve[]: 0 0 0 0 0 [ 3144.923930] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3144.955438] lowmem_reserve[]: 0 0 0 0 0 [ 3144.959728] Node 1 Normal free:26832kB min:53696kB low:67120kB high:80544kB active_anon:73744kB inactive_anon:39560kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21856kB pagetables:67016kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3144.968502] syz-executor.4: [ 3144.990663] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3144.994331] lowmem_reserve[]: 0 0 0 0 0 [ 3145.013665] Node 0 DMA: 1*4kB (E) 11*8kB (ME) 8*16kB (ME) 6*32kB (ME) 5*64kB (UME) 2*128kB (UE) 3*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 10972kB [ 3145.034079] Node 0 DMA32: 1170*4kB (UME) 397*8kB (ME) 81*16kB (UME) 21*32kB (UME) 13*64kB (M) 5*128kB (M) 19*256kB (U) 3*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 17696kB [ 3145.056168] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3145.070009] Node 1 Normal: 23*4kB (M) 11*8kB (M) 27*16kB (UM) 6*32kB (UM) 57*64kB (UM) 21*128kB (UM) 41*256kB (UM) 14*512kB (UM) 0*1024kB 1*2048kB (M) 0*4096kB = 26852kB [ 3145.070912] syz-executor.5 cpuset= [ 3145.099619] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3145.102682] page allocation failure: order:0 [ 3145.103182] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3145.139308] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3145.142686] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 3145.150084] / [ 3145.160120] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3145.166813] (null) [ 3145.173182] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 3145.183076] 43831 total pagecache pages [ 3145.190283] 0 pages in swap cache [ 3145.190332] syz-executor.2: [ 3145.193739] Swap cache stats: add 0, delete 0, find 0/0 [ 3145.193749] page allocation failure: order:0 [ 3145.208710] Free swap = 0kB [ 3145.212157] mems_allowed=0-1 [ 3145.213138] Total swap = 0kB [ 3145.216612] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3145.230810] 2097051 pages RAM [ 3145.234179] 0 pages HighMem/MovableOnly [ 3145.240070] CPU: 1 PID: 8212 Comm: syz-executor.5 Not tainted 4.14.230-syzkaller #0 [ 3145.240576] 363848 pages reserved [ 3145.248663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3145.248666] Call Trace: [ 3145.248686] dump_stack+0x1b2/0x281 [ 3145.248699] warn_alloc.cold+0x96/0x1cc [ 3145.248709] ? zone_watermark_ok_safe+0x220/0x220 [ 3145.248719] ? usleep_range+0x130/0x130 [ 3145.248727] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3145.248743] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3145.248753] ? run_timer_softirq+0x5a0/0x5a0 [ 3145.248770] __alloc_pages_nodemask+0x2127/0x2720 [ 3145.248784] ? lock_acquire+0x170/0x3f0 [ 3145.248798] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3145.248806] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3145.248819] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3145.264065] 0 pages cma reserved [ 3145.265436] alloc_pages_current+0x155/0x260 [ 3145.265450] ion_page_pool_alloc+0x118/0x1b0 [ 3145.265459] ion_system_heap_allocate+0x133/0x8c0 [ 3145.265467] ? ion_alloc+0x187/0x810 [ 3145.265480] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3145.269283] Out of memory: Kill process 25868 (syz-executor.4) score 1005 or sacrifice child [ 3145.273832] ? ion_system_contig_heap_create+0x130/0x130 [ 3145.290276] Killed process 25868 (syz-executor.4) total-vm:93252kB, anon-rss:2192kB, file-rss:34628kB, shmem-rss:0kB [ 3145.294279] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3145.294293] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3145.294305] ion_alloc+0x204/0x810 [ 3145.294319] ? ion_dma_buf_release+0x40/0x40 [ 3145.294329] ? __might_fault+0x177/0x1b0 [ 3145.294339] ion_ioctl+0xea/0x1f0 [ 3145.294347] ? ion_query_heaps+0x360/0x360 [ 3145.294359] ? check_uarg_tail_zero+0xe9/0x120 [ 3145.294366] ? ion_query_heaps+0x360/0x360 [ 3145.294378] do_vfs_ioctl+0x75a/0xff0 [ 3145.303456] syz-executor.2 cpuset= [ 3145.304137] ? ioctl_preallocate+0x1a0/0x1a0 [ 3145.334162] / [ 3145.336942] ? lock_downgrade+0x740/0x740 [ 3145.352167] oom_reaper: reaped process 25868 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3145.360646] ? __fget+0x225/0x360 [ 3145.360656] ? do_vfs_ioctl+0xff0/0xff0 [ 3145.360667] ? security_file_ioctl+0x83/0xb0 [ 3145.360676] SyS_ioctl+0x7f/0xb0 [ 3145.360683] ? do_vfs_ioctl+0xff0/0xff0 [ 3145.360694] do_syscall_64+0x1d5/0x640 [ 3145.360707] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3145.360715] RIP: 0033:0x466459 [ 3145.360719] RSP: 002b:00007ff493160188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3145.360731] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3145.379761] mems_allowed=0-1 [ 3145.382648] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3145.419682] systemd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 3145.421578] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3145.452077] (null) [ 3145.454169] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3145.491869] , order=0, oom_score_adj=0 [ 3145.496726] R13: 00007fff6312dd3f R14: 00007ff493160300 R15: 0000000000022000 [ 3145.508325] CPU: 1 PID: 8210 Comm: syz-executor.4 Not tainted 4.14.230-syzkaller #0 [ 3145.555748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3145.565788] Call Trace: [ 3145.568743] dump_stack+0x1b2/0x281 [ 3145.572562] warn_alloc.cold+0x96/0x1cc [ 3145.576622] ? zone_watermark_ok_safe+0x220/0x220 [ 3145.580683] systemd cpuset= [ 3145.582355] ? usleep_range+0x130/0x130 [ 3145.582357] / mems_allowed=0-1 [ 3145.585635] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3145.585647] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3145.585657] ? run_timer_softirq+0x5a0/0x5a0 [ 3145.585672] __alloc_pages_nodemask+0x2127/0x2720 [ 3145.585687] ? lock_acquire+0x170/0x3f0 [ 3145.585700] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3145.585710] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3145.585725] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3145.585743] alloc_pages_current+0x155/0x260 [ 3145.636875] ion_page_pool_alloc+0x118/0x1b0 [ 3145.642021] ion_system_heap_allocate+0x133/0x8c0 [ 3145.647314] ? ion_alloc+0x187/0x810 [ 3145.652236] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3145.657847] ? ion_system_contig_heap_create+0x130/0x130 [ 3145.663591] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3145.668806] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3145.673848] ion_alloc+0x204/0x810 [ 3145.677567] ? ion_dma_buf_release+0x40/0x40 [ 3145.681980] ? __might_fault+0x177/0x1b0 [ 3145.686048] ion_ioctl+0xea/0x1f0 [ 3145.689818] ? ion_query_heaps+0x360/0x360 [ 3145.694250] ? ion_query_heaps+0x360/0x360 [ 3145.698962] do_vfs_ioctl+0x75a/0xff0 [ 3145.702945] ? ioctl_preallocate+0x1a0/0x1a0 [ 3145.707802] ? lock_downgrade+0x740/0x740 [ 3145.712217] ? __fget+0x225/0x360 [ 3145.715691] ? do_vfs_ioctl+0xff0/0xff0 [ 3145.719939] ? security_file_ioctl+0x83/0xb0 [ 3145.724744] SyS_ioctl+0x7f/0xb0 [ 3145.728313] ? do_vfs_ioctl+0xff0/0xff0 [ 3145.732995] do_syscall_64+0x1d5/0x640 [ 3145.737147] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3145.742951] RIP: 0033:0x466459 [ 3145.746396] RSP: 002b:00007f61587e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3145.754746] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3145.762514] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000004 [ 3145.771093] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3145.778715] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3145.786388] R13: 00007ffed7f6205f R14: 00007f61587e7300 R15: 0000000000022000 [ 3145.793943] CPU: 0 PID: 8204 Comm: syz-executor.2 Not tainted 4.14.230-syzkaller #0 [ 3145.802545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3145.803783] Mem-Info: [ 3145.812644] Call Trace: [ 3145.812665] dump_stack+0x1b2/0x281 [ 3145.812678] warn_alloc.cold+0x96/0x1cc [ 3145.812691] ? zone_watermark_ok_safe+0x220/0x220 [ 3145.815411] active_anon:78956 inactive_anon:41216 isolated_anon:0 [ 3145.815411] active_file:56 inactive_file:11 isolated_file:0 [ 3145.815411] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3145.815411] slab_reclaimable:14316 slab_unreclaimable:149662 [ 3145.815411] mapped:26113 shmem:43797 pagetables:20415 bounce:0 [ 3145.815411] free:14385 free_pcp:26 free_cma:0 [ 3145.818123] ? usleep_range+0x130/0x130 [ 3145.822103] Node 0 active_anon:242080kB inactive_anon:125304kB active_file:220kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:69636kB dirty:0kB writeback:0kB shmem:130240kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 174080kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3145.826312] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3145.826326] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3145.826339] ? run_timer_softirq+0x5a0/0x5a0 [ 3145.831268] Node 1 active_anon:73744kB inactive_anon:39560kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:44948kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3145.865446] __alloc_pages_nodemask+0x2127/0x2720 [ 3145.865463] ? lock_acquire+0x170/0x3f0 [ 3145.865477] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3145.904283] Node 0 [ 