atman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2428.351969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2428.361709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2428.370871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2428.380635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2428.389735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2428.399464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2428.409562] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2428.416686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2428.424533] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2428.432340] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2428.439480] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2428.447694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2428.456947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2428.466854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2428.478946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2428.489150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2428.498311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2428.508426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2428.517575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2428.527319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2428.536507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2428.546488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2428.556653] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2428.564293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2428.575692] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2428.584036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 00:42:35 executing program 0: openat$nvram(0xffffffffffffff9c, 0x0, 0x278d00, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000003840)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000000400)={0x2020}, 0x2020) 00:42:35 executing program 5: clock_gettime(0x0, 0x0) 00:42:35 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x484240, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)={0x101, 0x1, 0x4, 0x400, 0xffff, {0x0, 0x2710}, {0x1, 0x2, 0x8, 0x2, 0x7, 0x1, "db53d254"}, 0x8, 0x4, @fd=r1, 0x4, 0x0, r1}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x4, 0x90040) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x7fffffff, 0x1e, 0x1}) 00:42:35 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x484240, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)={0x101, 0x1, 0x4, 0x400, 0xffff, {0x0, 0x2710}, {0x1, 0x2, 0x8, 0x2, 0x7, 0x1, "db53d254"}, 0x8, 0x4, @fd=r1, 0x4, 0x0, r1}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x4, 0x90040) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x7fffffff, 0x1e, 0x1}) 00:42:35 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x484240, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)={0x101, 0x1, 0x4, 0x400, 0xffff, {0x0, 0x2710}, {0x1, 0x2, 0x8, 0x2, 0x7, 0x1, "db53d254"}, 0x8, 0x4, @fd=r1, 0x4, 0x0, r1}) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x8) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x7fffffff, 0x1e, 0x1}) 00:42:35 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x484240, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)={0x101, 0x1, 0x4, 0x400, 0xffff, {0x0, 0x2710}, {0x1, 0x2, 0x8, 0x2, 0x7, 0x1, "db53d254"}, 0x8, 0x4, @fd=r1, 0x4, 0x0, r1}) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x8) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000340)={0x401, 0x2, 0x4, 0x8, 0x8, {}, {0x1, 0x8, 0xbc, 0xa2, 0xf7, 0x20, "450104da"}, 0xa87, 0x4, @fd=r3, 0x1ff}) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x4, 0x90040) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r4, 0xc00464be, &(0x7f0000000240)={0x1}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x7fffffff, 0x1e, 0x1}) 00:42:35 executing program 5: clock_gettime(0x0, 0x0) 00:42:35 executing program 0: openat$nvram(0xffffffffffffff9c, 0x0, 0x278d00, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000003840)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000000400)={0x2020}, 0x2020) 00:42:35 executing program 5: clock_gettime(0x0, 0x0) 00:42:35 executing program 0: openat$nvram(0xffffffffffffff9c, 0x0, 0x278d00, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000003840)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000000400)={0x2020}, 0x2020) 00:42:35 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x484240, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)={0x101, 0x1, 0x4, 0x400, 0xffff, {0x0, 0x2710}, {0x1, 0x2, 0x8, 0x2, 0x7, 0x1, "db53d254"}, 0x8, 0x4, @fd=r1, 0x4, 0x0, r1}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x4, 0x90040) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x7fffffff, 0x1e, 0x1}) 00:42:35 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nvram\x00', 0x0, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000003840)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000000400)={0x2020}, 0x2020) [ 2429.781041] Bluetooth: hci2 command 0x040f tx timeout [ 2429.787461] Bluetooth: hci3 command 0x040f tx timeout [ 2429.846362] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2429.852126] syz-executor.3: [ 2429.859600] syz-executor.2: [ 2429.863474] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2429.872053] page allocation failure: order:4 [ 2429.881808] page allocation failure: order:4 [ 2429.887156] syz-executor.4 cpuset= [ 2429.895661] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2429.902013] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2429.904452] syz-executor.1 cpuset= [ 2429.916806] (null) [ 2429.917214] syz-executor.5: [ 2429.923128] syz-executor.2 cpuset= [ 2429.924453] / [ 2429.926921] (null) [ 2429.929722] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2429.929737] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2429.929758] CPU: 0 PID: 28664 Comm: syz-executor.5 Not tainted 4.14.224-syzkaller #0 [ 2429.929764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2429.929767] Call Trace: [ 2429.929784] dump_stack+0x1b2/0x281 [ 2429.929798] warn_alloc.cold+0x96/0x1cc [ 2429.929810] ? zone_watermark_ok_safe+0x220/0x220 [ 2429.929834] __alloc_pages_nodemask+0x2127/0x2720 [ 2429.929851] ? lock_acquire+0x170/0x3f0 [ 2429.929867] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2429.929884] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2429.929896] ? __mutex_unlock_slowpath+0x75/0x770 [ 2429.929911] alloc_pages_current+0x155/0x260 [ 2429.932350] / [ 2429.933742] ion_page_pool_alloc+0x118/0x1b0 [ 2429.945007] syz-executor.3 cpuset= [ 2429.949200] ion_system_heap_allocate+0x133/0x8c0 [ 2429.949211] ? ion_alloc+0x187/0x810 [ 2429.949223] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2429.949235] ? ion_system_contig_heap_create+0x130/0x130 [ 2429.957230] mems_allowed=0-1 [ 2429.966426] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2429.966438] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2429.966451] ion_alloc+0x204/0x810 [ 2429.966466] ? ion_dma_buf_release+0x40/0x40 [ 2429.966477] ? __might_fault+0x177/0x1b0 [ 2429.966489] ion_ioctl+0xea/0x1f0 [ 2429.966501] ? ion_query_heaps+0x360/0x360 [ 2429.969547] / [ 2429.972677] ? ion_query_heaps+0x360/0x360 [ 2429.976940] mems_allowed=0-1 [ 2429.981451] do_vfs_ioctl+0x75a/0xff0 [ 2429.981464] ? ioctl_preallocate+0x1a0/0x1a0 [ 2429.981474] ? lock_downgrade+0x740/0x740 [ 2429.981487] ? __fget+0x225/0x360 [ 2429.981496] ? do_vfs_ioctl+0xff0/0xff0 [ 2429.981506] ? security_file_ioctl+0x83/0xb0 [ 2429.981515] SyS_ioctl+0x7f/0xb0 [ 2429.981521] ? do_vfs_ioctl+0xff0/0xff0 [ 2429.981533] do_syscall_64+0x1d5/0x640 [ 2430.115413] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2430.116378] mems_allowed=0-1 [ 2430.120591] RIP: 0033:0x465f69 [ 2430.120596] RSP: 002b:00007f667228e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2430.120607] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2430.120612] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2430.120618] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2430.120623] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2430.120628] R13: 00007ffe161935ef R14: 00007f667228e300 R15: 0000000000022000 [ 2430.138649] / [ 2430.146871] CPU: 1 PID: 28653 Comm: syz-executor.3 Not tainted 4.14.224-syzkaller #0 [ 2430.153029] mems_allowed=0-1 [ 2430.156462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2430.156467] Call Trace: [ 2430.156482] dump_stack+0x1b2/0x281 [ 2430.156495] warn_alloc.cold+0x96/0x1cc [ 2430.203161] ? zone_watermark_ok_safe+0x220/0x220 [ 2430.208000] __alloc_pages_nodemask+0x2127/0x2720 [ 2430.212822] ? __schedule+0x893/0x1de0 [ 2430.216694] ? lock_acquire+0x170/0x3f0 [ 2430.220652] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2430.225480] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2430.230913] ? __mutex_unlock_slowpath+0x75/0x770 [ 2430.235764] alloc_pages_current+0x155/0x260 [ 2430.240160] ion_page_pool_alloc+0x118/0x1b0 [ 2430.244557] ion_system_heap_allocate+0x133/0x8c0 [ 2430.249386] ? ion_alloc+0x187/0x810 [ 2430.253101] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2430.258534] ? ion_system_contig_heap_create+0x130/0x130 [ 2430.263970] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2430.268999] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2430.273824] ion_alloc+0x204/0x810 [ 2430.277347] ? ion_dma_buf_release+0x40/0x40 [ 2430.281739] ? __might_fault+0x177/0x1b0 [ 2430.285782] ion_ioctl+0xea/0x1f0 [ 2430.289759] ? ion_query_heaps+0x360/0x360 [ 2430.293975] ? SyS_epoll_ctl+0x1e0/0x2780 [ 2430.298105] ? ion_query_heaps+0x360/0x360 [ 2430.302321] do_vfs_ioctl+0x75a/0xff0 [ 2430.306104] ? ioctl_preallocate+0x1a0/0x1a0 [ 2430.310583] ? lock_downgrade+0x740/0x740 [ 2430.314716] ? __fget+0x225/0x360 [ 2430.318151] ? do_vfs_ioctl+0xff0/0xff0 [ 2430.322108] ? security_file_ioctl+0x83/0xb0 [ 2430.326609] SyS_ioctl+0x7f/0xb0 [ 2430.329967] ? do_vfs_ioctl+0xff0/0xff0 [ 2430.330209] warn_alloc_show_mem: 1 callbacks suppressed [ 2430.330212] Mem-Info: [ 2430.333924] do_syscall_64+0x1d5/0x640 [ 2430.333941] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2430.350725] RIP: 0033:0x465f69 [ 2430.353479] active_anon:20948 inactive_anon:35158 isolated_anon:0 [ 2430.353479] active_file:1833 inactive_file:1824 isolated_file:12 [ 2430.353479] unevictable:0 dirty:18 writeback:0 unstable:0 [ 2430.353479] slab_reclaimable:12607 slab_unreclaimable:113521 [ 2430.353479] mapped:55195 shmem:37651 pagetables:819 bounce:0 [ 2430.353479] free:181500 free_pcp:225 free_cma:0 [ 2430.353898] RSP: 002b:00007fac75d57188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2430.395448] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2430.402706] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2430.409963] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2430.417217] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2430.424474] R13: 00007fffe794c28f R14: 00007fac75d57300 R15: 0000000000022000 [ 2430.424530] Node 0 active_anon:83592kB inactive_anon:126660kB active_file:7208kB inactive_file:7220kB unevictable:0kB isolated(anon):0kB isolated(file):48kB mapped:220592kB dirty:64kB writeback:0kB shmem:136504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2430.438573] CPU: 1 PID: 28651 Comm: syz-executor.2 Not tainted 4.14.224-syzkaller #0 [ 2430.467925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2430.477278] Call Trace: [ 2430.479865] dump_stack+0x1b2/0x281 [ 2430.483489] warn_alloc.cold+0x96/0x1cc [ 2430.487458] ? zone_watermark_ok_safe+0x220/0x220 [ 2430.492308] __alloc_pages_nodemask+0x2127/0x2720 [ 2430.497148] ? lock_acquire+0x170/0x3f0 [ 2430.501126] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2430.503872] Node 1 active_anon:200kB inactive_anon:13972kB active_file:124kB inactive_file:76kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:188kB dirty:8kB writeback:0kB shmem:14100kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2430.505988] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2430.506001] ? __mutex_unlock_slowpath+0x75/0x770 [ 2430.543257] alloc_pages_current+0x155/0x260 [ 2430.547672] ion_page_pool_alloc+0x118/0x1b0 [ 2430.552072] ion_system_heap_allocate+0x133/0x8c0 [ 2430.556905] ? ion_alloc+0x187/0x810 [ 2430.560610] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2430.565725] Node 0 [ 2430.567271] ? ion_system_contig_heap_create+0x130/0x130 [ 2430.567281] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2430.567292] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2430.576160] DMA free:11136kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2430.580069] ion_alloc+0x204/0x810 [ 2430.580083] ? ion_dma_buf_release+0x40/0x40 [ 2430.595488] lowmem_reserve[]: [ 2430.610453] ? __might_fault+0x177/0x1b0 [ 2430.610469] ion_ioctl+0xea/0x1f0 [ 2430.610478] ? ion_query_heaps+0x360/0x360 [ 2430.610490] ? ion_query_heaps+0x360/0x360 [ 2430.630415] 0 [ 2430.633241] do_vfs_ioctl+0x75a/0xff0 [ 2430.633254] ? ioctl_preallocate+0x1a0/0x1a0 [ 2430.641157] 2717 [ 2430.643065] ? lock_downgrade+0x740/0x740 [ 2430.643078] ? __fget+0x225/0x360 [ 2430.651077] 2718 [ 2430.653668] ? do_vfs_ioctl+0xff0/0xff0 [ 2430.653678] ? security_file_ioctl+0x83/0xb0 [ 2430.653688] SyS_ioctl+0x7f/0xb0 [ 2430.661366] 2718 [ 2430.663343] ? do_vfs_ioctl+0xff0/0xff0 [ 2430.663359] do_syscall_64+0x1d5/0x640 [ 2430.671130] 2718 [ 2430.671447] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2430.677456] RIP: 0033:0x465f69 [ 2430.691843] RSP: 002b:00007f5aa2526188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2430.692381] Node 0 [ 2430.699633] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2430.699640] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2430.699644] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2430.699648] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2430.699653] R13: 00007fffc975a7ef R14: 00007f5aa2526300 R15: 0000000000022000 [ 2430.742721] CPU: 0 PID: 28648 Comm: syz-executor.1 Not tainted 4.14.224-syzkaller #0 [ 2430.750792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2430.760337] Call Trace: [ 2430.762941] dump_stack+0x1b2/0x281 [ 2430.766581] warn_alloc.cold+0x96/0x1cc [ 2430.770722] ? zone_watermark_ok_safe+0x220/0x220 [ 2430.775586] __alloc_pages_nodemask+0x2127/0x2720 [ 2430.780577] ? lock_acquire+0x170/0x3f0 [ 2430.784562] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2430.789542] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2430.795003] ? __mutex_unlock_slowpath+0x75/0x770 [ 2430.799857] alloc_pages_current+0x155/0x260 [ 2430.804284] ion_page_pool_alloc+0x118/0x1b0 [ 2430.808706] ion_system_heap_allocate+0x133/0x8c0 [ 2430.813563] ? ion_alloc+0x187/0x810 [ 2430.817284] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2430.822747] ? ion_system_contig_heap_create+0x130/0x130 [ 2430.828212] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2430.833353] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2430.838207] ion_alloc+0x204/0x810 [ 2430.841762] ? ion_dma_buf_release+0x40/0x40 [ 2430.846177] ? __might_fault+0x177/0x1b0 [ 2430.850253] ion_ioctl+0xea/0x1f0 [ 2430.853712] ? ion_query_heaps+0x360/0x360 [ 2430.857957] ? ion_query_heaps+0x360/0x360 [ 2430.862314] do_vfs_ioctl+0x75a/0xff0 [ 2430.866125] ? ioctl_preallocate+0x1a0/0x1a0 [ 2430.870744] ? lock_downgrade+0x740/0x740 [ 2430.874906] ? __fget+0x225/0x360 [ 2430.878444] ? do_vfs_ioctl+0xff0/0xff0 [ 2430.882423] ? security_file_ioctl+0x83/0xb0 [ 2430.886836] SyS_ioctl+0x7f/0xb0 [ 2430.890235] ? do_vfs_ioctl+0xff0/0xff0 [ 2430.894217] do_syscall_64+0x1d5/0x640 [ 2430.898118] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2430.903312] RIP: 0033:0x465f69 [ 2430.906503] RSP: 002b:00007f66274e4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2430.914217] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2430.921493] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2430.928764] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2430.936127] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2430.943610] R13: 00007ffeea3ca95f R14: 00007f66274e4300 R15: 0000000000022000 [ 2430.960674] CPU: 0 PID: 28652 Comm: syz-executor.4 Not tainted 4.14.224-syzkaller #0 [ 2430.968592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2430.978122] Call Trace: [ 2430.980725] dump_stack+0x1b2/0x281 [ 2430.984365] warn_alloc.cold+0x96/0x1cc [ 2430.988348] ? zone_watermark_ok_safe+0x220/0x220 [ 2430.993227] __alloc_pages_nodemask+0x2127/0x2720 [ 2430.998212] ? lock_acquire+0x170/0x3f0 [ 2431.002209] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2431.007072] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2431.012533] ? __mutex_unlock_slowpath+0x75/0x770 [ 2431.017384] ? retint_kernel+0x2d/0x2d [ 2431.021415] alloc_pages_current+0x155/0x260 [ 2431.025834] ion_page_pool_alloc+0x118/0x1b0 [ 2431.030254] ion_system_heap_allocate+0x133/0x8c0 [ 2431.035107] ? ion_alloc+0x187/0x810 [ 2431.038830] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2431.044290] ? ion_system_contig_heap_create+0x130/0x130 [ 2431.049904] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2431.055043] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2431.059899] ion_alloc+0x204/0x810 [ 2431.063458] ? ion_dma_buf_release+0x40/0x40 [ 2431.067877] ? __might_fault+0x177/0x1b0 [ 2431.071951] ion_ioctl+0xea/0x1f0 [ 2431.075413] ? ion_query_heaps+0x360/0x360 [ 2431.079662] ? ion_query_heaps+0x360/0x360 [ 2431.083906] do_vfs_ioctl+0x75a/0xff0 [ 2431.087719] ? ioctl_preallocate+0x1a0/0x1a0 [ 2431.092134] ? lock_downgrade+0x740/0x740 [ 2431.096294] ? __fget+0x225/0x360 [ 2431.099753] ? do_vfs_ioctl+0xff0/0xff0 [ 2431.103738] ? security_file_ioctl+0x83/0xb0 [ 2431.108769] SyS_ioctl+0x7f/0xb0 [ 2431.112142] ? do_vfs_ioctl+0xff0/0xff0 [ 2431.116265] do_syscall_64+0x1d5/0x640 [ 2431.120168] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2431.125361] RIP: 0033:0x465f69 [ 2431.128550] RSP: 002b:00007efebc25a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2431.136266] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2431.143548] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2431.150826] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2431.158100] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2431.165375] R13: 00007fffe753495f R14: 00007efebc25a300 R15: 0000000000022000 [ 2431.176021] DMA32 free:316440kB min:36200kB low:45248kB high:54296kB active_anon:83592kB inactive_anon:126660kB active_file:7200kB inactive_file:7208kB unevictable:0kB writepending:64kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7648kB pagetables:3276kB bounce:0kB free_pcp:868kB local_pcp:756kB free_cma:0kB [ 2431.218764] lowmem_reserve[]: 0 0 0 0 0 [ 2431.232015] warn_alloc_show_mem: 2 callbacks suppressed [ 2431.232018] Mem-Info: [ 2431.234276] Node 0 [ 2431.241020] active_anon:20948 inactive_anon:35158 isolated_anon:0 [ 2431.241020] active_file:1831 inactive_file:1821 isolated_file:0 [ 2431.241020] unevictable:0 dirty:18 writeback:0 unstable:0 [ 2431.241020] slab_reclaimable:12607 slab_unreclaimable:114251 [ 2431.241020] mapped:55208 shmem:37651 pagetables:819 bounce:0 [ 2431.241020] free:80218 free_pcp:76 free_cma:0 [ 2431.247105] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2431.310596] Node 0 active_anon:83592kB inactive_anon:126660kB active_file:7200kB inactive_file:7208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:220644kB dirty:64kB writeback:0kB shmem:136504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2431.347023] Node 1 active_anon:200kB inactive_anon:13972kB active_file:124kB inactive_file:76kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:188kB dirty:8kB writeback:0kB shmem:14100kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2431.399037] lowmem_reserve[]: 0 0 0 0 0 [ 2431.405832] Node 1 Normal free:53608kB min:53696kB low:67120kB high:80544kB active_anon:200kB inactive_anon:13972kB active_file:124kB inactive_file:76kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2431.433591] Node 0 DMA free:11136kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2431.470261] lowmem_reserve[]: 0 0 0 0 0 [ 2431.474294] Node 0 DMA: 8*4kB (UE) 22*8kB (UE) 11*16kB (UE) 8*32kB (UE) 2*64kB (UE) 1*128kB (E) 2*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11136kB [ 2431.507672] Node 0 DMA32: 292*4kB (UMEH) 234*8kB (UMEH) 144*16kB (UMEH) 912*32kB (UMEH) 27*64kB (UMH) 2*128kB (UH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36512kB [ 2431.556444] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2431.572643] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2431.589880] Node 0 DMA32 free:36184kB min:36200kB low:45248kB high:54296kB active_anon:83592kB inactive_anon:126660kB active_file:3460kB inactive_file:2928kB unevictable:0kB writepending:64kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7648kB pagetables:3276kB bounce:0kB free_pcp:168kB local_pcp:64kB free_cma:0kB [ 2431.632797] Node 1 Normal: 176*4kB (UE) 547*8kB (UE) 463*16kB (UE) 263*32kB (UE) 5*64kB (ME) 1*128kB (M) 2*256kB (UM) 62*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 53608kB [ 2431.649235] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2431.659614] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2431.668672] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2431.677921] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2431.686773] 38438 total pagecache pages [ 2431.691228] 0 pages in swap cache [ 2431.694907] Swap cache stats: add 0, delete 0, find 0/0 [ 2431.700654] Free swap = 0kB [ 2431.703681] Total swap = 0kB [ 2431.706920] 2097051 pages RAM [ 2431.710281] 0 pages HighMem/MovableOnly [ 2431.714193] lowmem_reserve[]: [ 2431.714259] 363840 pages reserved [ 2431.714266] 0 [ 2431.717544] 0 pages cma reserved [ 2431.730126] 0 0 0 0 [ 2431.732619] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2431.759605] lowmem_reserve[]: 0 0 0 0 0 [ 2431.766951] Node 1 Normal free:53608kB min:53696kB low:67120kB high:80544kB active_anon:200kB inactive_anon:13972kB active_file:124kB inactive_file:76kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2431.804919] lowmem_reserve[]: 0 0 0 0 0 [ 2431.809112] Node 0 DMA: 2*4kB (UE) 14*8kB (UE) 11*16kB (UE) 8*32kB (UE) 2*64kB (UE) 1*128kB (E) 2*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11048kB [ 2431.824545] Node 0 DMA32: 749*4kB (UMEH) 464*8kB (UMEH) 285*16kB (MEH) 673*32kB (UMEH) 50*64kB (UMH) 5*128kB (UMH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36644kB [ 2431.840064] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2431.852064] Node 1 Normal: 176*4kB (UE) 547*8kB (UE) 463*16kB (UE) 263*32kB (UE) 5*64kB (ME) 1*128kB (M) 2*256kB (UM) 62*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 53608kB [ 2431.867823] Bluetooth: hci3 command 0x0419 tx timeout [ 2431.873158] Bluetooth: hci2 command 0x0419 tx timeout [ 2431.878607] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2431.889836] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2431.898482] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2431.907528] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2431.916783] 37734 total pagecache pages [ 2431.921810] 0 pages in swap cache [ 2431.926710] Swap cache stats: add 0, delete 0, find 0/0 [ 2431.932121] Free swap = 0kB [ 2431.935138] Total swap = 0kB [ 2431.938164] 2097051 pages RAM [ 2431.941297] 0 pages HighMem/MovableOnly [ 2431.945399] 363840 pages reserved [ 2431.948858] 0 pages cma reserved [ 2432.074738] oom_reaper: reaped process 28648 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2432.134238] oom_reaper: reaped process 28653 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2432.152369] syz-executor.5 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2432.178800] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2432.219267] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2432.259935] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2432.263096] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2432.272515] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2432.275158] CPU: 0 PID: 28648 Comm: syz-executor.1 Not tainted 4.14.224-syzkaller #0 [ 2432.285663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2432.295010] Call Trace: [ 2432.297633] dump_stack+0x1b2/0x281 [ 2432.301262] warn_alloc.cold+0x96/0x1cc [ 2432.305289] ? zone_watermark_ok_safe+0x220/0x220 [ 2432.310128] ? usleep_range+0x130/0x130 [ 2432.314106] ? try_to_free_pages+0x23f/0x6e0 [ 2432.318526] ? _find_next_bit+0xdb/0x100 [ 2432.322593] ? run_timer_softirq+0x5a0/0x5a0 [ 2432.327000] __alloc_pages_nodemask+0x2127/0x2720 [ 2432.331842] ? lock_acquire+0x170/0x3f0 [ 2432.335848] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2432.340687] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2432.345186] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2432.350728] ? alloc_pages_current+0x135/0x260 [ 2432.355306] alloc_pages_current+0x155/0x260 [ 2432.359708] ion_page_pool_alloc+0x118/0x1b0 [ 2432.364107] ion_system_heap_allocate+0x133/0x8c0 [ 2432.368940] ? ion_alloc+0x187/0x810 [ 2432.372782] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2432.378224] ? ion_system_contig_heap_create+0x130/0x130 [ 2432.383662] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2432.388669] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2432.393541] ion_alloc+0x204/0x810 [ 2432.397077] ? ion_dma_buf_release+0x40/0x40 [ 2432.401506] ? __might_fault+0x177/0x1b0 [ 2432.405567] ion_ioctl+0xea/0x1f0 [ 2432.409050] ? ion_query_heaps+0x360/0x360 [ 2432.413280] ? ion_query_heaps+0x360/0x360 [ 2432.417507] do_vfs_ioctl+0x75a/0xff0 [ 2432.421310] ? ioctl_preallocate+0x1a0/0x1a0 [ 2432.425718] ? lock_downgrade+0x740/0x740 [ 2432.429915] ? __fget+0x225/0x360 [ 2432.433359] ? do_vfs_ioctl+0xff0/0xff0 [ 2432.437324] ? security_file_ioctl+0x83/0xb0 [ 2432.441723] SyS_ioctl+0x7f/0xb0 [ 2432.445082] ? do_vfs_ioctl+0xff0/0xff0 [ 2432.449046] do_syscall_64+0x1d5/0x640 [ 2432.452927] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2432.458110] RIP: 0033:0x465f69 [ 2432.461291] RSP: 002b:00007f66274e4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2432.468994] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2432.476252] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2432.483513] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2432.490798] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2432.498097] R13: 00007ffeea3ca95f R14: 00007f66274e4300 R15: 0000000000022000 [ 2432.505374] CPU: 1 PID: 28653 Comm: syz-executor.3 Not tainted 4.14.224-syzkaller #0 [ 2432.513267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2432.522624] Call Trace: [ 2432.525103] warn_alloc_show_mem: 1 callbacks suppressed [ 2432.525106] Mem-Info: [ 2432.525215] dump_stack+0x1b2/0x281 [ 2432.530598] active_anon:20923 inactive_anon:35158 isolated_anon:0 [ 2432.530598] active_file:47 inactive_file:8 isolated_file:0 [ 2432.530598] unevictable:0 dirty:2 writeback:0 unstable:0 [ 2432.530598] slab_reclaimable:12605 slab_unreclaimable:113925 [ 2432.530598] mapped:52766 shmem:37651 pagetables:819 bounce:0 [ 2432.530598] free:13725 free_pcp:71 free_cma:0 [ 2432.532965] warn_alloc.cold+0x96/0x1cc [ 2432.536644] Node 0 active_anon:83492kB inactive_anon:126660kB active_file:188kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210976kB dirty:0kB writeback:0kB shmem:136504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2432.569681] ? zone_watermark_ok_safe+0x220/0x220 [ 2432.569690] ? usleep_range+0x130/0x130 [ 2432.569700] ? try_to_free_pages+0x23f/0x6e0 [ 2432.569712] ? _find_next_bit+0xdb/0x100 [ 2432.619016] ? run_timer_softirq+0x5a0/0x5a0 [ 2432.623423] __alloc_pages_nodemask+0x2127/0x2720 [ 2432.628347] ? lock_acquire+0x170/0x3f0 [ 2432.629997] Node 1 active_anon:200kB inactive_anon:13972kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:88kB dirty:8kB writeback:0kB shmem:14100kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2432.632319] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2432.663770] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2432.668257] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2432.673701] ? retint_kernel+0x2d/0x2d [ 2432.677582] alloc_pages_current+0x155/0x260 [ 2432.679981] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2432.682032] ion_page_pool_alloc+0x118/0x1b0 [ 2432.682043] ion_system_heap_allocate+0x133/0x8c0 [ 2432.717692] ? ion_alloc+0x187/0x810 [ 2432.721399] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2432.726914] ? ion_system_contig_heap_create+0x130/0x130 [ 2432.732358] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2432.737364] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2432.739975] lowmem_reserve[]: 0 [ 2432.742199] ion_alloc+0x204/0x810 [ 2432.742213] ? ion_dma_buf_release+0x40/0x40 [ 2432.745525] 2717 [ 2432.749055] ? __might_fault+0x177/0x1b0 [ 2432.759546] ion_ioctl+0xea/0x1f0 [ 2432.762991] ? ion_query_heaps+0x360/0x360 [ 2432.767219] ? SyS_epoll_ctl+0x1e0/0x2780 [ 2432.769969] 2718 2718 [ 2432.771359] ? ion_query_heaps+0x360/0x360 [ 2432.771369] do_vfs_ioctl+0x75a/0xff0 [ 2432.773854] 2718 [ 2432.778081] ? ioctl_preallocate+0x1a0/0x1a0 [ 2432.788302] ? lock_downgrade+0x740/0x740 [ 2432.792485] Node 0 [ 2432.792492] ? __fget+0x225/0x360 [ 2432.792502] ? do_vfs_ioctl+0xff0/0xff0 [ 2432.794739] DMA32 free:17660kB min:36200kB low:45248kB high:54296kB active_anon:83592kB inactive_anon:126660kB active_file:56kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7648kB pagetables:3276kB bounce:0kB free_pcp:92kB local_pcp:0kB free_cma:0kB [ 2432.798346] ? security_file_ioctl+0x83/0xb0 [ 2432.819960] lowmem_reserve[]: [ 2432.830401] SyS_ioctl+0x7f/0xb0 [ 2432.830409] ? do_vfs_ioctl+0xff0/0xff0 [ 2432.830428] do_syscall_64+0x1d5/0x640 [ 2432.849128] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2432.849963] 0 0 [ 2432.854324] RIP: 0033:0x465f69 [ 2432.854331] RSP: 002b:00007fac75d57188 EFLAGS: 00000246 [ 2432.856302] 0 [ 2432.859480] ORIG_RAX: 0000000000000010 [ 2432.870577] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2432.877836] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2432.879955] 0 [ 2432.885096] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2432.885103] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2432.886892] 0 [ 2432.894150] R13: 00007fffe794c28f R14: 00007fac75d57300 R15: 0000000000022000 [ 2432.940011] CPU: 0 PID: 22248 Comm: syz-executor.5 Not tainted 4.14.224-syzkaller #0 [ 2432.947936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2432.957300] Call Trace: [ 2432.959905] dump_stack+0x1b2/0x281 [ 2432.963546] dump_header+0x178/0x82f [ 2432.967268] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2432.972377] ? ___ratelimit+0x2cd/0x530 [ 2432.976356] oom_kill_process.cold+0x10/0xb18 [ 2432.980864] out_of_memory+0xe3e/0x1190 [ 2432.984850] ? oom_killer_disable+0x1c0/0x1c0 [ 2432.989482] ? mutex_trylock+0x152/0x1a0 [ 2432.993555] __alloc_pages_nodemask+0x23e1/0x2720 [ 2432.998417] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2433.003281] alloc_pages_current+0x155/0x260 [ 2433.007809] filemap_fault+0xea3/0x1980 [ 2433.011801] ext4_filemap_fault+0x84/0xb0 [ 2433.016700] __do_fault+0xfa/0x380 [ 2433.020251] __handle_mm_fault+0x2497/0x4620 [ 2433.024667] ? vm_insert_page+0x7c0/0x7c0 [ 2433.028827] ? nanosleep_copyout+0x100/0x100 [ 2433.033259] handle_mm_fault+0x391/0x860 [ 2433.037331] __do_page_fault+0x549/0xad0 [ 2433.041401] ? spurious_fault+0x640/0x640 [ 2433.045552] ? do_page_fault+0x60/0x500 [ 2433.049671] ? page_fault+0x2f/0x50 [ 2433.053300] page_fault+0x45/0x50 [ 2433.056856] RIP: 25149d:0x8 [ 2433.059788] RSP: 00fc:00007ffe161938ac EFLAGS: 00000032 [ 2433.095549] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2433.126158] lowmem_reserve[]: 0 0 0 0 0 [ 2433.134858] Node 1 Normal free:415440kB min:53696kB low:67120kB high:80544kB active_anon:200kB inactive_anon:13972kB active_file:4kB inactive_file:916kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:0kB bounce:0kB free_pcp:260kB local_pcp:44kB free_cma:0kB [ 2433.197177] lowmem_reserve[]: 0 0 0 0 0 [ 2433.209747] Node 0 DMA: 1*4kB (E) 5*8kB (UE) 11*16kB (UE) 8*32kB (UE) 18*64kB (UE) 2*128kB (UE) 2*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 11100kB [ 2433.226407] Node 0 DMA32: 1454*4kB (UMEH) 573*8kB (UMEH) 879*16kB (UMEH) 2078*32kB (UMEH) 1575*64kB (UMH) 162*128kB (UMH) 6*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 214032kB [ 2433.243848] Mem-Info: [ 2433.246357] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2433.257595] active_anon:20901 inactive_anon:35158 isolated_anon:0 [ 2433.257595] active_file:15 inactive_file:1269 isolated_file:0 [ 2433.257595] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2433.257595] slab_reclaimable:12605 slab_unreclaimable:113962 [ 2433.257595] mapped:53619 shmem:37651 pagetables:819 bounce:0 [ 2433.257595] free:151902 free_pcp:377 free_cma:0 [ 2433.320957] Node 1 Normal: 44*4kB (UME) 39*8kB (UE) 42*16kB (UE) 112*32kB (UE) 5148*64kB (UME) 376*128kB (UM) 48*256kB (UM) 53*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 421768kB [ 2433.380343] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2433.389228] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2433.419999] Node 0 active_anon:83404kB inactive_anon:126660kB active_file:956kB inactive_file:2832kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:214176kB dirty:0kB writeback:0kB shmem:136504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2433.450254] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2433.459116] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2433.490010] 38895 total pagecache pages [ 2433.494025] 0 pages in swap cache [ 2433.497497] Swap cache stats: add 0, delete 0, find 0/0 [ 2433.503251] Node 1 active_anon:200kB inactive_anon:13972kB active_file:204kB inactive_file:804kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:500kB dirty:0kB writeback:0kB shmem:14100kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2433.540856] Free swap = 0kB [ 2433.543922] Total swap = 0kB [ 2433.546948] 2097051 pages RAM [ 2433.563066] 0 pages HighMem/MovableOnly [ 2433.567093] 363840 pages reserved [ 2433.593410] Node 0 DMA free:11100kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2433.624256] 0 pages cma reserved [ 2433.709921] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2433.715111] Node 0 DMA32 free:70912kB min:36200kB low:45248kB high:54296kB active_anon:83404kB inactive_anon:126660kB active_file:1440kB inactive_file:1036kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7648kB pagetables:3276kB bounce:0kB free_pcp:536kB local_pcp:336kB free_cma:0kB [ 2433.837086] lowmem_reserve[]: 0 0 0 0 0 [ 2433.838744] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2433.844619] syz-executor.1: [ 2433.857612] syz-executor.3 cpuset= [ 2433.857656] Node 0 [ 2433.861373] / mems_allowed=0-1 [ 2433.874319] CPU: 1 PID: 28653 Comm: syz-executor.3 Not tainted 4.14.224-syzkaller #0 [ 2433.880008] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2433.882327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2433.882333] Call Trace: [ 2433.907392] page allocation failure: order:4 [ 2433.916718] dump_stack+0x1b2/0x281 [ 2433.916731] warn_alloc.cold+0x96/0x1cc [ 2433.916744] ? zone_watermark_ok_safe+0x220/0x220 [ 2433.921762] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2433.923723] __alloc_pages_nodemask+0x2127/0x2720 [ 2433.927321] (null) [ 2433.931283] ? ___preempt_schedule+0x16/0x18 [ 2433.931298] ? lock_acquire+0x170/0x3f0 [ 2433.931313] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2433.936137] syz-executor.1 cpuset= [ 2433.943337] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2433.943348] ? __mutex_unlock_slowpath+0x75/0x770 [ 2433.943360] ? __list_del_entry_valid+0xb3/0xf0 [ 2433.948196] lowmem_reserve[]: [ 2433.950372] alloc_pages_current+0x155/0x260 [ 2433.950386] ion_page_pool_alloc+0x118/0x1b0 [ 2433.950397] ion_system_heap_allocate+0x133/0x8c0 [ 2433.954785] 0 [ 2433.958752] ? _raw_spin_unlock+0x29/0x40 [ 2433.963700] / [ 2433.967204] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2433.972660] 0 [ 2433.977518] ? ion_system_contig_heap_create+0x130/0x130 [ 2433.982190] mems_allowed=0-1 [ 2433.985275] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2433.989862] 0 [ 2433.994065] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2433.998886] 0 [ 2434.000682] ion_alloc+0x27a/0x810 [ 2434.000698] ? ion_dma_buf_release+0x40/0x40 [ 2434.019853] 0 [ 2434.021755] ? __might_fault+0x177/0x1b0 [ 2434.028546] ion_ioctl+0xea/0x1f0 [ 2434.049855] Node 1 Normal free:26472kB min:53696kB low:67120kB high:80544kB active_anon:204kB inactive_anon:13972kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2434.052342] ? ion_query_heaps+0x360/0x360 [ 2434.052354] ? SyS_epoll_ctl+0x1e0/0x2780 [ 2434.088718] ? ion_query_heaps+0x360/0x360 [ 2434.092944] do_vfs_ioctl+0x75a/0xff0 [ 2434.096770] ? ioctl_preallocate+0x1a0/0x1a0 [ 2434.101166] ? lock_downgrade+0x740/0x740 [ 2434.105394] ? __fget+0x225/0x360 [ 2434.108841] ? do_vfs_ioctl+0xff0/0xff0 [ 2434.109851] lowmem_reserve[]: [ 2434.112815] ? security_file_ioctl+0x83/0xb0 [ 2434.112820] 0 [ 2434.115917] SyS_ioctl+0x7f/0xb0 [ 2434.125532] ? do_vfs_ioctl+0xff0/0xff0 [ 2434.129496] do_syscall_64+0x1d5/0x640 [ 2434.129844] 0 0 0 [ 2434.133380] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2434.133389] RIP: 0033:0x465f69 [ 2434.135609] 0 [ 2434.140781] RSP: 002b:00007fac75d57188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2434.140791] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2434.140796] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2434.140801] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2434.140807] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2434.160706] R13: 00007fffe794c28f R14: 00007fac75d57300 R15: 0000000000022000 [ 2434.173605] warn_alloc_show_mem: 1 callbacks suppressed [ 2434.173608] Mem-Info: [ 2434.199870] CPU: 0 PID: 28648 Comm: syz-executor.1 Not tainted 4.14.224-syzkaller #0 [ 2434.207369] active_anon:20905 inactive_anon:35158 isolated_anon:0 [ 2434.207369] active_file:39 inactive_file:0 isolated_file:0 [ 2434.207369] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2434.207369] slab_reclaimable:12593 slab_unreclaimable:114653 [ 2434.207369] mapped:52769 shmem:37651 pagetables:819 bounce:0 [ 2434.207369] free:13931 free_pcp:0 free_cma:0 [ 2434.207984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2434.250385] Call Trace: [ 2434.252987] dump_stack+0x1b2/0x281 [ 2434.255935] Node 0 active_anon:83416kB inactive_anon:126660kB active_file:152kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211076kB dirty:0kB writeback:0kB shmem:136504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2434.256616] warn_alloc.cold+0x96/0x1cc [ 2434.288566] ? zone_watermark_ok_safe+0x220/0x220 [ 2434.293432] __alloc_pages_nodemask+0x2127/0x2720 [ 2434.295228] Node 0 DMA: [ 2434.298273] ? lock_acquire+0x170/0x3f0 [ 2434.298285] ? lock_acquire+0x170/0x3f0 [ 2434.305009] 2*4kB (UE) 1*8kB [ 2434.308886] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2434.308903] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2434.319095] (E) [ 2434.322425] ? __mutex_unlock_slowpath+0x75/0x770 [ 2434.322439] alloc_pages_current+0x155/0x260 [ 2434.322453] ion_page_pool_alloc+0x118/0x1b0 [ 2434.322465] ion_system_heap_allocate+0x133/0x8c0 [ 2434.322476] ? _raw_spin_unlock+0x29/0x40 [ 2434.322485] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2434.322493] ? ion_system_contig_heap_create+0x130/0x130 [ 2434.322505] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2434.328067] 11*16kB [ 2434.329355] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2434.344508] Node 1 active_anon:204kB inactive_anon:13972kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:14100kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2434.347117] ion_alloc+0x27a/0x810 [ 2434.357400] (UE) [ 2434.357476] ? ion_dma_buf_release+0x40/0x40 [ 2434.367741] Node 0 [ 2434.369617] ? __might_fault+0x177/0x1b0 [ 2434.407111] 8*32kB [ 2434.408517] ion_ioctl+0xea/0x1f0 [ 2434.414488] (UE) [ 2434.414792] ? ion_query_heaps+0x360/0x360 [ 2434.418223] 17*64kB [ 2434.420278] ? ion_query_heaps+0x360/0x360 [ 2434.420287] do_vfs_ioctl+0x75a/0xff0 [ 2434.420299] ? ioctl_preallocate+0x1a0/0x1a0 [ 2434.420309] ? lock_downgrade+0x740/0x740 [ 2434.420323] ? __fget+0x225/0x360 [ 2434.420332] ? do_vfs_ioctl+0xff0/0xff0 [ 2434.420342] ? security_file_ioctl+0x83/0xb0 [ 2434.420352] SyS_ioctl+0x7f/0xb0 [ 2434.435732] (UE) [ 2434.439423] ? do_vfs_ioctl+0xff0/0xff0 [ 2434.447164] 2*128kB [ 2434.451092] do_syscall_64+0x1d5/0x640 [ 2434.451109] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2434.451117] RIP: 0033:0x465f69 [ 2434.451122] RSP: 002b:00007f66274e4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2434.451133] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2434.451138] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2434.451143] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2434.451148] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2434.451154] R13: 