3145.905801] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3145.910915] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3145.915406] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3145.915417] ? retint_kernel+0x2d/0x2d [ 3145.915434] alloc_pages_current+0x155/0x260 [ 3145.984267] lowmem_reserve[]: [ 3145.992278] ion_page_pool_alloc+0x118/0x1b0 [ 3146.013878] ion_system_heap_allocate+0x133/0x8c0 [ 3146.014258] 0 2717 [ 3146.019292] ? _raw_spin_unlock+0x29/0x40 [ 3146.019302] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3146.021524] 2718 [ 3146.025955] ? ion_system_contig_heap_create+0x130/0x130 [ 3146.025965] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3146.025975] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3146.025988] ion_alloc+0x27a/0x810 [ 3146.044265] 2718 [ 3146.045165] ? ion_dma_buf_release+0x40/0x40 [ 3146.050089] 2718 [ 3146.053971] ? __might_fault+0x177/0x1b0 [ 3146.066782] ion_ioctl+0xea/0x1f0 [ 3146.070416] ? ion_query_heaps+0x360/0x360 [ 3146.074905] Node 0 [ 3146.074915] ? ion_query_heaps+0x360/0x360 [ 3146.074926] do_vfs_ioctl+0x75a/0xff0 [ 3146.077338] DMA32 free:19736kB min:36200kB low:45248kB high:54296kB active_anon:241912kB inactive_anon:125248kB active_file:220kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11232kB pagetables:14512kB bounce:0kB free_pcp:104kB local_pcp:0kB free_cma:0kB [ 3146.081660] ? ioctl_preallocate+0x1a0/0x1a0 [ 3146.094250] lowmem_reserve[]: [ 3146.117159] ? lock_downgrade+0x740/0x740 [ 3146.117174] ? __fget+0x225/0x360 [ 3146.117186] ? do_vfs_ioctl+0xff0/0xff0 [ 3146.136996] ? security_file_ioctl+0x83/0xb0 [ 3146.141496] SyS_ioctl+0x7f/0xb0 [ 3146.144257] 0 0 [ 3146.144866] ? do_vfs_ioctl+0xff0/0xff0 [ 3146.144878] do_syscall_64+0x1d5/0x640 [ 3146.147098] 0 [ 3146.151072] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3146.162682] RIP: 0033:0x466459 [ 3146.165964] RSP: 002b:00007fc87a81d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3146.174260] 0 [ 3146.174803] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3146.174810] 0 [ 3146.176910] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3146.176917] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3146.201822] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3146.201831] R13: 00007ffd20e1ce3f R14: 00007fc87a81d300 R15: 0000000000022000 [ 3146.217644] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3146.220189] CPU: 0 PID: 1 Comm: systemd Not tainted 4.14.230-syzkaller #0 [ 3146.251786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3146.262063] Call Trace: [ 3146.264676] dump_stack+0x1b2/0x281 [ 3146.268317] dump_header+0x178/0x82f [ 3146.272070] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3146.277297] ? ___ratelimit+0x2cd/0x530 [ 3146.281651] oom_kill_process.cold+0x10/0xa40 [ 3146.286249] ? lock_downgrade+0x740/0x740 [ 3146.291109] out_of_memory+0x2dc/0x1190 [ 3146.294244] lowmem_reserve[]: 0 0 [ 3146.295225] ? oom_killer_disable+0x1c0/0x1c0 [ 3146.295236] ? mutex_trylock+0x152/0x1a0 [ 3146.298677] 0 [ 3146.303434] __alloc_pages_nodemask+0x23e1/0x2720 [ 3146.303451] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3146.303471] alloc_pages_current+0x155/0x260 [ 3146.303481] filemap_fault+0x11a1/0x1ad0 [ 3146.303497] ext4_filemap_fault+0x84/0xb0 [ 3146.303506] __do_fault+0xfa/0x380 [ 3146.303515] __handle_mm_fault+0x2497/0x4620 [ 3146.303524] ? vm_insert_page+0x7c0/0x7c0 [ 3146.303539] ? mark_held_locks+0xa6/0xf0 [ 3146.303549] handle_mm_fault+0x455/0x9c0 [ 3146.318584] 0 [ 3146.320010] __do_page_fault+0x549/0xad0 [ 3146.320022] ? spurious_fault+0x640/0x640 [ 3146.320031] ? do_page_fault+0x60/0x500 [ 3146.320040] ? page_fault+0x2f/0x50 [ 3146.320047] page_fault+0x45/0x50 [ 3146.320057] RIP: 0001:0xffffffffffffffff [ 3146.344258] 0 [ 3146.346314] RSP: fe7d1f50:00007ffe37cf8dc0 EFLAGS: 7ffe37cf8b00 [ 3146.348500] device bridge_slave_0 left promiscuous mode [ 3146.355577] bridge0: port 1(bridge_slave_0) entered disabled state [ 3146.362838] Node 1 [ 3146.366793] Mem-Info: [ 3146.374858] Normal free:26852kB min:53696kB low:67120kB high:80544kB active_anon:73744kB inactive_anon:39560kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21856kB pagetables:67016kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3146.378378] active_anon:78952 inactive_anon:41216 isolated_anon:0 [ 3146.378378] active_file:41 inactive_file:957 isolated_file:0 [ 3146.378378] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3146.378378] slab_reclaimable:14316 slab_unreclaimable:149526 [ 3146.378378] mapped:26638 shmem:43797 pagetables:20414 bounce:0 [ 3146.378378] free:42526 free_pcp:179 free_cma:0 [ 3146.398151] lowmem_reserve[]: [ 3146.409172] Node 0 active_anon:242064kB inactive_anon:125304kB active_file:264kB inactive_file:4824kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:72536kB dirty:0kB writeback:0kB shmem:130240kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 172032kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3146.488611] 0 [ 3146.516294] device veth1_macvtap left promiscuous mode [ 3146.523605] device veth0_macvtap left promiscuous mode [ 3146.524237] 0 0 0 0 [ 3146.541458] device veth1_vlan left promiscuous mode [ 3146.542097] Node 0 [ 3146.548673] device veth0_vlan left promiscuous mode [ 3146.562537] DMA: 1*4kB (E) 11*8kB (ME) 8*16kB (ME) 6*32kB (ME) 5*64kB (UME) 2*128kB (UE) 3*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 10972kB [ 3146.614269] Node 0 DMA32: 1045*4kB (UE) 9612*8kB (UME) 7352*16kB (UME) 841*32kB (UME) 1*64kB (M) 2*128kB (UM) 17*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 230292kB [ 3146.654550] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3146.666105] Node 1 active_anon:73744kB inactive_anon:39560kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:44948kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3146.681601] Node 1 Normal: 2748*4kB (UM) 2726*8kB (UM) 414*16kB (UM) 6*32kB (UM) 57*64kB (UM) 21*128kB (UM) 41*256kB (UM) 14*512kB (UM) 47*1024kB (U) 12*2048kB (UM) 3*4096kB (U) = 148608kB [ 3146.734246] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3146.750198] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3146.789836] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3146.792947] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3146.795094] Node 0 DMA32 free:237940kB min:36200kB low:45248kB high:54296kB active_anon:241896kB inactive_anon:125248kB active_file:2364kB inactive_file:8524kB unevictable:0kB writepending:148kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11200kB pagetables:14508kB bounce:0kB free_pcp:1344kB local_pcp:724kB free_cma:0kB [ 3146.795120] lowmem_reserve[]: [ 3146.808904] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3146.875648] device hsr_slave_1 left promiscuous mode [ 3146.884226] 0 0 0 0 0 [ 3146.887296] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3146.889016] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3146.929031] device hsr_slave_0 left promiscuous mode [ 3146.944221] lowmem_reserve[]: 0 0 0 0 0 [ 3146.948605] Node 1 Normal free:659584kB min:53696kB low:67120kB high:80544kB active_anon:73744kB inactive_anon:39560kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21856kB pagetables:67016kB bounce:0kB free_pcp:720kB local_pcp:708kB free_cma:0kB [ 3146.949163] 46514 total pagecache pages [ 3146.988566] team0 (unregistering): Port device team_slave_1 removed [ 3147.000205] team0 (unregistering): Port device team_slave_0 removed [ 3147.014212] lowmem_reserve[]: 0 0 0 0 0 [ 3147.014676] 0 pages in swap cache [ 3147.018308] Node 0 DMA: 1*4kB (E) 11*8kB (ME) 8*16kB (ME) 6*32kB (ME) 5*64kB (UME) 2*128kB (UE) 3*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 3*2048kB [ 3147.022270] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 3147.022386] Swap cache stats: add 0, delete 0, find 0/0 [ 3147.058143] (UM) 0*4096kB = 10972kB [ 3147.058169] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 3147.061819] Node 0 [ 3147.079592] Free swap = 0kB [ 3147.084233] DMA32: 1163*4kB (UME) 9688*8kB (UME) 7366*16kB (UME) 858*32kB (UME) 379*64kB (UM) 16*128kB (UM) 18*256kB (UM) 0*512kB 25*1024kB (U) 0*2048kB 0*4096kB = 283980kB [ 3147.096343] Total swap = 0kB [ 3147.124234] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3147.127692] 2097051 pages RAM [ 3147.140586] Node 1 Normal: 2748*4kB (UM) 2726*8kB (UM) 414*16kB (UM) 6*32kB (UM) 2235*64kB (UM) 413*128kB (UM) 165*256kB (UM) 58*512kB (UM) 411*1024kB (U) 88*2048kB (UM) 20*4096kB (U) = 990464kB [ 3147.146520] bond0 (unregistering): Released all slaves [ 3147.165622] 0 pages HighMem/MovableOnly [ 3147.170181] 363848 pages reserved [ 3147.176336] 0 pages cma reserved [ 3147.184302] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3147.204218] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3147.213512] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3147.234201] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3147.243404] 46514 total pagecache pages [ 3147.264460] 0 pages in swap cache [ 3147.268390] Swap cache stats: add 0, delete 0, find 0/0 [ 3147.273884] Free swap = 0kB [ 3147.277330] Total swap = 0kB [ 3147.280351] 2097051 pages RAM [ 3147.283550] 0 pages HighMem/MovableOnly [ 3147.304221] 363848 pages reserved [ 3147.308051] 0 pages cma reserved [ 3147.311587] Out of memory: Kill process 26326 (syz-executor.4) score 1005 or sacrifice child [ 3147.321337] Killed process 26326 (syz-executor.4) total-vm:93252kB, anon-rss:2192kB, file-rss:34628kB, shmem-rss:0kB [ 3147.353331] oom_reaper: reaped process 26326 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3147.386635] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 3147.412462] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 3147.471054] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 3147.495830] systemd[1]: Stopped Journal Service. [ 3147.523510] systemd[1]: Starting Journal Service... [ 3147.620581] systemd[1]: Started Load/Save RF Kill Switch Status. [ 3147.680257] systemd-journald[8265]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. 