00007ffeea3ca95f R14: 00007f66274e4300 R15: 0000000000022000 [ 2434.523837] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2434.524162] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2434.551965] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2434.562151] lowmem_reserve[]: 0 [ 2434.566739] CPU: 0 PID: 28648 Comm: syz-executor.1 Not tainted 4.14.224-syzkaller #0 [ 2434.566746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2434.570090] 2717 [ 2434.577882] Call Trace: [ 2434.587566] 2718 [ 2434.589357] dump_stack+0x1b2/0x281 [ 2434.591944] 2718 [ 2434.594071] warn_alloc.cold+0x96/0x1cc [ 2434.597735] 2718 [ 2434.599797] ? zone_watermark_ok_safe+0x220/0x220 [ 2434.599806] ? usleep_range+0x130/0x130 [ 2434.599814] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2434.599826] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2434.599835] ? run_timer_softirq+0x5a0/0x5a0 [ 2434.599850] __alloc_pages_nodemask+0x2127/0x2720 [ 2434.599865] ? lock_acquire+0x170/0x3f0 [ 2434.603845] (UE) [ 2434.605884] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2434.610755] 2*256kB [ 2434.614680] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2434.619758] (UE) [ 2434.624772] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2434.624791] alloc_pages_current+0x155/0x260 [ 2434.624804] ion_page_pool_alloc+0x118/0x1b0 [ 2434.624814] ion_system_heap_allocate+0x133/0x8c0 [ 2434.634043] ? _raw_spin_unlock+0x29/0x40 [ 2434.634052] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2434.634062] ? ion_system_contig_heap_create+0x130/0x130 [ 2434.634072] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2434.634083] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2434.638125] Node 0 [ 2434.640180] ion_alloc+0x27a/0x810 [ 2434.640195] ? ion_dma_buf_release+0x40/0x40 [ 2434.640207] ? __might_fault+0x177/0x1b0 [ 2434.640219] ion_ioctl+0xea/0x1f0 [ 2434.640227] ? ion_query_heaps+0x360/0x360 [ 2434.640240] ? ion_query_heaps+0x360/0x360 [ 2434.645076] DMA32 free:18000kB min:36200kB low:45248kB high:54296kB active_anon:83416kB inactive_anon:126660kB active_file:152kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7648kB pagetables:3276kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 2434.647382] do_vfs_ioctl+0x75a/0xff0 [ 2434.651913] 3*512kB [ 2434.653918] ? ioctl_preallocate+0x1a0/0x1a0 [ 2434.659345] (UE) [ 2434.663879] ? lock_downgrade+0x740/0x740 [ 2434.663892] ? __fget+0x225/0x360 [ 2434.663901] ? do_vfs_ioctl+0xff0/0xff0 [ 2434.663911] ? security_file_ioctl+0x83/0xb0 [ 2434.663921] SyS_ioctl+0x7f/0xb0 [ 2434.668321] lowmem_reserve[]: [ 2434.673191] ? do_vfs_ioctl+0xff0/0xff0 [ 2434.673202] do_syscall_64+0x1d5/0x640 [ 2434.673218] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2434.673228] RIP: 0033:0x465f69 [ 2434.677359] 0 [ 2434.682278] RSP: 002b:00007f66274e4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2434.682287] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2434.682292] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2434.682297] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2434.682302] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2434.682307] R13: 00007ffeea3ca95f R14: 00007f66274e4300 R15: 0000000000022000 [ 2434.876155] 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 11008kB [ 2434.899866] Node 0 DMA32: 388*4kB (UME) 275*8kB (ME) 181*16kB (UME) 41*32kB (ME) 1*64kB (E) 171*128kB (U) 24*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36056kB [ 2434.939813] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2434.970068] Node 1 Normal: 12*4kB (UME) 6*8kB (UME) 19*16kB (UME) 10*32kB (UME) 278*64kB (UE) 51*128kB (U) 19*256kB (U) 47*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 53968kB [ 2434.995716] 0 0 0 0 [ 2434.995973] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2434.998083] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2435.019827] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2435.056957] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2435.065862] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2435.074540] 37701 total pagecache pages [ 2435.078665] 0 pages in swap cache [ 2435.093951] Swap cache stats: add 0, delete 0, find 0/0 [ 2435.099340] Free swap = 0kB [ 2435.149852] Total swap = 0kB [ 2435.152905] 2097051 pages RAM [ 2435.156034] 0 pages HighMem/MovableOnly [ 2435.168694] lowmem_reserve[]: 0 0 0 0 0 [ 2435.190220] Node 1 Normal free:53372kB min:53696kB low:67120kB high:80544kB active_anon:204kB inactive_anon:13972kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2435.192927] 363840 pages reserved [ 2435.321943] lowmem_reserve[]: 0 0 0 0 0 [ 2435.326204] Node 0 DMA: 2*4kB (UE) 2*8kB (UE) 8*16kB (UE) 8*32kB (UE) 17*64kB (UE) 2*128kB (UE) 2*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10968kB [ 2435.335325] 0 pages cma reserved [ 2435.394039] Out of memory (oom_kill_allocating_task): Kill process 22248 (syz-executor.5) score 0 or sacrifice child [ 2435.413503] Node 0 DMA32: 646*4kB (ME) 334*8kB (UME) 181*16kB (UME) 42*32kB (UME) 1*64kB (E) 164*128kB (U) 24*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36696kB [ 2435.465731] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2435.466541] Killed process 28664 (syz-executor.5) total-vm:93252kB, anon-rss:152kB, file-rss:34820kB, shmem-rss:0kB [ 2435.524978] Node 1 Normal: 12*4kB (ME) 3*8kB (ME) 4*16kB (UME) 6*32kB (UME) 265*64kB (UME) 54*128kB (UM) 20*256kB (UM) 48*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 53896kB [ 2435.578255] oom_reaper: reaped process 28664 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2435.591694] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2435.600850] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2435.609559] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2435.611663] syz-executor.5 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2435.623655] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2435.645967] 37701 total pagecache pages [ 2435.650008] 0 pages in swap cache [ 2435.653462] Swap cache stats: add 0, delete 0, find 0/0 [ 2435.658822] Free swap = 0kB [ 2435.667656] Total swap = 0kB [ 2435.670737] 2097051 pages RAM [ 2435.673843] 0 pages HighMem/MovableOnly [ 2435.677813] 363840 pages reserved [ 2435.677935] syz-executor.5 cpuset= [ 2435.681383] 0 pages cma reserved [ 2435.699999] / mems_allowed=0-1 [ 2435.703240] CPU: 0 PID: 22248 Comm: syz-executor.5 Not tainted 4.14.224-syzkaller #0 [ 2435.711120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2435.720479] Call Trace: [ 2435.723077] dump_stack+0x1b2/0x281 [ 2435.726707] dump_header+0x178/0x82f [ 2435.730425] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2435.735530] ? ___ratelimit+0x2cd/0x530 [ 2435.739509] oom_kill_process.cold+0x10/0xb18 [ 2435.744016] out_of_memory+0xe3e/0x1190 [ 2435.747996] ? oom_killer_disable+0x1c0/0x1c0 [ 2435.752499] ? mutex_trylock+0x152/0x1a0 [ 2435.756564] __alloc_pages_nodemask+0x23e1/0x2720 [ 2435.761416] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2435.766301] alloc_pages_current+0x155/0x260 [ 2435.770702] filemap_fault+0xea3/0x1980 [ 2435.774677] ext4_filemap_fault+0x84/0xb0 [ 2435.778814] __do_fault+0xfa/0x380 [ 2435.782341] __handle_mm_fault+0x2497/0x4620 [ 2435.786769] ? vm_insert_page+0x7c0/0x7c0 [ 2435.790905] ? nanosleep_copyout+0x100/0x100 [ 2435.795308] handle_mm_fault+0x391/0x860 [ 2435.799356] __do_page_fault+0x549/0xad0 [ 2435.803403] ? spurious_fault+0x640/0x640 [ 2435.807535] ? do_page_fault+0x60/0x500 [ 2435.811497] ? page_fault+0x2f/0x50 [ 2435.815110] page_fault+0x45/0x50 [ 2435.818587] RIP: 25149d:0x8 [ 2435.821530] RSP: 00fc:00007ffe161938ac EFLAGS: 00000032 [ 2435.821576] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2435.841624] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2435.846753] CPU: 1 PID: 28664 Comm: syz-executor.5 Not tainted 4.14.224-syzkaller #0 [ 2435.854629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2435.863979] Call Trace: [ 2435.866571] dump_stack+0x1b2/0x281 [ 2435.870199] warn_alloc.cold+0x96/0x1cc [ 2435.874171] ? zone_watermark_ok_safe+0x220/0x220 [ 2435.879004] ? usleep_range+0x130/0x130 [ 2435.879870] Mem-Info: [ 2435.882965] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2435.882977] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2435.885379] active_anon:20905 inactive_anon:35158 isolated_anon:0 [ 2435.885379] active_file:44 inactive_file:0 isolated_file:0 [ 2435.885379] unevictable:0 dirty:17 writeback:0 unstable:0 [ 2435.885379] slab_reclaimable:12593 slab_unreclaimable:114636 [ 2435.885379] mapped:52825 shmem:37651 pagetables:782 bounce:0 [ 2435.885379] free:13922 free_pcp:143 free_cma:0 [ 2435.890457] ? run_timer_softirq+0x5a0/0x5a0 [ 2435.890473] __alloc_pages_nodemask+0x2127/0x2720 [ 2435.890490] ? lock_acquire+0x170/0x3f0 [ 2435.895496] Node 0 active_anon:83416kB inactive_anon:126660kB active_file:64kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211188kB dirty:64kB writeback:0kB shmem:136504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2435.928699] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2435.928710] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2435.928725] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2435.933148] Node 1 active_anon:204kB inactive_anon:13972kB active_file:112kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:112kB dirty:4kB writeback:0kB shmem:14100kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2435.937954] alloc_pages_current+0x155/0x260 [ 2435.941929] Node 0 [ 2435.969743] ion_page_pool_alloc+0x118/0x1b0 [ 2435.969754] ion_system_heap_allocate+0x133/0x8c0 [ 2435.969766] ? ion_alloc+0x187/0x810 [ 2435.974593] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2435.979061] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2435.984500] lowmem_reserve[]: [ 2436.011359] ? ion_system_contig_heap_create+0x130/0x130 [ 2436.011369] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2436.011380] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2436.015847] 0 [ 2436.018068] ion_alloc+0x204/0x810 [ 2436.022467] 2717 [ 2436.027279] ? ion_dma_buf_release+0x40/0x40 [ 2436.030979] 2718 [ 2436.056467] ? __might_fault+0x177/0x1b0 [ 2436.056482] ion_ioctl+0xea/0x1f0 [ 2436.061921] 2718 [ 2436.064996] ? ion_query_heaps+0x360/0x360 [ 2436.070432] 2718 [ 2436.075440] ? ion_query_heaps+0x360/0x360 [ 2436.082061] do_vfs_ioctl+0x75a/0xff0 [ 2436.085572] Node 0 [ 2436.087620] ? ioctl_preallocate+0x1a0/0x1a0 [ 2436.092039] DMA32 free:17980kB min:36200kB low:45248kB high:54296kB active_anon:83416kB inactive_anon:126660kB active_file:112kB inactive_file:32kB unevictable:0kB writepending:64kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7616kB pagetables:3128kB bounce:0kB free_pcp:352kB local_pcp:252kB free_cma:0kB [ 2436.094061] ? lock_downgrade+0x740/0x740 [ 2436.098200] lowmem_reserve[]: [ 2436.101640] ? __fget+0x225/0x360 [ 2436.101649] ? do_vfs_ioctl+0xff0/0xff0 [ 2436.101660] ? security_file_ioctl+0x83/0xb0 [ 2436.103698] 0 [ 2436.107914] SyS_ioctl+0x7f/0xb0 [ 2436.109985] 0 [ 2436.114185] ? do_vfs_ioctl+0xff0/0xff0 [ 2436.117958] 0 [ 2436.120178] do_syscall_64+0x1d5/0x640 [ 2436.120195] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2436.124574] 0 [ 2436.153095] RIP: 0033:0x465f69 [ 2436.153100] RSP: 002b:00007f667228e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2436.153109] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2436.153113] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2436.153117] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2436.153121] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2436.153127] R13: 00007ffe161935ef R14: 00007f667228e300 R15: 0000000000022000 [ 2436.156304] warn_alloc_show_mem: 2 callbacks suppressed [ 2436.156307] Mem-Info: [ 2436.159499] 0 [ 2436.160450] active_anon:20881 inactive_anon:35158 isolated_anon:0 [ 2436.160450] active_file:22 inactive_file:0 isolated_file:0 [ 2436.160450] unevictable:0 dirty:13 writeback:0 unstable:0 [ 2436.160450] slab_reclaimable:12593 slab_unreclaimable:114640 [ 2436.160450] mapped:52793 shmem:37651 pagetables:782 bounce:0 [ 2436.160450] free:14021 free_pcp:146 free_cma:0 [ 2436.160466] Node 0 active_anon:83320kB inactive_anon:126660kB active_file:36kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211124kB dirty:52kB writeback:0kB shmem:136504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2436.160480] Node 1 active_anon:204kB inactive_anon:13972kB active_file:52kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:48kB dirty:0kB writeback:0kB shmem:14100kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2436.160484] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2436.160503] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2436.160523] Node 0 DMA32 free:18376kB min:36200kB low:45248kB high:54296kB active_anon:83320kB inactive_anon:126660kB active_file:84kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7616kB pagetables:3128kB bounce:0kB free_pcp:364kB local_pcp:112kB free_cma:0kB [ 2436.160542] lowmem_reserve[]: 0 0 0 0 0 [ 2436.160560] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2436.160577] lowmem_reserve[]: 0 0 0 0 0 [ 2436.160595] Node 1 Normal free:26740kB min:53696kB low:67120kB high:80544kB active_anon:204kB inactive_anon:13972kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:0kB bounce:0kB free_pcp:220kB local_pcp:100kB free_cma:0kB [ 2436.160612] lowmem_reserve[]: 0 0 0 [ 2436.164074] syz-executor.3: [ 2436.168011] 0 0 [ 2436.205538] page allocation failure: order:0 [ 2436.207144] Node 0 [ 2436.228103] Node 0 [ 2436.230969] DMA: [ 2436.243156] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2436.243584] 2*4kB [ 2436.248892] (null) [ 2436.253217] (UE) [ 2436.288289] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2436.320312] 2*8kB [ 2436.365877] syz-executor.3 cpuset= [ 2436.380947] (UE) [ 2436.420396] lowmem_reserve[]: [ 2436.445677] 8*16kB [ 2436.482784] / [ 2436.490658] (UE) [ 2436.500115] mems_allowed=0-1 [ 2436.502965] 8*32kB [ 2436.504544] CPU: 0 PID: 28653 Comm: syz-executor.3 Not tainted 4.14.224-syzkaller #0 [ 2436.505327] (UE) [ 2436.532037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2436.532040] Call Trace: [ 2436.532056] dump_stack+0x1b2/0x281 [ 2436.532069] warn_alloc.cold+0x96/0x1cc [ 2436.532079] ? zone_watermark_ok_safe+0x220/0x220 [ 2436.532087] ? usleep_range+0x130/0x130 [ 2436.532095] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2436.532106] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2436.532116] ? run_timer_softirq+0x5a0/0x5a0 [ 2436.532129] __alloc_pages_nodemask+0x2127/0x2720 [ 2436.532144] ? lock_acquire+0x170/0x3f0 [ 2436.532157] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2436.532167] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2436.532181] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2436.539573] 0 [ 2436.539975] ? __list_del_entry_valid+0xb3/0xf0 [ 2436.539987] alloc_pages_current+0x155/0x260 [ 2436.540001] ion_page_pool_alloc+0x118/0x1b0 [ 2436.540012] ion_system_heap_allocate+0x133/0x8c0 [ 2436.543123] 0 [ 2436.545365] ? _raw_spin_unlock+0x29/0x40 [ 2436.547137] 0 [ 2436.549186] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2436.557437] 0 [ 2436.562437] ? ion_system_contig_heap_create+0x130/0x130 [ 2436.562448] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2436.562458] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2436.562468] ion_alloc+0x27a/0x810 [ 2436.562482] ? ion_dma_buf_release+0x40/0x40 [ 2436.564520] 0 [ 2436.573862] ? __might_fault+0x177/0x1b0 [ 2436.573873] ion_ioctl+0xea/0x1f0 [ 2436.573883] ? ion_query_heaps+0x360/0x360 [ 2436.573894] ? SyS_epoll_ctl+0x1e0/0x2780 [ 2436.573903] ? ion_query_heaps+0x360/0x360 [ 2436.573913] do_vfs_ioctl+0x75a/0xff0 [ 2436.573924] ? ioctl_preallocate+0x1a0/0x1a0 [ 2436.573931] ? lock_downgrade+0x740/0x740 [ 2436.573944] ? __fget+0x225/0x360 [ 2436.573952] ? do_vfs_ioctl+0xff0/0xff0 [ 2436.573963] ? security_file_ioctl+0x83/0xb0 [ 2436.582316] 17*64kB [ 2436.584235] SyS_ioctl+0x7f/0xb0 [ 2436.589050] (UE) [ 2436.593023] ? do_vfs_ioctl+0xff0/0xff0 [ 2436.593035] do_syscall_64+0x1d5/0x640 [ 2436.593051] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2436.593059] RIP: 0033:0x465f69 [ 2436.593064] RSP: 002b:00007fac75d57188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2436.593073] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2436.593078] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2436.593085] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2436.599320] 2*128kB [ 2436.603182] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2436.603188] R13: 00007fffe794c28f R14: 00007fac75d57300 R15: 0000000000022000 [ 2436.707234] (UE) [ 2436.749643] Node 1 [ 2436.751788] 2*256kB [ 2436.755206] Normal free:87924kB min:53696kB low:67120kB high:80544kB active_anon:204kB inactive_anon:13972kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:0kB bounce:0kB free_pcp:220kB local_pcp:120kB free_cma:0kB [ 2436.755209] lowmem_reserve[]: 0 0 0 0 0 [ 2436.755228] Node 0 DMA: 2*4kB (UE) 1*8kB (E) 1*16kB (E) 1*32kB (E) 12*64kB (UE) 2*128kB (UE) 3*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11072kB [ 2436.755292] Node 0 DMA32: 165*4kB (ME) 172*8kB (UME) 118*16kB (UE) 21*32kB (E) 1683*64kB [ 2436.761038] (UE) [ 2436.812958] (UE) [ 2436.815827] 3*512kB [ 2436.827683] 181*128kB [ 2436.902887] (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10968kB [ 2436.931481] Node 0 DMA32: 165*4kB (ME) 256*8kB (UME) 124*16kB (UME) 22*32kB (ME) 4264*64kB (UE) 179*128kB (U) 21*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 306580kB [ 2436.971959] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2436.991565] Node 1 Normal: 13*4kB (UME) 4*8kB (UME) 4*16kB (UME) 5*32kB (ME) 5280*64kB (UME) 511*128kB (UM) 196*256kB (UM) 51*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 479924kB [ 2437.009937] (U) 28*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 142644kB [ 2437.017000] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2437.033214] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2437.060284] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2437.069007] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2437.069635] Node 1 Normal: 13*4kB (UME) 4*8kB (UME) 4*16kB (UME) 5*32kB [ 2437.086840] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2437.099615] (ME) 5743*64kB (UME) 964*128kB (UM) 308*256kB (UM) 173*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 658676kB [ 2437.106164] 39900 total pagecache pages [ 2437.118724] 0 pages in swap cache [ 2437.127269] Swap cache stats: add 0, delete 0, find 0/0 [ 2437.127368] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2437.133594] Free swap = 0kB [ 2437.159613] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2437.163388] Total swap = 0kB [ 2437.168333] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2437.183359] 2097051 pages RAM [ 2437.186472] 0 pages HighMem/MovableOnly [ 2437.189623] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2437.199167] 39800 total pagecache pages [ 2437.203325] 0 pages in swap cache [ 2437.203535] 363840 pages reserved [ 2437.206766] Swap cache stats: add 0, delete 0, find 0/0 [ 2437.219683] Free swap = 0kB [ 2437.222704] Total swap = 0kB [ 2437.224123] 0 pages cma reserved [ 2437.225707] 2097051 pages RAM [ 2437.249657] 0 pages HighMem/MovableOnly [ 2437.253642] 363840 pages reserved [ 2437.257077] 0 pages cma reserved [ 2437.269716] Out of memory (oom_kill_allocating_task): Kill process 22248 (syz-executor.5) score 0 or sacrifice child [ 2437.290155] Killed process 22248 (syz-executor.5) total-vm:93120kB, anon-rss:108kB, file-rss:34820kB, shmem-rss:0kB [ 2437.314768] oom_reaper: reaped process 22248 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 00:42:44 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nvram\x00', 0x0, 0x0) r0 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r0, &(0x7f0000000400)={0x2020}, 0x2020) 00:42:44 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x484240, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)={0x101, 0x1, 0x4, 0x400, 0xffff, {0x0, 0x2710}, {0x1, 0x2, 0x8, 0x2, 0x7, 0x1, "db53d254"}, 0x8, 0x4, @fd=r1, 0x4, 0x0, r1}) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x8) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x7fffffff, 0x1e, 0x1}) 00:42:44 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x484240, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)={0x101, 0x1, 0x4, 0x400, 0xffff, {0x0, 0x2710}, {0x1, 0x2, 0x8, 0x2, 0x7, 0x1, "db53d254"}, 0x8, 0x4, @fd=r1, 0x4, 0x0, r1}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x4, 0x90040) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x7fffffff, 0x1e, 0x1}) 00:42:44 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nvram\x00', 0x0, 0x0) r0 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r0, &(0x7f0000000400)={0x2020}, 0x2020) [ 2437.848726] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2437.877106] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2437.886569] CPU: 1 PID: 28669 Comm: syz-executor.1 Not tainted 4.14.224-syzkaller #0 [ 2437.894468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2437.903832] Call Trace: [ 2437.906433] dump_stack+0x1b2/0x281 [ 2437.910048] warn_alloc.cold+0x96/0x1cc [ 2437.914009] ? zone_watermark_ok_safe+0x220/0x220 [ 2437.918849] __alloc_pages_nodemask+0x2127/0x2720 [ 2437.923681] ? lock_acquire+0x170/0x3f0 [ 2437.927642] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2437.932476] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2437.937913] ? __mutex_unlock_slowpath+0x75/0x770 [ 2437.942742] alloc_pages_current+0x155/0x260 [ 2437.947139] ion_page_pool_alloc+0x118/0x1b0 [ 2437.951533] ion_system_heap_allocate+0x133/0x8c0 [ 2437.956360] ? ion_alloc+0x187/0x810 [ 2437.960055] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2437.965495] ? ion_system_contig_heap_create+0x130/0x130 [ 2437.970932] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2437.976020] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2437.980848] ion_alloc+0x204/0x810 [ 2437.984394] ? ion_dma_buf_release+0x40/0x40 [ 2437.988793] ? __might_fault+0x177/0x1b0 [ 2437.992844] ion_ioctl+0xea/0x1f0 [ 2437.996285] ? ion_query_heaps+0x360/0x360 [ 2438.000518] ? ion_query_heaps+0x360/0x360 [ 2438.004738] do_vfs_ioctl+0x75a/0xff0 [ 2438.009155] ? ioctl_preallocate+0x1a0/0x1a0 [ 2438.013636] ? lock_downgrade+0x740/0x740 [ 2438.017787] ? __fget+0x225/0x360 [ 2438.021259] ? do_vfs_ioctl+0xff0/0xff0 [ 2438.025221] ? security_file_ioctl+0x83/0xb0 [ 2438.029617] SyS_ioctl+0x7f/0xb0 [ 2438.032967] ? do_vfs_ioctl+0xff0/0xff0 [ 2438.037364] do_syscall_64+0x1d5/0x640 [ 2438.041246] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2438.046420] RIP: 0033:0x465f69 [ 2438.050115] RSP: 002b:00007f66274e4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2438.057809] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2438.065089] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2438.072344] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2438.079603] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2438.086873] R13: 00007ffeea3ca95f R14: 00007f66274e4300 R15: 0000000000022000 [ 2438.103312] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2438.127826] oom_reaper: reaped process 28652 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2438.145777] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2438.150709] oom_reaper: reaped process 28651 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2438.151030] CPU: 0 PID: 28667 Comm: syz-executor.3 Not tainted 4.14.224-syzkaller #0 [ 2438.168909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2438.178267] Call Trace: [ 2438.180879] dump_stack+0x1b2/0x281 [ 2438.184519] warn_alloc.cold+0x96/0x1cc [ 2438.188507] ? zone_watermark_ok_safe+0x220/0x220 [ 2438.193376] __alloc_pages_nodemask+0x2127/0x2720 [ 2438.198222] ? retint_kernel+0x2d/0x2d [ 2438.202111] ? lock_acquire+0x170/0x3f0 [ 2438.206106] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2438.210939] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2438.216381] ? __mutex_unlock_slowpath+0x75/0x770 [ 2438.221300] ? retint_kernel+0x2d/0x2d [ 2438.225179] alloc_pages_current+0x155/0x260 [ 2438.229671] ion_page_pool_alloc+0x118/0x1b0 [ 2438.234069] ion_system_heap_allocate+0x133/0x8c0 [ 2438.238899] ? ion_alloc+0x187/0x810 [ 2438.242613] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2438.248091] ? ion_system_contig_heap_create+0x130/0x130 [ 2438.253620] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2438.258623] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2438.263463] ion_alloc+0x204/0x810 [ 2438.267006] ? ion_dma_buf_release+0x40/0x40 [ 2438.271416] ? __might_fault+0x177/0x1b0 [ 2438.275465] ion_ioctl+0xea/0x1f0 [ 2438.278903] ? ion_query_heaps+0x360/0x360 [ 2438.283124] ? SyS_epoll_ctl+0x1e0/0x2780 [ 2438.287258] ? ion_query_heaps+0x360/0x360 [ 2438.291481] do_vfs_ioctl+0x75a/0xff0 [ 2438.295267] ? ioctl_preallocate+0x1a0/0x1a0 [ 2438.299660] ? lock_downgrade+0x740/0x740 [ 2438.303795] ? __fget+0x225/0x360 [ 2438.307232] ? do_vfs_ioctl+0xff0/0xff0 [ 2438.311191] ? security_file_ioctl+0x83/0xb0 [ 2438.315584] SyS_ioctl+0x7f/0xb0 [ 2438.318933] ? do_vfs_ioctl+0xff0/0xff0 [ 2438.322891] do_syscall_64+0x1d5/0x640 [ 2438.326774] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2438.331948] RIP: 0033:0x465f69 [ 2438.335139] RSP: 002b:00007fac75d57188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2438.342852] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2438.350125] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2438.357398] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2438.364655] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2438.371910] R13: 00007fffe794c28f R14: 00007fac75d57300 R15: 0000000000022000 [ 2438.385026] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2438.416627] warn_alloc_show_mem: 1 callbacks suppressed [ 2438.416632] Mem-Info: [ 2438.433022] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2438.438184] CPU: 0 PID: 28664 Comm: syz-executor.5 Not tainted 4.14.224-syzkaller #0 [ 2438.446073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2438.449546] active_anon:20861 inactive_anon:35158 isolated_anon:0 [ 2438.449546] active_file:20 inactive_file:13 isolated_file:13 [ 2438.449546] unevictable:0 dirty:13 writeback:4 unstable:0 [ 2438.449546] slab_reclaimable:12552 slab_unreclaimable:116303 [ 2438.449546] mapped:52830 shmem:37651 pagetables:797 bounce:0 [ 2438.449546] free:13915 free_pcp:0 free_cma:0 [ 2438.455441] Call Trace: [ 2438.491247] dump_stack+0x1b2/0x281 [ 2438.494879] warn_alloc.cold+0x96/0x1cc [ 2438.498877] ? zone_watermark_ok_safe+0x220/0x220 [ 2438.501626] Node 0 active_anon:83240kB inactive_anon:126660kB active_file:72kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):52kB mapped:211300kB dirty:44kB writeback:16kB shmem:136504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2438.507811] __alloc_pages_nodemask+0x2127/0x2720 [ 2438.540665] ? _raw_spin_unlock_irq+0x24/0x80 [ 2438.541913] Node 1 active_anon:204kB inactive_anon:13972kB active_file:8kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:20kB dirty:8kB writeback:0kB shmem:14100kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2438.545161] ? lock_acquire+0x170/0x3f0 [ 2438.575706] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:16kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2438.575836] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2438.575855] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2438.606344] lowmem_reserve[]: [ 2438.607040] ? __mutex_unlock_slowpath+0x75/0x770 [ 2438.612523] 0 [ 2438.615584] alloc_pages_current+0x155/0x260 [ 2438.626246] 2717 2718 2718 [ 2438.626597] ion_page_pool_alloc+0x118/0x1b0 [ 2438.626609] ion_system_heap_allocate+0x133/0x8c0 [ 2438.629554] 2718 [ 2438.633919] ? _raw_spin_unlock+0x29/0x40 [ 2438.640785] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2438.640796] ? ion_system_contig_heap_create+0x130/0x130 [ 2438.640807] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2438.640818] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2438.640830] ion_alloc+0x27a/0x810 [ 2438.640847] ? ion_dma_buf_release+0x40/0x40 [ 2438.640860] ? __might_fault+0x177/0x1b0 [ 2438.640873] ion_ioctl+0xea/0x1f0 [ 2438.640882] ? ion_query_heaps+0x360/0x360 [ 2438.640896] ? ion_query_heaps+0x360/0x360 [ 2438.640906] do_vfs_ioctl+0x75a/0xff0 [ 2438.648755] Node 0 [ 2438.649981] ? ioctl_preallocate+0x1a0/0x1a0 [ 2438.649991] ? lock_downgrade+0x740/0x740 [ 2438.650006] ? __fget+0x225/0x360 [ 2438.655454] DMA32 free:17856kB min:36200kB low:45248kB high:54296kB active_anon:83424kB inactive_anon:126660kB active_file:72kB inactive_file:56kB unevictable:0kB writepending:60kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7712kB pagetables:3188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2438.660442] ? do_vfs_ioctl+0xff0/0xff0 [ 2438.660454] ? security_file_ioctl+0x83/0xb0 [ 2438.660464] SyS_ioctl+0x7f/0xb0 [ 2438.660471] ? do_vfs_ioctl+0xff0/0xff0 [ 2438.660481] do_syscall_64+0x1d5/0x640 [ 2438.660498] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2438.660506] RIP: 0033:0x465f69 [ 2438.660511] RSP: 002b:00007f667228e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2438.660527] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2438.660533] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2438.660537] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2438.660543] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2438.660549] R13: 00007ffe161935ef R14: 00007f667228e300 R15: 0000000000022000 [ 2438.814054] lowmem_reserve[]: 0 0 0 0 0 [ 2438.818066] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2438.853721] lowmem_reserve[]: 0 0 0 0 0 [ 2438.857751] Node 1 Normal free:26964kB min:53696kB low:67120kB high:80544kB active_anon:204kB inactive_anon:13972kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2438.889782] lowmem_reserve[]: 0 0 0 0 0 [ 2438.893807] Node 0 DMA: 4*4kB (UME) 2*8kB (ME) 3*16kB (ME) 4*32kB (UME) 8*64kB (UME) 4*128kB (UME) 2*256kB (UE) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10960kB [ 2438.921829] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2438.949535] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2438.949778] Node 0 DMA32: 666*4kB (UME) 343*8kB (UME) 185*16kB (UME) [ 2438.954362] CPU: 1 PID: 7979 Comm: syz-fuzzer Not tainted 4.14.224-syzkaller #0 [ 2438.954369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2438.974514] 40*32kB [ 2438.977696] Call Trace: [ 2438.977697] (ME) 6*64kB [ 2438.980015] dump_stack+0x1b2/0x281 [ 2438.980028] dump_header+0x178/0x82f [ 2438.982594] (UME) [ 2438.985250] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2438.988843] 18*128kB (U) [ 2438.992541] ? ___ratelimit+0x2cd/0x530 [ 2438.992551] oom_kill_process.cold+0x10/0xb18 [ 2438.992566] out_of_memory+0xe3e/0x1190 [ 2438.992579] ? oom_killer_disable+0x1c0/0x1c0 [ 2438.994699] 21*256kB [ 2438.999783] ? mutex_trylock+0x152/0x1a0 [ 2438.999794] __alloc_pages_nodemask+0x23e1/0x2720 [ 2438.999813] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2439.002540] (U) [ 2439.006511] alloc_pages_current+0x155/0x260 [ 2439.011073] 0*512kB [ 2439.015017] filemap_fault+0xea3/0x1980 [ 2439.019524] 0*1024kB [ 2439.021931] ext4_filemap_fault+0x84/0xb0 [ 2439.025954] 0*2048kB 0*4096kB [ 2439.030783] __do_fault+0xfa/0x380 [ 2439.030792] __handle_mm_fault+0x2497/0x4620 [ 2439.030802] ? vm_insert_page+0x7c0/0x7c0 [ 2439.035615] = 17712kB [ 2439.037578] ? lock_downgrade+0x740/0x740 [ 2439.041971] Node 0 [ 2439.044273] handle_mm_fault+0x391/0x860 [ 2439.048218] Normal: [ 2439.050613] __do_page_fault+0x549/0xad0 [ 2439.050623] ? spurious_fault+0x640/0x640 [ 2439.050632] ? do_page_fault+0x60/0x500 [ 2439.054771] 0*4kB [ 2439.057961] ? page_fault+0x2f/0x50 [ 2439.061508] 0*8kB [ 2439.065885] page_fault+0x45/0x50 [ 2439.070020] 0*16kB [ 2439.072397] RIP: 0000:0x93f060 [ 2439.076519] 0*32kB [ 2439.078733] RSP: 2e000:000000c00003dec8 EFLAGS: 0043b6a0 [ 2439.080908] syz-executor.4: [ 2439.082968] syz-executor.2: [ 2439.085090] page allocation failure: order:0 [ 2439.089127] page allocation failure: order:0 [ 2439.093822] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2439.099455] syz-executor.5: [ 2439.107284] (null) [ 2439.108559] page allocation failure: order:0 [ 2439.110873] syz-executor.4 cpuset= [ 2439.129424] 0*64kB [ 2439.134054] / [ 2439.136549] 0*128kB [ 2439.143663] mems_allowed=0-1 [ 2439.143676] CPU: 1 PID: 28652 Comm: syz-executor.4 Not tainted 4.14.224-syzkaller #0 [ 2439.143681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2439.143685] Call Trace: [ 2439.143702] dump_stack+0x1b2/0x281 [ 2439.143716] warn_alloc.cold+0x96/0x1cc [ 2439.143729] ? zone_watermark_ok_safe+0x220/0x220 [ 2439.143738] ? usleep_range+0x130/0x130 [ 2439.143747] ? try_to_free_pages+0x23f/0x6e0 [ 2439.143756] ? _find_next_bit+0xdb/0x100 [ 2439.143766] ? run_timer_softirq+0x5a0/0x5a0 [ 2439.143782] __alloc_pages_nodemask+0x2127/0x2720 [ 2439.161917] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2439.163067] ? lock_acquire+0x170/0x3f0 [ 2439.166139] (null) [ 2439.174007] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2439.174019] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2439.174059] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2439.183413] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2439.185961] alloc_pages_current+0x155/0x260 [ 2439.189574] (null) [ 2439.193519] ion_page_pool_alloc+0x118/0x1b0 [ 2439.198329] syz-executor.2 cpuset= [ 2439.202287] ion_system_heap_allocate+0x133/0x8c0 [ 2439.202298] ? ion_alloc+0x187/0x810 [ 2439.202310] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2439.206701] 0*256kB [ 2439.210733] ? ion_system_contig_heap_create+0x130/0x130 [ 2439.210742] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2439.210754] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2439.215136] 0*512kB [ 2439.219961] ion_alloc+0x204/0x810 [ 2439.219978] ? ion_dma_buf_release+0x40/0x40 [ 2439.227060] syz-executor.5 cpuset= [ 2439.231019] ? __might_fault+0x177/0x1b0 [ 2439.231038] ion_ioctl+0xea/0x1f0 [ 2439.233159] / [ 2439.237984] ? ion_query_heaps+0x360/0x360 [ 2439.242476] / [ 2439.247887] ? ion_query_heaps+0x360/0x360 [ 2439.254984] 0*1024kB [ 2439.259356] do_vfs_ioctl+0x75a/0xff0 [ 2439.261498] 0*2048kB [ 2439.265876] ? ioctl_preallocate+0x1a0/0x1a0 [ 2439.269405] mems_allowed=0-1 [ 2439.274216] ? lock_downgrade+0x740/0x740 [ 2439.279391] mems_allowed=0-1 [ 2439.283339] ? __fget+0x225/0x360 [ 2439.289391] 0*4096kB [ 2439.291060] ? do_vfs_ioctl+0xff0/0xff0 [ 2439.296048] = 0kB [ 2439.300873] ? security_file_ioctl+0x83/0xb0 [ 2439.300884] SyS_ioctl+0x7f/0xb0 [ 2439.300892] ? do_vfs_ioctl+0xff0/0xff0 [ 2439.329384] Node 1 [ 2439.329767] do_syscall_64+0x1d5/0x640 [ 2439.333974] Normal: [ 2439.336377] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2439.369383] 12*4kB [ 2439.373479] RIP: 0033:0x465f69 [ 2439.376819] (ME) [ 2439.380785] RSP: 002b:00007efebc25a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2439.380795] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2439.380800] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2439.380807] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2439.409378] 4*8kB [ 2439.409699] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2439.416948] (UME) [ 2439.424198] R13: 00007fffe753495f R14: 00007efebc25a300 R15: 0000000000022000 [ 2439.427970] Mem-Info: [ 2439.448318] CPU: 0 PID: 28651 Comm: syz-executor.2 Not tainted 4.14.224-syzkaller #0 [ 2439.452332] active_anon:20861 inactive_anon:35158 isolated_anon:0 [ 2439.452332] active_file:11 inactive_file:13 isolated_file:0 [ 2439.452332] unevictable:0 dirty:2 writeback:1 unstable:0 [ 2439.452332] slab_reclaimable:12552 slab_unreclaimable:115363 [ 2439.452332] mapped:52817 shmem:37651 pagetables:797 bounce:0 [ 2439.452332] free:13895 free_pcp:30 free_cma:0 [ 2439.452816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2439.460981] Node 0 active_anon:83240kB inactive_anon:126660kB active_file:40kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211268kB dirty:0kB writeback:4kB shmem:136504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2439.493808] Call Trace: [ 2439.493828] dump_stack+0x1b2/0x281 [ 2439.493841] warn_alloc.cold+0x96/0x1cc [ 2439.493852] ? zone_watermark_ok_safe+0x220/0x220 [ 2439.493861] ? usleep_range+0x130/0x130 [ 2439.493870] ? try_to_free_pages+0x23f/0x6e0 [ 2439.493880] ? _find_next_bit+0xdb/0x100 [ 2439.493890] ? run_timer_softirq+0x5a0/0x5a0 [ 2439.493904] __alloc_pages_nodemask+0x2127/0x2720 [ 2439.493918] ? lock_acquire+0x170/0x3f0 [ 2439.493935] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2439.521408] Node 1 active_anon:204kB inactive_anon:13972kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:14100kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2439.531121] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2439.531138] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2439.531156] alloc_pages_current+0x155/0x260 [ 2439.531170] ion_page_pool_alloc+0x118/0x1b0 [ 2439.549919] Node 0 [ 2439.550082] ion_system_heap_allocate+0x133/0x8c0 [ 2439.554474] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:16kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2439.558508] ? ion_alloc+0x187/0x810 [ 2439.581269] lowmem_reserve[]: [ 2439.603116] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2439.603129] ? ion_system_contig_heap_create+0x130/0x130 [ 2439.603139] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2439.603150] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2439.603161] ion_alloc+0x204/0x810 [ 2439.603177] ? ion_dma_buf_release+0x40/0x40 [ 2439.603188] ? __might_fault+0x177/0x1b0 [ 2439.631242] 0 [ 2439.654579] ion_ioctl+0xea/0x1f0 [ 2439.654591] ? ion_query_heaps+0x360/0x360 [ 2439.654603] ? ion_query_heaps+0x360/0x360 [ 2439.654613] do_vfs_ioctl+0x75a/0xff0 [ 2439.654624] ? ioctl_preallocate+0x1a0/0x1a0 [ 2439.654633] ? lock_downgrade+0x740/0x740 [ 2439.654645] ? __fget+0x225/0x360 [ 2439.654654] ? do_vfs_ioctl+0xff0/0xff0 [ 2439.681757] 2717 [ 2439.682128] ? security_file_ioctl+0x83/0xb0 [ 2439.685640] 2718 2718 [ 2439.690036] SyS_ioctl+0x7f/0xb0 [ 2439.690045] ? do_vfs_ioctl+0xff0/0xff0 [ 2439.690056] do_syscall_64+0x1d5/0x640 [ 2439.690072] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2439.690080] RIP: 0033:0x465f69 [ 2439.690085] RSP: 002b:00007f5aa2526188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2439.690093] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2439.690098] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2439.690105] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2439.709427] 2718 [ 2439.711532] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2439.720037] R13: 00007fffc975a7ef R14: 00007f5aa2526300 R15: 0000000000022000 [ 2439.741280] 4*16kB [ 2439.745700] CPU: 1 PID: 28664 Comm: syz-executor.5 Not tainted 4.14.224-syzkaller #0 [ 2439.747640] (UME) [ 2439.752809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2439.752813] Call Trace: [ 2439.752832] dump_stack+0x1b2/0x281 [ 2439.752846] warn_alloc.cold+0x96/0x1cc [ 2439.752857] ? zone_watermark_ok_safe+0x220/0x220 [ 2439.752866] ? usleep_range+0x130/0x130 [ 2439.752874] ? try_to_free_pages+0x23f/0x6e0 [ 2439.752884] ? _find_next_bit+0xdb/0x100 [ 2439.752895] ? run_timer_softirq+0x5a0/0x5a0 [ 2439.752911] __alloc_pages_nodemask+0x2127/0x2720 [ 2439.761245] 6*32kB [ 2439.763773] ? lock_acquire+0x170/0x3f0 [ 2439.771037] (UME) [ 2439.778275] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2439.785538] 6*64kB [ 2439.787574] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2439.794833] (UME) [ 2439.802079] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2439.802098] alloc_pages_current+0x155/0x260 [ 2439.804302] 2*128kB [ 2439.812164] ion_page_pool_alloc+0x118/0x1b0 [ 2439.812175] ion_system_heap_allocate+0x133/0x8c0 [ 2439.812186] ? _raw_spin_unlock+0x29/0x40 [ 2439.814312] (M) [ 2439.823820] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2439.823831] ? ion_system_contig_heap_create+0x130/0x130 [ 2439.823844] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2439.826398] 3*256kB [ 2439.830004] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2439.830015] ion_alloc+0x27a/0x810 [ 2439.830029] ? ion_dma_buf_release+0x40/0x40 [ 2439.833971] (UM) [ 2439.838793] ? __might_fault+0x177/0x1b0 [ 2439.842753] 49*512kB [ 2439.847227] ion_ioctl+0xea/0x1f0 [ 2439.851273] (UM) [ 2439.855648] ? ion_query_heaps+0x360/0x360 [ 2439.860501] 0*1024kB [ 2439.862709] ? ion_query_heaps+0x360/0x360 [ 2439.866756] 0*2048kB [ 2439.868886] do_vfs_ioctl+0x75a/0xff0 [ 2439.873717] 0*4096kB [ 2439.875922] ? ioctl_preallocate+0x1a0/0x1a0 [ 2439.880405] = 26832kB [ 2439.882523] ? lock_downgrade+0x740/0x740 [ 2439.887946] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2439.892332] ? __fget+0x225/0x360 [ 2439.892342] ? do_vfs_ioctl+0xff0/0xff0 [ 2439.892353] ? security_file_ioctl+0x83/0xb0 [ 2439.894686] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2439.899070] SyS_ioctl+0x7f/0xb0 [ 2439.903907] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2439.908013] ? do_vfs_ioctl+0xff0/0xff0 [ 2439.909981] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2439.914872] do_syscall_64+0x1d5/0x640 [ 2439.920310] 37675 total pagecache pages [ 2439.925297] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2439.927593] 0 pages in swap cache [ 2439.932408] RIP: 0033:0x465f69 [ 2439.932413] RSP: 002b:00007f667228e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2439.932422] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2439.932429] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2439.935943] Swap cache stats: add 0, delete 0, find 0/0 [ 2439.940324] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2439.940330] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2439.940335] R13: 00007ffe161935ef R14: 00007f667228e300 R15: 0000000000022000 [ 2439.944911] Node 0 [ 2439.946448] Free swap = 0kB [ 2439.948850] DMA32 free:17928kB min:36200kB low:45248kB high:54296kB active_anon:83224kB inactive_anon:126660kB active_file:28kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7712kB pagetables:3188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2439.969079] Total swap = 0kB [ 2439.972698] lowmem_reserve[]: [ 2439.977229] 2097051 pages RAM [ 2439.978296] 0 [ 2439.987386] 0 pages HighMem/MovableOnly [ 2439.994037] warn_alloc_show_mem: 2 callbacks suppressed [ 2439.994040] Mem-Info: [ 2439.997405] 363840 pages reserved [ 2440.001414] active_anon:20861 inactive_anon:35158 isolated_anon:0 [ 2440.001414] active_file:11 inactive_file:10 isolated_file:2 [ 2440.001414] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2440.001414] slab_reclaimable:12532 slab_unreclaimable:115357 [ 2440.001414] mapped:52817 shmem:37651 pagetables:797 bounce:0 [ 2440.001414] free:13876 free_pcp:30 free_cma:0 [ 2440.001429] Node 0 active_anon:83240kB inactive_anon:126660kB active_file:40kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):8kB mapped:211268kB dirty:0kB writeback:0kB shmem:136504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2440.001442] Node 1 active_anon:204kB inactive_anon:13972kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:14100kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2440.001446] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:16kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2440.001465] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2440.009229] 0 pages cma reserved [ 2440.014477] 0 [ 2440.294110] Node 0 DMA32 free:143404kB min:36200kB low:45248kB high:54296kB active_anon:83224kB inactive_anon:126660kB active_file:40kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7712kB pagetables:3188kB bounce:0kB free_pcp:676kB local_pcp:0kB free_cma:0kB [ 2440.369361] lowmem_reserve[]: 0 0 0 0 0 [ 2440.413288] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2440.483292] lowmem_reserve[]: 0 0 0 0 0 [ 2440.487440] Node 1 Normal free:533200kB min:53696kB low:67120kB high:80544kB active_anon:204kB inactive_anon:13972kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:0kB bounce:0kB free_pcp:124kB local_pcp:0kB free_cma:0kB [ 2440.569984] lowmem_reserve[]: 0 0 0 0 0 [ 2440.573990] Node 0 DMA: 16*4kB (UME) 2*8kB (ME) 3*16kB (ME) 4*32kB (UME) 13*64kB (UME) 4*128kB (UME) 2*256kB (UE) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11328kB [ 2440.596970] Node 0 DMA32: 13733*4kB (UME) 6325*8kB (UME) 7091*16kB (UME) 4215*32kB (UME) 2060*64kB (UME) 500*128kB (U) 29*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 557132kB [ 2440.619340] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2440.679322] Node 1 Normal: 344*4kB (UME) 264*8kB (UME) 304*16kB (UME) 282*32kB (UME) 8748*64kB (UME) 935*128kB (UM) 279*256kB (UM) 110*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 824672kB [ 2440.709350] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2440.718228] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2440.779480] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2440.788337] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2440.809316] 37674 total pagecache pages [ 2440.813355] 0 pages in swap cache [ 2440.817072] Swap cache stats: add 0, delete 0, find 0/0 [ 2440.830423] Free swap = 0kB [ 2440.833462] Total swap = 0kB [ 2440.849316] 2097051 pages RAM [ 2440.852440] 0 pages HighMem/MovableOnly [ 2440.856400] 363840 pages reserved [ 2440.879284] 0 pages cma reserved [ 2441.012684] 0 0 0 [ 2441.014889] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2441.052265] lowmem_reserve[]: 0 0 0 0 0 [ 2441.056328] Node 1 Normal free:1056960kB min:53696kB low:67120kB high:80544kB active_anon:204kB inactive_anon:13972kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:0kB bounce:0kB free_pcp:1448kB local_pcp:716kB free_cma:0kB [ 2441.112091] lowmem_reserve[]: 0 0 0 0 0 [ 2441.116128] Node 0 DMA: 27*4kB (UME) 4*8kB (UME) 15*16kB (UME) 12*32kB (UME) 4*64kB (UME) 3*128kB (ME) 2*256kB (UE) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11132kB [ 2441.142075] Node 0 DMA32: 36642*4kB (UME) 11408*8kB (UME) 7741*16kB (UME) 5466*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 536600kB [ 2441.156633] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2441.212416] Node 1 Normal: 6358*4kB (UME) 655*8kB (UME) 602*16kB (UME) 616*32kB (UME) 7759*64kB (UME) 1403*128kB (UM) 396*256kB (UM) 115*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 896432kB [ 2441.239295] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2441.248158] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2441.256794] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2441.265732] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2441.277713] 37674 total pagecache pages [ 2441.281768] 0 pages in swap cache [ 2441.285223] Swap cache stats: add 0, delete 0, find 0/0 [ 2441.294457] Free swap = 0kB [ 2441.297482] Total swap = 0kB [ 2441.342095] 2097051 pages RAM [ 2441.345239] 0 pages HighMem/MovableOnly [ 2441.349374] 363840 pages reserved [ 2441.352815] 0 pages cma reserved [ 2441.356175] Out of memory (oom_kill_allocating_task): Kill process 7979 (syz-fuzzer) score 0 or sacrifice child [ 2441.384240] Killed process 28161 (syz-executor.4) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 2441.457633] oom_reaper: reaped process 28161 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2441.898672] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2441.931626] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2441.946900] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2441.960985] CPU: 1 PID: 28652 Comm: syz-executor.4 Not tainted 4.14.224-syzkaller #0 [ 2441.968892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2441.978248] Call Trace: [ 2441.980838] dump_stack+0x1b2/0x281 [ 2441.984467] warn_alloc.cold+0x96/0x1cc [ 2441.988441] ? zone_watermark_ok_safe+0x220/0x220 [ 2441.989174] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2441.993286] __alloc_pages_nodemask+0x2127/0x2720 [ 2441.993298] ? _raw_spin_unlock_irq+0x24/0x80 [ 2442.007792] ? lock_acquire+0x170/0x3f0 [ 2442.011772] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2442.016626] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2442.022067] ? __mutex_unlock_slowpath+0x75/0x770 [ 2442.026891] alloc_pages_current+0x155/0x260 [ 2442.031293] ion_page_pool_alloc+0x118/0x1b0 [ 2442.035700] ion_system_heap_allocate+0x133/0x8c0 [ 2442.040538] ? _raw_spin_unlock+0x29/0x40 [ 2442.044679] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2442.049599] ? ion_system_contig_heap_create+0x130/0x130 [ 2442.055044] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2442.060045] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2442.064887] ion_alloc+0x27a/0x810 [ 2442.068423] ? ion_dma_buf_release+0x40/0x40 [ 2442.072832] ? __might_fault+0x177/0x1b0 [ 2442.076892] ion_ioctl+0xea/0x1f0 [ 2442.080335] ? ion_query_heaps+0x360/0x360 [ 2442.084550] ? ion_query_heaps+0x360/0x360 [ 2442.088765] do_vfs_ioctl+0x75a/0xff0 [ 2442.092557] ? ioctl_preallocate+0x1a0/0x1a0 [ 2442.096955] ? lock_downgrade+0x740/0x740 [ 2442.101099] ? __fget+0x225/0x360 [ 2442.104546] ? do_vfs_ioctl+0xff0/0xff0 [ 2442.108515] ? security_file_ioctl+0x83/0xb0 [ 2442.113103] SyS_ioctl+0x7f/0xb0 [ 2442.116448] ? do_vfs_ioctl+0xff0/0xff0 [ 2442.120411] do_syscall_64+0x1d5/0x640 [ 2442.124304] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2442.129488] RIP: 0033:0x465f69 [ 2442.132666] RSP: 002b:00007efebc25a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2442.140362] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2442.147611] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2442.154865] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2442.162124] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2442.169380] R13: 00007fffe753495f R14: 00007efebc25a300 R15: 0000000000022000 [ 2442.199196] CPU: 0 PID: 28651 Comm: syz-executor.2 Not tainted 4.14.224-syzkaller #0 [ 2442.207110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2442.216463] Call Trace: [ 2442.219055] dump_stack+0x1b2/0x281 [ 2442.222685] warn_alloc.cold+0x96/0x1cc [ 2442.226665] ? zone_watermark_ok_safe+0x220/0x220 [ 2442.231528] __alloc_pages_nodemask+0x2127/0x2720 [ 2442.236381] ? lock_acquire+0x170/0x3f0 [ 2442.240370] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2442.245220] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2442.250692] ? __mutex_unlock_slowpath+0x75/0x770 [ 2442.255548] alloc_pages_current+0x155/0x260 [ 2442.259963] ion_page_pool_alloc+0x118/0x1b0 [ 2442.264372] ion_system_heap_allocate+0x133/0x8c0 [ 2442.269218] ? _raw_spin_unlock+0x29/0x40 [ 2442.273375] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2442.278302] ? ion_system_contig_heap_create+0x130/0x130 [ 2442.283751] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2442.288767] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2442.293478] warn_alloc_show_mem: 2 callbacks suppressed [ 2442.293486] Mem-Info: [ 2442.293606] ion_alloc+0x27a/0x810 [ 2442.304884] ? ion_dma_buf_release+0x40/0x40 [ 2442.306801] active_anon:20830 inactive_anon:35155 isolated_anon:12 [ 2442.306801] active_file:1214 inactive_file:1333 isolated_file:12 [ 2442.306801] unevictable:0 dirty:16 writeback:0 unstable:0 [ 2442.306801] slab_reclaimable:12501 slab_unreclaimable:116932 [ 2442.306801] mapped:37249 shmem:37648 pagetables:741 bounce:0 [ 2442.306801] free:98920 free_pcp:162 free_cma:0 [ 2442.309289] ? __might_fault+0x177/0x1b0 [ 2442.309301] ion_ioctl+0xea/0x1f0 [ 2442.309311] ? ion_query_heaps+0x360/0x360 [ 2442.309323] ? ion_query_heaps+0x360/0x360 [ 2442.309333] do_vfs_ioctl+0x75a/0xff0 [ 2442.309345] ? ioctl_preallocate+0x1a0/0x1a0 [ 2442.309354] ? lock_downgrade+0x740/0x740 [ 2442.309366] ? __fget+0x225/0x360 [ 2442.309374] ? do_vfs_ioctl+0xff0/0xff0 [ 2442.309383] ? security_file_ioctl+0x83/0xb0 [ 2442.309392] SyS_ioctl+0x7f/0xb0 [ 2442.309399] ? do_vfs_ioctl+0xff0/0xff0 [ 2442.309420] do_syscall_64+0x1d5/0x640 [ 2442.394455] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2442.399641] RIP: 0033:0x465f69 [ 2442.402822] RSP: 002b:00007f5aa2526188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2442.410530] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2442.417795] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2442.425063] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2442.432337] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2442.439608] R13: 00007fffc975a7ef R14: 00007f5aa2526300 R15: 0000000000022000 [ 2442.446608] Node 0 active_anon:83220kB inactive_anon:126648kB active_file:5052kB inactive_file:6328kB unevictable:0kB isolated(anon):48kB isolated(file):48kB mapped:149496kB dirty:60kB writeback:0kB shmem:136492kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2442.524983] Node 1 active_anon:200kB inactive_anon:13972kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:14100kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2442.586990] Node 0 DMA free:10992kB min:204kB low:252kB high:300kB active_anon:16kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2442.618101] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2442.624238] Node 0 DMA32 free:83328kB min:36200kB low:45248kB high:54296kB active_anon:83272kB inactive_anon:126648kB active_file:5076kB inactive_file:6724kB unevictable:0kB writepending:160kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7680kB pagetables:2964kB bounce:0kB free_pcp:128kB local_pcp:20kB free_cma:0kB [ 2442.662094] lowmem_reserve[]: 0 0 0 0 0 [ 2442.680535] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2442.724840] syz-executor.1 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2442.766465] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2442.776704] CPU: 1 PID: 26605 Comm: syz-executor.1 Not tainted 4.14.224-syzkaller #0 [ 2442.784603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2442.793939] Call Trace: [ 2442.796517] dump_stack+0x1b2/0x281 [ 2442.800130] dump_header+0x178/0x82f [ 2442.803824] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2442.808906] ? ___ratelimit+0x2cd/0x530 [ 2442.812870] oom_kill_process.cold+0x10/0xb18 [ 2442.817349] out_of_memory+0xe3e/0x1190 [ 2442.821315] ? oom_killer_disable+0x1c0/0x1c0 [ 2442.825787] ? mutex_trylock+0x152/0x1a0 [ 2442.829826] __alloc_pages_nodemask+0x23e1/0x2720 [ 2442.834654] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2442.839486] alloc_pages_current+0x155/0x260 [ 2442.843874] filemap_fault+0xea3/0x1980 [ 2442.847832] ext4_filemap_fault+0x84/0xb0 [ 2442.851963] __do_fault+0xfa/0x380 [ 2442.855479] __handle_mm_fault+0x2497/0x4620 [ 2442.859955] ? vm_insert_page+0x7c0/0x7c0 [ 2442.864080] ? nanosleep_copyout+0x100/0x100 [ 2442.868473] handle_mm_fault+0x391/0x860 [ 2442.872512] __do_page_fault+0x549/0xad0 [ 2442.876553] ? spurious_fault+0x640/0x640 [ 2442.880678] ? do_page_fault+0x60/0x500 [ 2442.884632] ? page_fault+0x2f/0x50 [ 2442.888235] page_fault+0x45/0x50 [ 2442.891664] RIP: 2541a1:0x8 [ 2442.894569] RSP: 0015:00007ffeea3cac1c EFLAGS: 00000000 [ 2442.908585] lowmem_reserve[]: 0 0 0 0 0 [ 2442.922032] Node 1 Normal free:26824kB min:53696kB low:67120kB high:80544kB active_anon:188kB inactive_anon:13972kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:0kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 2442.958085] lowmem_reserve[]: 0 0 0 0 0 [ 2442.962159] Node 0 DMA: 11*4kB (UME) 16*8kB (UME) 15*16kB (UME) 10*32kB (UME) 4*64kB (UME) 4*128kB (UME) 1*256kB (E) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10972kB [ 2442.966685] Mem-Info: [ 2442.983662] Node 0 DMA32: 623*4kB (UME) 262*8kB (UME) 177*16kB (UME) 285*32kB (UME) 21*64kB (UM) 2*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18140kB [ 2443.004533] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2443.005458] active_anon:20911 inactive_anon:35156 isolated_anon:0 [ 2443.005458] active_file:26 inactive_file:1 isolated_file:0 [ 2443.005458] unevictable:0 dirty:12 writeback:0 unstable:0 [ 2443.005458] slab_reclaimable:12486 slab_unreclaimable:116081 [ 2443.005458] mapped:35491 shmem:37648 pagetables:728 bounce:0 [ 2443.005458] free:13829 free_pcp:31 free_cma:0 [ 2443.015310] Node 1 Normal: 6*4kB (M) 529*8kB (UM) 382*16kB (U) 514*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26816kB [ 2443.015374] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2443.015380] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2443.015386] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2443.015392] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2443.015396] 37688 total pagecache pages [ 2443.015408] 0 pages in swap cache [ 2443.015413] Swap cache stats: add 0, delete 0, find 0/0 [ 2443.015416] Free swap = 0kB [ 2443.015420] Total swap = 0kB [ 2443.015426] 2097051 pages RAM [ 2443.015429] 0 pages HighMem/MovableOnly [ 2443.015437] 363840 pages reserved [ 2443.015440] 0 pages cma reserved [ 2443.069116] syz-executor.4: [ 2443.104738] Node 0 active_anon:83456kB inactive_anon:126652kB active_file:100kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141964kB dirty:44kB writeback:0kB shmem:136492kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2443.113210] page allocation failure: order:0 [ 2443.133876] syz-executor.2: [ 2443.173104] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2443.183903] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2443.187133] Node 1 active_anon:188kB inactive_anon:13972kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:14100kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2443.189012] CPU: 1 PID: 28652 Comm: syz-executor.4 Not tainted 4.14.224-syzkaller #0 [ 2443.217049] page allocation failure: order:0 [ 2443.223400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2443.223404] Call Trace: [ 2443.223426] dump_stack+0x1b2/0x281 [ 2443.223442] warn_alloc.cold+0x96/0x1cc [ 2443.227831] Node 0 [ 2443.237162] ? zone_watermark_ok_safe+0x220/0x220 [ 2443.237171] ? usleep_range+0x130/0x130 [ 2443.237180] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2443.237192] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2443.239769] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2443.243358] ? run_timer_softirq+0x5a0/0x5a0 [ 2443.247306] (null) [ 2443.249530] __alloc_pages_nodemask+0x2127/0x2720 [ 2443.249546] ? lock_acquire+0x170/0x3f0 [ 2443.254388] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:16kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2443.258365] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2443.263467] syz-executor.2 cpuset= [ 2443.268444] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2443.275533] lowmem_reserve[]: [ 2443.280014] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2443.280033] alloc_pages_current+0x155/0x260 [ 2443.282149] 0 [ 2443.286975] ion_page_pool_alloc+0x118/0x1b0 [ 2443.290938] / [ 2443.316498] ion_system_heap_allocate+0x133/0x8c0 [ 2443.321343] 2717 [ 2443.324843] ? _raw_spin_unlock+0x29/0x40 [ 2443.329324] 2718 [ 2443.332408] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2443.337845] 2718 [ 2443.342233] ? ion_system_contig_heap_create+0x130/0x130 [ 2443.342242] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2443.342253] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2443.344028] 2718 [ 2443.348417] ion_alloc+0x27a/0x810 [ 2443.350129] mems_allowed=0-1 [ 2443.354930] ? ion_dma_buf_release+0x40/0x40 [ 2443.361088] ? __might_fault+0x177/0x1b0 [ 2443.363132] Node 0 [ 2443.368043] ion_ioctl+0xea/0x1f0 [ 2443.379035] DMA32 free:17528kB min:36200kB low:45248kB high:54296kB active_anon:83440kB inactive_anon:126652kB active_file:560kB inactive_file:128kB unevictable:0kB writepending:44kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7584kB pagetables:2912kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 2443.380500] ? ion_query_heaps+0x360/0x360 [ 2443.385312] lowmem_reserve[]: [ 2443.387358] ? ion_query_heaps+0x360/0x360 [ 2443.409023] 0 [ 2443.436376] do_vfs_ioctl+0x75a/0xff0 [ 2443.436390] ? ioctl_preallocate+0x1a0/0x1a0 [ 2443.436398] ? lock_downgrade+0x740/0x740 [ 2443.436410] ? __fget+0x225/0x360 [ 2443.436420] ? do_vfs_ioctl+0xff0/0xff0 [ 2443.469023] 0 [ 2443.469358] ? security_file_ioctl+0x83/0xb0 [ 2443.469359] 0 0 [ 2443.471146] SyS_ioctl+0x7f/0xb0 [ 2443.475541] 0 [ 2443.477498] ? do_vfs_ioctl+0xff0/0xff0 [ 2443.486563] do_syscall_64+0x1d5/0x640 [ 2443.490428] Node 0 [ 2443.490437] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2443.490445] RIP: 0033:0x465f69 [ 2443.492668] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2443.497821] RSP: 002b:00007efebc25a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2443.519058] lowmem_reserve[]: [ 2443.525874] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2443.525882] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2443.549020] 0 [ 2443.551165] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2443.551171] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2443.552950] 0 [ 2443.560194] R13: 00007fffe753495f R14: 00007efebc25a300 R15: 0000000000022000 [ 2443.563626] CPU: 1 PID: 28651 Comm: syz-executor.2 Not tainted 4.14.224-syzkaller #0 [ 2443.567469] 0 [ 2443.569250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2443.569254] Call Trace: [ 2443.569270] dump_stack+0x1b2/0x281 [ 2443.569283] warn_alloc.cold+0x96/0x1cc [ 2443.569291] ? kernfs_vma_open+0x130/0x1d0 [ 2443.569300] ? zone_watermark_ok_safe+0x220/0x220 [ 2443.569310] ? usleep_range+0x130/0x130 [ 2443.569319] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2443.569331] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2443.569341] ? run_timer_softirq+0x5a0/0x5a0 [ 2443.569357] __alloc_pages_nodemask+0x2127/0x2720 [ 2443.569372] ? lock_acquire+0x170/0x3f0 [ 2443.569386] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2443.569397] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2443.569411] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2443.569430] alloc_pages_current+0x155/0x260 [ 2443.569442] ion_page_pool_alloc+0x118/0x1b0 [ 2443.569452] ion_system_heap_allocate+0x133/0x8c0 [ 2443.569462] ? _raw_spin_unlock+0x29/0x40 [ 2443.569471] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2443.569479] ? ion_system_contig_heap_create+0x130/0x130 [ 2443.569489] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2443.569498] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2443.569508] ion_alloc+0x27a/0x810 [ 2443.569521] ? ion_dma_buf_release+0x40/0x40 [ 2443.592342] warn_alloc_show_mem: 1 callbacks suppressed [ 2443.592345] Mem-Info: [ 2443.595773] ? __might_fault+0x177/0x1b0 [ 2443.598338] active_anon:20911 inactive_anon:35156 isolated_anon:0 [ 2443.598338] active_file:26 inactive_file:1 isolated_file:0 [ 2443.598338] unevictable:0 dirty:12 writeback:0 unstable:0 [ 2443.598338] slab_reclaimable:12486 slab_unreclaimable:116081 [ 2443.598338] mapped:35491 shmem:37648 pagetables:728 bounce:0 [ 2443.598338] free:13829 free_pcp:31 free_cma:0 [ 2443.601937] ion_ioctl+0xea/0x1f0 [ 2443.601949] ? ion_query_heaps+0x360/0x360 [ 2443.601962] ? ion_query_heaps+0x360/0x360 [ 2443.605914] 0 [ 2443.610133] do_vfs_ioctl+0x75a/0xff0 [ 2443.610145] ? ioctl_preallocate+0x1a0/0x1a0 [ 2443.610153] ? lock_downgrade+0x740/0x740 [ 2443.610165] ? __fget+0x225/0x360 [ 2443.614997] 0 [ 2443.618952] ? do_vfs_ioctl+0xff0/0xff0 [ 2443.624060] Node 0 active_anon:83456kB inactive_anon:126652kB active_file:100kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141964kB dirty:44kB writeback:0kB shmem:136492kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2443.629022] ? security_file_ioctl+0x83/0xb0 [ 2443.629031] SyS_ioctl+0x7f/0xb0 [ 2443.629040] ? do_vfs_ioctl+0xff0/0xff0 [ 2443.633431] Node 1 active_anon:188kB inactive_anon:13972kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:14100kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2443.638243] do_syscall_64+0x1d5/0x640 [ 2443.647014] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2443.651496] Node 1 [ 2443.656919] RIP: 0033:0x465f69 [ 2443.661318] Node 0 [ 2443.665781] RSP: 002b:00007f5aa2526188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2443.670635] Normal free:26816kB min:53696kB low:67120kB high:80544kB active_anon:188kB inactive_anon:13972kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:0kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2443.674732] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2443.679665] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:16kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2443.685067] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2443.685074] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2443.690105] lowmem_reserve[]: [ 2443.694890] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2443.694897] R13: 00007fffc975a7ef R14: 00007f5aa2526300 R15: 0000000000022000 [ 2443.698412] 0 [ 2443.831098] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2443.980362] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2443.993955] Node 0 DMA32 free:45168kB min:36200kB low:45248kB high:54296kB active_anon:83440kB inactive_anon:126652kB active_file:64kB inactive_file:2700kB unevictable:0kB writepending:28kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7584kB pagetables:2912kB bounce:0kB free_pcp:252kB local_pcp:124kB free_cma:0kB [ 2444.069069] lowmem_reserve[]: 0 0 0 0 0 [ 2444.073094] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2444.159012] lowmem_reserve[]: 0 0 0 0 0 [ 2444.162296] 0 [ 2444.163025] Node 1 [ 2444.163027] 0 0 [ 2444.164822] Normal free:244608kB min:53696kB low:67120kB high:80544kB active_anon:188kB inactive_anon:13972kB active_file:4kB inactive_file:2004kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:0kB bounce:0kB free_pcp:280kB local_pcp:132kB free_cma:0kB [ 2444.167029] 0 [ 2444.189065] lowmem_reserve[]: 0 0 0 0 0 [ 2444.223054] Node 0 DMA: 11*4kB (UME) 16*8kB (UME) 15*16kB (UME) 10*32kB (UME) 4*64kB (UME) 4*128kB (UME) 1*256kB (E) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10972kB [ 2444.278992] Node 0 DMA: 11*4kB (UME) 16*8kB (UME) 15*16kB (UME) 10*32kB (UME) 4*64kB (UME) 4*128kB (UME) 1*256kB (E) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10972kB [ 2444.289184] Node 0 DMA32: 198*4kB (E) 135*8kB (UME) 146*16kB (UME) 49*32kB (UME) 1167*64kB (UM) 141*128kB (UM) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 98768kB [ 2444.329032] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2444.338962] Node 0 DMA32: 198*4kB (E) 135*8kB (UME) 146*16kB (UME) 48*32kB (ME) 1052*64kB (UM) 368*128kB (UM) 3*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 120944kB [ 2444.349742] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 0*16kB 0*32kB 2798*64kB (UM) 795*128kB (UM) 49*256kB (U) 8*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 297492kB [ 2444.398980] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2444.402378] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2444.418732] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2444.428976] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 0*16kB 0*32kB 3121*64kB (UM) 817*128kB (UM) 49*256kB (U) 8*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 320980kB [ 2444.430653] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2444.460708] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2444.467431] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2444.468984] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2444.499020] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2444.500872] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2444.507626] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2444.520558] device bridge_slave_1 left promiscuous mode [ 2444.539155] bridge0: port 2(bridge_slave_1) entered disabled state [ 2444.546436] device bridge_slave_0 left promiscuous mode [ 2444.559191] bridge0: port 1(bridge_slave_0) entered disabled state [ 2444.583514] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2444.592428] device veth1_macvtap left promiscuous mode [ 2444.597723] device veth0_macvtap left promiscuous mode [ 2444.598951] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2444.608846] 39081 total pagecache pages [ 2444.622482] device veth1_vlan left promiscuous mode [ 2444.627549] device veth0_vlan left promiscuous mode [ 2444.634151] 0 pages in swap cache [ 2444.637606] Swap cache stats: add 0, delete 0, find 0/0 [ 2444.638939] 39081 total pagecache pages [ 2444.646947] 0 pages in swap cache [ 2444.662746] Free swap = 0kB [ 2444.665777] Total swap = 0kB [ 2444.668786] 2097051 pages RAM [ 2444.668966] Swap cache stats: add 0, delete 0, find 0/0 [ 2444.688980] Free swap = 0kB [ 2444.692141] Total swap = 0kB [ 2444.695157] 2097051 pages RAM [ 2444.698249] 0 pages HighMem/MovableOnly [ 2444.698954] 0 pages HighMem/MovableOnly [ 2444.708194] 363840 pages reserved [ 2444.719058] 363840 pages reserved [ 2444.722522] 0 pages cma reserved [ 2444.722954] 0 pages cma reserved [ 2444.725876] Out of memory (oom_kill_allocating_task): Kill process 26605 (syz-executor.1) score 0 or sacrifice child [ 2444.779048] Killed process 28669 (syz-executor.1) total-vm:93252kB, anon-rss:148kB, file-rss:34820kB, shmem-rss:0kB [ 2444.822345] oom_reaper: reaped process 28669 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2444.946422] device hsr_slave_1 left promiscuous mode [ 2444.977120] device hsr_slave_0 left promiscuous mode [ 2445.023275] team0 (unregistering): Port device team_slave_1 removed [ 2445.046917] team0 (unregistering): Port device team_slave_0 removed [ 2445.083393] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2445.103885] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2445.167486] bond0 (unregistering): Released all slaves 00:42:52 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nvram\x00', 0x0, 0x0) r0 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r0, &(0x7f0000000400)={0x2020}, 0x2020) 00:42:52 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x484240, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)={0x101, 0x1, 0x4, 0x400, 0xffff, {0x0, 0x2710}, {0x1, 0x2, 0x8, 0x2, 0x7, 0x1, "db53d254"}, 0x8, 0x4, @fd=r1, 0x4, 0x0, r1}) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x8) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000340)={0x401, 0x2, 0x4, 0x8, 0x8, {}, {0x1, 0x8, 0xbc, 0xa2, 0xf7, 0x20, "450104da"}, 0xa87, 0x4, @fd=r3, 0x1ff}) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x4, 0x90040) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r4, 0xc00464be, &(0x7f0000000240)={0x1}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x7fffffff, 0x1e, 0x1}) 00:42:52 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x484240, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)={0x101, 0x1, 0x4, 0x400, 0xffff, {0x0, 0x2710}, {0x1, 0x2, 0x8, 0x2, 0x7, 0x1, "db53d254"}, 0x8, 0x4, @fd=r1, 0x4, 0x0, r1}) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x8) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000340)={0x401, 0x2, 0x4, 0x8, 0x8, {}, {0x1, 0x8, 0xbc, 0xa2, 0xf7, 0x20, "450104da"}, 0xa87, 0x4, @fd=r3, 0x1ff}) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x4, 0x90040) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, 0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x1, 0x621c0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x7fffffff, 0x1e, 0x1}) 00:42:52 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x484240, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)={0x101, 0x1, 0x4, 0x400, 0xffff, {0x0, 0x2710}, {0x1, 0x2, 0x8, 0x2, 0x7, 0x1, "db53d254"}, 0x8, 0x4, @fd=r1, 0x4, 0x0, r1}) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x8) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x7fffffff, 0x1e, 0x1}) 00:42:52 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nvram\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000003840)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000400)={0x2020}, 0x2020) 00:42:52 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nvram\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000003840)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000400)={0x2020}, 0x2020) 00:42:52 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nvram\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000003840)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000400)={0x2020}, 0x2020) 00:42:52 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nvram\x00', 0x0, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000003840)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) [ 2446.286587] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2446.322854] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2446.328015] CPU: 1 PID: 28694 Comm: syz-executor.2 Not tainted 4.14.224-syzkaller #0 [ 2446.335887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2446.345235] Call Trace: [ 2446.347825] dump_stack+0x1b2/0x281 [ 2446.351451] warn_alloc.cold+0x96/0x1cc [ 2446.355421] ? zone_watermark_ok_safe+0x220/0x220 [ 2446.360271] __alloc_pages_nodemask+0x2127/0x2720 [ 2446.365119] ? lock_acquire+0x170/0x3f0 [ 2446.369096] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2446.373937] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2446.379384] ? __mutex_unlock_slowpath+0x75/0x770 [ 2446.384228] alloc_pages_current+0x155/0x260 [ 2446.388631] ion_page_pool_alloc+0x118/0x1b0 [ 2446.393056] ion_system_heap_allocate+0x133/0x8c0 [ 2446.397889] ? ion_alloc+0x187/0x810 [ 2446.401595] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2446.407038] ? ion_system_contig_heap_create+0x130/0x130 [ 2446.412481] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2446.417493] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2446.422328] ion_alloc+0x204/0x810 [ 2446.425869] ? ion_dma_buf_release+0x40/0x40 [ 2446.430274] ? __might_fault+0x177/0x1b0 [ 2446.434333] ion_ioctl+0xea/0x1f0 [ 2446.437779] ? ion_query_heaps+0x360/0x360 [ 2446.442008] ? ion_query_heaps+0x360/0x360 [ 2446.442061] syz-executor.1 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2446.446225] do_vfs_ioctl+0x75a/0xff0 [ 2446.446227] (null), order=0, oom_score_adj=1000 [ 2446.456522] ? ioctl_preallocate+0x1a0/0x1a0 [ 2446.456531] ? lock_downgrade+0x740/0x740 [ 2446.456545] ? __fget+0x225/0x360 [ 2446.477006] ? do_vfs_ioctl+0xff0/0xff0 [ 2446.478760] syz-executor.1 cpuset= [ 2446.480966] ? security_file_ioctl+0x83/0xb0 [ 2446.480968] / mems_allowed=0-1 [ 2446.484492] SyS_ioctl+0x7f/0xb0 [ 2446.495394] ? do_vfs_ioctl+0xff0/0xff0 [ 2446.499379] do_syscall_64+0x1d5/0x640 [ 2446.503252] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2446.508424] RIP: 0033:0x465f69 [ 2446.511594] RSP: 002b:00007f5aa2526188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2446.520156] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2446.527404] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2446.534657] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2446.541915] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2446.549169] R13: 00007fffc975a7ef R14: 00007f5aa2526300 R15: 0000000000022000 [ 2446.570251] CPU: 0 PID: 28669 Comm: syz-executor.1 Not tainted 4.14.224-syzkaller #0 [ 2446.573774] warn_alloc_show_mem: 1 callbacks suppressed [ 2446.573777] Mem-Info: [ 2446.578153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2446.585449] active_anon:20856 inactive_anon:35153 isolated_anon:0 [ 2446.585449] active_file:58 inactive_file:0 isolated_file:0 [ 2446.585449] unevictable:0 dirty:36 writeback:0 unstable:0 [ 2446.585449] slab_reclaimable:12474 slab_unreclaimable:113640 [ 2446.585449] mapped:35545 shmem:37644 pagetables:728 bounce:0 [ 2446.585449] free:14135 free_pcp:0 free_cma:0 [ 2446.585885] Call Trace: [ 2446.595311] Node 0 active_anon:82948kB inactive_anon:126640kB active_file:188kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:142136kB dirty:56kB writeback:0kB shmem:136476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2446.628281] dump_stack+0x1b2/0x281 [ 2446.628294] dump_header+0x178/0x82f [ 2446.628306] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2446.628317] ? ___ratelimit+0x2cd/0x530 [ 2446.628327] oom_kill_process.cold+0x10/0xb18 [ 2446.628350] out_of_memory+0xe3e/0x1190 [ 2446.628364] ? oom_killer_disable+0x1c0/0x1c0 [ 2446.628372] ? mutex_trylock+0x152/0x1a0 [ 2446.628383] __alloc_pages_nodemask+0x23e1/0x2720 [ 2446.628398] ? lock_acquire+0x170/0x3f0 [ 2446.632765] Node 1 active_anon:476kB inactive_anon:13972kB active_file:44kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44kB dirty:88kB writeback:0kB shmem:14100kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2446.658966] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2446.658978] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2446.658992] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2446.659005] ? retint_kernel+0x2d/0x2d [ 2446.659019] alloc_pages_current+0x155/0x260 [ 2446.659031] ion_page_pool_alloc+0x118/0x1b0 [ 2446.659041] ion_system_heap_allocate+0x133/0x8c0 [ 2446.659050] ? ion_alloc+0x187/0x810 [ 2446.659059] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2446.659070] ? ion_system_contig_heap_create+0x130/0x130 [ 2446.664467] Node 0 [ 2446.666390] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2446.671515] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2446.675420] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2446.682844] lowmem_reserve[]: [ 2446.683870] ion_alloc+0x204/0x810 [ 2446.688330] 0 [ 2446.692377] ? ion_dma_buf_release+0x40/0x40 [ 2446.692389] ? __might_fault+0x177/0x1b0 [ 2446.692400] ion_ioctl+0xea/0x1f0 [ 2446.692409] ? ion_query_heaps+0x360/0x360 [ 2446.692420] ? ion_query_heaps+0x360/0x360 [ 2446.692430] do_vfs_ioctl+0x75a/0xff0 [ 2446.707910] 2717 [ 2446.728023] ? ioctl_preallocate+0x1a0/0x1a0 [ 2446.728033] ? lock_downgrade+0x740/0x740 [ 2446.728045] ? __fget+0x225/0x360 [ 2446.728053] ? do_vfs_ioctl+0xff0/0xff0 [ 2446.728062] ? security_file_ioctl+0x83/0xb0 [ 2446.728071] SyS_ioctl+0x7f/0xb0 [ 2446.728077] ? do_vfs_ioctl+0xff0/0xff0 [ 2446.728089] do_syscall_64+0x1d5/0x640 [ 2446.728105] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2446.728114] RIP: 0033:0x465f69 [ 2446.728118] RSP: 002b:00007f66274e4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2446.728128] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2446.728133] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2446.728138] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2446.728143] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2446.728148] R13: 00007ffeea3ca95f R14: 00007f66274e4300 R15: 0000000000022000 [ 2446.747092] Mem-Info: [ 2446.754183] 2718 [ 2446.768141] active_anon:20856 inactive_anon:35153 isolated_anon:0 [ 2446.768141] active_file:58 inactive_file:0 isolated_file:0 [ 2446.768141] unevictable:0 dirty:36 writeback:0 unstable:0 [ 2446.768141] slab_reclaimable:12474 slab_unreclaimable:113640 [ 2446.768141] mapped:35545 shmem:37644 pagetables:728 bounce:0 [ 2446.768141] free:14135 free_pcp:6 free_cma:0 [ 2446.772856] 2718 [ 2446.779143] Node 0 active_anon:82948kB inactive_anon:126640kB active_file:188kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:142136kB dirty:56kB writeback:0kB shmem:136476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2446.782787] 2718 [ 2446.820427] Node 1 active_anon:476kB inactive_anon:13972kB active_file:44kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44kB dirty:88kB writeback:0kB shmem:14100kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2446.826331] Node 0 [ 2446.830268] Node 0 DMA32 free:17840kB min:36200kB low:45248kB high:54296kB active_anon:82948kB inactive_anon:126640kB active_file:24kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:2704kB bounce:0kB free_pcp:36kB local_pcp:12kB free_cma:0kB [ 2446.830289] lowmem_reserve[]: 0 0 0 0 0 [ 2446.830310] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2446.830330] lowmem_reserve[]: [ 2446.844066] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2446.848748] 0 [ 2446.882211] lowmem_reserve[]: [ 2446.890888] 0 [ 2446.923739] 0 [ 2446.931577] 0 [ 2446.945904] 2717 [ 2446.976812] 0 [ 2447.008924] 2718 [ 2447.038759] 0 [ 2447.069963] 2718 [ 2447.127889] 2718 [ 2447.135922] Node 1 [ 2447.140629] Normal free:28076kB min:53696kB low:67120kB high:80544kB active_anon:400kB inactive_anon:13972kB active_file:24kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:104kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2447.150100] Node 0 DMA32 free:18000kB min:36200kB low:45248kB high:54296kB active_anon:82912kB inactive_anon:126640kB active_file:20kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:2704kB bounce:0kB free_pcp:120kB local_pcp:108kB free_cma:0kB [ 2447.215614] lowmem_reserve[]: 0 0 0 0 0 [ 2447.219672] Node 0 DMA: 2*4kB (UE) 1*8kB (E) 1*16kB (E) 2*32kB (UE) 6*64kB (UE) 2*128kB (UE) 2*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10976kB [ 2447.242197] Node 0 DMA32: 618*4kB (UME) 277*8kB (UME) 188*16kB (UME) 47*32kB (UME) 21*64kB (UME) 3*128kB (UM) 28*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18096kB [ 2447.247637] lowmem_reserve[]: [ 2447.265332] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2447.278688] 0 0 0 0 0 [ 2447.281652] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2447.285368] Node 1 Normal: 29*4kB (UM) 23*8kB (UM) 14*16kB (UM) 11*32kB (UM) 3*64kB (UE) 3*128kB (UM) 2*256kB (M) 49*512kB (U) 1*1024kB (M) 0*2048kB 0*4096kB = 28076kB [ 2447.330000] lowmem_reserve[]: 0 0 0 [ 2447.338402] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2447.347153] 0 [ 2447.358417] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2447.376127] 0 [ 2447.377945] Node 1 Normal free:28076kB min:53696kB low:67120kB high:80544kB active_anon:400kB inactive_anon:13972kB active_file:24kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:104kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2447.412139] lowmem_reserve[]: 0 0 0 0 0 [ 2447.416137] Node 0 DMA: 2*4kB (UE) 1*8kB (E) 1*16kB (E) 2*32kB (UE) 6*64kB (UE) 2*128kB (UE) 2*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10976kB [ 2447.419317] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2447.435781] Node 