23:49:12 executing program 3: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000036c0)='/dev/dlm_plock\x00', 0xa0340, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000036c0)='/dev/dlm_plock\x00', 0x0, 0x0) getsockname$ax25(r2, 0x0, 0x0) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000140)=0x2) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f00000001c0)) getsockname$ax25(r1, 0x0, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000036c0)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000200)={0x0, 0x0}) getsockname$ax25(r3, 0x0, 0x0) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r1, 0x40096100, &(0x7f0000000000)={{&(0x7f00000000c0)={'GENERAL\x00'}}, 0x6}) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000080)=0xfffffffc) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000036c0)='/dev/dlm_plock\x00', 0x0, 0x0) getsockname$ax25(r5, 0x0, 0x0) recvmsg$kcm(r3, &(0x7f00000006c0)={&(0x7f0000000240)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000480)=""/91, 0x5b}, {&(0x7f0000000500)=""/152, 0x98}, {&(0x7f00000002c0)=""/19, 0x13}, {&(0x7f00000005c0)=""/115, 0x73}], 0x4, &(0x7f0000000680)=""/12, 0xc}, 0x40010060) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000180)={r4}) [ 3147.874346] syz-executor.2 (7605) used greatest stack depth: 24160 bytes left 23:49:12 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGCAUSE(r0, 0x89e0, 0x0) r1 = accept4$rose(r0, &(0x7f00000000c0)=@full={0xb, @dev, @remote, 0x0, [@netrom, @rose, @bcast, @netrom, @null, @netrom]}, 0x0, 0x800) syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) recvfrom$rose(r2, &(0x7f0000000200)=""/93, 0x5d, 0x10100, &(0x7f0000000280)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x80000006, 0x26}) setsockopt$rose(r1, 0x104, 0x2, &(0x7f00000001c0)=0x7, 0x4) sendto$rose(r0, &(0x7f0000000100)="d1938ada477de962502b74102657c6e5778f511b806f065673f8690fb05242ca0c5a0b7fc60e4c32c28fc65fecd49e13df33e2eef18ff417676f6748330ef330a2a09a2d4fc08181cb5c1a6f3d65b835e38d2ef8e1a0275e21ab83e2b5789a8295545a8a8d9468fb07a81ad9db2f475e6bf8e7b43ae595b56e1f93ab053842a81978173671001d635f1b8a579eaf37f6c3f7d33c5a30ac5b53a3569712b615ef788ddf764ab1", 0xa6, 0x40, &(0x7f0000000080)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}, 0x1c) [ 3149.211728] systemd[1]: Started Journal Service. [ 3149.769390] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3149.789228] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3149.809396] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 3149.814598] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 3149.814736] CPU: 1 PID: 8212 Comm: syz-executor.5 Not tainted 4.14.230-syzkaller #0 [ 3149.827734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3149.837784] Call Trace: [ 3149.840909] dump_stack+0x1b2/0x281 [ 3149.844540] warn_alloc.cold+0x96/0x1cc [ 3149.848633] ? zone_watermark_ok_safe+0x220/0x220 [ 3149.853766] __alloc_pages_nodemask+0x2127/0x2720 [ 3149.858880] ? lock_acquire+0x170/0x3f0 [ 3149.863042] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3149.868011] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3149.873859] ? __mutex_unlock_slowpath+0x75/0x770 [ 3149.878975] ? retint_kernel+0x2d/0x2d [ 3149.883040] alloc_pages_current+0x155/0x260 [ 3149.887453] ion_page_pool_alloc+0x118/0x1b0 [ 3149.892134] ion_system_heap_allocate+0x133/0x8c0 [ 3149.897273] ? _raw_spin_unlock+0x29/0x40 [ 3149.901547] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3149.906507] ? ion_system_contig_heap_create+0x130/0x130 [ 3149.912351] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3149.917920] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3149.922875] ion_alloc+0x27a/0x810 [ 3149.926434] ? ion_dma_buf_release+0x40/0x40 [ 3149.931128] ? __might_fault+0x177/0x1b0 [ 3149.935819] ion_ioctl+0xea/0x1f0 [ 3149.939379] ? ion_query_heaps+0x360/0x360 [ 3149.943607] ? check_uarg_tail_zero+0xe9/0x120 [ 3149.948203] ? ion_query_heaps+0x360/0x360 [ 3149.952740] do_vfs_ioctl+0x75a/0xff0 [ 3149.957327] ? ioctl_preallocate+0x1a0/0x1a0 [ 3149.961839] ? lock_downgrade+0x740/0x740 [ 3149.966093] ? __fget+0x225/0x360 [ 3149.969650] ? do_vfs_ioctl+0xff0/0xff0 [ 3149.973719] ? security_file_ioctl+0x83/0xb0 [ 3149.978365] SyS_ioctl+0x7f/0xb0 [ 3149.982071] ? do_vfs_ioctl+0xff0/0xff0 [ 3149.986131] do_syscall_64+0x1d5/0x640 [ 3149.990097] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3149.995279] RIP: 0033:0x466459 [ 3149.998454] RSP: 002b:00007ff493160188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3150.006630] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3150.014430] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3150.022318] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3150.030210] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3150.038903] R13: 00007fff6312dd3f R14: 00007ff493160300 R15: 0000000000022000 [ 3150.047117] CPU: 0 PID: 8277 Comm: syz-executor.0 Not tainted 4.14.230-syzkaller #0 [ 3150.051236] warn_alloc_show_mem: 2 callbacks suppressed [ 3150.051240] Mem-Info: [ 3150.055354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3150.055359] Call Trace: [ 3150.055379] dump_stack+0x1b2/0x281 [ 3150.055392] warn_alloc.cold+0x96/0x1cc [ 3150.055404] ? zone_watermark_ok_safe+0x220/0x220 [ 3150.055425] __alloc_pages_nodemask+0x2127/0x2720 [ 3150.060944] active_anon:78255 inactive_anon:43243 isolated_anon:1 [ 3150.060944] active_file:1547 inactive_file:5578 isolated_file:39 [ 3150.060944] unevictable:0 dirty:4 writeback:0 unstable:0 [ 3150.060944] slab_reclaimable:14201 slab_unreclaimable:151367 [ 3150.060944] mapped:39916 shmem:45834 pagetables:20414 bounce:0 [ 3150.060944] free:297966 free_pcp:13 free_cma:0 [ 3150.063460] ? lock_acquire+0x170/0x3f0 [ 3150.063477] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3150.073436] Node 0 active_anon:239768kB inactive_anon:133432kB active_file:6184kB inactive_file:22284kB unevictable:0kB isolated(anon):4kB isolated(file):156kB mapped:124848kB dirty:16kB writeback:0kB shmem:138420kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 169984kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3150.076157] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3150.076169] ? __mutex_unlock_slowpath+0x75/0x770 [ 3150.076182] alloc_pages_current+0x155/0x260 [ 3150.076195] ion_page_pool_alloc+0x118/0x1b0 [ 3150.080201] Node 1 active_anon:73252kB inactive_anon:39540kB active_file:4kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:44916kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3150.084459] ion_system_heap_allocate+0x133/0x8c0 [ 3150.084468] ? ion_alloc+0x187/0x810 [ 3150.084478] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3150.084486] ? ion_system_contig_heap_create+0x130/0x130 [ 3150.084495] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3150.084509] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3150.089664] Node 0 [ 3150.095074] ion_alloc+0x204/0x810 [ 3150.095089] ? ion_dma_buf_release+0x40/0x40 [ 3150.095100] ? __might_fault+0x177/0x1b0 [ 3150.095110] ion_ioctl+0xea/0x1f0 [ 3150.095118] ? ion_query_heaps+0x360/0x360 [ 3150.095128] ? ion_query_heaps+0x360/0x360 [ 3150.095149] do_vfs_ioctl+0x75a/0xff0 [ 3150.131197] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3150.135150] ? ioctl_preallocate+0x1a0/0x1a0 [ 3150.135159] ? lock_downgrade+0x740/0x740 [ 3150.135172] ? __fget+0x225/0x360 [ 3150.135182] ? do_vfs_ioctl+0xff0/0xff0 [ 3150.140297] lowmem_reserve[]: [ 3150.169337] ? security_file_ioctl+0x83/0xb0 [ 3150.169348] SyS_ioctl+0x7f/0xb0 [ 3150.169357] ? do_vfs_ioctl+0xff0/0xff0 [ 3150.169367] do_syscall_64+0x1d5/0x640 [ 3150.169381] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3150.169389] RIP: 0033:0x466459 [ 3150.169397] RSP: 002b:00007f1ef2095188 EFLAGS: 00000246 [ 3150.175041] 0 [ 3150.180305] ORIG_RAX: 0000000000000010 [ 3150.180311] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3150.180316] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3150.180321] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3150.180326] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3150.180333] R13: 00007fffa779c11f R14: 00007f1ef2095300 R15: 0000000000022000 [ 3150.185029] 2717 2718 2718 2718 [ 3150.410682] Node 0 DMA32 free:618096kB min:36200kB low:45248kB high:54296kB active_anon:239600kB inactive_anon:133376kB active_file:6184kB inactive_file:22184kB unevictable:0kB writepending:16kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11200kB pagetables:14508kB bounce:0kB free_pcp:192kB local_pcp:32kB free_cma:0kB [ 3150.442505] lowmem_reserve[]: 0 0 0 0 0 [ 3150.447021] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3150.473788] lowmem_reserve[]: 