0 DMA32: 618*4kB (UME) 277*8kB (UME) 188*16kB (UME) 47*32kB (UME) 21*64kB (UME) 3*128kB (UM) 28*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18096kB [ 2447.459173] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2447.472959] Node 1 Normal: 29*4kB (UM) 23*8kB (UM) 14*16kB (UM) 11*32kB (UM) 3*64kB (UE) 3*128kB (UM) 2*256kB (M) 49*512kB (U) 1*1024kB (M) 0*2048kB 0*4096kB = 28076kB [ 2447.478896] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2447.492770] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2447.505544] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2447.516279] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2447.525207] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2447.535217] 37665 total pagecache pages [ 2447.539841] 0 pages in swap cache [ 2447.543397] Swap cache stats: add 0, delete 0, find 0/0 [ 2447.546747] 37665 total pagecache pages [ 2447.550543] Free swap = 0kB [ 2447.555786] Total swap = 0kB [ 2447.557971] 0 pages in swap cache [ 2447.558858] 2097051 pages RAM [ 2447.558862] 0 pages HighMem/MovableOnly [ 2447.558866] 363840 pages reserved [ 2447.558869] 0 pages cma reserved [ 2447.558877] Out of memory (oom_kill_allocating_task): Kill process 28669 (syz-executor.1) score 0 or sacrifice child [ 2447.558896] Killed process 28669 (syz-executor.1) total-vm:93252kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2447.570299] Swap cache stats: add 0, delete 0, find 0/0 [ 2447.587302] syz-executor.1: [ 2447.599076] syz-executor.2 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 2447.604457] page allocation failure: order:0 [ 2447.605642] (null) [ 2447.615819] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2447.632198] Free swap = 0kB [ 2447.632595] syz-executor.1 cpuset= [ 2447.635527] Total swap = 0kB [ 2447.635533] / [ 2447.639074] 2097051 pages RAM [ 2447.643826] , order=0, oom_score_adj=0 [ 2447.646823] 0 pages HighMem/MovableOnly [ 2447.646828] 363840 pages reserved [ 2447.650835] mems_allowed=0-1 [ 2447.650850] CPU: 1 PID: 28669 Comm: syz-executor.1 Not tainted 4.14.224-syzkaller #0 [ 2447.650856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2447.650859] Call Trace: [ 2447.650877] dump_stack+0x1b2/0x281 [ 2447.650891] warn_alloc.cold+0x96/0x1cc [ 2447.650904] ? zone_watermark_ok_safe+0x220/0x220 [ 2447.666090] 0 pages cma reserved [ 2447.669250] ? wait_for_completion_io+0x10/0x10 [ 2447.669267] __alloc_pages_nodemask+0x2127/0x2720 [ 2447.706353] ? lock_acquire+0x170/0x3f0 [ 2447.710337] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2447.715172] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2447.719654] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2447.725613] ? retint_kernel+0x2d/0x2d [ 2447.729496] alloc_pages_current+0x155/0x260 [ 2447.733886] ion_page_pool_alloc+0x118/0x1b0 [ 2447.738275] ion_system_heap_allocate+0x133/0x8c0 [ 2447.743096] ? ion_alloc+0x187/0x810 [ 2447.746790] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2447.752219] ? ion_system_contig_heap_create+0x130/0x130 [ 2447.757647] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2447.762645] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2447.767561] ion_alloc+0x204/0x810 [ 2447.771091] ? ion_dma_buf_release+0x40/0x40 [ 2447.775481] ? __might_fault+0x177/0x1b0 [ 2447.779524] ion_ioctl+0xea/0x1f0 [ 2447.782966] ? ion_query_heaps+0x360/0x360 [ 2447.787181] ? ion_query_heaps+0x360/0x360 [ 2447.791396] do_vfs_ioctl+0x75a/0xff0 [ 2447.795175] ? ioctl_preallocate+0x1a0/0x1a0 [ 2447.799571] ? lock_downgrade+0x740/0x740 [ 2447.803700] ? __fget+0x225/0x360 [ 2447.807132] ? do_vfs_ioctl+0xff0/0xff0 [ 2447.811096] ? security_file_ioctl+0x83/0xb0 [ 2447.815487] SyS_ioctl+0x7f/0xb0 [ 2447.818834] ? do_vfs_ioctl+0xff0/0xff0 [ 2447.822801] do_syscall_64+0x1d5/0x640 [ 2447.826671] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2447.831843] RIP: 0033:0x465f69 [ 2447.835013] RSP: 002b:00007f66274e4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2447.843057] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2447.850305] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2447.857553] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2447.864799] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2447.872059] R13: 00007ffeea3ca95f R14: 00007f66274e4300 R15: 0000000000022000 [ 2447.882324] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2447.887469] CPU: 1 PID: 27874 Comm: syz-executor.2 Not tainted 4.14.224-syzkaller #0 [ 2447.895444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2447.904792] Call Trace: [ 2447.907394] dump_stack+0x1b2/0x281 [ 2447.908653] Mem-Info: [ 2447.911023] dump_header+0x178/0x82f [ 2447.913426] active_anon:20828 inactive_anon:35153 isolated_anon:0 [ 2447.913426] active_file:10 inactive_file:11 isolated_file:0 [ 2447.913426] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2447.913426] slab_reclaimable:12466 slab_unreclaimable:113567 [ 2447.913426] mapped:35493 shmem:37644 pagetables:702 bounce:0 [ 2447.913426] free:14287 free_pcp:30 free_cma:0 [ 2447.917121] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2447.950629] Node 0 active_anon:82912kB inactive_anon:126640kB active_file:20kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141972kB dirty:0kB writeback:0kB shmem:136476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2447.955675] ? ___ratelimit+0x2cd/0x530 [ 2447.983529] Node 1 active_anon:400kB inactive_anon:13972kB active_file:20kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:14100kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2447.987458] oom_kill_process.cold+0x10/0xb18 [ 2448.014338] Node 0 [ 2448.018805] out_of_memory+0xe3e/0x1190 [ 2448.021038] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2448.024984] ? oom_killer_disable+0x1c0/0x1c0 [ 2448.050472] lowmem_reserve[]: [ 2448.054928] ? mutex_trylock+0x152/0x1a0 [ 2448.054930] 0 2717 [ 2448.058018] __alloc_pages_nodemask+0x23e1/0x2720 [ 2448.062068] 2718 [ 2448.064281] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2448.069100] 2718 [ 2448.071144] alloc_pages_current+0x155/0x260 [ 2448.075943] 2718 [ 2448.077986] filemap_fault+0xea3/0x1980 [ 2448.084416] ext4_filemap_fault+0x84/0xb0 [ 2448.088354] Node 0 [ 2448.092496] __do_fault+0xfa/0x380 [ 2448.092504] __handle_mm_fault+0x2497/0x4620 [ 2448.092514] ? vm_insert_page+0x7c0/0x7c0 [ 2448.094754] DMA32 free:18096kB min:36200kB low:45248kB high:54296kB active_anon:82912kB inactive_anon:126640kB active_file:20kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:2704kB bounce:0kB free_pcp:120kB local_pcp:108kB free_cma:0kB [ 2448.098276] ? nanosleep_copyout+0x100/0x100 [ 2448.102672] lowmem_reserve[]: [ 2448.106793] handle_mm_fault+0x391/0x860 [ 2448.135152] 0 [ 2448.139529] __do_page_fault+0x549/0xad0 [ 2448.139541] ? spurious_fault+0x640/0x640 [ 2448.142720] 0 [ 2448.146757] ? do_page_fault+0x60/0x500 [ 2448.148530] 0 [ 2448.152567] ? page_fault+0x2f/0x50 [ 2448.152575] page_fault+0x45/0x50 [ 2448.152585] RIP: 255238:0xe [ 2448.156711] 0 [ 2448.158487] RSP: 0009:00007fffc975aaac EFLAGS: 00000032 [ 2448.161028] Mem-Info: [ 2448.177447] 0 [ 2448.183553] active_anon:20828 inactive_anon:35153 isolated_anon:0 [ 2448.183553] active_file:10 inactive_file:11 isolated_file:0 [ 2448.183553] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2448.183553] slab_reclaimable:12466 slab_unreclaimable:113567 [ 2448.183553] mapped:35493 shmem:37644 pagetables:702 bounce:0 [ 2448.183553] free:14287 free_pcp:30 free_cma:0 [ 2448.229317] Node 0 active_anon:82912kB inactive_anon:126640kB active_file:20kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141972kB dirty:0kB writeback:0kB shmem:136476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2448.235592] Node 0 [ 2448.259605] Node 1 active_anon:400kB inactive_anon:13972kB active_file:20kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:14100kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2448.270542] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2448.291514] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2448.326825] lowmem_reserve[]: [ 2448.347871] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2448.355419] 0 [ 2448.356088] Node 0 [ 2448.356090] 0 0 [ 2448.357886] DMA32 free:18928kB min:36200kB low:45248kB high:54296kB active_anon:82912kB inactive_anon:126640kB active_file:20kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:2704kB bounce:0kB free_pcp:132kB local_pcp:24kB free_cma:0kB [ 2448.368684] 0 [ 2448.392595] lowmem_reserve[]: 0 0 0 0 0 [ 2448.398365] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2448.403873] 0 [ 2448.435368] lowmem_reserve[]: 0 0 0 0 0 [ 2448.435594] Node 1 Normal free:28076kB min:53696kB low:67120kB high:80544kB active_anon:400kB inactive_anon:13972kB active_file:20kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:104kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2448.443593] Node 1 Normal free:28076kB min:53696kB low:67120kB high:80544kB active_anon:400kB inactive_anon:13972kB active_file:20kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:104kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2448.480002] lowmem_reserve[]: [ 2448.509056] lowmem_reserve[]: [ 2448.509860] 0 [ 2448.512189] 0 [ 2448.515277] 0 [ 2448.517061] 0 [ 2448.526154] 0 [ 2448.526638] 0 [ 2448.527970] 0 0 [ 2448.533936] 0 0 [ 2448.535357] Node 0 DMA: 2*4kB (UE) 1*8kB (E) 1*16kB (E) 2*32kB (UE) 6*64kB (UE) 2*128kB (UE) 2*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10976kB [ 2448.544156] Node 0 DMA: 2*4kB (UE) 1*8kB (E) 1*16kB (E) 2*32kB (UE) 6*64kB (UE) 2*128kB (UE) 2*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10976kB [ 2448.560907] Node 0 [ 2448.578521] Node 0 [ 2448.579466] DMA32: [ 2448.580844] DMA32: [ 2448.583026] 618*4kB [ 2448.585230] 618*4kB [ 2448.587461] (UME) [ 2448.600972] (UME) [ 2448.601635] 359*8kB (UME) 203*16kB (UME) 47*32kB (UME) 21*64kB (UME) 3*128kB (UM) 28*256kB (U) 0*512kB 0*1024kB [ 2448.605981] 359*8kB [ 2448.605984] 0*2048kB 0*4096kB [ 2448.624115] (UME) 203*16kB (UME) 47*32kB (UME) 21*64kB (UME) 3*128kB (UM) 28*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18992kB [ 2448.627651] = 18992kB [ 2448.647164] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2448.650446] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2448.657948] Node 1 Normal: 29*4kB (UM) 23*8kB (UM) 14*16kB (UM) 11*32kB (UM) 3*64kB (UE) 3*128kB (UM) 2*256kB (M) 49*512kB (U) 1*1024kB (M) 0*2048kB 0*4096kB = 28076kB [ 2448.681324] Node 1 [ 2448.698535] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2448.701152] Normal: [ 2448.713767] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2448.721815] 29*4kB (UM) 23*8kB (UM) 14*16kB (UM) 11*32kB (UM) 3*64kB (UE) 3*128kB [ 2448.724861] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2448.724867] (UM) [ 2448.732573] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2448.732578] 37665 total pagecache pages [ 2448.732588] 0 pages in swap cache [ 2448.732594] Swap cache stats: add 0, delete 0, find 0/0 [ 2448.732597] Free swap = 0kB [ 2448.732601] Total swap = 0kB [ 2448.732607] 2097051 pages RAM [ 2448.732611] 0 pages HighMem/MovableOnly [ 2448.732614] 363840 pages reserved [ 2448.732617] 0 pages cma reserved [ 2448.814781] 2*256kB (M) 49*512kB (U) 1*1024kB (M) 0*2048kB 0*4096kB = 28076kB [ 2448.845079] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2448.872902] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2448.894545] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2448.913385] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2448.929004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2448.935886] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2448.965768] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2448.975149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2448.976227] 39494 total pagecache pages [ 2448.990294] 0 pages in swap cache [ 2448.996405] Swap cache stats: add 0, delete 0, find 0/0 [ 2449.011466] device bridge_slave_1 left promiscuous mode [ 2449.013675] Free swap = 0kB [ 2449.020589] Total swap = 0kB [ 2449.023601] 2097051 pages RAM [ 2449.026691] 0 pages HighMem/MovableOnly [ 2449.038557] bridge0: port 2(bridge_slave_1) entered disabled state [ 2449.046458] 363840 pages reserved [ 2449.058301] 0 pages cma reserved [ 2449.065666] device bridge_slave_0 left promiscuous mode [ 2449.071381] bridge0: port 1(bridge_slave_0) entered disabled state [ 2449.094218] Out of memory (oom_kill_allocating_task): Kill process 27874 (syz-executor.2) score 0 or sacrifice child [ 2449.105421] device veth1_macvtap left promiscuous mode [ 2449.138628] device veth0_macvtap left promiscuous mode [ 2449.138813] Killed process 28694 (syz-executor.2) total-vm:93252kB, anon-rss:148kB, file-rss:35064kB, shmem-rss:0kB [ 2449.158630] device veth1_vlan left promiscuous mode [ 2449.163712] device veth0_vlan left promiscuous mode [ 2449.225830] oom_reaper: reaped process 28694 (syz-executor.2), now anon-rss:0kB, file-rss:4kB, shmem-rss:0kB 00:42:56 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nvram\x00', 0x0, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000003840)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) 00:42:56 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x484240, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)={0x101, 0x1, 0x4, 0x400, 0xffff, {0x0, 0x2710}, {0x1, 0x2, 0x8, 0x2, 0x7, 0x1, "db53d254"}, 0x8, 0x4, @fd=r1, 0x4, 0x0, r1}) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x8) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x4, 0x90040) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x7fffffff, 0x1e, 0x1}) [ 2449.499442] device hsr_slave_1 left promiscuous mode [ 2449.516727] device hsr_slave_0 left promiscuous mode [ 2449.541438] team0 (unregistering): Port device team_slave_1 removed [ 2449.568831] team0 (unregistering): Port device team_slave_0 removed [ 2449.590329] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2449.618575] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2449.690656] bond0 (unregistering): Released all slaves [ 2449.869072] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2449.894103] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2449.906705] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2449.934093] CPU: 0 PID: 28711 Comm: syz-executor.3 Not tainted 4.14.224-syzkaller #0 [ 2449.942005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2449.951357] Call Trace: [ 2449.953949] dump_stack+0x1b2/0x281 [ 2449.957562] warn_alloc.cold+0x96/0x1cc [ 2449.961517] ? zone_watermark_ok_safe+0x220/0x220 [ 2449.966346] __alloc_pages_nodemask+0x2127/0x2720 [ 2449.971170] ? _raw_spin_unlock_irq+0x24/0x80 [ 2449.975735] ? lock_acquire+0x170/0x3f0 [ 2449.979692] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2449.984519] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2449.989951] ? __mutex_unlock_slowpath+0x75/0x770 [ 2449.994777] alloc_pages_current+0x155/0x260 [ 2449.999171] ion_page_pool_alloc+0x118/0x1b0 [ 2450.003564] ion_system_heap_allocate+0x133/0x8c0 [ 2450.008388] ? ion_alloc+0x187/0x810 [ 2450.012085] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2450.017512] ? ion_system_contig_heap_create+0x130/0x130 [ 2450.022940] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2450.027935] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2450.032774] ion_alloc+0x204/0x810 [ 2450.036297] ? ion_dma_buf_release+0x40/0x40 [ 2450.040701] ? __might_fault+0x177/0x1b0 [ 2450.044744] ion_ioctl+0xea/0x1f0 [ 2450.048176] ? ion_query_heaps+0x360/0x360 [ 2450.052393] ? ion_query_heaps+0x360/0x360 [ 2450.056607] do_vfs_ioctl+0x75a/0xff0 [ 2450.060389] ? ioctl_preallocate+0x1a0/0x1a0 [ 2450.064775] ? lock_downgrade+0x740/0x740 [ 2450.068902] ? __fget+0x225/0x360 [ 2450.072342] ? do_vfs_ioctl+0xff0/0xff0 [ 2450.076295] ? security_file_ioctl+0x83/0xb0 [ 2450.080682] SyS_ioctl+0x7f/0xb0 [ 2450.084025] ? do_vfs_ioctl+0xff0/0xff0 [ 2450.087982] do_syscall_64+0x1d5/0x640 [ 2450.091854] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2450.097021] RIP: 0033:0x465f69 [ 2450.100193] RSP: 002b:00007fac75d57188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2450.107880] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2450.115128] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2450.122376] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2450.129636] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2450.136882] R13: 00007fffe794c28f R14: 00007fac75d57300 R15: 0000000000022000 [ 2450.157005] in:imklog cpuset=/ mems_allowed=0-1 [ 2450.181879] CPU: 0 PID: 27507 Comm: in:imklog Not tainted 4.14.224-syzkaller #0 [ 2450.189460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2450.198813] Call Trace: [ 2450.201385] dump_stack+0x1b2/0x281 [ 2450.205080] dump_header+0x178/0x82f [ 2450.208784] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2450.213866] ? ___ratelimit+0x2cd/0x530 [ 2450.217818] oom_kill_process.cold+0x10/0xb18 [ 2450.222297] out_of_memory+0xe3e/0x1190 [ 2450.226340] ? oom_killer_disable+0x1c0/0x1c0 [ 2450.230812] ? mutex_trylock+0x152/0x1a0 [ 2450.234852] __alloc_pages_nodemask+0x23e1/0x2720 [ 2450.239682] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2450.244510] alloc_pages_current+0x155/0x260 [ 2450.248899] filemap_fault+0xea3/0x1980 [ 2450.252857] ext4_filemap_fault+0x84/0xb0 [ 2450.256982] __do_fault+0xfa/0x380 [ 2450.260501] __handle_mm_fault+0x2497/0x4620 [ 2450.264891] ? vm_insert_page+0x7c0/0x7c0 [ 2450.269023] ? lock_downgrade+0x740/0x740 [ 2450.273156] handle_mm_fault+0x391/0x860 [ 2450.277289] __do_page_fault+0x549/0xad0 [ 2450.281342] ? spurious_fault+0x640/0x640 [ 2450.285485] ? do_page_fault+0x60/0x500 [ 2450.289435] ? page_fault+0x2f/0x50 [ 2450.293038] page_fault+0x45/0x50 [ 2450.296480] RIP: 1fa0:0x1f9f [ 2450.299474] RSP: 0000:00005613cd11b9d0 EFLAGS: 7f6492d10da0 [ 2450.470516] Mem-Info: [ 2450.478701] active_anon:20929 inactive_anon:35153 isolated_anon:0 [ 2450.478701] active_file:18 inactive_file:20 isolated_file:0 [ 2450.478701] unevictable:0 dirty:31 writeback:0 unstable:0 [ 2450.478701] slab_reclaimable:12432 slab_unreclaimable:112197 [ 2450.478701] mapped:52945 shmem:37644 pagetables:788 bounce:0 [ 2450.478701] free:13775 free_pcp:1 free_cma:0 [ 2450.570536] Node 0 active_anon:83248kB inactive_anon:126640kB active_file:68kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:149716kB dirty:120kB writeback:0kB shmem:136476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2450.646112] Node 1 active_anon:468kB inactive_anon:13972kB active_file:0kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:62064kB dirty:4kB writeback:0kB shmem:14100kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2450.720541] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2450.820713] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2450.825790] Node 0 DMA32 free:18008kB min:36200kB low:45248kB high:54296kB active_anon:83248kB inactive_anon:126640kB active_file:104kB inactive_file:60kB unevictable:0kB writepending:116kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7552kB pagetables:2896kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 2450.900833] lowmem_reserve[]: 0 0 0 0 0 [ 2450.904859] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2450.927494] Mem-Info: [ 2450.954782] active_anon:20929 inactive_anon:35153 isolated_anon:0 [ 2450.954782] active_file:27 inactive_file:10 isolated_file:0 [ 2450.954782] unevictable:0 dirty:30 writeback:0 unstable:0 [ 2450.954782] slab_reclaimable:12432 slab_unreclaimable:112199 [ 2450.954782] mapped:52938 shmem:37644 pagetables:788 bounce:0 [ 2450.954782] free:13965 free_pcp:2 free_cma:0 [ 2450.968363] lowmem_reserve[]: 0 0 0 0 0 [ 2451.014792] Node 1 Normal free:26420kB min:53696kB low:67120kB high:80544kB active_anon:468kB inactive_anon:13972kB active_file:36kB inactive_file:0kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2451.090503] lowmem_reserve[]: 0 0 0 0 0 [ 2451.094524] Node 0 DMA: 8*4kB (UE) 2*8kB (UE) 3*16kB (UE) 4*32kB (UE) 4*64kB (UE) 2*128kB (UE) 2*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10976kB [ 2451.172374] Node 0 active_anon:83248kB inactive_anon:126640kB active_file:128kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:149688kB dirty:116kB writeback:0kB shmem:136476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2451.188347] Node 0 DMA32: 634*4kB (MEH) 288*8kB (MEH) 188*16kB (MEH) 42*32kB (MEH) 19*64kB (MEH) 4*128kB (UM) 28*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18088kB [ 2451.264380] Node 1 active_anon:468kB inactive_anon:13972kB active_file:36kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:62064kB dirty:4kB writeback:0kB shmem:14100kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2451.278338] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2451.356463] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2451.368332] Node 1 [ 2451.437246] lowmem_reserve[]: [ 2451.438341] Normal: 23*4kB (M) 11*8kB (UM) 10*16kB (M) 9*32kB (M) 7*64kB (ME) 4*128kB (M) 1*256kB (M) 48*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26420kB [ 2451.443002] 0 [ 2451.478345] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2451.498403] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2451.507022] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2451.512199] 2717 2718 2718 2718 [ 2451.519364] Node 0 DMA32 free:18088kB min:36200kB low:45248kB high:54296kB active_anon:83248kB inactive_anon:126640kB active_file:136kB inactive_file:40kB unevictable:0kB writepending:116kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7552kB pagetables:2896kB bounce:0kB free_pcp:124kB local_pcp:120kB free_cma:0kB [ 2451.538350] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2451.570540] 37699 total pagecache pages [ 2451.574538] 0 pages in swap cache [ 2451.577996] Swap cache stats: add 0, delete 0, find 0/0 [ 2451.597245] lowmem_reserve[]: 0 0 0 0 0 [ 2451.597675] Free swap = 0kB [ 2451.622532] Total swap = 0kB [ 2451.624260] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2451.625594] 2097051 pages RAM [ 2451.625599] 0 pages HighMem/MovableOnly [ 2451.700305] 363840 pages reserved [ 2451.703783] 0 pages cma reserved [ 2451.707154] Out of memory (oom_kill_allocating_task): Kill process 27507 (in:imklog) score 0 or sacrifice child [ 2451.728366] Killed process 27505 (rsyslogd) total-vm:254332kB, anon-rss:1068kB, file-rss:0kB, shmem-rss:0kB [ 2451.749712] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2451.816532] lowmem_reserve[]: 0 0 0 0 0 [ 2451.820646] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2451.825429] CPU: 0 PID: 8002 Comm: syz-fuzzer Not tainted 4.14.224-syzkaller #0 [ 2451.832873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2451.836757] Node 1 [ 2451.842212] Call Trace: [ 2451.842228] dump_stack+0x1b2/0x281 [ 2451.842239] dump_header+0x178/0x82f [ 2451.842249] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2451.842258] ? ___ratelimit+0x2cd/0x530 [ 2451.842268] oom_kill_process.cold+0x10/0xb18 [ 2451.860103] Normal free:26420kB min:53696kB low:67120kB high:80544kB active_anon:468kB inactive_anon:13972kB active_file:0kB inactive_file:32kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2451.863421] out_of_memory+0xe3e/0x1190 [ 2451.867884] lowmem_reserve[]: [ 2451.895455] ? oom_killer_disable+0x1c0/0x1c0 [ 2451.895463] ? mutex_trylock+0x152/0x1a0 [ 2451.895473] __alloc_pages_nodemask+0x23e1/0x2720 [ 2451.895490] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2451.895512] alloc_pages_current+0x155/0x260 [ 2451.895522] filemap_fault+0xea3/0x1980 [ 2451.895541] ext4_filemap_fault+0x84/0xb0 [ 2451.895550] __do_fault+0xfa/0x380 [ 2451.895558] __handle_mm_fault+0x2497/0x4620 [ 2451.895568] ? vm_insert_page+0x7c0/0x7c0 [ 2451.895587] handle_mm_fault+0x391/0x860 [ 2451.895599] __do_page_fault+0x549/0xad0 [ 2451.895610] ? spurious_fault+0x640/0x640 [ 2451.957642] ? do_page_fault+0x60/0x500 [ 2451.961623] ? page_fault+0x2f/0x50 [ 2451.965227] page_fault+0x45/0x50 [ 2451.968671] RIP: 1e00:0x93ee55 [ 2451.971837] RSP: 0239:000000c0003cfe40 EFLAGS: 00000003 [ 2451.976725] 0 0 0 0 0 [ 2452.000879] Node 0 DMA: 8*4kB (UE) 2*8kB (UE) 3*16kB (UE) 4*32kB (UE) 4*64kB (UE) 2*128kB (UE) 2*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10976kB [ 2452.043840] Node 0 DMA32: 634*4kB (MEH) 288*8kB (MEH) 188*16kB (MEH) 42*32kB (MEH) 19*64kB (MEH) 4*128kB (UM) 28*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18088kB [ 2452.068078] Mem-Info: [ 2452.079728] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2452.086387] active_anon:20929 inactive_anon:35153 isolated_anon:0 [ 2452.086387] active_file:41 inactive_file:25 isolated_file:0 [ 2452.086387] unevictable:0 dirty:30 writeback:0 unstable:0 [ 2452.086387] slab_reclaimable:12432 slab_unreclaimable:111262 [ 2452.086387] mapped:52938 shmem:37644 pagetables:788 bounce:0 [ 2452.086387] free:13871 free_pcp:37 free_cma:0 [ 2452.099134] Node 1 [ 2452.136324] Node 0 active_anon:83248kB inactive_anon:126640kB active_file:32kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:149688kB dirty:116kB writeback:0kB shmem:136476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2452.158359] Normal: 23*4kB (M) 11*8kB (UM) 10*16kB (M) 9*32kB (M) 7*64kB (ME) 4*128kB (M) 1*256kB (M) 48*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26420kB [ 2452.175679] Node 1 active_anon:468kB inactive_anon:13972kB active_file:24kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:62064kB dirty:4kB writeback:0kB shmem:14100kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2452.181017] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2452.230394] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2452.246937] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2452.266280] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2452.276940] 37699 total pagecache pages [ 2452.290952] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2452.331904] 0 pages in swap cache [ 2452.335386] Swap cache stats: add 0, delete 0, find 0/0 [ 2452.346781] Free swap = 0kB [ 2452.356213] Total swap = 0kB [ 2452.365307] 2097051 pages RAM [ 2452.372452] 0 pages HighMem/MovableOnly [ 2452.376442] 363840 pages reserved [ 2452.386053] 0 pages cma reserved [ 2452.393384] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2452.402499] Node 0 DMA32 free:18088kB min:36200kB low:45248kB high:54296kB active_anon:83248kB inactive_anon:126640kB active_file:68kB inactive_file:0kB unevictable:0kB writepending:116kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:2896kB bounce:0kB free_pcp:148kB local_pcp:120kB free_cma:0kB [ 2452.437564] lowmem_reserve[]: 0 0 0 0 0 [ 2452.446201] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2452.477028] lowmem_reserve[]: 0 0 0 0 0 [ 2452.481095] Node 1 Normal free:26420kB min:53696kB low:67120kB high:80544kB active_anon:468kB inactive_anon:13972kB active_file:0kB inactive_file:68kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2452.512235] lowmem_reserve[]: 0 0 0 0 0 [ 2452.516256] Node 0 DMA: 8*4kB (UE) 2*8kB (UE) 3*16kB (UE) 4*32kB (UE) 4*64kB (UE) 2*128kB (UE) 2*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10976kB [ 2452.556899] Node 0 DMA32: 634*4kB (MEH) 288*8kB (MEH) 188*16kB (MEH) 42*32kB (MEH) 19*64kB (MEH) 4*128kB (UM) 28*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18088kB [ 2452.587051] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2452.612399] Node 1 Normal: 23*4kB (M) 11*8kB (UM) 10*16kB (M) 9*32kB (M) 7*64kB (ME) 4*128kB (M) 1*256kB (M) 48*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26420kB [ 2452.636832] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2452.645754] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2452.665126] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2452.674234] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2452.693761] 37699 total pagecache pages [ 2452.697762] 0 pages in swap cache [ 2452.705465] Swap cache stats: add 0, delete 0, find 0/0 [ 2452.715031] Free swap = 0kB [ 2452.718042] Total swap = 0kB [ 2452.725223] 2097051 pages RAM [ 2452.732582] 0 pages HighMem/MovableOnly [ 2452.736550] 363840 pages reserved [ 2452.744698] 0 pages cma reserved [ 2452.748070] Out of memory (oom_kill_allocating_task): Kill process 8002 (syz-fuzzer) score 0 or sacrifice child [ 2452.767223] Killed process 28705 (syz-executor.4) total-vm:84924kB, anon-rss:68kB, file-rss:0kB, shmem-rss:0kB [ 2452.789322] oom_reaper: reaped process 27505 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2452.835375] oom_reaper: reaped process 28705 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2452.859122] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2452.880617] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2452.885404] CPU: 0 PID: 7982 Comm: syz-fuzzer Not tainted 4.14.224-syzkaller #0 [ 2452.892838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2452.902180] Call Trace: [ 2452.904765] dump_stack+0x1b2/0x281 [ 2452.908396] dump_header+0x178/0x82f [ 2452.912102] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2452.917196] ? ___ratelimit+0x2cd/0x530 [ 2452.921163] oom_kill_process.cold+0x10/0xb18 [ 2452.925658] out_of_memory+0xe3e/0x1190 [ 2452.929635] ? oom_killer_disable+0x1c0/0x1c0 [ 2452.934121] ? mutex_trylock+0x152/0x1a0 [ 2452.938175] __alloc_pages_nodemask+0x23e1/0x2720 [ 2452.943014] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2452.947848] alloc_pages_current+0x155/0x260 [ 2452.952333] filemap_fault+0xea3/0x1980 [ 2452.956311] ext4_filemap_fault+0x84/0xb0 [ 2452.960460] __do_fault+0xfa/0x380 [ 2452.963990] __handle_mm_fault+0x2497/0x4620 [ 2452.968390] ? vm_insert_page+0x7c0/0x7c0 [ 2452.972540] handle_mm_fault+0x391/0x860 [ 2452.976596] __do_page_fault+0x549/0xad0 [ 2452.980649] ? spurious_fault+0x640/0x640 [ 2452.984871] ? do_page_fault+0x60/0x500 [ 2452.988831] ? page_fault+0x2f/0x50 [ 2452.992443] page_fault+0x45/0x50 [ 2452.995871] RIP: 94180:0xc000054240 [ 2452.999475] RSP: 92000:000000c0000a3de0 EFLAGS: 00000003 [ 2453.011051] Mem-Info: [ 2453.021112] active_anon:20618 inactive_anon:35153 isolated_anon:0 [ 2453.021112] active_file:3 inactive_file:13 isolated_file:0 [ 2453.021112] unevictable:0 dirty:30 writeback:0 unstable:0 [ 2453.021112] slab_reclaimable:12412 slab_unreclaimable:111188 [ 2453.021112] mapped:52938 shmem:37644 pagetables:766 bounce:0 [ 2453.021112] free:13904 free_pcp:34 free_cma:0 [ 2453.058581] Node 0 active_anon:82032kB inactive_anon:126640kB active_file:60kB inactive_file:132kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:149688kB dirty:116kB writeback:0kB shmem:136476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2453.088905] Node 1 active_anon:440kB inactive_anon:13972kB active_file:24kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:62064kB dirty:4kB writeback:0kB shmem:14100kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2453.118032] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2453.148600] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2453.153650] Node 0 DMA32 free:18064kB min:36200kB low:45248kB high:54296kB active_anon:82032kB inactive_anon:126640kB active_file:136kB inactive_file:44kB unevictable:0kB writepending:116kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:2884kB bounce:0kB free_pcp:136kB local_pcp:16kB free_cma:0kB [ 2453.185050] lowmem_reserve[]: 0 0 0 0 0 [ 2453.189079] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2453.221175] lowmem_reserve[]: 0 0 0 0 0 [ 2453.225178] Node 1 Normal free:26576kB min:53696kB low:67120kB high:80544kB active_anon:440kB inactive_anon:13972kB active_file:4kB inactive_file:24kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:180kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2453.258083] lowmem_reserve[]: 0 0 0 0 0 [ 2453.278754] Node 0 DMA: 8*4kB (UE) 2*8kB (UE) 3*16kB (UE) 4*32kB (UE) 4*64kB (UE) 2*128kB (UE) 2*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10976kB [ 2453.300690] Node 0 DMA32: 664*4kB (MEH) 300*8kB (MEH) 191*16kB (UMEH) 45*32kB (MEH) 19*64kB (MEH) 3*128kB (UM) 27*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18064kB [ 2453.316146] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2453.331736] Node 1 Normal: 42*4kB (UM) 15*8kB (UM) 11*16kB (UM) 10*32kB (UM) 7*64kB (ME) 4*128kB (M) 1*256kB (M) 48*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26576kB [ 2453.351144] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2453.362831] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2453.371461] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2453.380893] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2453.389557] 37699 total pagecache pages [ 2453.393529] 0 pages in swap cache [ 2453.396971] Swap cache stats: add 0, delete 0, find 0/0 [ 2453.404493] Free swap = 0kB [ 2453.407505] Total swap = 0kB [ 2453.410597] 2097051 pages RAM [ 2453.413698] 0 pages HighMem/MovableOnly [ 2453.417653] 363840 pages reserved [ 2453.423290] 0 pages cma reserved [ 2453.426660] Out of memory (oom_kill_allocating_task): Kill process 7982 (syz-fuzzer) score 0 or sacrifice child [ 2453.436974] Killed process 27873 (syz-executor.2) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 2453.455545] syz-executor.3 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2453.494172] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2453.513844] CPU: 1 PID: 28163 Comm: syz-executor.3 Not tainted 4.14.224-syzkaller #0 [ 2453.521743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2453.531077] Call Trace: [ 2453.533662] dump_stack+0x1b2/0x281 [ 2453.537270] dump_header+0x178/0x82f [ 2453.541022] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2453.546101] ? ___ratelimit+0x2cd/0x530 [ 2453.550053] oom_kill_process.cold+0x10/0xb18 [ 2453.554529] out_of_memory+0xe3e/0x1190 [ 2453.558483] ? oom_killer_disable+0x1c0/0x1c0 [ 2453.562952] ? mutex_trylock+0x152/0x1a0 [ 2453.566997] __alloc_pages_nodemask+0x23e1/0x2720 [ 2453.571823] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2453.576649] alloc_pages_current+0x155/0x260 [ 2453.581035] filemap_fault+0xea3/0x1980 [ 2453.585004] ext4_filemap_fault+0x84/0xb0 [ 2453.589132] __do_fault+0xfa/0x380 [ 2453.592647] __handle_mm_fault+0x2497/0x4620 [ 2453.597029] ? vm_insert_page+0x7c0/0x7c0 [ 2453.601154] ? nanosleep_copyout+0x100/0x100 [ 2453.605544] handle_mm_fault+0x391/0x860 [ 2453.609583] __do_page_fault+0x549/0xad0 [ 2453.613620] ? spurious_fault+0x640/0x640 [ 2453.617743] ? do_page_fault+0x60/0x500 [ 2453.621693] ? page_fault+0x2f/0x50 [ 2453.625293] page_fault+0x45/0x50 [ 2453.628720] RIP: 256169:0x7 [ 2453.631625] RSP: 0009:00007fffe794c54c EFLAGS: 00000032 [ 2453.652109] Mem-Info: [ 2453.662043] active_anon:20618 inactive_anon:35153 isolated_anon:0 [ 2453.662043] active_file:29 inactive_file:0 isolated_file:0 [ 2453.662043] unevictable:0 dirty:30 writeback:0 unstable:0 [ 2453.662043] slab_reclaimable:12412 slab_unreclaimable:111188 [ 2453.662043] mapped:52938 shmem:37644 pagetables:729 bounce:0 [ 2453.662043] free:13904 free_pcp:0 free_cma:0 [ 2453.699493] Node 0 active_anon:82032kB inactive_anon:126640kB active_file:132kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):116kB mapped:149688kB dirty:116kB writeback:0kB shmem:136476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2453.730379] Node 1 active_anon:440kB inactive_anon:13972kB active_file:48kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:62064kB dirty:4kB writeback:0kB shmem:14100kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2453.762488] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2453.790666] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2453.795713] Node 0 DMA32 free:18376kB min:36200kB low:45248kB high:54296kB active_anon:82032kB inactive_anon:126640kB active_file:152kB inactive_file:40kB unevictable:0kB writepending:116kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7424kB pagetables:2760kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2453.845670] lowmem_reserve[]: 0 0 0 0 0 [ 2453.853904] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2453.924712] lowmem_reserve[]: 0 0 0 0 0 [ 2453.933106] Node 1 Normal free:26576kB min:53696kB low:67120kB high:80544kB active_anon:440kB inactive_anon:13972kB active_file:28kB inactive_file:0kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:180kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2453.974193] lowmem_reserve[]: 0 0 0 0 0 [ 2453.982535] Node 0 DMA: 8*4kB (UE) 2*8kB (UE) 3*16kB (UE) 4*32kB (UE) 4*64kB (UE) 2*128kB (UE) 2*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10976kB [ 2454.009539] Node 0 DMA32: 667*4kB (UMEH) 300*8kB (MEH) 190*16kB (MEH) 45*32kB (MEH) 19*64kB (MEH) 3*128kB (UM) 27*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18060kB [ 2454.027548] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2454.041084] Node 1 Normal: 42*4kB (UM) 15*8kB (UM) 11*16kB (UM) 10*32kB (UM) 7*64kB (ME) 4*128kB (M) 1*256kB (M) 48*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26576kB [ 2454.056476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2454.067511] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2454.076360] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2454.085253] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2454.094082] 37699 total pagecache pages [ 2454.098051] 0 pages in swap cache [ 2454.101644] Swap cache stats: add 0, delete 0, find 0/0 [ 2454.106997] Free swap = 0kB [ 2454.112156] Total swap = 0kB [ 2454.115172] 2097051 pages RAM [ 2454.120942] 0 pages HighMem/MovableOnly [ 2454.124906] 363840 pages reserved [ 2454.130537] 0 pages cma reserved [ 2454.133904] Out of memory (oom_kill_allocating_task): Kill process 28163 (syz-executor.3) score 0 or sacrifice child [ 2454.144758] Killed process 28709 (syz-executor.3) total-vm:93252kB, anon-rss:104kB, file-rss:33740kB, shmem-rss:0kB [ 2454.167626] oom_reaper: reaped process 27873 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2454.182769] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2454.209225] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2454.214004] CPU: 1 PID: 7982 Comm: syz-fuzzer Not tainted 4.14.224-syzkaller #0 [ 2454.221435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2454.230782] Call Trace: [ 2454.233353] dump_stack+0x1b2/0x281 [ 2454.236959] dump_header+0x178/0x82f [ 2454.240654] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2454.245734] ? ___ratelimit+0x2cd/0x530 [ 2454.249685] oom_kill_process.cold+0x10/0xb18 [ 2454.254176] out_of_memory+0xe3e/0x1190 [ 2454.258128] ? oom_killer_disable+0x1c0/0x1c0 [ 2454.262597] ? mutex_trylock+0x152/0x1a0 [ 2454.266634] __alloc_pages_nodemask+0x23e1/0x2720 [ 2454.271476] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2454.276302] alloc_pages_current+0x155/0x260 [ 2454.280700] filemap_fault+0xea3/0x1980 [ 2454.284656] ext4_filemap_fault+0x84/0xb0 [ 2454.288781] __do_fault+0xfa/0x380 [ 2454.292297] __handle_mm_fault+0x2497/0x4620 [ 2454.296683] ? vm_insert_page+0x7c0/0x7c0 [ 2454.300811] handle_mm_fault+0x391/0x860 [ 2454.304852] __do_page_fault+0x549/0xad0 [ 2454.308888] ? spurious_fault+0x640/0x640 [ 2454.313011] ? do_page_fault+0x60/0x500 [ 2454.316961] ? page_fault+0x2f/0x50 [ 2454.320562] page_fault+0x45/0x50 [ 2454.324004] RIP: 94180:0xc000054240 [ 2454.327602] RSP: 92000:000000c0000a3de0 EFLAGS: 00000003 [ 2454.334971] Mem-Info: [ 2454.343469] active_anon:20580 inactive_anon:35153 isolated_anon:0 [ 2454.343469] active_file:36 inactive_file:5 isolated_file:0 [ 2454.343469] unevictable:0 dirty:30 writeback:0 unstable:0 [ 2454.343469] slab_reclaimable:12412 slab_unreclaimable:110745 [ 2454.343469] mapped:44234 shmem:37644 pagetables:690 bounce:0 [ 2454.343469] free:13911 free_pcp:154 free_cma:0 [ 2454.379097] Node 0 active_anon:81900kB inactive_anon:126640kB active_file:148kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:114872kB dirty:116kB writeback:0kB shmem:136476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2454.409477] Node 1 active_anon:420kB inactive_anon:13972kB active_file:68kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:62064kB dirty:4kB writeback:0kB shmem:14100kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2454.437634] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2454.465987] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2454.471657] Node 0 DMA32 free:18092kB min:36200kB low:45248kB high:54296kB active_anon:81900kB inactive_anon:126640kB active_file:152kB inactive_file:88kB unevictable:0kB writepending:116kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7392kB pagetables:2580kB bounce:0kB free_pcp:596kB local_pcp:108kB free_cma:0kB [ 2454.502807] lowmem_reserve[]: 0 0 0 0 0 [ 2454.506813] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2454.554418] lowmem_reserve[]: 0 0 0 0 0 [ 2454.562662] Node 1 Normal free:26576kB min:53696kB low:67120kB high:80544kB active_anon:420kB inactive_anon:13972kB active_file:72kB inactive_file:0kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:180kB bounce:0kB free_pcp:20kB local_pcp:20kB free_cma:0kB [ 2454.632070] lowmem_reserve[]: 0 0 0 0 0 [ 2454.636092] Node 0 DMA: 8*4kB (UE) 2*8kB (UE) 3*16kB (UE) 4*32kB (UE) 4*64kB (UE) 2*128kB (UE) 2*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10976kB [ 2454.657597] Node 0 DMA32: 667*4kB (UMEH) 300*8kB (MEH) 190*16kB (MEH) 46*32kB (UMEH) 19*64kB (MEH) 3*128kB (UM) 27*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18092kB [ 2454.677466] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2454.697561] Node 1 Normal: 42*4kB (UM) 15*8kB (UM) 11*16kB (UM) 10*32kB (UM) 7*64kB (ME) 4*128kB (M) 1*256kB (M) 48*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26576kB [ 2454.734426] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2454.743349] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2454.760507] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2454.773548] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2454.786363] 37699 total pagecache pages [ 2454.794515] 0 pages in swap cache [ 2454.797964] Swap cache stats: add 0, delete 0, find 0/0 [ 2454.807449] Free swap = 0kB [ 2454.815069] Total swap = 0kB [ 2454.827487] 2097051 pages RAM [ 2454.836880] 0 pages HighMem/MovableOnly [ 2454.847169] 363840 pages reserved [ 2454.856931] 0 pages cma reserved [ 2454.866632] Out of memory (oom_kill_allocating_task): Kill process 7982 (syz-fuzzer) score 0 or sacrifice child [ 2454.883503] Killed process 28162 (syz-executor.3) total-vm:84924kB, anon-rss:60kB, file-rss:0kB, shmem-rss:0kB [ 2454.929788] oom_reaper: reaped process 28709 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2454.997088] oom_reaper: reaped process 28162 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2455.013950] ion_system_heap invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=0, oom_score_adj=0 [ 2455.038062] ion_system_heap cpuset=/ mems_allowed=0-1 [ 2455.043285] CPU: 0 PID: 4243 Comm: ion_system_heap Not tainted 4.14.224-syzkaller #0 [ 2455.051155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2455.060508] Call Trace: [ 2455.063092] dump_stack+0x1b2/0x281 [ 2455.066713] dump_header+0x178/0x82f [ 2455.070426] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2455.075523] ? ___ratelimit+0x2cd/0x530 [ 2455.079497] oom_kill_process.cold+0x10/0xb18 [ 2455.083988] ? lock_downgrade+0x740/0x740 [ 2455.088136] out_of_memory+0x2dc/0x1190 [ 2455.092106] ? oom_killer_disable+0x1c0/0x1c0 [ 2455.096590] ? mutex_trylock+0x152/0x1a0 [ 2455.100644] __alloc_pages_nodemask+0x23e1/0x2720 [ 2455.105490] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2455.110333] ? ion_heap_sglist_zero+0x165/0x220 [ 2455.114990] ? cache_grow_begin+0x41/0x630 [ 2455.119212] cache_grow_begin+0x91/0x630 [ 2455.123265] ? cache_grow_begin+0x91/0x630 [ 2455.127490] fallback_alloc+0x207/0x2c0 [ 2455.131461] kmem_cache_alloc_node_trace+0xed/0x400 [ 2455.136466] __get_vm_area_node+0xed/0x340 [ 2455.140682] vmap+0xd5/0x290 [ 2455.143693] ? ion_heap_clear_pages+0x23/0x70 [ 2455.148169] ? vunmap+0x50/0x50 [ 2455.151433] ? __vunmap+0x21c/0x300 [ 2455.155057] ion_heap_clear_pages+0x23/0x70 [ 2455.159372] ion_heap_sglist_zero+0x165/0x220 [ 2455.163860] ? ion_heap_clear_pages+0x70/0x70 [ 2455.168349] ? finish_task_switch+0x178/0x610 [ 2455.172854] ? ion_heap_deferred_free+0x222/0x470 [ 2455.177682] ion_system_heap_free+0x1d0/0x240 [ 2455.182180] ion_buffer_destroy+0x132/0x190 [ 2455.186499] ion_heap_deferred_free+0x22a/0x470 [ 2455.191167] ? __schedule+0x857/0x1de0 [ 2455.195047] ? ion_heap_shrink_scan+0x1a0/0x1a0 [ 2455.199716] ? wait_woken+0x230/0x230 [ 2455.203508] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2455.208078] syz-executor.3: page allocation failure: order:0 [ 2455.208615] ? ion_heap_shrink_scan+0x1a0/0x1a0 [ 2455.208625] kthread+0x30d/0x420 [ 2455.214436] , mode:0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask= [ 2455.219050] ? kthread_create_on_node+0xd0/0xd0 [ 2455.219060] ret_from_fork+0x24/0x30 [ 2455.235892] syz-executor.2: [ 2455.240976] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2455.245565] page allocation failure: order:0 [ 2455.270039] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2455.283657] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2455.289022] syz-executor.1: page allocation failure: order:0, mode:0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null) [ 2455.302394] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2455.306984] syz-executor.2 cpuset= [ 2455.319598] CPU: 1 PID: 28711 Comm: syz-executor.3 Not tainted 4.14.224-syzkaller #0 [ 2455.331025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2455.334499] / [ 2455.340368] Call Trace: [ 2455.340398] mems_allowed=0-1 [ 2455.342079] dump_stack+0x1b2/0x281 [ 2455.351339] warn_alloc.cold+0x96/0x1cc [ 2455.355294] ? zone_watermark_ok_safe+0x220/0x220 [ 2455.360115] ? usleep_range+0x130/0x130 [ 2455.364068] ? try_to_free_pages+0x23f/0x6e0 [ 2455.368471] ? _find_next_bit+0xdb/0x100 [ 2455.372513] ? run_timer_softirq+0x5a0/0x5a0 [ 2455.376904] __alloc_pages_nodemask+0x2127/0x2720 [ 2455.381730] ? lock_acquire+0x170/0x3f0 [ 2455.385690] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2455.390513] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2455.394992] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2455.400513] alloc_pages_current+0x155/0x260 [ 2455.404903] ion_page_pool_alloc+0x118/0x1b0 [ 2455.409294] ion_system_heap_allocate+0x133/0x8c0 [ 2455.414115] ? ion_alloc+0x187/0x810 [ 2455.417819] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2455.423251] ? ion_system_contig_heap_create+0x130/0x130 [ 2455.428678] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2455.433673] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2455.438496] ion_alloc+0x204/0x810 [ 2455.442017] ? ion_dma_buf_release+0x40/0x40 [ 2455.446405] ? __might_fault+0x177/0x1b0 [ 2455.450447] ion_ioctl+0xea/0x1f0 [ 2455.453880] ? ion_query_heaps+0x360/0x360 [ 2455.458107] ? ion_query_heaps+0x360/0x360 [ 2455.462322] do_vfs_ioctl+0x75a/0xff0 [ 2455.466102] ? ioctl_preallocate+0x1a0/0x1a0 [ 2455.470488] ? lock_downgrade+0x740/0x740 [ 2455.474619] ? __fget+0x225/0x360 [ 2455.478050] ? do_vfs_ioctl+0xff0/0xff0 [ 2455.482089] ? security_file_ioctl+0x83/0xb0 [ 2455.486476] SyS_ioctl+0x7f/0xb0 [ 2455.489821] ? do_vfs_ioctl+0xff0/0xff0 [ 2455.493775] do_syscall_64+0x1d5/0x640 [ 2455.497659] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2455.502830] RIP: 0033:0x465f69 [ 2455.506001] RSP: 002b:00007fac75d57188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2455.513693] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2455.520947] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2455.528200] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2455.535451] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2455.542701] R13: 00007fffe794c28f R14: 00007fac75d57300 R15: 0000000000022000 [ 2455.549964] CPU: 0 PID: 28694 Comm: syz-executor.2 Not tainted 4.14.224-syzkaller #0 [ 2455.557848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2455.559712] (null) [ 2455.567205] Call Trace: [ 2455.571916] dump_stack+0x1b2/0x281 [ 2455.575537] warn_alloc.cold+0x96/0x1cc [ 2455.576460] syz-executor.1 cpuset= [ 2455.579498] ? zone_watermark_ok_safe+0x220/0x220 [ 2455.579507] ? usleep_range+0x130/0x130 [ 2455.579515] ? try_to_free_pages+0x23f/0x6e0 [ 2455.579524] ? _find_next_bit+0xdb/0x100 [ 2455.579534] ? run_timer_softirq+0x5a0/0x5a0 [ 2455.579549] __alloc_pages_nodemask+0x2127/0x2720 [ 2455.584883] syz-executor.3 cpuset= [ 2455.587899] ? lock_acquire+0x170/0x3f0 [ 2455.587914] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2455.587925] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2455.600807] / [ 2455.604906] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2455.615042] / [ 2455.617204] alloc_pages_current+0x155/0x260 [ 2455.617221] ion_page_pool_alloc+0x118/0x1b0 [ 2455.617233] ion_system_heap_allocate+0x133/0x8c0 [ 2455.625959] mems_allowed=0-1 [ 2455.626758] ? ion_alloc+0x187/0x810 [ 2455.641504] mems_allowed=0-1 [ 2455.644349] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2455.664592] ? ion_system_contig_heap_create+0x130/0x130 [ 2455.670030] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2455.675042] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2455.679874] ion_alloc+0x204/0x810 [ 2455.683405] ? ion_dma_buf_release+0x40/0x40 [ 2455.687809] ? __might_fault+0x177/0x1b0 [ 2455.691869] ion_ioctl+0xea/0x1f0 [ 2455.695319] ? ion_query_heaps+0x360/0x360 [ 2455.699556] ? ion_query_heaps+0x360/0x360 [ 2455.703786] do_vfs_ioctl+0x75a/0xff0 [ 2455.707577] ? ioctl_preallocate+0x1a0/0x1a0 [ 2455.711978] ? lock_downgrade+0x740/0x740 [ 2455.716121] ? __fget+0x225/0x360 [ 2455.719560] ? do_vfs_ioctl+0xff0/0xff0 [ 2455.723523] ? security_file_ioctl+0x83/0xb0 [ 2455.727915] SyS_ioctl+0x7f/0xb0 [ 2455.731272] ? do_vfs_ioctl+0xff0/0xff0 [ 2455.735246] do_syscall_64+0x1d5/0x640 [ 2455.739216] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2455.744390] RIP: 0033:0x465f69 [ 2455.747557] RSP: 002b:00007f5aa2526188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2455.755251] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2455.762509] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2455.769766] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2455.777143] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2455.784427] R13: 00007fffc975a7ef R14: 00007f5aa2526300 R15: 0000000000022000 [ 2455.793591] CPU: 1 PID: 28709 Comm: syz-executor.3 Not tainted 4.14.224-syzkaller #0 [ 2455.801494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2455.810840] Call Trace: [ 2455.813423] dump_stack+0x1b2/0x281 [ 2455.817042] warn_alloc.cold+0x96/0x1cc [ 2455.821005] ? zone_watermark_ok_safe+0x220/0x220 [ 2455.825830] ? usleep_range+0x130/0x130 [ 2455.829785] ? try_to_free_pages+0x23f/0x6e0 [ 2455.834170] ? _find_next_bit+0xdb/0x100 [ 2455.838225] ? run_timer_softirq+0x5a0/0x5a0 [ 2455.842616] __alloc_pages_nodemask+0x2127/0x2720 [ 2455.847445] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2455.852264] ? __lock_acquire+0x5fc/0x3f20 [ 2455.856475] ? __handle_mm_fault+0x2095/0x4620 [ 2455.861036] ? __lock_acquire+0x5fc/0x3f20 [ 2455.865253] alloc_pages_vma+0xd2/0x6d0 [ 2455.869207] __handle_mm_fault+0x25fa/0x4620 [ 2455.873595] ? no_context+0x9c/0x7c0 [ 2455.877286] ? vm_insert_page+0x7c0/0x7c0 [ 2455.881433] handle_mm_fault+0x391/0x860 [ 2455.885475] __do_page_fault+0x549/0xad0 [ 2455.889515] ? spurious_fault+0x640/0x640 [ 2455.893638] ? do_page_fault+0x60/0x500 [ 2455.897590] page_fault+0x25/0x50 [ 2455.901022] RIP: 0010:__put_user_4+0x1c/0x30 [ 2455.905403] RSP: 0000:ffff888041487b08 EFLAGS: 00010293 [ 2455.910746] RAX: 0000000000000000 RBX: 00007fffffffeffd RCX: 0000000001db56d0 [ 2455.917996] RDX: 1ffff1101666cd37 RSI: 0000000000000001 RDI: 0000000001db56d0 [ 2455.925243] RBP: ffff8880b3366400 R08: ffffffff8b9b3828 R09: 0000000000000000 [ 2455.932488] R10: 0000000000000000 R11: ffff8880b3366400 R12: ffff8880b33669b8 [ 2455.939735] R13: ffff8880ac70e880 R14: 0000000000000000 R15: ffff88809afca6c0 [ 2455.946996] mm_release+0x239/0x2d0 [ 2455.950600] do_exit+0x56f/0x2850 [ 2455.954034] ? mm_update_next_owner+0x5b0/0x5b0 [ 2455.958679] ? get_signal+0x323/0x1ca0 [ 2455.962544] ? lock_acquire+0x170/0x3f0 [ 2455.966495] ? lock_downgrade+0x740/0x740 [ 2455.970625] do_group_exit+0x100/0x2e0 [ 2455.974494] get_signal+0x38d/0x1ca0 [ 2455.978187] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2455.983271] do_signal+0x7c/0x1550 [ 2455.986797] ? force_sig_info_fault.constprop.0+0x185/0x260 [ 2455.992486] ? setup_sigcontext+0x820/0x820 [ 2455.996787] ? __do_page_fault+0x571/0xad0 [ 2456.001002] ? lock_downgrade+0x740/0x740 [ 2456.005137] ? mm_fault_error+0x1c0/0x2c0 [ 2456.009264] ? __do_page_fault+0x159/0xad0 [ 2456.013479] ? exit_to_usermode_loop+0x41/0x200 [ 2456.018126] exit_to_usermode_loop+0x160/0x200 [ 2456.022700] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2456.027521] prepare_exit_to_usermode+0x1af/0x210 [ 2456.032344] ? page_fault+0x2f/0x50 [ 2456.035947] retint_user+0x8/0x18 [ 2456.039377] RIP: 0033:0x465f05 [ 2456.042546] RSP: 002b:00007fffe794c2e0 EFLAGS: 00010206 [ 2456.047891] RAX: 0000000000000000 RBX: 00000000002564a0 RCX: 000000000048a631 [ 2456.055140] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2456.062387] RBP: 0000000000000001 R08: 0000000000000000 R09: 000002918798b8e7 [ 2456.067916] Mem-Info: [ 2456.069632] R10: 0000000000000000 R11: 0000000000000000 R12: 000000000056bf60 [ 2456.069639] R13: 000000000056c9e0 R14: 000000000056bf60 R15: 000000000025615f [ 2456.072047] active_anon:20555 inactive_anon:35153 isolated_anon:0 [ 2456.072047] active_file:45 inactive_file:8 isolated_file:0 [ 2456.072047] unevictable:0 dirty:30 writeback:0 unstable:0 [ 2456.072047] slab_reclaimable:12405 slab_unreclaimable:110757 [ 2456.072047] mapped:44234 shmem:37644 pagetables:668 bounce:0 [ 2456.072047] free:13771 free_pcp:30 free_cma:0 [ 2456.079868] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2456.086662] CPU: 0 PID: 28669 Comm: syz-executor.1 Not tainted 4.14.224-syzkaller #0 [ 2456.136720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2456.146073] Call Trace: [ 2456.148666] dump_stack+0x1b2/0x281 [ 2456.152294] warn_alloc.cold+0x96/0x1cc [ 2456.156276] ? zone_watermark_ok_safe+0x220/0x220 [ 2456.161128] ? usleep_range+0x130/0x130 [ 2456.165113] ? try_to_free_pages+0x23f/0x6e0 [ 2456.169525] ? _find_next_bit+0xdb/0x100 [ 2456.173580] ? run_timer_softirq+0x5a0/0x5a0 [ 2456.177988] __alloc_pages_nodemask+0x2127/0x2720 [ 2456.182842] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2456.186943] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2456.187690] ? ion_heap_sglist_zero+0x165/0x220 [ 2456.187704] ? mark_held_locks+0xa6/0xf0 [ 2456.206071] (null) [ 2456.207649] ? cache_grow_begin+0x41/0x630 [ 2456.209942] syz-executor.3 cpuset= [ 2456.214015] cache_grow_begin+0x91/0x630 [ 2456.214017] / mems_allowed=0-1 [ 2456.217540] ? cache_grow_begin+0x91/0x630 [ 2456.228967] fallback_alloc+0x207/0x2c0 [ 2456.232927] kmem_cache_alloc_node_trace+0xed/0x400 [ 2456.237930] __get_vm_area_node+0xed/0x340 [ 2456.242158] vmap+0xd5/0x290 [ 2456.245165] ? ion_heap_clear_pages+0x23/0x70 [ 2456.249649] ? vunmap+0x50/0x50 [ 2456.252913] ? __vunmap+0x21c/0x300 [ 2456.256522] ion_heap_clear_pages+0x23/0x70 [ 2456.260835] ion_heap_sglist_zero+0x165/0x220 [ 2456.265318] ? ion_heap_clear_pages+0x70/0x70 [ 2456.269813] ? _ion_heap_freelist_drain+0x28b/0x410 [ 2456.274824] ion_system_heap_free+0x1d0/0x240 [ 2456.279309] ion_buffer_destroy+0x132/0x190 [ 2456.283630] _ion_heap_freelist_drain+0x293/0x410 [ 2456.288468] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2456.293297] ion_alloc+0x244/0x810 [ 2456.296820] ? ion_dma_buf_release+0x40/0x40 [ 2456.301216] ? __might_fault+0x177/0x1b0 [ 2456.305310] ion_ioctl+0xea/0x1f0 [ 2456.308748] ? ion_query_heaps+0x360/0x360 [ 2456.312975] ? ion_query_heaps+0x360/0x360 [ 2456.317188] do_vfs_ioctl+0x75a/0xff0 [ 2456.320977] ? ioctl_preallocate+0x1a0/0x1a0 [ 2456.325372] ? lock_downgrade+0x740/0x740 [ 2456.329510] ? __fget+0x225/0x360 [ 2456.332949] ? do_vfs_ioctl+0xff0/0xff0 [ 2456.336902] ? security_file_ioctl+0x83/0xb0 [ 2456.341299] SyS_ioctl+0x7f/0xb0 [ 2456.344655] ? do_vfs_ioctl+0xff0/0xff0 [ 2456.348616] do_syscall_64+0x1d5/0x640 [ 2456.352495] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2456.357676] RIP: 0033:0x465f69 [ 2456.360851] RSP: 002b:00007f66274e4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2456.368552] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2456.375805] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2456.383059] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2456.390318] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2456.396642] Node 0 active_anon:81700kB inactive_anon:126640kB active_file:44kB inactive_file:76kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:80072kB dirty:116kB writeback:0kB shmem:136476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2456.397577] R13: 00007ffeea3ca95f R14: 00007f66274e4300 R15: 0000000000022000 [ 2456.432761] CPU: 1 PID: 28711 Comm: syz-executor.3 Not tainted 4.14.224-syzkaller #0 [ 2456.440636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2456.449981] Call Trace: [ 2456.452566] dump_stack+0x1b2/0x281 [ 2456.456203] warn_alloc.cold+0x96/0x1cc [ 2456.460186] ? zone_watermark_ok_safe+0x220/0x220 [ 2456.465050] __alloc_pages_nodemask+0x2127/0x2720 [ 2456.469894] ? _raw_spin_unlock_irq+0x24/0x80 [ 2456.474389] ? lock_acquire+0x170/0x3f0 [ 2456.478365] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2456.483208] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2456.488655] ? __mutex_unlock_slowpath+0x75/0x770 [ 2456.493496] alloc_pages_current+0x155/0x260 [ 2456.497903] ion_page_pool_alloc+0x118/0x1b0 [ 2456.502306] ion_system_heap_allocate+0x133/0x8c0 [ 2456.507147] ? _raw_spin_unlock+0x29/0x40 [ 2456.511287] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2456.516230] ? ion_system_contig_heap_create+0x130/0x130 [ 2456.521676] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2456.526687] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2456.531524] ion_alloc+0x27a/0x810 [ 2456.535064] ? ion_dma_buf_release+0x40/0x40 [ 2456.539468] ? __might_fault+0x177/0x1b0 [ 2456.543523] ion_ioctl+0xea/0x1f0 [ 2456.546969] ? ion_query_heaps+0x360/0x360 [ 2456.551204] ? ion_query_heaps+0x360/0x360 [ 2456.555431] do_vfs_ioctl+0x75a/0xff0 [ 2456.559234] ? ioctl_preallocate+0x1a0/0x1a0 [ 2456.563634] ? lock_downgrade+0x740/0x740 [ 2456.567780] ? __fget+0x225/0x360 [ 2456.571227] ? do_vfs_ioctl+0xff0/0xff0 [ 2456.575194] ? security_file_ioctl+0x83/0xb0 [ 2456.579595] SyS_ioctl+0x7f/0xb0 [ 2456.582951] ? do_vfs_ioctl+0xff0/0xff0 [ 2456.586919] do_syscall_64+0x1d5/0x640 [ 2456.590808] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2456.595989] RIP: 0033:0x465f69 [ 2456.599171] RSP: 002b:00007fac75d57188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2456.606873] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2456.614136] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2456.621400] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2456.628665] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2456.635926] R13: 00007fffe794c28f R14: 00007fac75d57300 R15: 0000000000022000 [ 2456.682722] Node 1 active_anon:420kB inactive_anon:13972kB active_file:112kB inactive_file:2200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:63064kB dirty:4kB writeback:0kB shmem:14100kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2456.748477] Node 0 DMA free:11820kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:180kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2456.807051] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2456.817877] Node 0 DMA32 free:169940kB min:36200kB low:45248kB high:54296kB active_anon:81656kB inactive_anon:126640kB active_file:592kB inactive_file:3164kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7360kB pagetables:2492kB bounce:0kB free_pcp:1392kB local_pcp:740kB free_cma:0kB [ 2456.877864] lowmem_reserve[]: 0 0 0 0 0 [ 2456.881884] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2456.990766] lowmem_reserve[]: 0 0 0 0 0 [ 2456.994801] Node 1 Normal free:516808kB min:53696kB low:67120kB high:80544kB active_anon:420kB inactive_anon:13972kB active_file:112kB inactive_file:3512kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:180kB bounce:0kB free_pcp:1320kB local_pcp:628kB free_cma:0kB [ 2457.025506] lowmem_reserve[]: 0 0 0 0 0 [ 2457.032291] Node 0 DMA: 8*4kB (UE) 2*8kB (UE) 3*16kB (UE) 4*32kB (UE) 15*64kB (UME) 5*128kB (UE) 3*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11808kB [ 2457.048758] Node 0 DMA32: 11967*4kB (UMEH) 5480*8kB (UMEH) 1380*16kB (UMEH) 134*32kB (UMEH) 2238*64kB (UMEH) 154*128kB (UM) 25*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 287420kB [ 2457.087896] warn_alloc_show_mem: 3 callbacks suppressed [ 2457.087900] Mem-Info: [ 2457.095710] active_anon:20569 inactive_anon:35153 isolated_anon:0 [ 2457.095710] active_file:726 inactive_file:1666 isolated_file:0 [ 2457.095710] unevictable:0 dirty:5 writeback:0 unstable:0 [ 2457.095710] slab_reclaimable:12399 slab_unreclaimable:111070 [ 2457.095710] mapped:37009 shmem:37644 pagetables:668 bounce:0 [ 2457.095710] free:209447 free_pcp:670 free_cma:0 [ 2457.129934] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2457.166504] Node 1 Normal: 2233*4kB (UM) 295*8kB (UM) 165*16kB (UM) 152*32kB (UM) 6222*64kB (UE) 451*128kB (UM) 99*256kB (U) 56*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 528748kB [ 2457.219292] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2457.238246] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2457.246853] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2457.247438] Node 0 active_anon:81856kB inactive_anon:126640kB active_file:1792kB inactive_file:4364kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:83372kB dirty:16kB writeback:0kB shmem:136476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2457.317872] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2457.326488] 40104 total pagecache pages [ 2457.357896] 0 pages in swap cache [ 2457.361389] Swap cache stats: add 0, delete 0, find 0/0 [ 2457.366750] Free swap = 0kB [ 2457.385173] Node 1 active_anon:420kB inactive_anon:13972kB active_file:1112kB inactive_file:2500kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:64964kB dirty:4kB writeback:0kB shmem:14100kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2457.397872] Total swap = 0kB [ 2457.458886] 2097051 pages RAM [ 2457.462033] 0 pages HighMem/MovableOnly [ 2457.463207] Node 0 [ 2457.466000] 363840 pages reserved [ 2457.466018] DMA free:11128kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:40kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2457.490053] 0 pages cma reserved [ 2457.587813] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2457.603061] Node 0 DMA32 free:353856kB min:36200kB low:45248kB high:54296kB active_anon:81456kB inactive_anon:126640kB active_file:1592kB inactive_file:4364kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7328kB pagetables:2344kB bounce:0kB free_pcp:1420kB local_pcp:716kB free_cma:0kB [ 2457.703445] lowmem_reserve[]: 0 0 0 0 0 [ 2457.707495] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2457.743375] Mem-Info: [ 2457.745838] active_anon:20469 inactive_anon:35153 isolated_anon:0 [ 2457.745838] active_file:726 inactive_file:1716 isolated_file:0 [ 2457.745838] unevictable:0 dirty:5 writeback:0 unstable:0 [ 2457.745838] slab_reclaimable:12349 slab_unreclaimable:112588 [ 2457.745838] mapped:36909 shmem:37644 pagetables:631 bounce:0 [ 2457.745838] free:227681 free_pcp:689 free_cma:0 [ 2457.837806] lowmem_reserve[]: 0 0 0 0 0 [ 2457.841837] Node 1 Normal free:458788kB min:53696kB low:67120kB high:80544kB active_anon:420kB inactive_anon:13972kB active_file:1112kB inactive_file:2512kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:180kB bounce:0kB free_pcp:1484kB local_pcp:740kB free_cma:0kB [ 2457.895269] lowmem_reserve[]: 0 0 0 0 0 [ 2457.899560] Node 0 DMA: 46*4kB (UE) 9*8kB (UE) 5*16kB (UE) 4*32kB (UE) 3*64kB (UME) 4*128kB (UE) 3*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11152kB [ 2457.958045] Node 0 DMA32: 12537*4kB (UMEH) 5801*8kB (UMEH) 7814*16kB (UMEH) 4702*32kB (UMEH) 3*64kB (H) 2*128kB (H) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 372492kB [ 2458.017808] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2458.030989] Node 1 Normal: 3534*4kB (UM) 1743*8kB (UM) 1785*16kB (UME) 1729*32kB (UME) 83*64kB (UME) 1399*128kB (UM) 217*256kB (U) 57*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 381088kB [ 2458.076830] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2458.085783] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2458.140477] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2458.149450] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2458.190104] 40131 total pagecache pages [ 2458.194129] 0 pages in swap cache [ 2458.197590] Swap cache stats: add 0, delete 0, find 0/0 [ 2458.237769] Free swap = 0kB [ 2458.240816] Total swap = 0kB [ 2458.243828] 2097051 pages RAM [ 2458.246922] 0 pages HighMem/MovableOnly [ 2458.254467] 363840 pages reserved [ 2458.258572] 0 pages cma reserved [ 2458.263792] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2458.275700] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2458.280900] CPU: 0 PID: 28669 Comm: syz-executor.1 Not tainted 4.14.224-syzkaller #0 [ 2458.288775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2458.298123] Call Trace: [ 2458.300713] dump_stack+0x1b2/0x281 [ 2458.304352] warn_alloc.cold+0x96/0x1cc [ 2458.308331] ? zone_watermark_ok_safe+0x220/0x220 [ 2458.313195] __alloc_pages_nodemask+0x2127/0x2720 [ 2458.318050] ? lock_acquire+0x170/0x3f0 [ 2458.322034] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2458.326877] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2458.332328] ? __mutex_unlock_slowpath+0x75/0x770 [ 2458.337171] alloc_pages_current+0x155/0x260 [ 2458.341581] ion_page_pool_alloc+0x118/0x1b0 [ 2458.345986] ion_system_heap_allocate+0x133/0x8c0 [ 2458.350827] ? _raw_spin_unlock+0x29/0x40 [ 2458.354968] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2458.359893] ? ion_system_contig_heap_create+0x130/0x130 [ 2458.365339] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2458.370181] ion_alloc+0x27a/0x810 [ 2458.373721] ? ion_dma_buf_release+0x40/0x40 [ 2458.378127] ? __might_fault+0x177/0x1b0 [ 2458.382195] ion_ioctl+0xea/0x1f0 [ 2458.385642] ? ion_query_heaps+0x360/0x360 [ 2458.389876] ? ion_query_heaps+0x360/0x360 [ 2458.394108] do_vfs_ioctl+0x75a/0xff0 [ 2458.397908] ? ioctl_preallocate+0x1a0/0x1a0 [ 2458.402309] ? lock_downgrade+0x740/0x740 [ 2458.406452] ? __fget+0x225/0x360 [ 2458.409904] ? do_vfs_ioctl+0xff0/0xff0 [ 2458.413872] ? security_file_ioctl+0x83/0xb0 [ 2458.418280] SyS_ioctl+0x7f/0xb0 [ 2458.421640] ? do_vfs_ioctl+0xff0/0xff0 [ 2458.425610] do_syscall_64+0x1d5/0x640 [ 2458.429510] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2458.434699] RIP: 0033:0x465f69 [ 2458.437880] RSP: 002b:00007f66274e4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2458.445583] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2458.452935] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2458.460200] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2458.467463] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2458.474743] R13: 00007ffeea3ca95f R14: 00007f66274e4300 R15: 0000000000022000 [ 2458.507859] Node 0 active_anon:81356kB inactive_anon:126660kB active_file:1804kB inactive_file:4388kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:82716kB dirty:0kB writeback:0kB shmem:136504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2458.538023] Node 1 active_anon:340kB inactive_anon:13972kB active_file:1212kB inactive_file:2516kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:65012kB dirty:0kB writeback:0kB shmem:14100kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2458.542516] Mem-Info: [ 2458.571315] active_anon:20424 inactive_anon:35158 isolated_anon:0 [ 2458.571315] active_file:754 inactive_file:1726 isolated_file:0 [ 2458.571315] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2458.571315] slab_reclaimable:12322 slab_unreclaimable:112816 [ 2458.571315] mapped:36932 shmem:37651 pagetables:624 bounce:0 [ 2458.571315] free:183917 free_pcp:359 free_cma:0 [ 2458.658049] Node 0 DMA free:11692kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:152kB inactive_file:40kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2458.668983] Node 0 active_anon:81356kB inactive_anon:126660kB active_file:1804kB inactive_file:4388kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:82716kB dirty:0kB writeback:0kB shmem:136504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2458.737759] Bluetooth: hci2 command 0x0409 tx timeout [ 2458.765792] Node 1 active_anon:340kB inactive_anon:13972kB active_file:1212kB inactive_file:2516kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:65012kB dirty:0kB writeback:0kB shmem:14100kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2458.827796] Bluetooth: hci0 command 0x0409 tx timeout [ 2458.843179] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2458.853280] Node 0 DMA free:11152kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:152kB inactive_file:40kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2458.877714] Node 0 DMA32 free:586100kB min:36200kB low:45248kB high:54296kB active_anon:81356kB inactive_anon:126660kB active_file:1652kB inactive_file:4348kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7328kB pagetables:2316kB bounce:0kB free_pcp:1264kB local_pcp:620kB free_cma:0kB [ 2458.911970] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2458.917026] Node 0 DMA32 free:586924kB min:36200kB low:45248kB high:54296kB active_anon:81356kB inactive_anon:126660kB active_file:1652kB inactive_file:4348kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7328kB pagetables:2316kB bounce:0kB free_pcp:1384kB local_pcp:644kB free_cma:0kB [ 2459.012702] IPVS: ftp: loaded support on port[0] = 21 [ 2459.036980] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2459.062124] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2459.067283] CPU: 0 PID: 28694 Comm: syz-executor.2 Not tainted 4.14.224-syzkaller #0 [ 2459.075168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2459.084523] Call Trace: [ 2459.087114] dump_stack+0x1b2/0x281 [ 2459.090745] warn_alloc.cold+0x96/0x1cc [ 2459.094720] ? zone_watermark_ok_safe+0x220/0x220 [ 2459.099578] __alloc_pages_nodemask+0x2127/0x2720 [ 2459.105983] ? finish_task_switch+0x178/0x610 [ 2459.110481] ? switch_mm_irqs_off+0x601/0xeb0 [ 2459.114978] ? lock_acquire+0x170/0x3f0 [ 2459.118960] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2459.123811] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2459.129263] ? __mutex_unlock_slowpath+0x75/0x770 [ 2459.134107] alloc_pages_current+0x155/0x260 [ 2459.138520] ion_page_pool_alloc+0x118/0x1b0 [ 2459.142932] ion_system_heap_allocate+0x133/0x8c0 [ 2459.147780] ? _raw_spin_unlock+0x29/0x40 [ 2459.151926] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2459.156860] ? ion_system_contig_heap_create+0x130/0x130 [ 2459.162318] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2459.167340] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2459.172183] ion_alloc+0x27a/0x810 [ 2459.175724] ? ion_dma_buf_release+0x40/0x40 [ 2459.180133] ? __might_fault+0x177/0x1b0 [ 2459.184192] ion_ioctl+0xea/0x1f0 [ 2459.187641] ? ion_query_heaps+0x360/0x360 [ 2459.191876] ? ion_query_heaps+0x360/0x360 [ 2459.196115] do_vfs_ioctl+0x75a/0xff0 [ 2459.199922] ? ioctl_preallocate+0x1a0/0x1a0 [ 2459.204332] ? lock_downgrade+0x740/0x740 [ 2459.208495] ? __fget+0x225/0x360 [ 2459.211954] ? do_vfs_ioctl+0xff0/0xff0 [ 2459.215934] ? security_file_ioctl+0x83/0xb0 [ 2459.220348] SyS_ioctl+0x7f/0xb0 [ 2459.223714] ? do_vfs_ioctl+0xff0/0xff0 [ 2459.227692] do_syscall_64+0x1d5/0x640 [ 2459.231587] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2459.237292] RIP: 0033:0x465f69 [ 2459.240483] RSP: 002b:00007f5aa2526188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2459.248186] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2459.255470] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2459.262736] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2459.265109] lowmem_reserve[]: [ 2459.269997] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2459.270002] R13: 00007fffc975a7ef R14: 00007f5aa2526300 R15: 0000000000022000 [ 2459.364497] 0 0 0 0 0 [ 2459.369292] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2459.393254] IPVS: ftp: loaded support on port[0] = 21 [ 2459.427774] lowmem_reserve[]: 0 0 0 0 0 [ 2459.431889] Node 1 Normal free:120688kB min:53696kB low:67120kB high:80544kB active_anon:340kB inactive_anon:13972kB active_file:2056kB inactive_file:1364kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:180kB bounce:0kB free_pcp:188kB local_pcp:188kB free_cma:0kB [ 2459.497648] lowmem_reserve[]: 0 0 0 0 0 [ 2459.501713] Node 0 DMA: 47*4kB (UME) 42*8kB (UME) 16*16kB (UE) 7*32kB (UE) 6*64kB (UME) 1*128kB (E) 3*256kB (UME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10988kB [ 2459.535995] Node 0 DMA32: 308*4kB (MEH) 168*8kB (EH) 128*16kB (UMEH) 5509*32kB (UMEH) 16*64kB (UMH) 3*128kB (H) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 182320kB [ 2459.577200] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2459.598334] Node 1 Normal: 7022*4kB (UME) 2313*8kB (UME) 1830*16kB (UM) 1394*32kB (UM) 3*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 120672kB [ 2459.617141] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2459.645102] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2459.669336] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2459.679426] chnl_net:caif_netlink_parms(): no params data found [ 2459.686163] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2459.707667] 41100 total pagecache pages [ 2459.711678] 0 pages in swap cache [ 2459.715124] Swap cache stats: add 0, delete 0, find 0/0 [ 2459.738226] Free swap = 0kB [ 2459.741288] Total swap = 0kB [ 2459.744307] 2097051 pages RAM [ 2459.757652] 0 pages HighMem/MovableOnly [ 2459.761651] 363840 pages reserved [ 2459.765096] 0 pages cma reserved [ 2459.983851] lowmem_reserve[]: 0 0 0 0 0 [ 2459.987948] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2460.015003] lowmem_reserve[]: 0 0 0 0 0 [ 2460.019052] Node 1 Normal free:26440kB min:53696kB low:67120kB high:80544kB active_anon:380kB inactive_anon:13972kB active_file:40kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:188kB bounce:0kB free_pcp:144kB local_pcp:132kB free_cma:0kB [ 2460.047799] lowmem_reserve[]: 0 0 0 0 0 [ 2460.051779] Node 0 DMA: 3*4kB (UE) 41*8kB (UE) 16*16kB (UE) 7*32kB (UE) 5*64kB (UE) 1*128kB (E) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10996kB [ 2460.067253] Node 0 DMA32: 776*4kB (UMEH) 364*8kB (UMEH) 196*16kB (UMEH) 280*32kB (UMEH) 8*64kB (UMH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18624kB [ 2460.081935] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2460.094767] Node 1 Normal: 22*4kB (UME) 10*8kB (UME) 9*16kB (M) 777*32kB (UM) 12*64kB (UM) 5*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26584kB [ 2460.127599] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2460.163515] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2460.173786] CPU: 1 PID: 28669 Comm: syz-executor.1 Not tainted 4.14.224-syzkaller #0 [ 2460.181670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2460.191016] Call Trace: [ 2460.193605] dump_stack+0x1b2/0x281 [ 2460.197229] warn_alloc.cold+0x96/0x1cc [ 2460.200265] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2460.201196] ? zone_watermark_ok_safe+0x220/0x220 [ 2460.210031] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2460.214865] ? usleep_range+0x130/0x130 [ 2460.223609] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2460.227545] ? try_to_free_pages+0x23f/0x6e0 [ 2460.227555] ? _find_next_bit+0xdb/0x100 [ 2460.227565] ? run_timer_softirq+0x5a0/0x5a0 [ 2460.236373] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2460.240785] __alloc_pages_nodemask+0x2127/0x2720 [ 2460.240802] ? lock_acquire+0x170/0x3f0 [ 2460.244832] 37685 total pagecache pages [ 2460.249227] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2460.249237] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2460.249251] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2460.257822] 0 pages in swap cache [ 2460.262635] ? alloc_pages_current+0x16/0x260 [ 2460.266581] Swap cache stats: add 0, delete 0, find 0/0 [ 2460.270550] alloc_pages_current+0x155/0x260 [ 2460.270563] ion_page_pool_alloc+0x118/0x1b0 [ 2460.270574] ion_system_heap_allocate+0x133/0x8c0 [ 2460.275386] Free swap = 0kB [ 2460.279862] ? _raw_spin_unlock+0x29/0x40 [ 2460.279871] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2460.279881] ? ion_system_contig_heap_create+0x130/0x130 [ 2460.285303] Total swap = 0kB [ 2460.288755] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2460.288767] ion_alloc+0x27a/0x810 [ 2460.288781] ? ion_dma_buf_release+0x40/0x40 [ 2460.293245] 2097051 pages RAM [ 2460.298599] ? __might_fault+0x177/0x1b0 [ 2460.298614] ion_ioctl+0xea/0x1f0 [ 2460.302994] 0 pages HighMem/MovableOnly [ 2460.307384] ? ion_query_heaps+0x360/0x360 [ 2460.312242] 363840 pages reserved [ 2460.315229] ? ion_query_heaps+0x360/0x360 [ 2460.319379] 0 pages cma reserved [ 2460.324278] do_vfs_ioctl+0x75a/0xff0 [ 2460.329716] Out of memory: Kill process 7978 (syz-fuzzer) score 8 or sacrifice child [ 2460.332705] ? ioctl_preallocate+0x1a0/0x1a0 [ 2460.337593] Killed process 28704 (syz-executor.5) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 2460.341041] ? lock_downgrade+0x740/0x740 [ 2460.341055] ? __fget+0x225/0x360 [ 2460.409788] ? do_vfs_ioctl+0xff0/0xff0 [ 2460.413743] ? security_file_ioctl+0x83/0xb0 [ 2460.418129] SyS_ioctl+0x7f/0xb0 [ 2460.421473] ? do_vfs_ioctl+0xff0/0xff0 [ 2460.425595] do_syscall_64+0x1d5/0x640 [ 2460.429482] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2460.434706] RIP: 0033:0x465f69 [ 2460.437876] RSP: 002b:00007f66274e4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2460.445825] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2460.453077] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2460.460327] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2460.467582] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2460.474917] R13: 00007ffeea3ca95f R14: 00007f66274e4300 R15: 0000000000022000 [ 2460.483872] warn_alloc_show_mem: 1 callbacks suppressed [ 2460.483875] Mem-Info: [ 2460.491703] active_anon:20606 inactive_anon:35157 isolated_anon:0 [ 2460.491703] active_file:35 inactive_file:0 isolated_file:0 [ 2460.491703] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2460.491703] slab_reclaimable:12301 slab_unreclaimable:113646 [ 2460.491703] mapped:35630 shmem:37652 pagetables:666 bounce:0 [ 2460.491703] free:13889 free_pcp:0 free_cma:0 [ 2460.500060] syz-executor.2: [ 2460.524768] Node 0 active_anon:82044kB inactive_anon:126656kB active_file:24kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:80456kB dirty:0kB writeback:0kB shmem:136508kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2460.555649] Node 1 active_anon:380kB inactive_anon:13972kB active_file:116kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:62064kB dirty:0kB writeback:0kB shmem:14100kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2460.566124] oom_reaper: reaped process 28704 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2460.582778] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2460.612917] syz-executor.3: [ 2460.631430] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2460.636365] page allocation failure: order:0 [ 2460.646759] Node 0 [ 2460.647614] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2460.655743] DMA32 free:18004kB min:36200kB low:45248kB high:54296kB active_anon:82044kB inactive_anon:126656kB active_file:24kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:2476kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 2460.678137] page allocation failure: order:0 [ 2460.706097] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2460.736210] lowmem_reserve[]: 0 0 0 0 0 [ 2460.736614] kworker/u4:3 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 2460.765296] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2460.772168] CPU: 0 PID: 28711 Comm: syz-executor.3 Not tainted 4.14.224-syzkaller #0 [ 2460.798738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2460.808088] Call Trace: [ 2460.810678] dump_stack+0x1b2/0x281 [ 2460.813873] lowmem_reserve[]: 0 [ 2460.814307] warn_alloc.cold+0x96/0x1cc [ 2460.814313] 0 [ 2460.817574] ? zone_watermark_ok_safe+0x220/0x220 [ 2460.817583] ? usleep_range+0x130/0x130 [ 2460.817590] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2460.817601] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2460.817610] ? run_timer_softirq+0x5a0/0x5a0 [ 2460.817626] __alloc_pages_nodemask+0x2127/0x2720 [ 2460.817641] ? lock_acquire+0x170/0x3f0 [ 2460.817656] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2460.817668] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2460.817688] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2460.817702] ? alloc_pages_current+0x37/0x260 [ 2460.817712] alloc_pages_current+0x155/0x260 [ 2460.821680] Bluetooth: hci2 command 0x041b tx timeout [ 2460.823458] ion_page_pool_alloc+0x118/0x1b0 [ 2460.844702] 0 [ 2460.846719] ion_system_heap_allocate+0x133/0x8c0 [ 2460.873585] 0 [ 2460.874709] ? _raw_spin_unlock+0x29/0x40 [ 2460.896081] 0 [ 2460.897059] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2460.901313] Bluetooth: hci0 command 0x041b tx timeout [ 2460.902969] ? ion_system_contig_heap_create+0x130/0x130 [ 2460.918484] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2460.923496] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2460.928332] ion_alloc+0x27a/0x810 [ 2460.928348] ? ion_dma_buf_release+0x40/0x40 [ 2460.928360] ? __might_fault+0x177/0x1b0 [ 2460.928372] ion_ioctl+0xea/0x1f0 [ 2460.928382] ? ion_query_heaps+0x360/0x360 [ 