0 0 0 0 0 [ 3150.482572] Node 1 Normal free:484700kB min:53696kB low:67120kB high:80544kB active_anon:73252kB inactive_anon:39540kB active_file:4kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21824kB pagetables:67016kB bounce:0kB free_pcp:48kB local_pcp:48kB free_cma:0kB [ 3150.512868] lowmem_reserve[]: 0 0 0 0 0 [ 3150.517204] Node 0 DMA: 30*4kB (UE) 43*8kB (UME) 49*16kB (UME) 32*32kB (UME) 4*64kB (ME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10976kB [ 3150.533603] Node 0 DMA32: 203*4kB (E) 8163*8kB (UE) 14939*16kB (UE) 6789*32kB (UE) 9*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 522964kB [ 3150.548498] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3150.564740] Node 1 Normal: 13527*4kB (UM) 12446*8kB (UM) 8051*16kB (UM) 6319*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 484700kB [ 3150.580451] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3150.590288] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3150.601644] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3150.612996] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3150.621944] 52647 total pagecache pages [ 3150.626405] 0 pages in swap cache [ 3150.630112] Swap cache stats: add 0, delete 0, find 0/0 [ 3150.640302] Free swap = 0kB [ 3150.643743] Total swap = 0kB [ 3150.646907] 2097051 pages RAM [ 3150.652617] 0 pages HighMem/MovableOnly [ 3150.657777] 363848 pages reserved [ 3150.661556] 0 pages cma reserved [ 3150.736712] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3150.747474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3150.772684] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3150.813214] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3150.866236] device bridge_slave_1 left promiscuous mode [ 3150.872065] bridge0: port 2(bridge_slave_1) entered disabled state [ 3150.895321] device bridge_slave_0 left promiscuous mode [ 3150.910325] bridge0: port 1(bridge_slave_0) entered disabled state [ 3150.950749] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3150.972377] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3150.985919] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3150.992948] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3151.011704] device bridge_slave_1 left promiscuous mode [ 3151.024342] bridge0: port 2(bridge_slave_1) entered disabled state [ 3151.044644] device bridge_slave_0 left promiscuous mode [ 3151.050640] bridge0: port 1(bridge_slave_0) entered disabled state [ 3151.078674] device veth1_macvtap left promiscuous mode [ 3151.094558] device veth0_macvtap left promiscuous mode [ 3151.104810] device veth1_vlan left promiscuous mode [ 3151.114270] device veth0_vlan left promiscuous mode [ 3151.124491] device veth1_macvtap left promiscuous mode [ 3151.130315] device veth0_macvtap left promiscuous mode [ 3151.144078] device veth1_vlan left promiscuous mode [ 3151.154258] device veth0_vlan left promiscuous mode [ 3151.395386] device hsr_slave_1 left promiscuous mode [ 3151.436767] device hsr_slave_0 left promiscuous mode [ 3151.499702] team0 (unregistering): Port device team_slave_1 removed [ 3151.524238] team0 (unregistering): Port device team_slave_0 removed [ 3151.535682] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 3151.557535] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 3151.603764] can: notifier: receive list not found for dev vxcan1 [ 3151.635795] bond0 (unregistering): Released all slaves [ 3151.717485] device hsr_slave_1 left promiscuous mode [ 3151.731598] device hsr_slave_0 left promiscuous mode [ 3151.761305] team0 (unregistering): Port device team_slave_1 removed [ 3151.784829] oom_reaper: reaped process 8277 (syz-executor.0), now anon-rss:0kB, file-rss:32kB, shmem-rss:0kB [ 3151.800461] team0 (unregistering): Port device team_slave_0 removed [ 3151.823939] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 3151.824025] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 3151.852395] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 3151.893934] systemd-journal cpuset=/ mems_allowed=0-1 [ 3151.899303] CPU: 0 PID: 8265 Comm: systemd-journal Not tainted 4.14.230-syzkaller #0 [ 3151.907631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3151.917585] Call Trace: [ 3151.920159] dump_stack+0x1b2/0x281 [ 3151.923920] dump_header+0x178/0x82f [ 3151.927708] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3151.932982] ? ___ratelimit+0x2cd/0x530 [ 3151.936987] oom_kill_process.cold+0x10/0xa40 [ 3151.941735] out_of_memory+0xe3e/0x1190 [ 3151.945782] ? oom_killer_disable+0x1c0/0x1c0 [ 3151.950260] ? mutex_trylock+0x152/0x1a0 [ 3151.954482] __alloc_pages_nodemask+0x23e1/0x2720 [ 3151.959313] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3151.964311] ? __put_seccomp_filter+0x90/0x90 [ 3151.968966] ? __seccomp_filter+0xbd/0xd60 [ 3151.973434] ? cache_grow_begin+0x3f/0x700 [ 3151.977663] cache_grow_begin+0x91/0x700 [ 3151.981728] fallback_alloc+0x207/0x2c0 [ 3151.986001] kmem_cache_alloc+0x1e5/0x3c0 [ 3151.990243] getname_flags+0xc8/0x550 [ 3151.994056] SyS_mkdirat+0x83/0x270 [ 3151.997676] ? SyS_mknod+0x30/0x30 [ 3152.001633] ? do_syscall_64+0x4c/0x640 [ 3152.005706] ? SyS_mkdirat+0x270/0x270 [ 3152.009581] do_syscall_64+0x1d5/0x640 [ 3152.013586] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3152.018938] RIP: 0033:0x7f369936c687 [ 3152.022819] RSP: 002b:00007ffe503b6268 EFLAGS: 00000293 ORIG_RAX: 0000000000000053 [ 3152.030685] RAX: ffffffffffffffda RBX: 00007ffe503b92d0 RCX: 00007f369936c687 [ 3152.038495] RDX: 0000000000000000 RSI: 00000000000001ed RDI: 0000561c929d0d60 [ 3152.046201] RBP: 00007ffe503b62a0 R08: 0000561c928b63e5 R09: 0000000000000018 [ 3152.054264] R10: 0000000000000069 R11: 0000000000000293 R12: 0000000000000000 [ 3152.061984] R13: 0000000000000001 R14: 0000561c929d0d60 R15: 00007ffe503b68e0 [ 3152.087311] bond0 (unregistering): Released all slaves [ 3152.099874] Mem-Info: [ 3152.102337] active_anon:78288 inactive_anon:43246 isolated_anon:0 [ 3152.102337] active_file:1032 inactive_file:1059 isolated_file:72 [ 3152.102337] unevictable:0 dirty:16 writeback:0 unstable:0 [ 3152.102337] slab_reclaimable:14200 slab_unreclaimable:148050 [ 3152.102337] mapped:37358 shmem:45838 pagetables:20414 bounce:0 [ 3152.102337] free:13809 free_pcp:221 free_cma:0 [ 3152.138593] Node 0 active_anon:239896kB inactive_anon:133444kB active_file:4124kB inactive_file:4224kB unevictable:0kB isolated(anon):0kB isolated(file):288kB mapped:114616kB dirty:56kB writeback:0kB shmem:138436kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 169984kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3152.177003] Node 1 active_anon:73256kB inactive_anon:39540kB active_file:4kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:8kB writeback:0kB shmem:44916kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3152.207699] Node 0 DMA free:11008kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3152.235381] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3152.241014] Node 0 DMA32 free:18028kB min:36200kB low:45248kB high:54296kB active_anon:239728kB inactive_anon:133388kB active_file:4084kB inactive_file:4100kB unevictable:0kB writepending:56kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11200kB pagetables:14508kB bounce:0kB free_pcp:588kB local_pcp:336kB free_cma:0kB [ 3152.282784] lowmem_reserve[]: 0 0 0 0 0 [ 3152.287615] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3152.381545] lowmem_reserve[]: 0 0 0 0 0 [ 3152.395079] Node 1 Normal free:28492kB min:53696kB low:67120kB high:80544kB active_anon:73256kB inactive_anon:39540kB active_file:4kB inactive_file:12kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21824kB pagetables:67016kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3152.473887] lowmem_reserve[]: 0 0 0 0 0 [ 3152.478371] Node 0 DMA: 16*4kB (UE) 47*8kB (UME) 50*16kB (UME) 32*32kB (UME) 4*64kB (ME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10968kB [ 3152.533878] Node 0 DMA32: 1127*4kB (UME) 358*8kB (UME) 73*16kB (ME) 188*32kB (UME) 42*64kB (UM) 6*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18012kB [ 3152.583857] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3152.603962] Node 1 Normal: 24*4kB (UM) 7*8kB (UM) 3*16kB (UM) 697*32kB (UM) 2*64kB (U) 3*128kB (U) 15*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26856kB [ 3152.625141] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3152.643933] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3152.658205] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3152.667736] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3152.679664] 46428 total pagecache pages [ 3152.693846] 0 pages in swap cache [ 3152.697552] Swap cache stats: add 0, delete 0, find 0/0 [ 3152.713850] Free swap = 0kB [ 3152.717108] Total swap = 0kB [ 3152.724431] 2097051 pages RAM [ 3152.727827] 0 pages HighMem/MovableOnly [ 3152.743855] 363848 pages reserved [ 3152.747805] 0 pages cma reserved [ 3152.751171] Out of memory (oom_kill_allocating_task): Kill process 8265 (systemd-journal) score 0 or sacrifice child [ 3152.783871] Killed process 8265 (systemd-journal) total-vm:46096kB, anon-rss:468kB, file-rss:84kB, shmem-rss:1816kB [ 3152.807263] oom_reaper: reaped process 8265 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1816kB [ 3152.843914] Bluetooth: hci0 