2460.928395] ? ion_query_heaps+0x360/0x360 [ 2460.928404] do_vfs_ioctl+0x75a/0xff0 [ 2460.928416] ? ioctl_preallocate+0x1a0/0x1a0 [ 2460.928424] ? lock_downgrade+0x740/0x740 [ 2460.928436] ? __fget+0x225/0x360 [ 2460.928446] ? do_vfs_ioctl+0xff0/0xff0 [ 2460.953813] Node 1 [ 2460.956131] ? security_file_ioctl+0x83/0xb0 [ 2460.978844] SyS_ioctl+0x7f/0xb0 [ 2460.982205] ? do_vfs_ioctl+0xff0/0xff0 [ 2460.982946] Normal free:26584kB min:53696kB low:67120kB high:80544kB active_anon:380kB inactive_anon:13972kB active_file:0kB inactive_file:80kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:112kB bounce:0kB free_pcp:132kB local_pcp:96kB free_cma:0kB [ 2460.986174] do_syscall_64+0x1d5/0x640 [ 2461.017924] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2461.023112] RIP: 0033:0x465f69 [ 2461.026295] RSP: 002b:00007fac75d57188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2461.033110] lowmem_reserve[]: [ 2461.033998] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2461.034005] 0 [ 2461.037089] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2461.053396] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2461.060664] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2461.062823] 0 [ 2461.067932] R13: 00007fffe794c28f R14: 00007fac75d57300 R15: 0000000000022000 [ 2461.082435] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2461.096535] 0 0 0 [ 2461.098088] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2461.103817] CPU: 0 PID: 28694 Comm: syz-executor.2 Not tainted 4.14.224-syzkaller #0 [ 2461.104894] Node 0 [ 2461.111682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2461.111687] Call Trace: [ 2461.111706] dump_stack+0x1b2/0x281 [ 2461.111719] warn_alloc.cold+0x96/0x1cc [ 2461.111730] ? zone_watermark_ok_safe+0x220/0x220 [ 2461.111740] ? usleep_range+0x130/0x130 [ 2461.111748] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2461.111760] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2461.111768] ? run_timer_softirq+0x5a0/0x5a0 [ 2461.111783] __alloc_pages_nodemask+0x2127/0x2720 [ 2461.111798] ? lock_acquire+0x170/0x3f0 [ 2461.111812] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2461.132402] DMA: [ 2461.133506] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2461.155003] 2*4kB [ 2461.156768] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2461.183774] (UE) 38*8kB [ 2461.184449] ? __sanitizer_cov_trace_pc+0x9/0x50 [ 2461.184455] (UE) [ 2461.187109] alloc_pages_current+0x155/0x260 [ 2461.198294] ion_page_pool_alloc+0x118/0x1b0 [ 2461.202698] ion_system_heap_allocate+0x133/0x8c0 [ 2461.207536] ? _raw_spin_unlock+0x29/0x40 [ 2461.211680] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2461.213781] 16*16kB [ 2461.216600] ? ion_system_contig_heap_create+0x130/0x130 [ 2461.216602] (UE) 7*32kB [ 2461.218924] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2461.218934] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2461.218945] ion_alloc+0x27a/0x810 [ 2461.218959] ? ion_dma_buf_release+0x40/0x40 [ 2461.218972] ? __might_fault+0x177/0x1b0 [ 2461.218985] ion_ioctl+0xea/0x1f0 [ 2461.218994] ? ion_query_heaps+0x360/0x360 [ 2461.219006] ? ion_query_heaps+0x360/0x360 [ 2461.219016] do_vfs_ioctl+0x75a/0xff0 [ 2461.219027] ? ioctl_preallocate+0x1a0/0x1a0 [ 2461.219034] ? lock_downgrade+0x740/0x740 [ 2461.219046] ? __fget+0x225/0x360 [ 2461.242017] (UE) [ 2461.244862] ? do_vfs_ioctl+0xff0/0xff0 [ 2461.269832] 5*64kB [ 2461.271463] ? security_file_ioctl+0x83/0xb0 [ 2461.275581] (UE) [ 2461.279018] SyS_ioctl+0x7f/0xb0 [ 2461.279028] ? do_vfs_ioctl+0xff0/0xff0 [ 2461.279039] do_syscall_64+0x1d5/0x640 [ 2461.279056] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2461.279064] RIP: 0033:0x465f69 [ 2461.279070] RSP: 002b:00007f5aa2526188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2461.279079] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2461.279085] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2461.279090] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2461.279094] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2461.279100] R13: 00007fffc975a7ef R14: 00007f5aa2526300 R15: 0000000000022000 [ 2461.291293] kworker/u4:3 cpuset= [ 2461.314073] 1*128kB [ 2461.333204] / [ 2461.352437] (E) [ 2461.370695] mems_allowed=0-1 [ 2461.375766] CPU: 0 PID: 28883 Comm: kworker/u4:3 Not tainted 4.14.224-syzkaller #0 [ 2461.382421] 2*256kB [ 2461.383458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2461.383464] (UE) [ 2461.385764] Call Trace: [ 2461.399730] dump_stack+0x1b2/0x281 [ 2461.403450] dump_header+0x178/0x82f [ 2461.407158] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2461.412254] ? ___ratelimit+0x2cd/0x530 [ 2461.413390] 2*512kB (UE) [ 2461.416219] oom_kill_process.cold+0x10/0xb18 [ 2461.416231] ? lock_downgrade+0x740/0x740 [ 2461.427611] out_of_memory+0x2dc/0x1190 [ 2461.431586] ? oom_killer_disable+0x1c0/0x1c0 [ 2461.435347] 2*1024kB [ 2461.436071] ? mutex_trylock+0x152/0x1a0 [ 2461.436073] (UE) 3*2048kB [ 2461.438470] __alloc_pages_nodemask+0x23e1/0x2720 [ 2461.438491] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2461.438512] ? cache_grow_begin+0x41/0x630 [ 2461.438522] cache_grow_begin+0x91/0x630 [ 2461.438532] ? cache_grow_begin+0x91/0x630 [ 2461.438541] fallback_alloc+0x207/0x2c0 [ 2461.438553] kmem_cache_alloc+0x1e5/0x3c0 [ 2461.438564] getname_kernel+0x4e/0x340 [ 2461.464013] (UME) [ 2461.467568] call_usermodehelper_exec_async+0x2df/0x510 [ 2461.467576] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 2461.467586] ret_from_fork+0x24/0x30 [ 2461.479773] Mem-Info: [ 2461.504926] 0*4096kB = 10968kB [ 2461.512682] active_anon:20596 inactive_anon:35157 isolated_anon:0 [ 2461.512682] active_file:17 inactive_file:16 isolated_file:0 [ 2461.512682] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2461.512682] slab_reclaimable:12301 slab_unreclaimable:113646 [ 2461.512682] mapped:35630 shmem:37652 pagetables:645 bounce:0 [ 2461.512682] free:13927 free_pcp:45 free_cma:0 [ 2461.525617] Node 0 [ 2461.556561] Mem-Info: [ 2461.561237] active_anon:20596 inactive_anon:35157 isolated_anon:0 [ 2461.561237] active_file:42 inactive_file:0 isolated_file:0 [ 2461.561237] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2461.561237] slab_reclaimable:12301 slab_unreclaimable:113646 [ 2461.561237] mapped:35630 shmem:37652 pagetables:645 bounce:0 [ 2461.561237] free:13927 free_pcp:45 free_cma:0 [ 2461.577298] DMA32: [ 2461.604718] Node 0 active_anon:82040kB inactive_anon:126656kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:80456kB dirty:0kB writeback:0kB shmem:136508kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2461.626281] 771*4kB [ 2461.645282] Node 0 active_anon:82040kB inactive_anon:126656kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:80456kB dirty:0kB writeback:0kB shmem:136508kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2461.685827] Node 1 active_anon:344kB inactive_anon:13972kB active_file:140kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:62064kB dirty:0kB writeback:0kB shmem:14100kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2461.696002] (UME) [ 2461.723597] Node 1 active_anon:344kB inactive_anon:13972kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:62064kB dirty:0kB writeback:0kB shmem:14100kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2461.756402] 350*8kB (UME) 189*16kB (UME) 275*32kB (UME) 8*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18220kB [ 2461.762048] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2461.804805] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2461.814626] Node 0 [ 2461.873859] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2461.879185] Normal: [ 2461.887432] Node 0 DMA32 free:36308kB min:36200kB low:45248kB high:54296kB active_anon:82044kB inactive_anon:126656kB active_file:0kB inactive_file:2004kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7424kB pagetables:2472kB bounce:0kB free_pcp:440kB local_pcp:300kB free_cma:0kB [ 2461.900213] 0*4kB [ 2461.919432] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2461.932886] Node 0 DMA32 free:36692kB min:36200kB low:45248kB high:54296kB active_anon:82044kB inactive_anon:126656kB active_file:0kB inactive_file:2004kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7424kB pagetables:2472kB bounce:0kB free_pcp:532kB local_pcp:404kB free_cma:0kB [ 2461.997632] lowmem_reserve[]: 0 0 0 0 0 [ 2462.002094] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2462.016720] 0*8kB [ 2462.028388] lowmem_reserve[]: 0 0 0 0 0 [ 2462.050453] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2462.052943] chnl_net:caif_netlink_parms(): no params data found [ 2462.097456] 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2462.099744] lowmem_reserve[]: [ 2462.105828] Node 1 [ 2462.105831] 0 0 [ 2462.114276] lowmem_reserve[]: 0 0 0 0 0 [ 2462.130487] Node 1 Normal free:205924kB min:53696kB low:67120kB high:80544kB active_anon:344kB inactive_anon:13972kB active_file:516kB inactive_file:2860kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:112kB bounce:0kB free_pcp:460kB local_pcp:248kB free_cma:0kB [ 2462.136434] Normal: [ 2462.165431] 0 0 0 [ 2462.172344] Node 1 Normal free:208724kB min:53696kB low:67120kB high:80544kB active_anon:344kB inactive_anon:13972kB active_file:516kB inactive_file:2860kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:112kB bounce:0kB free_pcp:924kB local_pcp:248kB free_cma:0kB [ 2462.237190] 36*4kB (UME) 29*8kB (UME) 25*16kB (UM) 770*32kB (UM) 1849*64kB (U) 410*128kB (UM) 45*256kB (U) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 208776kB [ 2462.247698] lowmem_reserve[]: 0 0 0 0 0 [ 2462.261476] Node 0 DMA: 2*4kB (UE) 38*8kB (UE) 16*16kB (UE) 7*32kB (UE) 6*64kB (UE) 1*128kB (E) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11032kB [ 2462.276081] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2462.287380] lowmem_reserve[]: 0 0 0 0 0 [ 2462.291417] Node 0 DMA: 2*4kB (UE) 38*8kB (UE) 16*16kB (UE) 7*32kB (UE) 6*64kB (UE) 1*128kB (E) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11032kB [ 2462.322063] Node 0 DMA32: 2496*4kB (UE) 348*8kB (UE) 1664*16kB (UE) 706*32kB (UME) 640*64kB (UM) 24*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 106272kB [ 2462.351324] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2462.357500] Node 0 DMA32: 3989*4kB (UME) 347*8kB (UE) 1680*16kB (UME) 930*32kB (UE) 638*64kB (UM) 23*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 119148kB [ 2462.370757] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2462.384276] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2462.397560] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2462.417857] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2462.437398] Node 1 Normal: 188*4kB (UME) 135*8kB (UME) 42*16kB (UM) 789*32kB (UM) 1890*64kB (U) 410*128kB (UM) 45*256kB (U) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 213736kB [ 2462.453278] Node 1 Normal: 188*4kB (UME) 135*8kB (UME) 42*16kB (UM) 789*32kB (UM) 1890*64kB (U) 410*128kB (UM) 45*256kB (U) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 213736kB [ 2462.458153] 39873 total pagecache pages [ 2462.477848] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2462.490954] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2462.493664] 0 pages in swap cache [ 2462.504895] bridge0: port 1(bridge_slave_0) entered blocking state [ 2462.508577] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2462.527530] Swap cache stats: add 0, delete 0, find 0/0 [ 2462.527668] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2462.532950] Free swap = 0kB [ 2462.541711] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2462.541718] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2462.541722] 39910 total pagecache pages [ 2462.541733] 0 pages in swap cache [ 2462.541738] Swap cache stats: add 0, delete 0, find 0/0 [ 2462.541742] Free swap = 0kB [ 2462.541745] Total swap = 0kB [ 2462.541752] 2097051 pages RAM [ 2462.541755] 0 pages HighMem/MovableOnly [ 2462.541758] 363840 pages reserved [ 2462.541762] 0 pages cma reserved [ 2462.557361] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2462.573646] bridge0: port 1(bridge_slave_0) entered disabled state [ 2462.603783] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2462.641183] 40317 total pagecache pages [ 2462.645196] 0 pages in swap cache [ 2462.649571] Total swap = 0kB [ 2462.649717] Swap cache stats: add 0, delete 0, find 0/0 [ 2462.652690] 2097051 pages RAM [ 2462.659610] Free swap = 0kB [ 2462.663807] device bridge_slave_0 entered promiscuous mode [ 2462.666790] Total swap = 0kB [ 2462.674941] 2097051 pages RAM [ 2462.682001] 0 pages HighMem/MovableOnly [ 2462.686236] 363840 pages reserved [ 2462.689352] 0 pages HighMem/MovableOnly [ 2462.690921] 0 pages cma reserved [ 2462.693663] 363840 pages reserved [ 2462.698293] Out of memory: Kill process 7978 (syz-fuzzer) score 8 or sacrifice child [ 2462.710428] 0 pages cma reserved [ 2462.711381] Killed process 24330 (syz-executor.0) total-vm:84924kB, anon-rss:60kB, file-rss:0kB, shmem-rss:0kB [ 2462.732913] bridge0: port 2(bridge_slave_1) entered blocking state [ 2462.741128] bridge0: port 2(bridge_slave_1) entered disabled state [ 2462.775665] device bridge_slave_1 entered promiscuous mode [ 2462.847457] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2462.874697] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2462.897425] Bluetooth: hci2 command 0x040f tx timeout 00:43:09 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nvram\x00', 0x0, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000003840)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) 00:43:09 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x484240, 0x0) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x8) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x4, 0x90040) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x7fffffff, 0x1e, 0x1}) [ 2462.930207] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2462.948402] team0: Port device team_slave_0 added [ 2462.954079] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2462.963676] team0: Port device team_slave_1 added [ 2462.993548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2462.999872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2463.036258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2463.049651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2463.055949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2463.103936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2463.127001] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2463.145185] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2463.203530] device hsr_slave_0 entered promiscuous mode [ 2463.216993] device hsr_slave_1 entered promiscuous mode [ 2463.230967] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2463.246085] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready 00:43:10 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x8) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x4, 0x90040) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x7fffffff, 0x1e, 0x1}) [ 2463.436004] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2463.496965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2463.516818] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2463.536089] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2463.550809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2463.559113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2463.576305] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2463.585757] 8021q: adding VLAN 0 to HW filter on device team0 [ 2463.604826] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2463.627934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2463.635971] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2463.647832] bridge0: port 1(bridge_slave_0) entered blocking state [ 2463.654211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2463.679947] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2463.687687] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2463.695026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2463.704072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2463.712560] bridge0: port 2(bridge_slave_1) entered blocking state [ 2463.718979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2463.734168] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2463.742714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2463.758810] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2463.765831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2463.782345] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2463.791748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2463.802464] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2463.824118] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2463.833776] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2463.843741] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2463.854603] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2463.868387] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2463.874468] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2463.896954] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2463.910738] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2463.917078] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2463.930293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2463.942412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2464.033804] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2464.045507] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2464.058304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2464.066949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2464.125051] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2464.136067] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2464.148005] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2464.163819] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2464.185436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2464.195359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2464.217619] device veth0_vlan entered promiscuous mode [ 2464.237817] device veth1_vlan entered promiscuous mode [ 2464.248213] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2464.254676] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2464.267761] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2464.274734] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2464.307470] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2464.343459] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2464.367706] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2464.374661] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2464.388193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2464.407932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2464.430700] device veth0_macvtap entered promiscuous mode [ 2464.437093] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2464.465038] device veth1_macvtap entered promiscuous mode [ 2464.483417] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2464.505897] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2464.526954] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2464.547504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2464.568770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2464.586909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2464.608461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2464.627687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2464.657279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2464.666425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2464.687396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2464.708106] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2464.715117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2464.731749] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2464.748291] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2464.755507] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2464.778162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2464.787670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2464.810060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2464.819309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2464.829978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2464.839752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2464.850102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2464.859895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2464.870210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2464.881144] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2464.888712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2464.896053] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2464.905326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2464.977229] Bluetooth: hci2 command 0x0419 tx timeout 00:43:12 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x484240, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)={0x101, 0x1, 0x4, 0x400, 0xffff, {0x0, 0x2710}, {0x1, 0x2, 0x8, 0x2, 0x7, 0x1, "db53d254"}, 0x8, 0x4, @fd=r1, 0x4, 0x0, r1}) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x8) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x7fffffff, 0x1e, 0x1}) 00:43:12 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x8) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x4, 0x90040) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x7fffffff, 0x1e, 0x1}) [ 2466.274084] bond0 (unregistering): Released all slaves [ 2466.436210] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2466.468869] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2466.481170] CPU: 0 PID: 29113 Comm: syz-executor.1 Not tainted 4.14.224-syzkaller #0 [ 2466.489069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2466.498408] Call Trace: [ 2466.500984] dump_stack+0x1b2/0x281 [ 2466.504594] warn_alloc.cold+0x96/0x1cc [ 2466.508551] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2466.513548] ? zone_watermark_ok_safe+0x220/0x220 [ 2466.518381] __alloc_pages_nodemask+0x2127/0x2720 [ 2466.523205] ? _raw_spin_unlock_irq+0x24/0x80 [ 2466.527720] ? lock_acquire+0x170/0x3f0 [ 2466.531685] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2466.536514] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2466.541945] ? __mutex_unlock_slowpath+0x75/0x770 [ 2466.546770] alloc_pages_current+0x155/0x260 [ 2466.551164] ion_page_pool_alloc+0x118/0x1b0 [ 2466.555554] ion_system_heap_allocate+0x133/0x8c0 [ 2466.560551] ? ion_alloc+0x187/0x810 [ 2466.564248] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2466.569700] ? ion_system_contig_heap_create+0x130/0x130 [ 2466.575131] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2466.580129] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2466.584952] ion_alloc+0x204/0x810 [ 2466.588594] ? ion_dma_buf_release+0x40/0x40 [ 2466.592984] ? __might_fault+0x177/0x1b0 [ 2466.597026] ion_ioctl+0xea/0x1f0 [ 2466.600460] ? ion_query_heaps+0x360/0x360 [ 2466.604682] ? ion_query_heaps+0x360/0x360 [ 2466.608912] do_vfs_ioctl+0x75a/0xff0 [ 2466.612695] ? ioctl_preallocate+0x1a0/0x1a0 [ 2466.617085] ? lock_downgrade+0x740/0x740 [ 2466.621215] ? __fget+0x225/0x360 [ 2466.624665] ? do_vfs_ioctl+0xff0/0xff0 [ 2466.628623] ? security_file_ioctl+0x83/0xb0 [ 2466.633012] SyS_ioctl+0x7f/0xb0 [ 2466.636356] ? do_vfs_ioctl+0xff0/0xff0 [ 2466.640330] do_syscall_64+0x1d5/0x640 [ 2466.644203] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2466.649372] RIP: 0033:0x465f69 [ 2466.652541] RSP: 002b:00007f66274e4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2466.660243] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2466.667494] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2466.674759] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2466.682015] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2466.689392] R13: 00007ffeea3ca95f R14: 00007f66274e4300 R15: 0000000000022000 [ 2466.712104] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2466.727437] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2466.732645] CPU: 1 PID: 29114 Comm: syz-executor.4 Not tainted 4.14.224-syzkaller #0 [ 2466.740530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2466.749882] Call Trace: [ 2466.752470] dump_stack+0x1b2/0x281 [ 2466.756095] warn_alloc.cold+0x96/0x1cc [ 2466.760063] ? zone_watermark_ok_safe+0x220/0x220 [ 2466.764912] __alloc_pages_nodemask+0x2127/0x2720 [ 2466.769755] ? lock_acquire+0x170/0x3f0 [ 2466.773728] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2466.778571] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2466.784019] ? __mutex_unlock_slowpath+0x75/0x770 [ 2466.788856] ? retint_kernel+0x2d/0x2d [ 2466.792742] alloc_pages_current+0x155/0x260 [ 2466.797147] ion_page_pool_alloc+0x118/0x1b0 [ 2466.801551] ion_system_heap_allocate+0x133/0x8c0 [ 2466.806387] ? ion_alloc+0x187/0x810 [ 2466.810093] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2466.815539] ? ion_system_contig_heap_create+0x130/0x130 [ 2466.820979] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2466.825991] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2466.830833] ion_alloc+0x204/0x810 [ 2466.834374] ? ion_dma_buf_release+0x40/0x40 [ 2466.838778] ? __might_fault+0x177/0x1b0 [ 2466.842833] ion_ioctl+0xea/0x1f0 [ 2466.846279] ? ion_query_heaps+0x360/0x360 [ 2466.850506] ? SyS_epoll_ctl+0x1e0/0x2780 [ 2466.854647] ? ion_query_heaps+0x360/0x360 [ 2466.858874] do_vfs_ioctl+0x75a/0xff0 [ 2466.862669] ? ioctl_preallocate+0x1a0/0x1a0 [ 2466.867070] ? lock_downgrade+0x740/0x740 [ 2466.871214] ? __fget+0x225/0x360 [ 2466.874664] ? do_vfs_ioctl+0xff0/0xff0 [ 2466.878631] ? security_file_ioctl+0x83/0xb0 [ 2466.883031] SyS_ioctl+0x7f/0xb0 [ 2466.886387] ? do_vfs_ioctl+0xff0/0xff0 [ 2466.890356] do_syscall_64+0x1d5/0x640 [ 2466.894265] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2466.899447] RIP: 0033:0x465f69 [ 2466.902630] RSP: 002b:00007f380960e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2466.910334] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2466.917594] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2466.924855] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2466.932114] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2466.939378] R13: 00007fffbef2da3f R14: 00007f380960e300 R15: 0000000000022000 [ 2466.946342] warn_alloc_show_mem: 1 callbacks suppressed [ 2466.946345] Mem-Info: [ 2467.004961] active_anon:21492 inactive_anon:35149 isolated_anon:0 [ 2467.004961] active_file:1998 inactive_file:4221 isolated_file:0 [ 2467.004961] unevictable:0 dirty:13 writeback:0 unstable:0 [ 2467.004961] slab_reclaimable:12221 slab_unreclaimable:116171 [ 2467.004961] mapped:31535 shmem:37636 pagetables:666 bounce:0 [ 2467.004961] free:210187 free_pcp:326 free_cma:0 [ 2467.095307] Node 0 active_anon:85492kB inactive_anon:126624kB active_file:7096kB inactive_file:16176kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:94020kB dirty:40kB writeback:0kB shmem:136444kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2467.153762] Node 1 active_anon:276kB inactive_anon:13972kB active_file:280kB inactive_file:220kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:30720kB dirty:12kB writeback:0kB shmem:14100kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2467.210595] Node 0 DMA free:11096kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2467.268584] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2467.281119] Node 0 DMA32 free:694460kB min:36200kB low:45248kB high:54296kB active_anon:83444kB inactive_anon:126624kB active_file:7196kB inactive_file:17276kB unevictable:0kB writepending:40kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7392kB pagetables:2500kB bounce:0kB free_pcp:660kB local_pcp:584kB free_cma:0kB [ 2467.345766] lowmem_reserve[]: 0 0 0 0 0 [ 2467.354277] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2467.416816] lowmem_reserve[]: 0 0 0 0 0 [ 2467.428640] Node 1 Normal free:54880kB min:53696kB low:67120kB high:80544kB active_anon:276kB inactive_anon:13972kB active_file:168kB inactive_file:80kB unevictable:0kB writepending:12kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:16kB bounce:0kB free_pcp:700kB local_pcp:700kB free_cma:0kB [ 2467.491775] lowmem_reserve[]: 0 0 0 0 0 [ 2467.499659] Node 0 DMA: 12*4kB (UE) 17*8kB (UE) 16*16kB (UE) 13*32kB (UE) 16*64kB (UE) 6*128kB (UE) 3*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 2*2048kB (UE) 0*4096kB = 11096kB [ 2467.532923] Node 0 DMA32: 103*4kB (ME) 1112*8kB (UME) 15926*16kB (UME) 9416*32kB (UME) 25*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 567036kB [ 2467.565919] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2467.590983] Node 1 Normal: 344*4kB (UME) 702*8kB (UME) 613*16kB (UME) 401*32kB (UME) 32*64kB (UME) 3*128kB (U) 2*256kB (U) 44*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 55104kB [ 2467.629888] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2467.648635] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2467.669420] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2467.681411] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2467.690377] 43828 total pagecache pages [ 2467.694419] 0 pages in swap cache [ 2467.702875] Swap cache stats: add 0, delete 0, find 0/0 [ 2467.708566] Free swap = 0kB [ 2467.711642] Total swap = 0kB [ 2467.714712] 2097051 pages RAM [ 2467.715187] IPVS: ftp: loaded support on port[0] = 21 [ 2467.720919] 0 pages HighMem/MovableOnly [ 2467.727428] 363840 pages reserved [ 2467.731127] 0 pages cma reserved [ 2468.123948] chnl_net:caif_netlink_parms(): no params data found [ 2468.395612] bridge0: port 1(bridge_slave_0) entered blocking state [ 2468.405617] bridge0: port 1(bridge_slave_0) entered disabled state [ 2468.414409] device bridge_slave_0 entered promiscuous mode [ 2468.425696] bridge0: port 2(bridge_slave_1) entered blocking state [ 2468.433843] bridge0: port 2(bridge_slave_1) entered disabled state [ 2468.444518] device bridge_slave_1 entered promiscuous mode [ 2468.481184] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2468.498858] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2468.526542] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2468.534864] team0: Port device team_slave_0 added [ 2468.545466] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2468.553465] team0: Port device team_slave_1 added [ 2468.585867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2468.595846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2468.621866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2468.639010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2468.645258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2468.671887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2468.683304] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2468.695482] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2468.727971] device hsr_slave_0 entered promiscuous mode [ 2468.733964] device hsr_slave_1 entered promiscuous mode [ 2468.744455] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2468.752148] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2468.890921] bridge0: port 2(bridge_slave_1) entered blocking state [ 2468.897346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2468.904008] bridge0: port 1(bridge_slave_0) entered blocking state [ 2468.910772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2468.968846] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 2468.974944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2468.992869] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2469.005995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2469.014358] bridge0: port 1(bridge_slave_0) entered disabled state [ 2469.025258] bridge0: port 2(bridge_slave_1) entered disabled state [ 2469.041132] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2469.047542] 8021q: adding VLAN 0 to HW filter on device team0 [ 2469.061362] Bluetooth: hci0 command 0x0409 tx timeout [ 2469.069940] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2469.084432] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2469.096318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2469.109491] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2469.119200] bridge0: port 1(bridge_slave_0) entered blocking state [ 2469.125567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2469.142114] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2469.149586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2469.169029] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2469.188715] bridge0: port 2(bridge_slave_1) entered blocking state [ 2469.195114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2469.224561] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2469.235696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2469.252633] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2469.262960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2469.276687] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2469.288942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2469.301010] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2469.316653] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2469.327055] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2469.334183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2469.343466] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2469.356523] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2469.373696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2469.390085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2469.402092] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2469.410248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2469.419328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2469.433537] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2469.440132] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2469.456457] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2469.464601] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2469.472052] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2469.481624] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2469.498792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2469.652805] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2469.659916] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2469.672136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2469.679324] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2469.688815] device bridge_slave_1 left promiscuous mode [ 2469.694340] bridge0: port 2(bridge_slave_1) entered disabled state [ 2469.702908] device bridge_slave_0 left promiscuous mode [ 2469.709183] bridge0: port 1(bridge_slave_0) entered disabled state [ 2469.719513] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2469.726263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2469.735469] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2469.743165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2469.751832] device bridge_slave_1 left promiscuous mode [ 2469.758286] bridge0: port 2(bridge_slave_1) entered disabled state [ 2469.765707] device bridge_slave_0 left promiscuous mode [ 2469.772365] bridge0: port 1(bridge_slave_0) entered disabled state [ 2469.782871] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2469.790841] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2469.799481] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2469.806213] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2469.815354] device bridge_slave_1 left promiscuous mode [ 2469.823773] bridge0: port 2(bridge_slave_1) entered disabled state [ 2469.831911] device bridge_slave_0 left promiscuous mode [ 2469.837566] bridge0: port 1(bridge_slave_0) entered disabled state [ 2469.850533] device veth1_macvtap left promiscuous mode [ 2469.855870] device veth0_macvtap left promiscuous mode [ 2469.863183] device veth1_vlan left promiscuous mode [ 2469.869127] device veth0_vlan left promiscuous mode [ 2469.874610] device veth1_macvtap left promiscuous mode [ 2469.881432] device veth0_macvtap left promiscuous mode [ 2469.886994] device veth1_vlan left promiscuous mode [ 2469.892190] device veth0_vlan left promiscuous mode [ 2469.897961] device veth1_macvtap left promiscuous mode [ 2469.903422] device veth0_macvtap left promiscuous mode [ 2469.909347] device veth1_vlan left promiscuous mode [ 2469.914411] device veth0_vlan left promiscuous mode [ 2470.151881] device hsr_slave_1 left promiscuous mode [ 2470.160395] device hsr_slave_0 left promiscuous mode [ 2470.176214] team0 (unregistering): Port device team_slave_1 removed [ 2470.187819] team0 (unregistering): Port device team_slave_0 removed [ 2470.199063] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2470.210521] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2470.243570] bond0 (unregistering): Released all slaves [ 2470.292153] device hsr_slave_1 left promiscuous mode [ 2470.303119] device hsr_slave_0 left promiscuous mode [ 2470.320706] team0 (unregistering): Port device team_slave_1 removed [ 2470.333097] team0 (unregistering): Port device team_slave_0 removed [ 2470.349417] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2470.362278] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2470.406363] bond0 (unregistering): Released all slaves [ 2470.465613] device hsr_slave_1 left promiscuous mode [ 2470.480809] device hsr_slave_0 left promiscuous mode [ 2470.499487] team0 (unregistering): Port device team_slave_1 removed [ 2470.509805] team0 (unregistering): Port device team_slave_0 removed [ 2470.519869] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2470.530450] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2470.565465] bond0 (unregistering): Released all slaves [ 2470.581427] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2470.599603] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2470.606756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2470.614563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2470.660622] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2470.668912] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2470.675785] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2470.690800] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2470.700872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2470.709785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2470.723031] device veth0_vlan entered promiscuous mode [ 2470.730784] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2470.741986] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2470.752061] device veth1_vlan entered promiscuous mode [ 2470.752569] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2470.754459] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2470.775535] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2470.778290] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2470.780030] device veth0_macvtap entered promiscuous mode [ 2470.780687] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2470.782306] device veth1_macvtap entered promiscuous mode [ 2470.782974] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2470.785309] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2470.801485] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2470.802816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2470.802819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2470.802824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2470.802826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2470.803508] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2470.803571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2470.804872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2470.804876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2470.804880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2470.804882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2470.805500] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2470.805511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2471.002544] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2471.017437] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2471.024639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2471.033594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2471.042124] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2471.049878] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2471.058509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2471.066275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2471.075057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2471.085072] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2471.137004] Bluetooth: hci0 command 0x041b tx timeout 00:43:18 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x484240, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)={0x101, 0x1, 0x4, 0x400, 0xffff, {0x0, 0x2710}, {0x1, 0x2, 0x8, 0x2, 0x7, 