command 0x0409 tx timeout [ 3153.424200] rs:main Q:Reg invoked oom-killer: gfp_mask=0x1c200ca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), nodemask=(null), order=0, oom_score_adj=0 [ 3153.455027] rs:main Q:Reg cpuset=/ mems_allowed=0-1 [ 3153.460639] CPU: 1 PID: 8173 Comm: rs:main Q:Reg Not tainted 4.14.230-syzkaller #0 [ 3153.470131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3153.481011] Call Trace: [ 3153.484274] dump_stack+0x1b2/0x281 [ 3153.488419] dump_header+0x178/0x82f [ 3153.492677] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3153.498122] ? ___ratelimit+0x2cd/0x530 [ 3153.503097] oom_kill_process.cold+0x10/0xa40 [ 3153.508315] out_of_memory+0xe3e/0x1190 [ 3153.513517] ? oom_killer_disable+0x1c0/0x1c0 [ 3153.519262] ? mutex_trylock+0x152/0x1a0 [ 3153.523574] __alloc_pages_nodemask+0x23e1/0x2720 [ 3153.528783] ? trace_hardirqs_on+0x10/0x10 [ 3153.533353] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3153.538921] ? __radix_tree_lookup+0x1b5/0x2e0 [ 3153.543810] alloc_pages_current+0x155/0x260 [ 3153.548234] pagecache_get_page+0x3f5/0xab0 [ 3153.552821] grab_cache_page_write_begin+0x63/0x90 [ 3153.558173] ext4_da_write_begin+0x249/0xe70 [ 3153.562681] ? __ext4_journal_stop+0xe7/0x1b0 [ 3153.567828] ? ext4_write_begin+0x1260/0x1260 [ 3153.572328] ? balance_dirty_pages_ratelimited+0x84a/0x1800 [ 3153.578115] generic_perform_write+0x1c9/0x420 [ 3153.583414] ? __mnt_drop_write_file+0x5f/0x90 [ 3153.588573] ? filemap_page_mkwrite+0x2d0/0x2d0 [ 3153.594655] ? current_time+0xb0/0xb0 [ 3153.598635] ? ext4_file_write_iter+0x1cc/0xd20 [ 3153.603727] __generic_file_write_iter+0x227/0x590 [ 3153.609045] ext4_file_write_iter+0x276/0xd20 [ 3153.613808] ? aa_file_perm+0x304/0xab0 [ 3153.617766] ? ext4_file_read_iter+0x330/0x330 [ 3153.623052] ? trace_hardirqs_on+0x10/0x10 [ 3153.628007] ? iov_iter_init+0xa6/0x1c0 [ 3153.632077] __vfs_write+0x44c/0x630 [ 3153.635872] ? kernel_read+0x110/0x110 [ 3153.640089] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3153.645533] vfs_write+0x17f/0x4d0 [ 3153.649182] SyS_write+0xf2/0x210 [ 3153.656975] ? SyS_read+0x210/0x210 [ 3153.661827] ? __do_page_fault+0x159/0xad0 [ 3153.667005] ? do_syscall_64+0x4c/0x640 [ 3153.671005] ? SyS_read+0x210/0x210 [ 3153.675111] do_syscall_64+0x1d5/0x640 [ 3153.679176] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3153.684770] RIP: 0033:0x7f1f7a6b51cd [ 3153.688689] RSP: 002b:00007f1f77c70590 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 3153.697136] RAX: ffffffffffffffda RBX: 00007f1f6c0065c0 RCX: 00007f1f7a6b51cd [ 3153.704580] RDX: 0000000000000bc0 RSI: 00007f1f6c0065c0 RDI: 0000000000000006 [ 3153.712098] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3153.719735] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f1f6c006340 [ 3153.727290] R13: 00007f1f77c705b0 R14: 000055b77c73a3a0 R15: 0000000000000bc0 [ 3153.753896] Mem-Info: [ 3153.756973] active_anon:78173 inactive_anon:43245 isolated_anon:0 [ 3153.756973] active_file:22 inactive_file:3 isolated_file:20 [ 3153.756973] unevictable:0 dirty:14 writeback:0 unstable:0 [ 3153.756973] slab_reclaimable:14195 slab_unreclaimable:145746 [ 3153.756973] mapped:34819 shmem:45838 pagetables:20392 bounce:0 [ 3153.756973] free:13918 free_pcp:0 free_cma:0 [ 3153.794927] Node 0 active_anon:239436kB inactive_anon:133440kB active_file:88kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):80kB mapped:104460kB dirty:48kB writeback:0kB shmem:138436kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 169984kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3153.825206] Node 1 active_anon:73256kB inactive_anon:39540kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:44916kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3153.853537] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3153.906545] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3153.911803] Node 0 DMA32 free:17760kB min:36200kB low:45248kB high:54296kB active_anon:239268kB inactive_anon:133384kB active_file:48kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11104kB pagetables:14420kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3153.943850] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3153.944595] lowmem_reserve[]: [ 3153.956563] syz-executor.0: [ 3153.957139] 0 [ 3153.959852] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 3153.963161] 0 [ 3153.976489] (null) [ 3153.980518] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 3153.981083] 0 0 0 [ 3153.988580] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3153.995082] syz-executor.5 cpuset= [ 3154.018391] lowmem_reserve[]: 0 0 0 0 0 [ 3154.026547] CPU: 1 PID: 8277 Comm: syz-executor.0 Not tainted 4.14.230-syzkaller #0 [ 3154.026727] Node 1 [ 3154.035228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3154.035236] Call Trace: [ 3154.035257] dump_stack+0x1b2/0x281 [ 3154.035269] warn_alloc.cold+0x96/0x1cc [ 3154.035280] ? zone_watermark_ok_safe+0x220/0x220 [ 3154.035289] ? usleep_range+0x130/0x130 [ 3154.035298] ? try_to_free_pages+0x23f/0x6e0 [ 3154.035308] ? _find_next_bit+0xdb/0x100 [ 3154.035317] ? run_timer_softirq+0x5a0/0x5a0 [ 3154.035331] __alloc_pages_nodemask+0x2127/0x2720 [ 3154.039269] Normal free:26748kB min:53696kB low:67120kB high:80544kB active_anon:73256kB inactive_anon:39540kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21824kB pagetables:67016kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 3154.047631] ? lock_acquire+0x170/0x3f0 [ 3154.047647] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3154.047655] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3154.047671] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3154.050246] lowmem_reserve[]: [ 3154.054121] ? retint_kernel+0x2d/0x2d [ 3154.054134] alloc_pages_current+0x155/0x260 [ 3154.054145] ion_page_pool_alloc+0x118/0x1b0 [ 3154.054153] ion_system_heap_allocate+0x133/0x8c0 [ 3154.054162] ? ion_alloc+0x187/0x810 [ 3154.054172] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3154.054182] ? ion_system_contig_heap_create+0x130/0x130 [ 3154.060438] 0 [ 3154.063709] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3154.063720] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3154.063736] ion_alloc+0x204/0x810 [ 3154.063748] ? ion_dma_buf_release+0x40/0x40 [ 3154.063759] ? __might_fault+0x177/0x1b0 [ 3154.063770] ion_ioctl+0xea/0x1f0 [ 3154.068009] 0 [ 3154.072982] ? ion_query_heaps+0x360/0x360 [ 3154.079232] 0 [ 3154.083681] ? ion_query_heaps+0x360/0x360 [ 3154.088980] 0 [ 3154.118780] do_vfs_ioctl+0x75a/0xff0 [ 3154.118793] ? ioctl_preallocate+0x1a0/0x1a0 [ 3154.118802] ? lock_downgrade+0x740/0x740 [ 3154.118813] ? __fget+0x225/0x360 [ 3154.118821] ? do_vfs_ioctl+0xff0/0xff0 [ 3154.118832] ? security_file_ioctl+0x83/0xb0 [ 3154.118840] SyS_ioctl+0x7f/0xb0 [ 3154.118846] ? do_vfs_ioctl+0xff0/0xff0 [ 3154.118857] do_syscall_64+0x1d5/0x640 [ 3154.118872] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3154.118880] RIP: 0033:0x466459 [ 3154.118884] RSP: 002b:00007f1ef2095188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3154.118893] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3154.118898] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3154.118902] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3154.118907] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3154.118912] R13: 00007fffa779c11f R14: 00007f1ef2095300 R15: 0000000000022000 [ 3154.134461] / [ 3154.141737] 0 [ 3154.143579] mems_allowed=0-1 [ 3154.162894] CPU: 1 PID: 8212 Comm: syz-executor.5 Not tainted 4.14.230-syzkaller #0 [ 3154.163730] Node 0 [ 3154.166967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3154.172690] DMA: 16*4kB (UE) 47*8kB (UME) 50*16kB (UME) 32*32kB (UME) 4*64kB (ME) 2*128kB (UE) 2*256kB (ME) [ 3154.178537] Call Trace: [ 3154.178558] dump_stack+0x1b2/0x281 [ 3154.178575] warn_alloc.cold+0x96/0x1cc [ 3154.178587] ? zone_watermark_ok_safe+0x220/0x220 [ 3154.178595] ? usleep_range+0x130/0x130 [ 3154.178602] ? try_to_free_pages+0x23f/0x6e0 [ 3154.178611] ? _find_next_bit+0xdb/0x100 [ 3154.178621] ? run_timer_softirq+0x5a0/0x5a0 [ 3154.178635] __alloc_pages_nodemask+0x2127/0x2720 [ 3154.178650] ? lock_acquire+0x170/0x3f0 [ 3154.182327] 1*512kB [ 3154.185902] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3154.185912] ? ion_page_pool_alloc+0x9e/0x1b0 [ 3154.185926] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3154.185934] ? check_preemption_disabled+0x35/0x240 [ 3154.185950] alloc_pages_current+0x155/0x260 [ 3154.185961] ion_page_pool_alloc+0x118/0x1b0 [ 3154.185973] ion_system_heap_allocate+0x133/0x8c0 [ 3154.191492] (E) [ 3154.195118] ? _raw_spin_unlock+0x29/0x40 [ 3154.195126] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3154.195135] ? ion_system_contig_heap_create+0x130/0x130 [ 3154.195144] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3154.195154] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3154.195164] ion_alloc+0x27a/0x810 [ 3154.195178] ? ion_dma_buf_release+0x40/0x40 [ 3154.202451] 3*1024kB [ 3154.204620] ? __might_fault+0x177/0x1b0 [ 3154.204634] ion_ioctl+0xea/0x1f0 [ 3154.204644] ? ion_query_heaps+0x360/0x360 [ 3154.204657] ? check_uarg_tail_zero+0xe9/0x120 [ 3154.204666] ? ion_query_heaps+0x360/0x360 [ 3154.208942] (UME) [ 3154.210774] do_vfs_ioctl+0x75a/0xff0 [ 3154.219277] 2*2048kB [ 3154.221969] ? ioctl_preallocate+0x1a0/0x1a0 [ 3154.224220] (UM) [ 3154.228337] ? lock_downgrade+0x740/0x740 [ 3154.228352] ? __fget+0x225/0x360 [ 3154.233280] 0*4096kB [ 3154.237594] ? do_vfs_ioctl+0xff0/0xff0 [ 3154.237606] ? security_file_ioctl+0x83/0xb0 [ 3154.237615] SyS_ioctl+0x7f/0xb0 [ 3154.237623] ? do_vfs_ioctl+0xff0/0xff0 [ 3154.237633] do_syscall_64+0x1d5/0x640 [ 3154.237646] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3154.237654] RIP: 0033:0x466459 [ 3154.237658] RSP: 002b:00007ff493160188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3154.237666] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3154.237671] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3154.237676] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3154.237680] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3154.237686] R13: 00007fff6312dd3f R14: 00007ff493160300 R15: 0000000000022000 [ 3154.248696] warn_alloc_show_mem: 1 callbacks suppressed [ 3154.248700] Mem-Info: [ 3154.252546] = 10968kB [ 3154.257895] active_anon:78173 inactive_anon:43245 isolated_anon:0 [ 3154.257895] active_file:12 inactive_file:14 isolated_file:0 [ 3154.257895] unevictable:0 dirty:0 writeback:0 unstable:0 [ 3154.257895] slab_reclaimable:14181 slab_unreclaimable:145701 [ 3154.257895] mapped:34817 shmem:45838 pagetables:20392 bounce:0 [ 3154.257895] free:13869 free_pcp:30 free_cma:0 [ 3154.260687] Node 0 [ 3154.263634] Node 0 active_anon:239436kB inactive_anon:133440kB active_file:48kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:104452kB dirty:0kB writeback:0kB shmem:138436kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 169984kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3154.272607] DMA32: [ 3154.282955] Node 1 active_anon:73256kB inactive_anon:39540kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:44916kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3154.325525] 1384*4kB [ 3154.326460] Node 0 [ 3154.329107] (UME) 459*8kB (UME) 96*16kB (UME) 53*32kB (UME) 51*64kB (UM) 5*128kB (UM) 2*256kB (M) 2*512kB (M) 26*1024kB (U) 0*2048kB 0*4096kB = 44504kB [ 3154.329162] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3154.329205] Node 1 Normal: 25*4kB (M) 7*8kB (UM) 2*16kB (M) 558*32kB (UM) 4*64kB (U) 4*128kB (U) 31*256kB (U) 0*512kB 17*1024kB (U) 0*2048kB 0*4096kB = 44156kB [ 3154.343859] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3154.390413] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3154.396928] lowmem_reserve[]: [ 3154.414252] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3154.421301] 0 [ 3154.452133] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3154.457809] 2717 [ 3154.467332] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3154.469985] 2718 [ 3154.497636] 46715 total pagecache pages [ 3154.499542] 2718 [ 3154.502447] 0 pages in swap cache [ 3154.506503] 2718 [ 3154.531993] Swap cache stats: add 0, delete 0, find 0/0 [ 3154.544225] Free swap = 0kB [ 3154.544229] Total swap = 0kB [ 3154.544236] 2097051 pages RAM [ 3154.544239] 0 pages HighMem/MovableOnly [ 3154.544242] 363848 pages reserved [ 3154.544245] 0 pages cma reserved [ 3154.544252] Out of memory (oom_kill_allocating_task): Kill process 8173 (rs:main Q:Reg) score 0 or sacrifice child [ 3154.544838] Killed process 8162 (rsyslogd) total-vm:254332kB, anon-rss:872kB, file-rss:0kB, shmem-rss:0kB [ 3154.936610] Bluetooth: hci0 command 0x041b tx timeout [ 3154.955891] Node 0 DMA32 free:43648kB min:36200kB low:45248kB high:54296kB active_anon:239268kB inactive_anon:133384kB active_file:112kB inactive_file:436kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11072kB pagetables:14420kB bounce:0kB free_pcp:504kB local_pcp:296kB free_cma:0kB [ 3154.968007] oom_reaper: reaped process 8162 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 3155.006415] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 3155.024365] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 3155.050451] systemd[1]: Stopped Journal Service. [ 3155.060413] lowmem_reserve[]: 0 0 0 0 0 [ 3155.065990] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3155.071642] systemd[1]: Starting Journal Service... 23:49:19 executing program 4: accept4$rose(0xffffffffffffffff, &(0x7f0000000080)=@full={0xb, @dev, @remote, 0x0, [@netrom, @rose, @bcast, @netrom, @null, @netrom]}, 0x0, 0x80000) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000036c0)='/dev/dlm_plock\x00', 0x0, 0x0) getsockname$ax25(r1, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0xe4a, 0x30}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000006, 0x27}) 23:49:19 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000036c0)='/dev/dlm_plock\x00', 0x0, 0x0) getsockname$ax25(r0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x2, 0x70, 0x78, 0x1f, 0x9, 0x20, 0x0, 0xffffffffffffffe1, 0x2080, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_config_ext={0x3, 0x6}, 0x8480, 0x10001, 0x81, 0x6, 0x4, 0x2, 0x4}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x80000006, 0x27}) 23:49:19 executing program 5: r0 = accept4$rose(0xffffffffffffffff, &(0x7f0000000080)=@full={0xb, @dev, @remote, 0x0, [@netrom, @rose, @bcast, @netrom, @null, @netrom]}, 0x0, 0x80800) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0xa02, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGCAUSE(r2, 0x89e0, 0x0) bind$rose(r2, &(0x7f0000000180)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) bind$rose(r1, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x2, [@default, @default, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x40) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f0000000140)) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGCAUSE(r4, 0x89e0, 0x0) accept4$rose(r4, &(0x7f00000001c0)=@full={0xb, @dev, @netrom, 0x0, [@bcast, @default, @bcast, @default, @null, @null]}, &(0x7f0000000200)=0x40, 0x80800) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x80000006, 0x27}) 23:49:19 executing program 1: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x1cf000, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x480, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f00000000c0)=0x8) [ 3155.123971] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 3155.124630] lowmem_reserve[]: 0 0 0 0 0 [ 3155.153491] systemd[1]: rsyslog.service: Unit entered failed state. [ 3155.176119] Node 1 Normal free:614352kB min:53696kB low:67120kB high:80544kB active_anon:73360kB inactive_anon:39540kB active_file:2776kB inactive_file:10108kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21856kB pagetables:67064kB bounce:0kB free_pcp:332kB local_pcp:104kB free_cma:0kB [ 3155.211326] systemd[1]: rsyslog.service: Failed with result 'signal'. [ 3155.254498] systemd-journald[8291]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 3155.266033] lowmem_reserve[]: 0 0 0 0 0 [ 3155.293709] Node 0 DMA: 16*4kB (UE) 47*8kB (UME) 50*16kB (UME) 32*32kB (UME) 4*64kB (ME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10968kB [ 3155.330220] Node 0 DMA32: 685*4kB (UME) 554*8kB (UME) 104*16kB (UME) 38*32kB (UME) 54*64kB (UM) 5*128kB (UM) 2*256kB (M) 2*512kB (M) 28*1024kB (U) 0*2048kB 0*4096kB = 44356kB [ 3155.348409] systemd[1]: rsyslog.service: Service hold-off time over, scheduling restart. [ 3155.361249] systemd[1]: Stopped System Logging Service. [ 3155.422879] systemd[1]: Starting System Logging Service... [ 3155.435597] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3155.505526] Node 1 Normal: 1*4kB (U) 2*8kB (UM) 0*16kB 511*32kB (UM) 1616*64kB (U) 212*128kB (UM) 257*256kB (UM) 25*512kB (UM) 23*1024kB (UM) 29*2048kB (U) 0*4096kB = 308468kB [ 3155.547559] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3155.573648] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3155.599210] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3155.625295] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3155.653662] 54715 total pagecache pages [ 3155.659182] 0 pages in swap cache [ 3155.663042] Swap cache stats: add 0, delete 0, find 0/0 [ 3155.707447] Free swap = 0kB [ 3155.710675] Total swap = 0kB [ 3155.725438] 2097051 pages RAM [ 3155.728597] 0 pages HighMem/MovableOnly [ 3155.732757] 363848 pages reserved [ 3155.772395] 0 pages cma reserved [ 3156.617238] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3156.629386] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3156.651555] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 3156.658536] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 3156.663320] CPU: 1 PID: 8277 Comm: syz-executor.0 Not tainted 4.14.230-syzkaller #0 [ 3156.666094] syz-executor.4: [ 3156.672035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3156.672039] Call Trace: [ 3156.672058] dump_stack+0x1b2/0x281 [ 3156.672071] warn_alloc.cold+0x96/0x1cc [ 3156.692553] page allocation failure: order:4 [ 3156.696054] ? zone_watermark_ok_safe+0x220/0x220 [ 3156.696077] __alloc_pages_nodemask+0x2127/0x2720 [ 3156.696092] ? lock_acquire+0x170/0x3f0 [ 3156.696107] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3156.721983] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3156.725365] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 3156.727438] ? __mutex_unlock_slowpath+0x75/0x770 [ 3156.727453] alloc_pages_current+0x155/0x260 [ 3156.744698] ion_page_pool_alloc+0x118/0x1b0 [ 3156.749121] ion_system_heap_allocate+0x133/0x8c0 [ 3156.750371] syz-executor.4 cpuset= [ 3156.754154] ? _raw_spin_unlock+0x29/0x40 [ 3156.754163] ? _ion_heap_freelist_drain+0x6e/0x410 [ 3156.754172] ? ion_system_contig_heap_create+0x130/0x130 [ 3156.754182] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3156.754192] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3156.754205] ion_alloc+0x27a/0x810 [ 3156.767971] / [ 3156.768096] ? ion_dma_buf_release+0x40/0x40 [ 3156.790624] mems_allowed=0-1 [ 3156.794950] ? __might_fault+0x177/0x1b0 [ 3156.794963] ion_ioctl+0xea/0x1f0 [ 3156.794972] ? ion_query_heaps+0x360/0x360 [ 3156.794982] ? ion_query_heaps+0x360/0x360 [ 3156.794991] do_vfs_ioctl+0x75a/0xff0 [ 3156.795001] ? ioctl_preallocate+0x1a0/0x1a0 [ 3156.795012] ? lock_downgrade+0x740/0x740 [ 3156.826906] ? __fget+0x225/0x360 [ 3156.830762] ? do_vfs_ioctl+0xff0/0xff0 [ 3156.835574] ? security_file_ioctl+0x83/0xb0 [ 3156.840259] SyS_ioctl+0x7f/0xb0 [ 3156.843720] ? do_vfs_ioctl+0xff0/0xff0 [ 3156.847890] do_syscall_64+0x1d5/0x640 [ 3156.851976] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3156.857424] RIP: 0033:0x466459 [ 3156.860610] RSP: 002b:00007f1ef2095188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3156.868617] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3156.876592] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3156.884018] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3156.892499] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3156.900222] R13: 00007fffa779c11f R14: 00007f1ef2095300 R15: 0000000000022000 [ 3156.908231] CPU: 0 PID: 8296 Comm: syz-executor.4 Not tainted 4.14.230-syzkaller #0 [ 3156.917115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3156.927191] Call Trace: [ 3156.929583] warn_alloc_show_mem: 1 callbacks suppressed [ 3156.929587] Mem-Info: [ 3156.930237] dump_stack+0x1b2/0x281 [ 3156.930251] warn_alloc.cold+0x96/0x1cc [ 3156.936344] active_anon:78201 inactive_anon:45277 isolated_anon:0 [ 3156.936344] active_file:1372 inactive_file:5866 isolated_file:0 [ 3156.936344] unevictable:0 dirty:46 writeback:0 unstable:0 [ 3156.936344] slab_reclaimable:14148 slab_unreclaimable:146445 [ 3156.936344] mapped:57312 shmem:47885 pagetables:20500 bounce:0 [ 3156.936344] free:242096 free_pcp:406 free_cma:0 [ 3156.938672] ? zone_watermark_ok_safe+0x220/0x220 [ 3156.938695] __alloc_pages_nodemask+0x2127/0x2720 [ 3156.942790] Node 0 active_anon:239040kB inactive_anon:133376kB active_file:932kB inactive_file:3328kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176116kB dirty:132kB writeback:0kB shmem:138432kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 169984kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3156.946806] ? __schedule+0x893/0x1de0 [ 3156.946821] ? lock_acquire+0x170/0x3f0 [ 3156.946836] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3156.946853] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3156.946873] ? __mutex_unlock_slowpath+0x75/0x770 [ 3156.989541] Node 1 active_anon:73764kB inactive_anon:47732kB active_file:4556kB inactive_file:20136kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:53132kB dirty:52kB writeback:0kB shmem:53108kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 3156.993474] alloc_pages_current+0x155/0x260 [ 3156.993488] ion_page_pool_alloc+0x118/0x1b0 [ 3156.993500] ion_system_heap_allocate+0x133/0x8c0 [ 3157.025209] Node 0 [ 3157.027578] ? ion_alloc+0x187/0x810 [ 3157.027589] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3157.027601] ? ion_system_contig_heap_create+0x130/0x130 [ 3157.032066] DMA free:11064kB min:204kB low:252kB high:300kB active_anon:168kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3157.036883] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3157.036895] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3157.036905] ion_alloc+0x204/0x810 [ 3157.036917] ? ion_dma_buf_release+0x40/0x40 [ 3157.036928] ? __might_fault+0x177/0x1b0 [ 3157.036942] ion_ioctl+0xea/0x1f0 [ 3157.046824] lowmem_reserve[]: [ 3157.047857] ? ion_query_heaps+0x360/0x360 [ 3157.077287] 0 [ 3157.081674] ? __fdget+0x196/0x1f0 [ 3157.081685] ? fput+0xb/0x140 [ 3157.086331] 2717 [ 3157.091942] ? ion_query_heaps+0x360/0x360 [ 3157.091953] do_vfs_ioctl+0x75a/0xff0 [ 3157.091965] ? ioctl_preallocate+0x1a0/0x1a0 [ 3157.097430] 2718 [ 3157.097894] ? lock_downgrade+0x740/0x740 [ 3157.104462] 2718 [ 3157.109136] ? __fget+0x225/0x360 [ 3157.109147] ? do_vfs_ioctl+0xff0/0xff0 [ 3157.109158] ? security_file_ioctl+0x83/0xb0 [ 3157.109169] SyS_ioctl+0x7f/0xb0 [ 3157.136765] 2718 [ 3157.142025] ? do_vfs_ioctl+0xff0/0xff0 [ 3157.142038] do_syscall_64+0x1d5/0x640 [ 3157.142052] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3157.155854] RIP: 0033:0x466459 [ 3157.155859] RSP: 002b:00007f61587e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3157.155868] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3157.155873] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 3157.155877] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3157.155882] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3157.155887] R13: 00007ffed7f6205f R14: 00007f61587e7300 R15: 0000000000022000 [ 3157.156707] Bluetooth: hci0 command 0x040f tx timeout [ 3157.171133] Node 0 [ 3157.173143] CPU: 0 PID: 8294 Comm: syz-executor.5 Not tainted 4.14.230-syzkaller #0 [ 3157.175048] DMA32 free:630780kB min:36200kB low:45248kB high:54296kB active_anon:238872kB inactive_anon:133320kB active_file:932kB inactive_file:3328kB unevictable:0kB writepending:132kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11168kB pagetables:14644kB bounce:0kB free_pcp:868kB local_pcp:152kB free_cma:0kB [ 3157.178300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3157.178304] Call Trace: [ 3157.178321] dump_stack+0x1b2/0x281 [ 3157.178335] warn_alloc.cold+0x96/0x1cc [ 3157.181624] lowmem_reserve[]: [ 3157.183649] ? zone_watermark_ok_safe+0x220/0x220 [ 3157.183670] __alloc_pages_nodemask+0x2127/0x2720 [ 3157.183687] ? lock_acquire+0x170/0x3f0 [ 3157.183702] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3157.192375] 0 [ 3157.196707] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3157.196719] ? __mutex_unlock_slowpath+0x75/0x770 [ 3157.196734] alloc_pages_current+0x155/0x260 [ 3157.196747] ion_page_pool_alloc+0x118/0x1b0 [ 3157.196758] ion_system_heap_allocate+0x133/0x8c0 [ 3157.201409] 0 [ 3157.203765] ? ion_alloc+0x187/0x810 [ 3157.203776] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3157.203786] ? ion_system_contig_heap_create+0x130/0x130 [ 3157.203795] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3157.203806] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3157.203819] ion_alloc+0x204/0x810 [ 3157.208802] 0 [ 3157.209989] ? ion_dma_buf_release+0x40/0x40 [ 3157.210002] ? __might_fault+0x177/0x1b0 [ 3157.215615] 0 [ 3157.219273] ion_ioctl+0xea/0x1f0 [ 3157.219282] ? ion_query_heaps+0x360/0x360 [ 3157.219293] ? ion_query_heaps+0x360/0x360 [ 3157.222771] 0 [ 3157.224891] do_vfs_ioctl+0x75a/0xff0 [ 3157.224902] ? ioctl_preallocate+0x1a0/0x1a0 [ 3157.224911] ? lock_downgrade+0x740/0x740 [ 3157.224924] ? __fget+0x225/0x360 [ 3157.224942] ? do_vfs_ioctl+0xff0/0xff0 [ 3157.224955] ? security_file_ioctl+0x83/0xb0 [ 3157.239417] SyS_ioctl+0x7f/0xb0 [ 3157.239426] ? do_vfs_ioctl+0xff0/0xff0 [ 3157.239438] do_syscall_64+0x1d5/0x640 [ 3157.239452] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3157.243052] Node 0 [ 3157.251592] RIP: 0033:0x466459 [ 3157.251598] RSP: 002b:00007ff493160188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3157.251606] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 3157.251611] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000004 [ 3157.251615] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 3157.251619] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3157.251623] R13: 00007fff6312dd3f R14: 00007ff493160300 R15: 0000000000022000 [ 3157.441432] IPVS: ftp: loaded support on port[0] = 21 [ 3157.456562] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3157.618497] lowmem_reserve[]: 0 0 0 0 0 [ 3157.622861] Node 1 Normal free:439652kB min:53696kB low:67120kB high:80544kB active_anon:73764kB inactive_anon:47732kB active_file:4856kB inactive_file:19612kB unevictable:0kB writepending:52kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:21920kB pagetables:67224kB bounce:0kB free_pcp:720kB local_pcp:0kB free_cma:0kB [ 3157.662036] lowmem_reserve[]: 0 0 0 0 0 [ 3157.666909] Node 0 DMA: 30*4kB (UE) 48*8kB (UME) 52*16kB (UME) 32*32kB (UME) 4*64kB (ME) 2*128kB (UE) 2*256kB (ME) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11064kB [ 3157.686224] Node 0 DMA32: 576*4kB (ME) 8359*8kB (UME) 13299*16kB (UME) 6294*32kB (UME) 46*64kB (U) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 486440kB [ 3157.704599] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3157.717353] Node 1 Normal: 13674*4kB (UM) 12534*8kB (UM) 8145*16kB (UM) 4810*32kB (UM) 8*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 439720kB [ 3157.734642] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3157.744315] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3157.756040] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3157.769205] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3157.781673] 55000 total pagecache