0x1, "db53d254"}, 0x8, 0x4, @fd=r1, 0x4, 0x0, r1}) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x8) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x4, 0x90040) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x7fffffff, 0x1e, 0x1}) 00:43:18 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x484240, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)={0x101, 0x1, 0x4, 0x400, 0xffff, {0x0, 0x2710}, {0x1, 0x2, 0x8, 0x2, 0x7, 0x1, "db53d254"}, 0x8, 0x4, @fd=r1, 0x4, 0x0, r1}) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x8) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000340)={0x401, 0x2, 0x4, 0x8, 0x8, {}, {0x1, 0x8, 0xbc, 0xa2, 0xf7, 0x20, "450104da"}, 0xa87, 0x4, @fd=r3, 0x1ff}) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x4, 0x90040) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, 0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x1, 0x621c0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x7fffffff, 0x1e, 0x1}) 00:43:18 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x8) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x4, 0x90040) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x7fffffff, 0x1e, 0x1}) 00:43:18 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x484240, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)={0x101, 0x1, 0x4, 0x400, 0xffff, {0x0, 0x2710}, {0x1, 0x2, 0x8, 0x2, 0x7, 0x1, "db53d254"}, 0x8, 0x4, @fd=r1, 0x4, 0x0, r1}) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x8) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x7fffffff, 0x1e, 0x1}) 00:43:18 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nvram\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000003840)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000400)={0x2020}, 0x2020) 00:43:18 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x8) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x4, 0x90040) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x7fffffff, 0x1e, 0x1}) [ 2472.737041] Bluetooth: hci1 command 0x0406 tx timeout [ 2473.216524] Bluetooth: hci0 command 0x040f tx timeout [ 2473.302869] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2473.328002] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2473.356475] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2473.373826] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2473.382571] CPU: 1 PID: 29356 Comm: syz-executor.4 Not tainted 4.14.224-syzkaller #0 [ 2473.390480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2473.399836] Call Trace: [ 2473.402434] dump_stack+0x1b2/0x281 [ 2473.406067] warn_alloc.cold+0x96/0x1cc [ 2473.410050] ? zone_watermark_ok_safe+0x220/0x220 [ 2473.414883] __alloc_pages_nodemask+0x2127/0x2720 [ 2473.419712] ? lock_acquire+0x170/0x3f0 [ 2473.423670] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2473.428498] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2473.433932] ? __mutex_unlock_slowpath+0x75/0x770 [ 2473.438757] ? ion_page_pool_alloc+0x28/0x1b0 [ 2473.443233] alloc_pages_current+0x155/0x260 [ 2473.447625] ion_page_pool_alloc+0x118/0x1b0 [ 2473.452015] ion_system_heap_allocate+0x133/0x8c0 [ 2473.456840] ? ion_alloc+0x187/0x810 [ 2473.460533] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2473.465967] ? ion_system_contig_heap_create+0x130/0x130 [ 2473.471399] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2473.476401] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2473.481227] ion_alloc+0x204/0x810 [ 2473.484766] ? ion_dma_buf_release+0x40/0x40 [ 2473.489156] ? __might_fault+0x177/0x1b0 [ 2473.493201] ion_ioctl+0xea/0x1f0 [ 2473.496636] ? ion_query_heaps+0x360/0x360 [ 2473.500853] ? ion_query_heaps+0x360/0x360 [ 2473.505068] do_vfs_ioctl+0x75a/0xff0 [ 2473.508853] ? ioctl_preallocate+0x1a0/0x1a0 [ 2473.513240] ? lock_downgrade+0x740/0x740 [ 2473.517402] ? __fget+0x225/0x360 [ 2473.520851] ? do_vfs_ioctl+0xff0/0xff0 [ 2473.524816] ? security_file_ioctl+0x83/0xb0 [ 2473.529211] SyS_ioctl+0x7f/0xb0 [ 2473.532559] ? do_vfs_ioctl+0xff0/0xff0 [ 2473.536517] do_syscall_64+0x1d5/0x640 [ 2473.540388] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2473.545560] RIP: 0033:0x465f69 [ 2473.548730] RSP: 002b:00007f380960e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2473.556418] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2473.563678] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2473.570934] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2473.578186] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2473.585435] R13: 00007fffbef2da3f R14: 00007f380960e300 R15: 0000000000022000 [ 2473.599668] CPU: 1 PID: 29358 Comm: syz-executor.1 Not tainted 4.14.224-syzkaller #0 [ 2473.607566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2473.616920] Call Trace: [ 2473.619513] dump_stack+0x1b2/0x281 [ 2473.623146] warn_alloc.cold+0x96/0x1cc [ 2473.627119] ? zone_watermark_ok_safe+0x220/0x220 [ 2473.631974] __alloc_pages_nodemask+0x2127/0x2720 [ 2473.636823] ? lock_acquire+0x170/0x3f0 [ 2473.640802] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2473.645651] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2473.651095] ? __mutex_unlock_slowpath+0x75/0x770 [ 2473.655924] alloc_pages_current+0x155/0x260 [ 2473.660314] ion_page_pool_alloc+0x118/0x1b0 [ 2473.664702] ion_system_heap_allocate+0x133/0x8c0 [ 2473.669526] ? ion_alloc+0x187/0x810 [ 2473.673219] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2473.678669] ? ion_system_contig_heap_create+0x130/0x130 [ 2473.684188] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2473.689199] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2473.694027] ion_alloc+0x204/0x810 [ 2473.697560] ? ion_dma_buf_release+0x40/0x40 [ 2473.701952] ? __might_fault+0x177/0x1b0 [ 2473.705996] ion_ioctl+0xea/0x1f0 [ 2473.709432] ? ion_query_heaps+0x360/0x360 [ 2473.713650] ? ion_query_heaps+0x360/0x360 [ 2473.717870] do_vfs_ioctl+0x75a/0xff0 [ 2473.721655] ? ioctl_preallocate+0x1a0/0x1a0 [ 2473.726046] ? lock_downgrade+0x740/0x740 [ 2473.730177] ? __fget+0x225/0x360 [ 2473.733611] ? do_vfs_ioctl+0xff0/0xff0 [ 2473.737582] ? security_file_ioctl+0x83/0xb0 [ 2473.741972] SyS_ioctl+0x7f/0xb0 [ 2473.745327] ? do_vfs_ioctl+0xff0/0xff0 [ 2473.749283] do_syscall_64+0x1d5/0x640 [ 2473.753168] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2473.758338] RIP: 0033:0x465f69 [ 2473.761508] RSP: 002b:00007f66274e4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2473.769196] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2473.776446] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2473.783694] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2473.790944] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2473.798195] R13: 00007ffeea3ca95f R14: 00007f66274e4300 R15: 0000000000022000 [ 2473.816486] warn_alloc_show_mem: 1 callbacks suppressed [ 2473.816490] Mem-Info: [ 2473.838526] active_anon:20905 inactive_anon:35151 isolated_anon:0 [ 2473.838526] active_file:185 inactive_file:169 isolated_file:43 [ 2473.838526] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2473.838526] slab_reclaimable:12148 slab_unreclaimable:110986 [ 2473.838526] mapped:44718 shmem:37639 pagetables:669 bounce:0 [ 2473.838526] free:25064 free_pcp:208 free_cma:0 [ 2473.875962] Node 0 active_anon:83080kB inactive_anon:126632kB active_file:136kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:105984kB dirty:60kB writeback:0kB shmem:136456kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2473.904269] Node 1 active_anon:472kB inactive_anon:13972kB active_file:16kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:71732kB dirty:0kB writeback:0kB shmem:14100kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2473.931615] Node 0 DMA free:11052kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2473.965740] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2473.972843] syz-executor.5: [ 2473.980124] in:imklog cpuset=/ mems_allowed=0-1 [ 2473.990015] CPU: 1 PID: 28944 Comm: in:imklog Not tainted 4.14.224-syzkaller #0 [ 2473.990380] page allocation failure: order:4 [ 2473.997451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2473.997455] Call Trace: [ 2473.997471] dump_stack+0x1b2/0x281 [ 2473.997482] dump_header+0x178/0x82f [ 2473.997492] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2473.997501] ? ___ratelimit+0x2cd/0x530 [ 2473.997510] oom_kill_process.cold+0x10/0xb18 [ 2474.016352] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2474.017552] out_of_memory+0xe3e/0x1190 [ 2474.021233] (null) [ 2474.021238] syz-executor.5 cpuset= [ 2474.026328] ? oom_killer_disable+0x1c0/0x1c0 [ 2474.026337] ? mutex_trylock+0x152/0x1a0 [ 2474.026348] __alloc_pages_nodemask+0x23e1/0x2720 [ 2474.030684] / [ 2474.034783] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2474.041876] mems_allowed=0-1 [ 2474.045818] alloc_pages_current+0x155/0x260 [ 2474.078748] filemap_fault+0xea3/0x1980 [ 2474.082710] ext4_filemap_fault+0x84/0xb0 [ 2474.086840] __do_fault+0xfa/0x380 [ 2474.090361] __handle_mm_fault+0x2497/0x4620 [ 2474.094752] ? vm_insert_page+0x7c0/0x7c0 [ 2474.098878] ? lock_downgrade+0x740/0x740 [ 2474.103012] handle_mm_fault+0x391/0x860 [ 2474.107054] __do_page_fault+0x549/0xad0 [ 2474.111095] ? spurious_fault+0x640/0x640 [ 2474.115237] ? do_page_fault+0x60/0x500 [ 2474.119193] ? page_fault+0x2f/0x50 [ 2474.122797] page_fault+0x45/0x50 [ 2474.126231] RIP: ffffffff:0x1f9f [ 2474.129574] RSP: 9462678b:0000000000000000 EFLAGS: 7fde0b882308 [ 2474.129600] CPU: 0 PID: 29354 Comm: syz-executor.5 Not tainted 4.14.224-syzkaller #0 [ 2474.133741] lowmem_reserve[]: [ 2474.135656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2474.150251] 0 [ 2474.155937] Call Trace: [ 2474.155943] 2717 [ 2474.157757] dump_stack+0x1b2/0x281 [ 2474.157771] warn_alloc.cold+0x96/0x1cc [ 2474.157782] ? zone_watermark_ok_safe+0x220/0x220 [ 2474.157802] __alloc_pages_nodemask+0x2127/0x2720 [ 2474.160357] 2718 [ 2474.162407] ? __schedule+0x893/0x1de0 [ 2474.166019] 2718 [ 2474.170186] ? lock_acquire+0x170/0x3f0 [ 2474.170202] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2474.170217] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2474.170228] ? __mutex_unlock_slowpath+0x75/0x770 [ 2474.170242] alloc_pages_current+0x155/0x260 [ 2474.170258] ion_page_pool_alloc+0x118/0x1b0 [ 2474.170268] ion_system_heap_allocate+0x133/0x8c0 [ 2474.170277] ? ion_alloc+0x187/0x810 [ 2474.170288] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2474.179836] 2718 [ 2474.179945] ? ion_system_contig_heap_create+0x130/0x130 [ 2474.185850] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2474.188500] Node 0 [ 2474.191843] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2474.200047] DMA32 free:36168kB min:36200kB low:45248kB high:54296kB active_anon:83112kB inactive_anon:126632kB active_file:64kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7360kB pagetables:2596kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2474.202093] ion_alloc+0x204/0x810 [ 2474.208678] lowmem_reserve[]: [ 2474.211314] ? ion_dma_buf_release+0x40/0x40 [ 2474.215704] 0 0 [ 2474.220539] ? __might_fault+0x177/0x1b0 [ 2474.220550] ion_ioctl+0xea/0x1f0 [ 2474.220559] ? ion_query_heaps+0x360/0x360 [ 2474.220570] ? SyS_epoll_ctl+0x1e0/0x2780 [ 2474.220579] ? ion_query_heaps+0x360/0x360 [ 2474.220588] do_vfs_ioctl+0x75a/0xff0 [ 2474.220599] ? ioctl_preallocate+0x1a0/0x1a0 [ 2474.220610] ? lock_downgrade+0x740/0x740 [ 2474.229395] 0 [ 2474.229734] ? __fget+0x225/0x360 [ 2474.231769] 0 [ 2474.237214] ? do_vfs_ioctl+0xff0/0xff0 [ 2474.237225] ? security_file_ioctl+0x83/0xb0 [ 2474.237234] SyS_ioctl+0x7f/0xb0 [ 2474.237241] ? do_vfs_ioctl+0xff0/0xff0 [ 2474.237251] do_syscall_64+0x1d5/0x640 [ 2474.237267] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2474.242254] 0 [ 2474.244473] RIP: 0033:0x465f69 [ 2474.277285] RSP: 002b:00007f886bfb2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2474.277295] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2474.277300] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2474.277304] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2474.277308] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2474.277313] R13: 00007ffe15f841ff R14: 00007f886bfb2300 R15: 0000000000022000 [ 2474.314698] Mem-Info: [ 2474.319574] Node 0 [ 2474.333103] active_anon:20896 inactive_anon:35151 isolated_anon:0 [ 2474.333103] active_file:20 inactive_file:23 isolated_file:0 [ 2474.333103] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2474.333103] slab_reclaimable:12148 slab_unreclaimable:110923 [ 2474.333103] mapped:44423 shmem:37639 pagetables:703 bounce:0 [ 2474.333103] free:25105 free_pcp:0 free_cma:0 [ 2474.334177] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2474.350327] Node 0 active_anon:83112kB inactive_anon:126632kB active_file:64kB inactive_file:80kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:105960kB dirty:0kB writeback:0kB shmem:136456kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2474.351298] lowmem_reserve[]: [ 2474.372793] Node 1 active_anon:472kB inactive_anon:13972kB active_file:16kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:71732kB dirty:0kB writeback:0kB shmem:14100kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2474.376379] 0 0 0 0 0 [ 2474.376399] Node 1 Normal free:53200kB min:53696kB low:67120kB high:80544kB active_anon:472kB inactive_anon:13972kB active_file:16kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:216kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2474.376419] lowmem_reserve[]: 0 0 0 0 0 [ 2474.395063] Node 0 [ 2474.398344] Node 0 DMA: 1*4kB (E) 1*8kB (E) 2*16kB (UE) 2*32kB (UE) 1*64kB (E) 3*128kB (UE) 3*256kB (UE) 3*512kB (UE) [ 2474.415957] DMA free:11052kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2474.443531] 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11052kB [ 2474.443553] Node 0 DMA32: 807*4kB (UME) 321*8kB (UMEH) 174*16kB (UMEH) 84*32kB (UMEH) 198*64kB (UMEH) 98*128kB (UMH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36484kB [ 2474.443610] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2474.443657] Node 1 Normal: 39*4kB (UME) 28*8kB (ME) 26*16kB (UME) 20*32kB (UME) 21*64kB (ME) 20*128kB (UM) 5*256kB (M) 3*512kB (M) 42*1024kB (UM) 1*2048kB (U) 0*4096kB = 53212kB [ 2474.443726] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2474.443732] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2474.443738] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2474.443743] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2474.443747] 37686 total pagecache pages [ 2474.443758] 0 pages in swap cache [ 2474.443762] Swap cache stats: add 0, delete 0, find 0/0 [ 2474.443766] Free swap = 0kB [ 2474.443769] Total swap = 0kB [ 2474.443775] 2097051 pages RAM [ 2474.443779] 0 pages HighMem/MovableOnly [ 2474.443782] 363840 pages reserved [ 2474.443785] 0 pages cma reserved [ 2474.716036] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2474.733621] Node 0 DMA32 free:35864kB min:36200kB low:45248kB high:54296kB active_anon:83112kB inactive_anon:126632kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7360kB pagetables:2596kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2474.771298] lowmem_reserve[]: 0 0 0 0 0 [ 2474.775301] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2474.804874] lowmem_reserve[]: 0 0 0 0 0 [ 2474.821713] Node 1 Normal free:53212kB min:53696kB low:67120kB high:80544kB active_anon:472kB inactive_anon:13972kB active_file:8kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:216kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2474.856133] lowmem_reserve[]: 0 0 0 0 0 [ 2474.860180] Node 0 DMA: 1*4kB (E) 1*8kB (E) 2*16kB (UE) 2*32kB (UE) 1*64kB (E) 3*128kB (UE) 3*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11052kB [ 2474.879271] Node 0 DMA32: 806*4kB (UME) 320*8kB (MEH) 148*16kB (MEH) 78*32kB (UMEH) 198*64kB (UMEH) 98*128kB (UMH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35864kB [ 2474.894479] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2474.910097] Node 1 Normal: 39*4kB (UME) 28*8kB (ME) 26*16kB (UME) 20*32kB (UME) 21*64kB (ME) 20*128kB (UM) 5*256kB (M) 3*512kB (M) 42*1024kB (UM) 1*2048kB (U) 0*4096kB = 53212kB [ 2474.928344] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2474.937237] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2474.945809] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2474.956800] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2474.965374] 37666 total pagecache pages [ 2474.969375] 0 pages in swap cache [ 2474.974992] Swap cache stats: add 0, delete 0, find 0/0 [ 2474.984475] Free swap = 0kB [ 2474.987520] Total swap = 0kB [ 2474.990531] 2097051 pages RAM [ 2474.993622] 0 pages HighMem/MovableOnly [ 2475.001713] 363840 pages reserved [ 2475.005161] 0 pages cma reserved [ 2475.008779] Out of memory (oom_kill_allocating_task): Kill process 28944 (in:imklog) score 0 or sacrifice child [ 2475.023159] Killed process 28737 (rsyslogd) total-vm:254332kB, anon-rss:1504kB, file-rss:0kB, shmem-rss:0kB [ 2475.070745] oom_reaper: reaped process 29358 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2475.110603] kworker/0:9 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 2475.134635] kworker/0:9 cpuset=/ mems_allowed=0-1 [ 2475.142131] CPU: 0 PID: 26340 Comm: kworker/0:9 Not tainted 4.14.224-syzkaller #0 [ 2475.149761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2475.159126] Workqueue: events cgroup1_release_agent [ 2475.164141] Call Trace: [ 2475.166731] dump_stack+0x1b2/0x281 [ 2475.170354] dump_header+0x178/0x82f [ 2475.174063] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2475.179168] ? ___ratelimit+0x2cd/0x530 [ 2475.183141] oom_kill_process.cold+0x10/0xb18 [ 2475.187638] ? lock_downgrade+0x740/0x740 [ 2475.191785] out_of_memory+0x2dc/0x1190 [ 2475.195750] ? oom_killer_disable+0x1c0/0x1c0 [ 2475.200229] ? mutex_trylock+0x152/0x1a0 [ 2475.204342] __alloc_pages_nodemask+0x23e1/0x2720 [ 2475.206329] syz-executor.1: [ 2475.209175] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2475.217058] ? mark_held_locks+0xa6/0xf0 [ 2475.221199] ? cache_grow_begin+0x41/0x630 [ 2475.222264] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2475.225432] cache_grow_begin+0x91/0x630 [ 2475.225441] ? cache_grow_begin+0x91/0x630 [ 2475.243569] fallback_alloc+0x207/0x2c0 [ 2475.246720] (null) [ 2475.247538] kmem_cache_alloc_trace+0x1f1/0x3d0 [ 2475.249663] syz-executor.1 cpuset=/ [ 2475.254314] cgroup1_release_agent+0xa1/0x250 [ 2475.254323] ? cgroup1_check_for_release+0x1b0/0x1b0 [ 2475.267500] ? lock_acquire+0x170/0x3f0 [ 2475.267878] mems_allowed=0-1 [ 2475.271467] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2475.279988] process_one_work+0x793/0x14a0 [ 2475.284215] ? work_busy+0x320/0x320 [ 2475.287918] ? worker_thread+0x158/0xff0 [ 2475.291968] ? _raw_spin_unlock_irq+0x24/0x80 [ 2475.296463] worker_thread+0x5cc/0xff0 [ 2475.296499] Bluetooth: hci0 command 0x0419 tx timeout [ 2475.300348] ? rescuer_thread+0xc80/0xc80 [ 2475.309648] kthread+0x30d/0x420 [ 2475.313012] ? kthread_create_on_node+0xd0/0xd0 [ 2475.317674] ret_from_fork+0x24/0x30 [ 2475.321378] CPU: 1 PID: 29358 Comm: syz-executor.1 Not tainted 4.14.224-syzkaller #0 [ 2475.329261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2475.331275] Mem-Info: [ 2475.338601] Call Trace: [ 2475.338619] dump_stack+0x1b2/0x281 [ 2475.338633] warn_alloc.cold+0x96/0x1cc [ 2475.341030] active_anon:20497 inactive_anon:35151 isolated_anon:0 [ 2475.341030] active_file:11 inactive_file:15 isolated_file:0 [ 2475.341030] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2475.341030] slab_reclaimable:12140 slab_unreclaimable:110907 [ 2475.341030] mapped:44414 shmem:37639 pagetables:666 bounce:0 [ 2475.341030] free:13894 free_pcp:95 free_cma:0 [ 2475.343874] ? zone_watermark_ok_safe+0x220/0x220 [ 2475.347503] Node 0 active_anon:81596kB inactive_anon:126632kB active_file:52kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:105924kB dirty:0kB writeback:0kB shmem:136456kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2475.351438] ? usleep_range+0x130/0x130 [ 2475.384579] Node 1 active_anon:392kB inactive_anon:13972kB active_file:0kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:71732kB dirty:0kB writeback:0kB shmem:14100kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2475.389377] ? try_to_free_pages+0x23f/0x6e0 [ 2475.389387] ? _find_next_bit+0xdb/0x100 [ 2475.389398] ? run_timer_softirq+0x5a0/0x5a0 [ 2475.417235] Node 0 [ 2475.421190] __alloc_pages_nodemask+0x2127/0x2720 [ 2475.448165] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2475.452537] ? lock_acquire+0x170/0x3f0 [ 2475.456584] lowmem_reserve[]: [ 2475.460963] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2475.463168] 0 [ 2475.467995] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2475.468014] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2475.493516] 2717 [ 2475.497465] ? alloc_pages_current+0x21c/0x260 [ 2475.497476] alloc_pages_current+0x155/0x260 [ 2475.500557] 2718 [ 2475.505386] ion_page_pool_alloc+0x118/0x1b0 [ 2475.507182] 2718 [ 2475.511646] ion_system_heap_allocate+0x133/0x8c0 [ 2475.517083] 2718 [ 2475.519115] ? ion_alloc+0x187/0x810 [ 2475.528075] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2475.528088] ? ion_system_contig_heap_create+0x130/0x130 [ 2475.528097] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2475.528110] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2475.530158] Node 0 [ 2475.534549] ion_alloc+0x204/0x810 [ 2475.536631] DMA32 free:17856kB min:36200kB low:45248kB high:54296kB active_anon:81596kB inactive_anon:126632kB active_file:52kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7264kB pagetables:2448kB bounce:0kB free_pcp:240kB local_pcp:120kB free_cma:0kB [ 2475.541451] ? ion_dma_buf_release+0x40/0x40 [ 2475.543483] lowmem_reserve[]: [ 2475.547182] ? __might_fault+0x177/0x1b0 [ 2475.547194] ion_ioctl+0xea/0x1f0 [ 2475.547202] ? ion_query_heaps+0x360/0x360 [ 2475.547215] ? ion_query_heaps+0x360/0x360 [ 2475.552641] 0 [ 2475.558072] do_vfs_ioctl+0x75a/0xff0 [ 2475.558083] ? ioctl_preallocate+0x1a0/0x1a0 [ 2475.558091] ? lock_downgrade+0x740/0x740 [ 2475.558104] ? __fget+0x225/0x360 [ 2475.563093] 0 [ 2475.567927] ? do_vfs_ioctl+0xff0/0xff0 [ 2475.567936] ? security_file_ioctl+0x83/0xb0 [ 2475.567947] SyS_ioctl+0x7f/0xb0 [ 2475.570161] 0 [ 2475.573679] ? do_vfs_ioctl+0xff0/0xff0 [ 2475.602872] 0 [ 2475.606443] do_syscall_64+0x1d5/0x640 [ 2475.606461] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2475.609537] 0 [ 2475.613585] RIP: 0033:0x465f69 [ 2475.621220] RSP: 002b:00007f66274e4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2475.625435] Node 0 [ 2475.627217] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2475.627223] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2475.627229] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2475.627233] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2475.627240] R13: 00007ffeea3ca95f R14: 00007f66274e4300 R15: 0000000000022000 [ 2475.631022] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2475.647382] warn_alloc_show_mem: 2 callbacks suppressed [ 2475.647385] Mem-Info: [ 2475.660985] lowmem_reserve[]: [ 2475.674616] active_anon:20497 inactive_anon:35151 isolated_anon:0 [ 2475.674616] active_file:11 inactive_file:15 isolated_file:0 [ 2475.674616] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2475.674616] slab_reclaimable:12140 slab_unreclaimable:110907 [ 2475.674616] mapped:44414 shmem:37639 pagetables:666 bounce:0 [ 2475.674616] free:13894 free_pcp:95 free_cma:0 [ 2475.687428] 0 0 0 0 0 [ 2475.687451] Node 1 Normal free:26752kB min:53696kB low:67120kB high:80544kB active_anon:392kB inactive_anon:13972kB active_file:0kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:216kB bounce:0kB free_pcp:140kB local_pcp:16kB free_cma:0kB [ 2475.687472] lowmem_reserve[]: 0 0 0 0 0 [ 2475.687493] Node 0 DMA: 2*4kB [ 2475.702882] Node 0 active_anon:81596kB inactive_anon:126632kB active_file:52kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:105924kB dirty:0kB writeback:0kB shmem:136456kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2475.712717] (UE) [ 2475.725749] Node 1 active_anon:392kB inactive_anon:13972kB active_file:0kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:71732kB dirty:0kB writeback:0kB shmem:14100kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2475.739493] 2*8kB [ 2475.758125] Node 0 [ 2475.772271] (UE) [ 2475.804313] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2475.831353] 2*16kB [ 2475.851489] lowmem_reserve[]: [ 2475.872412] (UE) [ 2475.904293] 0 [ 2475.932779] 1*32kB (E) 2*64kB (UE) 2*128kB (UE) 3*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10968kB [ 2475.943971] 2717 2718 2718 2718 [ 2475.948115] Node 0 DMA32: 796*4kB (ME) 345*8kB (UMEH) 152*16kB (MEH) 37*32kB (UMEH) 32*64kB (MEH) 47*128kB (UMH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17624kB [ 2475.952452] Node 0 [ 2475.973863] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2475.977349] DMA32 free:17856kB min:36200kB low:45248kB high:54296kB active_anon:81596kB inactive_anon:126632kB active_file:52kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7264kB pagetables:2448kB bounce:0kB free_pcp:260kB local_pcp:152kB free_cma:0kB [ 2475.994955] Node 1 Normal: 31*4kB (ME) 25*8kB (ME) 18*16kB (ME) 17*32kB (UME) 19*64kB (ME) 21*128kB (M) 7*256kB (UM) 3*512kB (M) 16*1024kB (UM) 1*2048kB (U) 0*4096kB = 26820kB [ 2476.030174] lowmem_reserve[]: [ 2476.052213] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2476.055634] 0 0 0 0 0 [ 2476.077544] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2476.079041] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2476.111714] lowmem_reserve[]: 0 0 0 0 0 [ 2476.115747] Node 1 Normal free:26752kB min:53696kB low:67120kB high:80544kB active_anon:392kB inactive_anon:13972kB active_file:4kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:216kB bounce:0kB free_pcp:140kB local_pcp:124kB free_cma:0kB [ 2476.123653] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2476.152652] lowmem_reserve[]: 0 0 0 0 0 [ 2476.160220] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2476.162807] Node 0 [ 2476.172693] 37665 total pagecache pages [ 2476.182874] 0 pages in swap cache [ 2476.183692] DMA: [ 2476.190168] Swap cache stats: add 0, delete 0, find 0/0 [ 2476.193487] 2*4kB [ 2476.201545] Free swap = 0kB [ 2476.205340] (UE) [ 2476.210514] Total swap = 0kB [ 2476.214079] 2*8kB (UE) 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 2*128kB (UE) 3*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10968kB [ 2476.215677] 2097051 pages RAM [ 2476.239729] 0 pages HighMem/MovableOnly [ 2476.243274] Node 0 [ 2476.243697] 363840 pages reserved [ 2476.243703] DMA32: [ 2476.245917] 0 pages cma reserved [ 2476.254385] 796*4kB (ME) 345*8kB (UMEH) 152*16kB (MEH) 37*32kB (UMEH) 32*64kB (MEH) 47*128kB (UMH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17624kB [ 2476.257812] Out of memory: Kill process 29355 (syz-executor.4) score 1004 or sacrifice child [ 2476.283571] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2476.284012] Killed process 29356 (syz-executor.4) total-vm:93252kB, anon-rss:152kB, file-rss:34820kB, shmem-rss:0kB [ 2476.308223] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2476.315101] Node 1 Normal: 31*4kB (ME) 25*8kB (ME) 18*16kB (ME) 17*32kB (UME) 19*64kB (ME) 21*128kB (M) 7*256kB (UM) 3*512kB (M) 16*1024kB (UM) 1*2048kB (U) 0*4096kB = 26820kB [ 2476.332135] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2476.343472] syz-executor.1 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2476.368650] CPU: 1 PID: 29356 Comm: syz-executor.4 Not tainted 4.14.224-syzkaller #0 [ 2476.371502] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2476.376541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2476.376545] Call Trace: [ 2476.376561] dump_stack+0x1b2/0x281 [ 2476.376575] warn_alloc.cold+0x96/0x1cc [ 2476.389569] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2476.394752] ? zone_watermark_ok_safe+0x220/0x220 [ 2476.397331] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2476.400921] ? usleep_range+0x130/0x130 [ 2476.404884] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2476.413436] ? try_to_free_pages+0x23f/0x6e0 [ 2476.413447] ? _find_next_bit+0xdb/0x100 [ 2476.413456] ? run_timer_softirq+0x5a0/0x5a0 [ 2476.413471] __alloc_pages_nodemask+0x2127/0x2720 [ 2476.418301] 37666 total pagecache pages [ 2476.427127] ? lock_acquire+0x170/0x3f0 [ 2476.427143] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2476.431096] 0 pages in swap cache [ 2476.439644] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2476.439663] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2476.444044] Swap cache stats: add 0, delete 0, find 0/0 [ 2476.448090] ? ion_page_pool_alloc+0x28/0x1b0 [ 2476.448104] alloc_pages_current+0x155/0x260 [ 2476.452486] Free swap = 0kB [ 2476.457312] ion_page_pool_alloc+0x118/0x1b0 [ 2476.457322] ion_system_heap_allocate+0x133/0x8c0 [ 2476.457332] ? ion_alloc+0x187/0x810 [ 2476.461291] Total swap = 0kB [ 2476.465271] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2476.470140] 2097051 pages RAM [ 2476.473536] ? ion_system_contig_heap_create+0x130/0x130 [ 2476.478053] 0 pages HighMem/MovableOnly [ 2476.483468] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2476.488826] 363840 pages reserved [ 2476.493283] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2476.497678] 0 pages cma reserved [ 2476.500668] ion_alloc+0x204/0x810 [ 2476.554717] ? ion_dma_buf_release+0x40/0x40 [ 2476.559135] ? __might_fault+0x177/0x1b0 [ 2476.563203] ion_ioctl+0xea/0x1f0 [ 2476.566659] ? ion_query_heaps+0x360/0x360 [ 2476.570900] ? ion_query_heaps+0x360/0x360 [ 2476.575142] do_vfs_ioctl+0x75a/0xff0 [ 2476.578950] ? ioctl_preallocate+0x1a0/0x1a0 [ 2476.581957] syz-executor.1: [ 2476.583355] ? lock_downgrade+0x740/0x740 [ 2476.583363] page allocation failure: order:4 [ 2476.586376] ? __fget+0x225/0x360 [ 2476.586385] ? do_vfs_ioctl+0xff0/0xff0 [ 2476.586396] ? security_file_ioctl+0x83/0xb0 [ 2476.586407] SyS_ioctl+0x7f/0xb0 [ 2476.590547] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2476.594940] ? do_vfs_ioctl+0xff0/0xff0 [ 2476.598395] (null) [ 2476.602334] do_syscall_64+0x1d5/0x640 [ 2476.606742] syz-executor.1 cpuset= [ 2476.610089] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2476.617183] / [ 2476.621123] RIP: 0033:0x465f69 [ 2476.623340] mems_allowed=0-1 [ 2476.627209] RSP: 002b:00007f380960e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2476.627221] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2476.627226] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2476.627231] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2476.627235] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2476.627240] R13: 00007fffbef2da3f R14: 00007f380960e300 R15: 0000000000022000 [ 2476.692885] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2476.703479] CPU: 0 PID: 26605 Comm: syz-executor.1 Not tainted 4.14.224-syzkaller #0 [ 2476.711381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2476.720744] Call Trace: [ 2476.723335] dump_stack+0x1b2/0x281 [ 2476.726967] dump_header+0x178/0x82f [ 2476.730685] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2476.735789] ? ___ratelimit+0x2cd/0x530 [ 2476.739767] oom_kill_process.cold+0x10/0xb18 [ 2476.744271] out_of_memory+0xe3e/0x1190 [ 2476.748253] ? oom_killer_disable+0x1c0/0x1c0 [ 2476.752751] ? mutex_trylock+0x152/0x1a0 [ 2476.756817] __alloc_pages_nodemask+0x23e1/0x2720 [ 2476.761675] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2476.766535] alloc_pages_current+0x155/0x260 [ 2476.770948] filemap_fault+0xea3/0x1980 [ 2476.774929] ext4_filemap_fault+0x84/0xb0 [ 2476.779075] __do_fault+0xfa/0x380 [ 2476.782610] __handle_mm_fault+0x2497/0x4620 [ 2476.787018] ? vm_insert_page+0x7c0/0x7c0 [ 2476.791166] ? nanosleep_copyout+0x100/0x100 [ 2476.795583] handle_mm_fault+0x391/0x860 [ 2476.799646] __do_page_fault+0x549/0xad0 [ 2476.803709] ? spurious_fault+0x640/0x640 [ 2476.807852] ? do_page_fault+0x60/0x500 [ 2476.811824] ? page_fault+0x2f/0x50 [ 2476.815458] page_fault+0x45/0x50 [ 2476.818905] RIP: 25bab7:0x7 [ 2476.821826] RSP: 001d:00007ffeea3cac1c EFLAGS: 00000032 [ 2476.902534] CPU: 0 PID: 29358 Comm: syz-executor.1 Not tainted 4.14.224-syzkaller #0 [ 2476.915914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2476.925270] Call Trace: [ 2476.927868] dump_stack+0x1b2/0x281 [ 2476.931494] warn_alloc.cold+0x96/0x1cc [ 2476.935476] ? zone_watermark_ok_safe+0x220/0x220 [ 2476.940346] __alloc_pages_nodemask+0x2127/0x2720 [ 2476.945196] ? lock_acquire+0x170/0x3f0 [ 2476.949176] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2476.954027] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2476.959487] ? __mutex_unlock_slowpath+0x75/0x770 [ 2476.964335] alloc_pages_current+0x155/0x260 [ 2476.968760] ion_page_pool_alloc+0x118/0x1b0 [ 2476.973171] ion_system_heap_allocate+0x133/0x8c0 [ 2476.978017] ? _raw_spin_unlock+0x29/0x40 [ 2476.982174] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2476.987114] ? ion_system_contig_heap_create+0x130/0x130 [ 2476.992570] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2476.997585] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2477.002433] ion_alloc+0x27a/0x810 [ 2477.005976] ? ion_dma_buf_release+0x40/0x40 [ 2477.010393] ? __might_fault+0x177/0x1b0 [ 2477.015682] ion_ioctl+0xea/0x1f0 [ 2477.019151] ? ion_query_heaps+0x360/0x360 [ 2477.023397] ? ion_query_heaps+0x360/0x360 [ 2477.027637] do_vfs_ioctl+0x75a/0xff0 [ 2477.031453] ? ioctl_preallocate+0x1a0/0x1a0 [ 2477.035871] ? lock_downgrade+0x740/0x740 [ 2477.040032] ? __fget+0x225/0x360 [ 2477.043489] ? do_vfs_ioctl+0xff0/0xff0 [ 2477.047463] ? security_file_ioctl+0x83/0xb0 [ 2477.051867] SyS_ioctl+0x7f/0xb0 [ 2477.055223] ? do_vfs_ioctl+0xff0/0xff0 [ 2477.059197] do_syscall_64+0x1d5/0x640 [ 2477.063092] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2477.068285] RIP: 0033:0x465f69 [ 2477.071472] RSP: 002b:00007f66274e4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2477.079266] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2477.086533] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2477.093805] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2477.101078] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2477.108357] R13: 00007ffeea3ca95f R14: 00007f66274e4300 R15: 0000000000022000 [ 2477.127506] IPVS: ftp: loaded support on port[0] = 21 [ 2477.167884] Mem-Info: [ 2477.170332] active_anon:20544 inactive_anon:35151 isolated_anon:0 [ 2477.170332] active_file:1011 inactive_file:1847 isolated_file:0 [ 2477.170332] unevictable:0 dirty:10 writeback:0 unstable:0 [ 2477.170332] slab_reclaimable:12135 slab_unreclaimable:111292 [ 2477.170332] mapped:55065 shmem:37639 pagetables:691 bounce:0 [ 2477.170332] free:97809 free_pcp:291 free_cma:0 [ 2477.268586] Node 0 active_anon:81544kB inactive_anon:126632kB active_file:44kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:109636kB dirty:20kB writeback:0kB shmem:136456kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2477.315953] Node 1 active_anon:932kB inactive_anon:13972kB active_file:4900kB inactive_file:7148kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:111224kB dirty:20kB writeback:0kB shmem:14100kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2477.397542] Node 0 DMA free:11108kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2477.450850] chnl_net:caif_netlink_parms(): no params data found [ 2477.496060] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2477.503229] Node 0 DMA32 free:20200kB min:36200kB low:45248kB high:54296kB active_anon:81244kB inactive_anon:126632kB active_file:36kB inactive_file:244kB unevictable:0kB writepending:20kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7232kB pagetables:2484kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2477.578563] warn_alloc_show_mem: 1 callbacks suppressed [ 2477.578567] Mem-Info: [ 2477.595034] lowmem_reserve[]: 0 0 0 0 0 [ 2477.602761] active_anon:20669 inactive_anon:35151 isolated_anon:0 [ 2477.602761] active_file:91 inactive_file:82 isolated_file:32 [ 2477.602761] unevictable:0 dirty:10 writeback:0 unstable:0 [ 2477.602761] slab_reclaimable:12135 slab_unreclaimable:111196 [ 2477.602761] mapped:53365 shmem:37639 pagetables:728 bounce:0 [ 2477.602761] free:14243 free_pcp:57 free_cma:0 [ 2477.603523] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2477.658611] Node 0 active_anon:81244kB inactive_anon:126632kB active_file:44kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:109836kB dirty:20kB writeback:0kB shmem:136456kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2477.668511] lowmem_reserve[]: 0 0 0 0 0 [ 2477.696874] Node 1 active_anon:1432kB inactive_anon:13972kB active_file:84kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:102924kB dirty:20kB writeback:0kB shmem:14100kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2477.699105] Node 1 [ 2477.733228] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2477.743304] Node 0 DMA free:11004kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2477.759790] Normal free:26776kB min:53696kB low:67120kB high:80544kB active_anon:1332kB inactive_anon:13972kB active_file:484kB inactive_file:616kB unevictable:0kB writepending:20kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:428kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2477.789398] lowmem_reserve[]: [ 2477.811295] syz-executor.4 cpuset= [ 2477.811914] 0 [ 2477.814423] / [ 2477.817988] 2717 2718 2718 2718 [ 2477.823748] mems_allowed=0-1 [ 2477.824809] Node 0 [ 2477.830012] CPU: 1 PID: 29356 Comm: syz-executor.4 Not tainted 4.14.224-syzkaller #0 [ 2477.834064] DMA32 free:18120kB min:36200kB low:45248kB high:54296kB active_anon:81244kB inactive_anon:126632kB active_file:36kB inactive_file:24kB unevictable:0kB writepending:20kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7232kB pagetables:2484kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2477.840103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2477.840107] Call Trace: [ 2477.840126] dump_stack+0x1b2/0x281 [ 2477.840139] warn_alloc.cold+0x96/0x1cc [ 2477.868264] lowmem_reserve[]: [ 2477.877580] ? zone_watermark_ok_safe+0x220/0x220 [ 2477.877603] __alloc_pages_nodemask+0x2127/0x2720 [ 2477.880153] 0 [ 2477.883765] ? lock_acquire+0x170/0x3f0 [ 2477.887726] 0 [ 2477.890802] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2477.895610] 0 [ 2477.900630] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2477.900642] ? __mutex_unlock_slowpath+0x75/0x770 [ 2477.902417] 0 [ 2477.906383] alloc_pages_current+0x155/0x260 [ 2477.906402] ion_page_pool_alloc+0x118/0x1b0 [ 2477.908171] 0 [ 2477.912994] ion_system_heap_allocate+0x133/0x8c0 [ 2477.920206] ? _raw_spin_unlock+0x29/0x40 [ 2477.920216] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2477.920227] ? ion_system_contig_heap_create+0x130/0x130 [ 2477.925043] Node 0 [ 2477.926826] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2477.926837] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2477.926848] ion_alloc+0x27a/0x810 [ 2477.931240] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2477.935619] ? ion_dma_buf_release+0x40/0x40 [ 2477.937409] lowmem_reserve[]: [ 2477.942221] ? __might_fault+0x177/0x1b0 [ 2477.946358] 0 [ 2477.951262] ion_ioctl+0xea/0x1f0 [ 2477.956694] 0 [ 2477.958897] ? ion_query_heaps+0x360/0x360 [ 2477.963884] 0 [ 2477.968710] ? ion_query_heaps+0x360/0x360 [ 2477.968719] do_vfs_ioctl+0x75a/0xff0 [ 2477.968730] ? ioctl_preallocate+0x1a0/0x1a0 [ 2477.972259] 0 [ 2477.997132] ? lock_downgrade+0x740/0x740 [ 2477.997146] ? __fget+0x225/0x360 [ 2477.997156] ? do_vfs_ioctl+0xff0/0xff0 [ 2478.001543] 0 [ 2478.004628] ? security_file_ioctl+0x83/0xb0 [ 2478.010456] SyS_ioctl+0x7f/0xb0 [ 2478.013881] Node 1 [ 2478.015661] ? do_vfs_ioctl+0xff0/0xff0 [ 2478.019900] Normal free:26776kB min:53696kB low:67120kB high:80544kB active_anon:1332kB inactive_anon:13972kB active_file:484kB inactive_file:616kB unevictable:0kB writepending:20kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:428kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2478.021651] do_syscall_64+0x1d5/0x640 [ 2478.025853] lowmem_reserve[]: [ 2478.029641] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2478.029651] RIP: 0033:0x465f69 [ 2478.034033] 0 [ 2478.035823] RSP: 002b:00007f380960e188 EFLAGS: 00000246 [ 2478.039978] 0 [ 2478.043395] ORIG_RAX: 0000000000000010 [ 2478.047370] 0 [ 2478.049143] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2478.053523] 0 [ 2478.056874] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2478.056880] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2478.056885] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2478.056891] R13: 00007fffbef2da3f R14: 00007f380960e300 R15: 0000000000022000 [ 2478.063140] lowmem_reserve[]: [ 2478.102832] 0 [ 2478.103483] 0 [ 2478.113788] 0 [ 2478.115573] Node 0 [ 2478.119590] 0 0 0 [ 2478.119601] Node 0 DMA: 2*4kB (UE) 1*8kB (E) 1*16kB (E) [ 2478.128307] DMA: [ 2478.128728] 1*32kB [ 2478.130466] 