pages [ 3157.788751] 0 pages in swap cache [ 3157.792762] Swap cache stats: add 0, delete 0, find 0/0 [ 3157.800535] Free swap = 0kB [ 3157.807423] Total swap = 0kB [ 3157.811323] 2097051 pages RAM [ 3157.816794] 0 pages HighMem/MovableOnly [ 3157.822969] 363848 pages reserved [ 3157.828969] 0 pages cma reserved [ 3157.873195] chnl_net:caif_netlink_parms(): no params data found [ 3157.901772] syz-executor.3: page allocation failure: order:5, mode:0x1084020(GFP_ATOMIC|__GFP_COMP), nodemask=(null) [ 3157.913954] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 3157.919654] CPU: 0 PID: 8280 Comm: syz-executor.3 Not tainted 4.14.230-syzkaller #0 [ 3157.927628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3157.937336] Call Trace: [ 3157.939926] dump_stack+0x1b2/0x281 [ 3157.943547] warn_alloc.cold+0x96/0x1cc [ 3157.947637] ? zone_watermark_ok_safe+0x220/0x220 [ 3157.952854] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3157.958731] ? wake_all_kswapds+0x175/0x360 [ 3157.963313] __alloc_pages_nodemask+0x2127/0x2720 [ 3157.968331] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3157.973721] ? __alloc_pages_nodemask+0x1a6e/0x2720 [ 3157.979187] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3157.984296] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3157.989152] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3157.994944] ? cache_alloc_refill+0x2fa/0x350 [ 3157.999704] ? ____cache_alloc_node+0x156/0x1d0 [ 3158.004587] cache_grow_begin+0x91/0x700 [ 3158.008986] fallback_alloc+0x207/0x2c0 [ 3158.013244] __kmalloc+0x213/0x400 [ 3158.017100] ? batadv_hash_new+0xaa/0x270 [ 3158.021255] batadv_hash_new+0xaa/0x270 [ 3158.025389] ? batadv_hash_set_lock_class+0x9a/0xf0 [ 3158.030518] batadv_tt_init+0x2b2/0x390 [ 3158.034579] batadv_mesh_init+0x478/0x630 [ 3158.038979] batadv_softif_init_late+0xa26/0xc90 [ 3158.043936] ? batadv_get_strings+0x40/0x40 [ 3158.048343] ? dev_valid_name+0x1a0/0x1a0 [ 3158.052932] ? batadv_get_strings+0x40/0x40 [ 3158.057637] register_netdevice+0x291/0xe40 [ 3158.062122] ? netdev_change_features+0xa0/0xa0 [ 3158.066881] ? rtnl_create_link+0x129/0x890 [ 3158.071499] rtnl_newlink+0x14ff/0x1860 [ 3158.076230] ? rtnl_newlink+0x43d/0x1860 [ 3158.080288] ? __lock_acquire+0x5fc/0x3f20 [ 3158.084714] ? trace_hardirqs_on+0x10/0x10 [ 3158.089179] ? rtnl_dellink+0x6a0/0x6a0 [ 3158.093521] ? trace_hardirqs_on+0x10/0x10 [ 3158.097870] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 3158.103918] ? deref_stack_reg+0x124/0x1a0 [ 3158.108690] ? lock_acquire+0x170/0x3f0 [ 3158.112860] ? lock_downgrade+0x740/0x740 [ 3158.117238] ? rtnl_dellink+0x6a0/0x6a0 [ 3158.121249] rtnetlink_rcv_msg+0x3be/0xb10 [ 3158.125495] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 3158.130068] ? __netlink_lookup+0x345/0x5d0 [ 3158.134387] netlink_rcv_skb+0x125/0x390 [ 3158.138472] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 3158.143755] ? netlink_ack+0x9a0/0x9a0 [ 3158.148287] netlink_unicast+0x437/0x610 [ 3158.152595] ? netlink_sendskb+0xd0/0xd0 [ 3158.156750] ? __check_object_size+0x179/0x230 [ 3158.161715] netlink_sendmsg+0x62e/0xb80 [ 3158.165884] ? nlmsg_notify+0x170/0x170 [ 3158.169933] ? security_socket_sendmsg+0x83/0xb0 [ 3158.174780] ? nlmsg_notify+0x170/0x170 [ 3158.179512] sock_sendmsg+0xb5/0x100 [ 3158.183805] SyS_sendto+0x1c7/0x2c0 [ 3158.187540] ? SyS_getpeername+0x220/0x220 [ 3158.192275] ? vm_insert_page+0x7c0/0x7c0 [ 3158.196498] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3158.201499] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3158.206351] ? up_read+0x17/0x30 [ 3158.210127] ? __do_page_fault+0x159/0xad0 [ 3158.214705] ? do_syscall_64+0x4c/0x640 [ 3158.219527] ? SyS_getpeername+0x220/0x220 [ 3158.223758] do_syscall_64+0x1d5/0x640 [ 3158.227637] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3158.232925] RIP: 0033:0x4193ec [ 3158.236197] RSP: 002b:00007ffd6b3a0ca0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 3158.244325] RAX: ffffffffffffffda RBX: 00000000014a4320 RCX: 00000000004193ec [ 3158.251841] RDX: 000000000000003c RSI: 00000000014a4370 RDI: 0000000000000003 [ 3158.259372] RBP: 0000000000000000 R08: 00007ffd6b3a0cf4 R09: 000000000000000c [ 3158.267274] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 3158.274722] R13: 00000000014a4370 R14: 0000000000000003 R15: 0000000000000000 [ 3158.321840] ODEBUG: assert_init not available (active state 0) object type: timer_list hint: (null) [ 3158.332433] ------------[ cut here ]------------ [ 3158.337251] WARNING: CPU: 0 PID: 8280 at lib/debugobjects.c:287 debug_print_object.cold+0xa7/0xdb [ 3158.346359] Kernel panic - not syncing: panic_on_warn set ... [ 3158.346359] [ 3158.354426] CPU: 0 PID: 8280 Comm: syz-executor.3 Not tainted 4.14.230-syzkaller #0 [ 3158.362886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3158.372707] Call Trace: [ 3158.375317] dump_stack+0x1b2/0x281 [ 3158.379225] panic+0x1f9/0x42d [ 3158.382422] ? add_taint.cold+0x16/0x16 [ 3158.386498] ? debug_print_object.cold+0xa7/0xdb [ 3158.392061] ? debug_print_object.cold+0xa7/0xdb [ 3158.397424] __warn.cold+0x20/0x44 [ 3158.401931] ? ist_end_non_atomic+0x10/0x10 [ 3158.406364] ? debug_print_object.cold+0xa7/0xdb [ 3158.411380] report_bug+0x208/0x250 [ 3158.415049] do_error_trap+0x195/0x2d0 [ 3158.419378] ? math_error+0x2d0/0x2d0 [ 3158.423503] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3158.428811] invalid_op+0x1b/0x40 [ 3158.432903] RIP: 0010:debug_print_object.cold+0xa7/0xdb [ 3158.438794] RSP: 0018:ffff88808557f248 EFLAGS: 00010086 [ 3158.444454] RAX: 0000000000000061 RBX: 0000000000000005 RCX: 0000000000000000 [ 3158.452005] RDX: 0000000000000000 RSI: ffffffff878bbbc0 RDI: ffffed1010aafe3f [ 3158.459469] RBP: ffffffff878b6e80 R08: 0000000000000061 R09: 0000000000000001 [ 3158.467113] R10: 0000000000000000 R11: ffff8880b2b02280 R12: 0000000000000000 [ 3158.474768] R13: 0000000000000000 R14: ffff88802e6f2770 R15: 1ffff11010aafe52 [ 3158.482429] ? debug_print_object.cold+0xa7/0xdb [ 3158.487861] debug_object_assert_init+0x1d3/0x2d0 [ 3158.493123] ? debug_object_active_state+0x330/0x330 [ 3158.499449] ? rtnl_newlink+0x14ff/0x1860 [ 3158.503810] ? rtnetlink_rcv_msg+0x3be/0xb10 [ 3158.508847] ? netlink_rcv_skb+0x125/0x390 [ 3158.513929] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3158.520296] del_timer+0x5d/0xe0 [ 3158.524390] ? process_timeout+0x20/0x20 [ 3158.528651] try_to_grab_pending+0x243/0x610 [ 3158.533389] __cancel_work_timer+0x90/0x460 [ 3158.538062] ? work_on_cpu_safe+0x70/0x70 [ 3158.543088] ? batadv_tvlv_handler_get+0x1db/0x2b0 [ 3158.548026] batadv_nc_mesh_free+0x41/0x120 [ 3158.552492] batadv_mesh_free+0x70/0x150 [ 3158.557094] batadv_mesh_init+0x561/0x630 [ 3158.561448] batadv_softif_init_late+0xa26/0xc90 [ 3158.566386] ? batadv_get_strings+0x40/0x40 [ 3158.571232] ? dev_valid_name+0x1a0/0x1a0 [ 3158.575836] ? batadv_get_strings+0x40/0x40 [ 3158.580268] register_netdevice+0x291/0xe40 [ 3158.585159] ? netdev_change_features+0xa0/0xa0 [ 3158.591133] ? rtnl_create_link+0x129/0x890 [ 3158.596354] rtnl_newlink+0x14ff/0x1860 [ 3158.600710] ? rtnl_newlink+0x43d/0x1860 [ 3158.604864] ? __lock_acquire+0x5fc/0x3f20 [ 3158.609304] ? trace_hardirqs_on+0x10/0x10 [ 3158.613547] ? rtnl_dellink+0x6a0/0x6a0 [ 3158.617614] ? trace_hardirqs_on+0x10/0x10 [ 3158.622601] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 3158.629065] ? deref_stack_reg+0x124/0x1a0 [ 3158.634272] ? lock_acquire+0x170/0x3f0 [ 3158.638344] ? lock_downgrade+0x740/0x740 [ 3158.642713] ? rtnl_dellink+0x6a0/0x6a0 [ 3158.647578] rtnetlink_rcv_msg+0x3be/0xb10 [ 3158.653537] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 3158.658241] ? __netlink_lookup+0x345/0x5d0 [ 3158.663021] netlink_rcv_skb+0x125/0x390 [ 3158.668514] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 3158.674416] ? netlink_ack+0x9a0/0x9a0 [ 3158.678527] netlink_unicast+0x437/0x610 [ 3158.683625] ? netlink_sendskb+0xd0/0xd0 [ 3158.687866] ? __check_object_size+0x179/0x230 [ 3158.692937] netlink_sendmsg+0x62e/0xb80 [ 3158.697300] ? nlmsg_notify+0x170/0x170 [ 3158.701703] ? security_socket_sendmsg+0x83/0xb0 [ 3158.707749] ? nlmsg_notify+0x170/0x170 [ 3158.712331] sock_sendmsg+0xb5/0x100 [ 3158.716510] SyS_sendto+0x1c7/0x2c0 [ 3158.720414] ? SyS_getpeername+0x220/0x220 [ 3158.724896] ? vm_insert_page+0x7c0/0x7c0 [ 3158.729034] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3158.734672] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3158.739633] ? up_read+0x17/0x30 [ 3158.743177] ? __do_page_fault+0x159/0xad0 [ 3158.747767] ? do_syscall_64+0x4c/0x640 [ 3158.751868] ? SyS_getpeername+0x220/0x220 [ 3158.756102] do_syscall_64+0x1d5/0x640 [ 3158.759983] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3158.765357] RIP: 0033:0x4193ec [ 3158.768633] RSP: 002b:00007ffd6b3a0ca0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 3158.776882] RAX: ffffffffffffffda RBX: 00000000014a4320 RCX: 00000000004193ec [ 3158.784923] RDX: 000000000000003c RSI: 00000000014a4370 RDI: 0000000000000003 [ 3158.792743] RBP: 0000000000000000 R08: 00007ffd6b3a0cf4 R09: 000000000000000c [ 3158.800289] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 3158.807612] R13: 00000000014a4370 R14: 0000000000000003 R15: 0000000000000000 [ 3158.817512] Kernel Offset: disabled [ 3158.822057] Rebooting in 86400 seconds..