2*4kB [ 2478.141166] (E) [ 2478.156634] (UE) [ 2478.161541] 1*64kB [ 2478.162866] 1*8kB [ 2478.164643] (E) [ 2478.180991] (E) [ 2478.184120] 3*128kB [ 2478.184543] 1*16kB [ 2478.189247] (UE) [ 2478.201667] (E) [ 2478.203201] 3*256kB [ 2478.203726] 1*32kB [ 2478.205676] (UE) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11008kB [ 2478.215149] (E) [ 2478.220743] Node 0 DMA32: 804*4kB (UME) 708*8kB (UMEH) 160*16kB (UME) 43*32kB (UMEH) 32*64kB (MEH) 7*128kB (UMH) 7*256kB (U) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18576kB [ 2478.227971] 1*64kB (E) 3*128kB (UE) 3*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11008kB [ 2478.242384] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2478.260526] Node 0 DMA32: 804*4kB (UME) 708*8kB (UMEH) 160*16kB (UME) 43*32kB (UMEH) 32*64kB (MEH) 7*128kB (UMH) 7*256kB (U) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18576kB [ 2478.263483] Node 1 Normal: 141*4kB (UME) 126*8kB (UME) 93*16kB (UME) 56*32kB (UME) 31*64kB (ME) 18*128kB (M) 69*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26804kB [ 2478.289135] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2478.301789] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2478.318692] Node 1 Normal: 141*4kB (UME) 126*8kB (UME) 93*16kB (UME) 56*32kB (UME) 31*64kB (ME) 18*128kB (M) 69*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26804kB [ 2478.324778] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2478.351017] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2478.360104] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2478.361067] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2478.384373] 37678 total pagecache pages [ 2478.387530] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2478.388420] 0 pages in swap cache [ 2478.408399] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2478.421468] Swap cache stats: add 0, delete 0, find 0/0 [ 2478.424773] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2478.434076] Free swap = 0kB [ 2478.437677] 37678 total pagecache pages [ 2478.442872] 0 pages in swap cache [ 2478.452117] Total swap = 0kB [ 2478.455142] 2097051 pages RAM [ 2478.457414] Swap cache stats: add 0, delete 0, find 0/0 [ 2478.462929] 0 pages HighMem/MovableOnly [ 2478.463581] Free swap = 0kB [ 2478.467602] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2478.467625] syz-executor.4 cpuset= [ 2478.480678] Total swap = 0kB [ 2478.488217] 363840 pages reserved [ 2478.492353] 0 pages cma reserved [ 2478.495708] Out of memory (oom_kill_allocating_task): Kill process 26605 (syz-executor.1) score 0 or sacrifice child [ 2478.498992] 2097051 pages RAM [ 2478.509485] 0 pages HighMem/MovableOnly [ 2478.512348] Killed process 26605 (syz-executor.1) total-vm:93120kB, anon-rss:104kB, file-rss:34092kB, shmem-rss:0kB [ 2478.513441] 363840 pages reserved [ 2478.513446] 0 pages cma reserved [ 2478.554642] oom_reaper: reaped process 29356 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2478.574731] / mems_allowed=0-1 [ 2478.580123] CPU: 0 PID: 29356 Comm: syz-executor.4 Not tainted 4.14.224-syzkaller #0 [ 2478.585380] oom_reaper: reaped process 26605 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2478.587998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2478.588002] Call Trace: [ 2478.588021] dump_stack+0x1b2/0x281 [ 2478.588035] warn_alloc.cold+0x96/0x1cc [ 2478.588046] ? zone_watermark_ok_safe+0x220/0x220 [ 2478.588056] ? usleep_range+0x130/0x130 [ 2478.588065] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2478.588077] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2478.588087] ? run_timer_softirq+0x5a0/0x5a0 [ 2478.588101] __alloc_pages_nodemask+0x2127/0x2720 [ 2478.588114] ? lock_acquire+0x170/0x3f0 [ 2478.588127] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2478.588137] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2478.588152] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2478.588172] alloc_pages_current+0x155/0x260 [ 2478.588186] ion_page_pool_alloc+0x118/0x1b0 [ 2478.598189] syz-executor.1: [ 2478.607474] ion_system_heap_allocate+0x133/0x8c0 [ 2478.607485] ? _raw_spin_unlock+0x29/0x40 [ 2478.607494] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2478.607504] ? ion_system_contig_heap_create+0x130/0x130 [ 2478.607516] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2478.615980] page allocation failure: order:0 [ 2478.617674] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2478.622489] , mode:0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 2478.626445] ion_alloc+0x27a/0x810 [ 2478.626460] ? ion_dma_buf_release+0x40/0x40 [ 2478.626471] ? __might_fault+0x177/0x1b0 [ 2478.626484] ion_ioctl+0xea/0x1f0 [ 2478.626493] ? ion_query_heaps+0x360/0x360 [ 2478.626506] ? ion_query_heaps+0x360/0x360 [ 2478.626515] do_vfs_ioctl+0x75a/0xff0 [ 2478.626526] ? ioctl_preallocate+0x1a0/0x1a0 [ 2478.626534] ? lock_downgrade+0x740/0x740 [ 2478.626547] ? __fget+0x225/0x360 [ 2478.638739] (null) [ 2478.641024] ? do_vfs_ioctl+0xff0/0xff0 [ 2478.645845] syz-executor.1 cpuset= [ 2478.649799] ? security_file_ioctl+0x83/0xb0 [ 2478.649821] SyS_ioctl+0x7f/0xb0 [ 2478.649830] ? do_vfs_ioctl+0xff0/0xff0 [ 2478.649840] do_syscall_64+0x1d5/0x640 [ 2478.649855] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2478.649881] RIP: 0033:0x465f69 [ 2478.649886] RSP: 002b:00007f380960e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2478.649895] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2478.649901] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2478.649906] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2478.649911] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2478.649915] R13: 00007fffbef2da3f R14: 00007f380960e300 R15: 0000000000022000 [ 2478.652156] kworker/0:9 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask= [ 2478.660575] / [ 2478.685940] (null) [ 2478.696472] mems_allowed=0-1 [ 2478.715959] , order=1, oom_score_adj=0 [ 2478.724369] CPU: 1 PID: 26605 Comm: syz-executor.1 Not tainted 4.14.224-syzkaller #0 [ 2478.725750] kworker/0:9 cpuset= [ 2478.729854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2478.729857] Call Trace: [ 2478.729873] dump_stack+0x1b2/0x281 [ 2478.729884] warn_alloc.cold+0x96/0x1cc [ 2478.729894] ? zone_watermark_ok_safe+0x220/0x220 [ 2478.729902] ? usleep_range+0x130/0x130 [ 2478.729909] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2478.729919] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2478.729927] ? run_timer_softirq+0x5a0/0x5a0 [ 2478.729941] __alloc_pages_nodemask+0x2127/0x2720 [ 2478.729961] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2478.729983] alloc_pages_current+0x155/0x260 [ 2478.753048] / [ 2478.754256] filemap_fault+0xea3/0x1980 [ 2478.754277] ext4_filemap_fault+0x84/0xb0 [ 2478.757829] mems_allowed=0-1 [ 2478.759936] __do_fault+0xfa/0x380 [ 2478.939240] __handle_mm_fault+0x2497/0x4620 [ 2478.943641] ? vm_insert_page+0x7c0/0x7c0 [ 2478.947773] ? nanosleep_copyout+0x100/0x100 [ 2478.952169] handle_mm_fault+0x391/0x860 [ 2478.956213] __do_page_fault+0x549/0xad0 [ 2478.960254] ? spurious_fault+0x640/0x640 [ 2478.964381] ? do_page_fault+0x60/0x500 [ 2478.968420] ? page_fault+0x2f/0x50 [ 2478.972028] page_fault+0x45/0x50 [ 2478.975476] RIP: 25bab7:0x7 [ 2478.978388] RSP: 001d:00007ffeea3cac1c EFLAGS: 00000032 [ 2478.978407] CPU: 0 PID: 26340 Comm: kworker/0:9 Not tainted 4.14.224-syzkaller #0 [ 2478.979115] Bluetooth: hci3 command 0x0409 tx timeout [ 2478.983765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2478.997739] warn_alloc_show_mem: 1 callbacks suppressed [ 2478.997743] Mem-Info: [ 2479.005902] Workqueue: events vhci_open_timeout [ 2479.005909] Call Trace: [ 2479.005922] dump_stack+0x1b2/0x281 [ 2479.005934] dump_header+0x178/0x82f [ 2479.005944] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2479.005952] ? ___ratelimit+0x2cd/0x530 [ 2479.005962] oom_kill_process.cold+0x10/0xb18 [ 2479.005972] ? lock_downgrade+0x740/0x740 [ 2479.005989] out_of_memory+0x2dc/0x1190 [ 2479.015851] active_anon:20706 inactive_anon:35153 isolated_anon:0 [ 2479.015851] active_file:17 inactive_file:18 isolated_file:0 [ 2479.015851] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2479.015851] slab_reclaimable:12129 slab_unreclaimable:111196 [ 2479.015851] mapped:53152 shmem:37643 pagetables:754 bounce:0 [ 2479.015851] free:13951 free_pcp:89 free_cma:0 [ 2479.018388] ? oom_killer_disable+0x1c0/0x1c0 [ 2479.018397] ? mutex_trylock+0x152/0x1a0 [ 2479.018407] __alloc_pages_nodemask+0x23e1/0x2720 [ 2479.018427] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2479.018445] ? mark_held_locks+0xa6/0xf0 [ 2479.018456] ? cache_grow_begin+0x41/0x630 [ 2479.022852] Node 0 active_anon:81268kB inactive_anon:126632kB active_file:12kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:109764kB dirty:0kB writeback:0kB shmem:136456kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2479.024626] cache_grow_begin+0x91/0x630 [ 2479.032247] Node 1 active_anon:1556kB inactive_anon:13980kB active_file:56kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:102844kB dirty:0kB writeback:0kB shmem:14116kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2479.033396] ? cache_grow_begin+0x91/0x630 [ 2479.039225] Node 0 [ 2479.041820] fallback_alloc+0x207/0x2c0 [ 2479.049893] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2479.049905] lowmem_reserve[]: [ 2479.083035] kmem_cache_alloc_trace+0x1f1/0x3d0 [ 2479.083046] ? dev_uevent_filter+0xd0/0xd0 [ 2479.083054] kobject_uevent_env+0x20c/0xf40 [ 2479.083064] ? wait_for_completion_io+0x10/0x10 [ 2479.083075] device_add+0xa47/0x15c0 [ 2479.083086] ? device_is_dependent+0x2a0/0x2a0 [ 2479.083098] hci_register_dev+0x2e2/0x8f0 [ 2479.083107] ? device_initialize+0x188/0x420 [ 2479.083116] __vhci_create_device+0x28d/0x540 [ 2479.083126] vhci_open_timeout+0x35/0x50 [ 2479.083136] process_one_work+0x793/0x14a0 [ 2479.083148] ? work_busy+0x320/0x320 [ 2479.083154] ? worker_thread+0x158/0xff0 [ 2479.083165] ? _raw_spin_unlock_irq+0x24/0x80 [ 2479.093578] 0 [ 2479.097422] worker_thread+0x5cc/0xff0 [ 2479.097437] ? rescuer_thread+0xc80/0xc80 [ 2479.097445] kthread+0x30d/0x420 [ 2479.097451] ? kthread_create_on_node+0xd0/0xd0 [ 2479.097461] ret_from_fork+0x24/0x30 [ 2479.098890] syz-executor.1: [ 2479.102321] 2717 [ 2479.120038] page allocation failure: order:0 [ 2479.143048] 2718 [ 2479.154169] Mem-Info: [ 2479.174384] 2718 [ 2479.179289] active_anon:20706 inactive_anon:35153 isolated_anon:0 [ 2479.179289] active_file:17 inactive_file:18 isolated_file:0 [ 2479.179289] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2479.179289] slab_reclaimable:12129 slab_unreclaimable:111196 [ 2479.179289] mapped:53152 shmem:37643 pagetables:754 bounce:0 [ 2479.179289] free:13951 free_pcp:89 free_cma:0 [ 2479.191256] 2718 [ 2479.210308] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2479.231453] (null) [ 2479.231737] Node 0 [ 2479.236322] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2479.236344] CPU: 0 PID: 29358 Comm: syz-executor.1 Not tainted 4.14.224-syzkaller #0 [ 2479.236349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2479.236353] Call Trace: [ 2479.236371] dump_stack+0x1b2/0x281 [ 2479.236386] warn_alloc.cold+0x96/0x1cc [ 2479.236398] ? zone_watermark_ok_safe+0x220/0x220 [ 2479.236409] ? usleep_range+0x130/0x130 [ 2479.249039] DMA32 free:18040kB min:36200kB low:45248kB high:54296kB active_anon:81268kB inactive_anon:126632kB active_file:12kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7232kB pagetables:2496kB bounce:0kB free_pcp:356kB local_pcp:140kB free_cma:0kB [ 2479.249405] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2479.253436] lowmem_reserve[]: [ 2479.257654] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2479.257664] ? run_timer_softirq+0x5a0/0x5a0 [ 2479.257681] __alloc_pages_nodemask+0x2127/0x2720 [ 2479.257697] ? lock_acquire+0x170/0x3f0 [ 2479.257712] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2479.257724] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2479.270386] 0 [ 2479.271741] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2479.275595] 0 [ 2479.279736] alloc_pages_current+0x155/0x260 [ 2479.279752] ion_page_pool_alloc+0x118/0x1b0 [ 2479.279762] ion_system_heap_allocate+0x133/0x8c0 [ 2479.279775] ? _raw_spin_unlock+0x29/0x40 [ 2479.279783] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2479.279794] ? ion_system_contig_heap_create+0x130/0x130 [ 2479.291656] 0 [ 2479.294521] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2479.298284] 0 [ 2479.300976] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2479.303011] 0 [ 2479.305405] ion_alloc+0x27a/0x810 [ 2479.340601] ? ion_dma_buf_release+0x40/0x40 [ 2479.340617] ? __might_fault+0x177/0x1b0 [ 2479.340629] ion_ioctl+0xea/0x1f0 [ 2479.340637] ? ion_query_heaps+0x360/0x360 [ 2479.340650] ? ion_query_heaps+0x360/0x360 [ 2479.340661] do_vfs_ioctl+0x75a/0xff0 [ 2479.340673] ? ioctl_preallocate+0x1a0/0x1a0 [ 2479.340682] ? lock_downgrade+0x740/0x740 [ 2479.340694] ? __fget+0x225/0x360 [ 2479.340702] ? do_vfs_ioctl+0xff0/0xff0 [ 2479.340713] ? security_file_ioctl+0x83/0xb0 [ 2479.351239] Node 0 [ 2479.352001] SyS_ioctl+0x7f/0xb0 [ 2479.354234] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2479.359305] ? do_vfs_ioctl+0xff0/0xff0 [ 2479.359316] do_syscall_64+0x1d5/0x640 [ 2479.359332] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2479.359341] RIP: 0033:0x465f69 [ 2479.359345] RSP: 002b:00007f66274e4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2479.359354] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2479.359359] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2479.359364] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2479.359371] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2479.376020] lowmem_reserve[]: [ 2479.376628] R13: 00007ffeea3ca95f R14: 00007f66274e4300 R15: 0000000000022000 [ 2479.379192] 0 [ 2479.388582] Node 0 active_anon:81268kB inactive_anon:126632kB active_file:12kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:109764kB dirty:0kB writeback:0kB shmem:136456kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2479.400572] 0 [ 2479.429771] Node 1 active_anon:1556kB inactive_anon:13980kB active_file:56kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:102844kB dirty:0kB writeback:0kB shmem:14116kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2479.441421] 0 [ 2479.445923] Node 0 [ 2479.450239] 0 [ 2479.450607] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2479.455445] 0 [ 2479.465900] lowmem_reserve[]: [ 2479.482262] 0 [ 2479.485648] Node 1 [ 2479.489990] 2717 2718 2718 2718 [ 2479.490008] Node 0 DMA32 free:18040kB min:36200kB low:45248kB high:54296kB active_anon:81268kB inactive_anon:126632kB active_file:12kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7232kB pagetables:2496kB bounce:0kB free_pcp:356kB local_pcp:216kB free_cma:0kB [ 2479.503569] Normal free:26796kB min:53696kB low:67120kB high:80544kB active_anon:1556kB inactive_anon:13980kB active_file:56kB inactive_file:56kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:520kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2479.509030] lowmem_reserve[]: [ 2479.512947] lowmem_reserve[]: [ 2479.513924] 0 [ 2479.515706] 0 0 [ 2479.519329] 0 0 0 0 [ 2479.519347] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2479.519365] lowmem_reserve[]: 0 0 0 0 0 [ 2479.519383] Node 1 Normal free:26796kB min:53696kB low:67120kB high:80544kB active_anon:1556kB inactive_anon:13980kB active_file:56kB inactive_file:56kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:520kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2479.519401] lowmem_reserve[]: [ 2479.537370] 0 [ 2479.541525] 0 [ 2479.543559] 0 [ 2479.547982] 0 0 0 0 [ 2479.547997] Node 0 DMA: 2*4kB (UE) 2*8kB (UE) 2*16kB (UE) 1*32kB (E) 2*64kB (UE) [ 2479.564475] 0 [ 2479.575876] 2*128kB [ 2479.763938] (UE) [ 2479.898137] Node 0 [ 2479.900220] 3*256kB [ 2479.900733] DMA: [ 2479.902599] (UE) [ 2479.924193] 2*4kB [ 2479.925362] 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10968kB [ 2479.940358] Node 0 DMA32: 794*4kB (UME) 1322*8kB (UME) 222*16kB (UME) 62*32kB (UME) 54*64kB (UME) 7*128kB (UM) 7*256kB (U) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26456kB [ 2479.942812] (UE) [ 2479.956137] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2479.956188] Node 1 Normal: 7*4kB (UME) 3*8kB (UME) 3*16kB (ME) 4*32kB (UE) 2865*64kB (UME) 7*128kB (M) 69*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 202148kB [ 2479.983768] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2479.996685] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2480.005277] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2480.028858] 2*8kB (UE) 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 2*128kB (UE) 3*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10968kB [ 2480.046423] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2480.055569] 39446 total pagecache pages [ 2480.066744] 0 pages in swap cache [ 2480.076256] Swap cache stats: add 0, delete 0, find 0/0 [ 2480.084090] Free swap = 0kB [ 2480.086486] Node 0 DMA32: 794*4kB (UME) 1467*8kB (UME) 248*16kB (UME) 70*32kB (UME) 70*64kB (UME) 7*128kB (UM) 7*256kB (U) [ 2480.087202] Total swap = 0kB [ 2480.101529] 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 29312kB [ 2480.108302] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2480.139902] 2097051 pages RAM [ 2480.143032] 0 pages HighMem/MovableOnly [ 2480.146460] Node 1 Normal: 6*4kB (UE) 1*8kB (E) 4*16kB (UME) 4*32kB (UE) 4287*64kB (UE) 406*128kB (UM) 87*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 348832kB [ 2480.155824] 363840 pages reserved [ 2480.165176] 0 pages cma reserved [ 2480.186192] Out of memory: Kill process 29353 (syz-executor.5) score 1004 or sacrifice child [ 2480.186948] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2480.194996] Killed process 29354 (syz-executor.5) total-vm:93252kB, anon-rss:148kB, file-rss:34820kB, shmem-rss:0kB [ 2480.237778] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2480.258608] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2480.297709] oom_reaper: reaped process 29354 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2480.336021] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2480.348440] 39464 total pagecache pages [ 2480.352789] 0 pages in swap cache [ 2480.366713] Swap cache stats: add 0, delete 0, find 0/0 [ 2480.372103] Free swap = 0kB [ 2480.375118] Total swap = 0kB [ 2480.395824] 2097051 pages RAM [ 2480.398992] 0 pages HighMem/MovableOnly [ 2480.402980] 363840 pages reserved [ 2480.415821] 0 pages cma reserved 00:43:27 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x484240, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)={0x101, 0x1, 0x4, 0x400, 0xffff, {0x0, 0x2710}, {0x1, 0x2, 0x8, 0x2, 0x7, 0x1, "db53d254"}, 0x8, 0x4, @fd=r1, 0x4, 0x0, r1}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x4, 0x90040) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x7fffffff, 0x1e, 0x1}) [ 2480.655347] IPVS: ftp: loaded support on port[0] = 21 00:43:27 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x484240, 0x0) inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0x8) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x4, 0x90040) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x7fffffff, 0x1e, 0x1}) [ 2480.903916] bridge0: port 1(bridge_slave_0) entered blocking state [ 2480.913200] bridge0: port 1(bridge_slave_0) entered disabled state [ 2480.950084] device bridge_slave_0 entered promiscuous mode [ 2481.016801] bridge0: port 2(bridge_slave_1) entered blocking state [ 2481.024555] bridge0: port 2(bridge_slave_1) entered disabled state [ 2481.044148] device bridge_slave_1 entered promiscuous mode [ 2481.055950] Bluetooth: hci3 command 0x041b tx timeout [ 2481.095524] chnl_net:caif_netlink_parms(): no params data found [ 2481.190651] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2481.205034] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2481.231453] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2481.243358] CPU: 1 PID: 29501 Comm: syz-executor.4 Not tainted 4.14.224-syzkaller #0 [ 2481.251268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2481.260625] Call Trace: [ 2481.263220] dump_stack+0x1b2/0x281 [ 2481.266854] warn_alloc.cold+0x96/0x1cc [ 2481.270834] ? zone_watermark_ok_safe+0x220/0x220 [ 2481.275688] __alloc_pages_nodemask+0x2127/0x2720 [ 2481.280537] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2481.285666] ? lock_acquire+0x170/0x3f0 [ 2481.289636] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2481.294466] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2481.299900] ? __mutex_unlock_slowpath+0x75/0x770 [ 2481.304728] alloc_pages_current+0x155/0x260 [ 2481.309125] ion_page_pool_alloc+0x118/0x1b0 [ 2481.313516] ion_system_heap_allocate+0x133/0x8c0 [ 2481.318339] ? ion_alloc+0x187/0x810 [ 2481.322037] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2481.327470] ? ion_system_contig_heap_create+0x130/0x130 [ 2481.332901] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2481.337915] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2481.342756] ion_alloc+0x204/0x810 [ 2481.346281] ? ion_dma_buf_release+0x40/0x40 [ 2481.350673] ? __might_fault+0x177/0x1b0 [ 2481.354716] ion_ioctl+0xea/0x1f0 [ 2481.358149] ? ion_query_heaps+0x360/0x360 [ 2481.362367] ? ion_query_heaps+0x360/0x360 [ 2481.366582] do_vfs_ioctl+0x75a/0xff0 [ 2481.370365] ? ioctl_preallocate+0x1a0/0x1a0 [ 2481.374752] ? lock_downgrade+0x740/0x740 [ 2481.378882] ? __fget+0x225/0x360 [ 2481.382316] ? do_vfs_ioctl+0xff0/0xff0 [ 2481.386273] ? security_file_ioctl+0x83/0xb0 [ 2481.390662] SyS_ioctl+0x7f/0xb0 [ 2481.394024] ? do_vfs_ioctl+0xff0/0xff0 [ 2481.398261] do_syscall_64+0x1d5/0x640 [ 2481.402134] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2481.407305] RIP: 0033:0x465f69 [ 2481.410477] RSP: 002b:00007f380960e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2481.418165] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2481.425414] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2481.432663] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2481.439914] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2481.447163] R13: 00007fffbef2da3f R14: 00007f380960e300 R15: 0000000000022000 [ 2481.503333] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 2481.522866] systemd-journal cpuset=/ mems_allowed=0-1 [ 2481.528151] CPU: 1 PID: 27849 Comm: systemd-journal Not tainted 4.14.224-syzkaller #0 [ 2481.536104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2481.545436] Call Trace: [ 2481.548014] dump_stack+0x1b2/0x281 [ 2481.551625] dump_header+0x178/0x82f [ 2481.555332] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2481.560417] ? ___ratelimit+0x2cd/0x530 [ 2481.564372] oom_kill_process.cold+0x10/0xb18 [ 2481.568854] out_of_memory+0xe3e/0x1190 [ 2481.572810] ? oom_killer_disable+0x1c0/0x1c0 [ 2481.577308] ? mutex_trylock+0x152/0x1a0 [ 2481.581351] __alloc_pages_nodemask+0x23e1/0x2720 [ 2481.586183] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2481.591011] ? cache_grow_begin+0x41/0x630 [ 2481.595225] cache_grow_begin+0x91/0x630 [ 2481.599266] ? cache_grow_begin+0x91/0x630 [ 2481.603481] fallback_alloc+0x207/0x2c0 [ 2481.607440] kmem_cache_alloc+0x1e5/0x3c0 [ 2481.611657] getname_flags+0xc8/0x550 [ 2481.615436] SyS_mkdirat+0x83/0x270 [ 2481.619053] ? SyS_mknod+0x30/0x30 [ 2481.622590] ? do_syscall_64+0x4c/0x640 [ 2481.626545] ? SyS_mkdirat+0x270/0x270 [ 2481.630412] do_syscall_64+0x1d5/0x640 [ 2481.634297] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2481.639467] RIP: 0033:0x7f76e9bee687 [ 2481.643170] RSP: 002b:00007ffc13179548 EFLAGS: 00000293 ORIG_RAX: 0000000000000053 [ 2481.650856] RAX: ffffffffffffffda RBX: 00007ffc1317c460 RCX: 00007f76e9bee687 [ 2481.658104] RDX: 00007f76ea65fa00 RSI: 00000000000001ed RDI: 00005604464fd860 [ 2481.665371] RBP: 00007ffc13179580 R08: 0000000000000000 R09: 0000000000000000 [ 2481.672642] R10: 0000000000000069 R11: 0000000000000293 R12: 0000000000000000 [ 2481.679899] R13: 0000000000000000 R14: 00007ffc1317c460 R15: 00007ffc13179a70 [ 2481.691452] Mem-Info: [ 2481.693882] active_anon:20827 inactive_anon:35157 isolated_anon:0 [ 2481.693882] active_file:421 inactive_file:420 isolated_file:32 [ 2481.693882] unevictable:0 dirty:13 writeback:0 unstable:0 [ 2481.693882] slab_reclaimable:12121 slab_unreclaimable:111556 [ 2481.693882] mapped:45326 shmem:37648 pagetables:700 bounce:0 [ 2481.693882] free:15878 free_pcp:6 free_cma:0 [ 2481.730989] warn_alloc_show_mem: 2 callbacks suppressed [ 2481.730992] Mem-Info: [ 2481.738900] active_anon:20827 inactive_anon:35157 isolated_anon:0 [ 2481.738900] active_file:276 inactive_file:239 isolated_file:32 [ 2481.738900] unevictable:0 dirty:13 writeback:0 unstable:0 [ 2481.738900] slab_reclaimable:12121 slab_unreclaimable:111556 [ 2481.738900] mapped:45051 shmem:37648 pagetables:700 bounce:0 [ 2481.738900] free:13737 free_pcp:199 free_cma:0 [ 2481.774514] Node 0 active_anon:81004kB inactive_anon:126636kB active_file:152kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:75368kB dirty:28kB writeback:0kB shmem:136460kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2481.802676] Node 0 active_anon:81004kB inactive_anon:126636kB active_file:152kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:75368kB dirty:28kB writeback:0kB shmem:136460kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2481.831638] Node 1 active_anon:2304kB inactive_anon:13992kB active_file:412kB inactive_file:248kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:103536kB dirty:24kB writeback:0kB shmem:14132kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2481.864966] Node 0 DMA free:10944kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2481.896807] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2481.901854] Node 0 DMA32 free:17768kB min:36200kB low:45248kB high:54296kB active_anon:80964kB inactive_anon:126632kB active_file:12kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7200kB pagetables:2264kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2481.912617] Node 1 active_anon:2204kB inactive_anon:13996kB active_file:40kB inactive_file:76kB unevictable:0kB isolated(anon):0kB isolated(file):48kB mapped:102896kB dirty:0kB writeback:0kB shmem:14136kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2481.931752] lowmem_reserve[]: [ 2481.960685] Bluetooth: hci5 command 0x0409 tx timeout [ 2481.961772] 0 [ 2481.963875] Node 0 [ 2481.969237] 0 [ 2481.970849] DMA free:10944kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2481.973053] 0 [ 2481.974833] lowmem_reserve[]: [ 2482.000403] 0 [ 2482.005080] 0 [ 2482.005265] 0 [ 2482.007092] 2717 2718 2718 2718 [ 2482.007108] Node 0 DMA32 free:17768kB min:36200kB low:45248kB high:54296kB active_anon:80964kB inactive_anon:126632kB active_file:12kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7200kB pagetables:2264kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2482.007129] lowmem_reserve[]: 0 0 0 0 0 [ 2482.007149] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2482.007166] lowmem_reserve[]: 0 0 0 0 0 [ 2482.007186] Node 1 Normal free:26568kB min:53696kB low:67120kB high:80544kB active_anon:2204kB inactive_anon:13996kB active_file:40kB inactive_file:192kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:532kB bounce:0kB free_pcp:168kB local_pcp:168kB free_cma:0kB [ 2482.007205] lowmem_reserve[]: 0 0 0 0 0 [ 2482.007224] Node 0 DMA: 2*4kB [ 2482.010818] (UE) [ 2482.014187] Node 0 [ 2482.055661] 1*8kB [ 2482.075534] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2482.077216] (E) [ 2482.107021] lowmem_reserve[]: [ 2482.111977] 1*16kB [ 2482.112403] 0 [ 2482.114435] (E) [ 2482.116690] 0 [ 2482.118821] 1*32kB [ 2482.148951] 0 [ 2482.151066] (E) [ 2482.152843] 0 [ 2482.154799] 2*64kB [ 2482.156642] 0 [ 2482.167954] (UE) 2*128kB (UE) 3*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10944kB [ 2482.179818] Node 0 DMA32: 791*4kB (UME) 356*8kB (ME) 143*16kB (UME) 38*32kB (UME) 25*64kB (ME) 9*128kB (UM) 17*256kB (U) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 17644kB [ 2482.179885] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2482.198508] Node 1 Normal free:26668kB min:53696kB low:67120kB high:80544kB active_anon:2204kB inactive_anon:13996kB active_file:40kB inactive_file:192kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:532kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2482.206355] Node 1 Normal: 99*4kB (UME) 76*8kB (ME) [ 2482.234892] lowmem_reserve[]: [ 2482.237273] 59*16kB [ 2482.240524] 0 [ 2482.243106] (ME) [ 2482.245388] 0 0 0 0 [ 2482.250036] 50*32kB [ 2482.251705] Node 0 [ 2482.251707] (UME) 41*64kB [ 2482.254011] DMA: 2*4kB (UE) 1*8kB (E) 1*16kB (E) 1*32kB (E) 2*64kB (UE) 2*128kB (UE) 3*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10944kB [ 2482.259708] (UME) [ 2482.274135] Node 0 DMA32: 791*4kB (UME) 356*8kB (ME) 143*16kB (UME) 38*32kB (UME) 25*64kB (ME) 9*128kB (UM) 17*256kB (U) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 17644kB [ 2482.276710] 15*128kB [ 2482.291767] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2482.298200] (M) 73*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26780kB [ 2482.312005] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2482.319551] Node 1 Normal: 99*4kB (UME) 76*8kB (ME) 59*16kB (ME) 50*32kB (UME) 41*64kB [ 2482.320870] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2482.320876] (UME) [ 2482.329017] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2482.329023] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2482.329027] 37689 total pagecache pages [ 2482.329038] 0 pages in swap cache [ 2482.329043] Swap cache stats: add 0, delete 0, find 0/0 [ 2482.329047] Free swap = 0kB [ 2482.329050] Total swap = 0kB [ 2482.329056] 2097051 pages RAM [ 2482.329059] 0 pages HighMem/MovableOnly [ 2482.329062] 363840 pages reserved [ 2482.329065] 0 pages cma reserved [ 2482.345658] Bluetooth: hci4 command 0x0409 tx timeout [ 2482.352867] 15*128kB (M) 73*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26780kB [ 2482.404127] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2482.413047] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2482.434822] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2482.443938] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2482.452590] 37689 total pagecache pages [ 2482.458042] 0 pages in swap cache [ 2482.461501] Swap cache stats: add 0, delete 0, find 0/0 [ 2482.467244] Free swap = 0kB [ 2482.470259] Total swap = 0kB [ 2482.473282] 2097051 pages RAM [ 2482.476468] 0 pages HighMem/MovableOnly [ 2482.480441] 363840 pages reserved [ 2482.483894] 0 pages cma reserved [ 2482.487310] Out of memory (oom_kill_allocating_task): Kill process 27849 (systemd-journal) score 0 or sacrifice child [ 2482.498231] Killed process 27849 (systemd-journal) total-vm:46096kB, anon-rss:476kB, file-rss:0kB, shmem-rss:3780kB [ 2482.536109] kworker/u4:1 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 2482.564500] kworker/u4:1 cpuset=/ mems_allowed=0-1 [ 2482.569924] CPU: 1 PID: 14442 Comm: kworker/u4:1 Not tainted 4.14.224-syzkaller #0 [ 2482.577631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2482.587016] Workqueue: events_unbound call_usermodehelper_exec_work [ 2482.593417] Call Trace: [ 2482.596014] dump_stack+0x1b2/0x281 [ 2482.599630] dump_header+0x178/0x82f [ 2482.603324] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2482.608407] ? ___ratelimit+0x2cd/0x530 [ 2482.612363] oom_kill_process.cold+0x10/0xb18 [ 2482.616924] ? lock_downgrade+0x740/0x740 [ 2482.621052] out_of_memory+0x2dc/0x1190 [ 2482.625007] ? oom_killer_disable+0x1c0/0x1c0 [ 2482.629482] ? mutex_trylock+0x152/0x1a0 [ 2482.633542] __alloc_pages_nodemask+0x23e1/0x2720 [ 2482.638374] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2482.643226] ? mark_held_locks+0xa6/0xf0 [ 2482.647274] ? cache_grow_begin+0x41/0x630 [ 2482.651493] cache_grow_begin+0x91/0x630 [ 2482.655542] ? cache_grow_begin+0x91/0x630 [ 2482.659758] fallback_alloc+0x207/0x2c0 [ 2482.663715] kmem_cache_alloc_node+0xe3/0x410 [ 2482.668194] copy_process.part.0+0x17d3/0x71c0 [ 2482.673716] ? __lock_acquire+0x5fc/0x3f20 [ 2482.677951] ? cpuacct_charge+0x1ca/0x350 [ 2482.682094] ? static_obj+0x50/0x50 [ 2482.685700] ? lock_downgrade+0x740/0x740 [ 2482.689846] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 2482.695310] ? __cleanup_sighand+0x40/0x40 [ 2482.699534] ? update_curr+0x28d/0x670 [ 2482.703410] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 2482.708847] _do_fork+0x184/0xc80 [ 2482.712288] ? fork_idle+0x270/0x270 [ 2482.715981] ? lock_downgrade+0x740/0x740 [ 2482.720107] ? lock_downgrade+0x740/0x740 [ 2482.724235] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2482.729342] ? process_one_work+0x6c4/0x14a0 [ 2482.733727] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 2482.739154] kernel_thread+0x2f/0x40 [ 2482.742848] call_usermodehelper_exec_work+0x1ac/0x2a0 [ 2482.748885] ? call_usermodehelper+0x80/0x80 [ 2482.753272] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2482.758703] process_one_work+0x793/0x14a0 [ 2482.762938] ? work_busy+0x320/0x320 [ 2482.766628] ? worker_thread+0x158/0xff0 [ 2482.770671] ? _raw_spin_unlock_irq+0x24/0x80 [ 2482.775147] worker_thread+0x5cc/0xff0 [ 2482.779037] ? rescuer_thread+0xc80/0xc80 [ 2482.783179] kthread+0x30d/0x420 [ 2482.786525] ? kthread_create_on_node+0xd0/0xd0 [ 2482.791173] ret_from_fork+0x24/0x30 [ 2482.802336] Mem-Info: [ 2482.804765] active_anon:20674 inactive_anon:35156 isolated_anon:0 [ 2482.804765] active_file:6 inactive_file:22 isolated_file:12 [ 2482.804765] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2482.804765] slab_reclaimable:12121 slab_unreclaimable:111184 [ 2482.804765] mapped:43521 shmem:37648 pagetables:674 bounce:0 [ 2482.804765] free:13928 free_pcp:30 free_cma:0 [ 2482.839884] Node 0 active_anon:80492kB inactive_anon:126628kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:71240kB dirty:0kB writeback:0kB shmem:136456kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2482.867777] Node 1 active_anon:2204kB inactive_anon:13996kB active_file:8kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):48kB mapped:102844kB dirty:0kB writeback:0kB shmem:14136kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2482.895113] Node 0 DMA free:10944kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2482.921632] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2482.930687] Node 0 DMA32 free:18056kB min:36200kB low:45248kB high:54296kB active_anon:80492kB inactive_anon:126628kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7168kB pagetables:2164kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 2482.963397] lowmem_reserve[]: 0 0 0 0 0 [ 2482.967442] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2482.996045] lowmem_reserve[]: 0 0 0 0 0 [ 2482.997513] syz-executor.5: [ 2483.000474] Node 1 [ 2483.000478] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2483.003489] Normal free:26780kB min:53696kB low:67120kB high:80544kB active_anon:2204kB inactive_anon:13996kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:532kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2483.011389] (null) [ 2483.015741] lowmem_reserve[]: [ 2483.048822] syz-executor.5 cpuset= [ 2483.049869] 0 [ 2483.051931] / [ 2483.055458] 0 0 0 0 [ 2483.059879] mems_allowed=0-1 [ 2483.061896] Node 0 DMA: [ 2483.064988] CPU: 0 PID: 29354 Comm: syz-executor.5 Not tainted 4.14.224-syzkaller #0 [ 2483.064995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2483.077831] 2*4kB [ 2483.084867] Call Trace: [ 2483.084868] (UE) 1*8kB [ 2483.087013] dump_stack+0x1b2/0x281 [ 2483.087028] warn_alloc.cold+0x96/0x1cc [ 2483.087039] ? zone_watermark_ok_safe+0x220/0x220 [ 2483.087049] ? usleep_range+0x130/0x130 [ 2483.087058] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2483.087070] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2483.087079] ? run_timer_softirq+0x5a0/0x5a0 [ 2483.087093] __alloc_pages_nodemask+0x2127/0x2720 [ 2483.099846] (E) [ 2483.104617] ? lock_acquire+0x170/0x3f0 [ 2483.111939] 1*16kB [ 2483.113657] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2483.128887] (E) [ 2483.129818] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2483.133762] 1*32kB [ 2483.136010] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2483.136030] alloc_pages_current+0x155/0x260 [ 2483.136043] ion_page_pool_alloc+0x118/0x1b0 [ 2483.136054] ion_system_heap_allocate+0x133/0x8c0 [ 2483.136064] ? ion_alloc+0x187/0x810 [ 2483.136074] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2483.136084] ? ion_system_contig_heap_create+0x130/0x130 [ 2483.136095] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2483.136106] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2483.151041] (E) [ 2483.155013] ion_alloc+0x204/0x810 [ 2483.162776] 2*64kB [ 2483.163787] ? ion_dma_buf_release+0x40/0x40 [ 2483.175319] (UE) [ 2483.177740] ? __might_fault+0x177/0x1b0 [ 2483.177754] ion_ioctl+0xea/0x1f0 [ 2483.177764] ? ion_query_heaps+0x360/0x360 [ 2483.177776] ? SyS_epoll_ctl+0x1e0/0x2780 [ 2483.177785] ? ion_query_heaps+0x360/0x360 [ 2483.177795] do_vfs_ioctl+0x75a/0xff0 [ 2483.177806] ? ioctl_preallocate+0x1a0/0x1a0 [ 2483.193196] 2*128kB [ 2483.195026] ? lock_downgrade+0x740/0x740 [ 2483.198579] (UE) [ 2483.200784] ? __fget+0x225/0x360 [ 2483.205201] 3*256kB [ 2483.207245] ? do_vfs_ioctl+0xff0/0xff0 [ 2483.207255] ? security_file_ioctl+0x83/0xb0 [ 2483.207264] SyS_ioctl+0x7f/0xb0 [ 2483.207272] ? do_vfs_ioctl+0xff0/0xff0 [ 2483.207287] do_syscall_64+0x1d5/0x640 [ 2483.207303] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2483.207311] RIP: 0033:0x465f69 [ 2483.207316] RSP: 002b:00007f886bfb2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2483.207326] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2483.207332] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2483.207337] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2483.207342] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2483.207348] R13: 00007ffe15f841ff R14: 00007f886bfb2300 R15: 0000000000022000 [ 2483.217163] Bluetooth: hci3 command 0x040f tx timeout [ 2483.225564] (UE) [ 2483.242783] Mem-Info: [ 2483.248897] 3*512kB [ 2483.256790] active_anon:20674 inactive_anon:35156 isolated_anon:0 [ 2483.256790] active_file:14 inactive_file:14 isolated_file:0 [ 2483.256790] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2483.256790] slab_reclaimable:12121 slab_unreclaimable:111161 [ 2483.256790] mapped:43521 shmem:37648 pagetables:674 bounce:0 [ 2483.256790] free:13945 free_pcp:30 free_cma:0 [ 2483.258469] (UE) [ 2483.262931] Node 0 active_anon:80492kB inactive_anon:126628kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:71240kB dirty:0kB writeback:0kB shmem:136456kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2483.269158] 2*1024kB [ 2483.284824] Node 1 active_anon:2204kB inactive_anon:13996kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:102844kB dirty:0kB writeback:0kB shmem:14136kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2483.287495] (UE) [ 2483.302327] Node 0 [ 2483.309471] 3*2048kB [ 2483.331219] DMA free:10944kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2483.334296] (UME) [ 2483.334438] lowmem_reserve[]: [ 2483.369649] 0*4096kB [ 2483.390450] 0 [ 2483.405849] = 10944kB [ 2483.439196] 2717 [ 2483.475366] Node 0 [ 2483.480038] 2718 2718 2718 [ 2483.482418] DMA32: [ 2483.485210] Node 0 [ 2483.485217] 804*4kB [ 2483.491048] DMA32 free:18056kB min:36200kB low:45248kB high:54296kB active_anon:80492kB inactive_anon:126628kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7168kB pagetables:2164kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB [ 2483.503084] (ME) [ 2483.530047] lowmem_reserve[]: 0 0 0 0 0 [ 2483.538204] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2483.539200] 358*8kB [ 2483.571785] lowmem_reserve[]: 0 0 0 0 0 [ 2483.578134] Node 1 Normal free:26780kB min:53696kB low:67120kB high:80544kB active_anon:2204kB inactive_anon:13996kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:532kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2483.578409] (UME) [ 2483.614561] lowmem_reserve[]: 0 0 0 0 0 [ 2483.620744] Node 0 DMA: 2*4kB (UE) 1*8kB (E) 1*16kB (E) 1*32kB (E) 2*64kB (UE) 2*128kB (UE) 3*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10944kB [ 2483.621546] 148*16kB [ 2483.643757] Node 0 DMA32: 804*4kB (ME) 358*8kB (UME) 148*16kB (ME) 42*32kB (UME) 26*64kB (UME) 10*128kB (UM) 17*256kB (U) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18112kB [ 2483.650688] (ME) [ 2483.670087] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2483.678479] 42*32kB (UME) 26*64kB (UME) 10*128kB (UM) 17*256kB (U) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18112kB [ 2483.684641] Node 1 Normal: 99*4kB (UME) 76*8kB (ME) 59*16kB (ME) 50*32kB (UME) 41*64kB (UME) 15*128kB (M) 73*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26780kB [ 2483.706143] Node 0 [ 2483.728415] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2483.734790] Normal: 0*4kB 0*8kB 0*16kB [ 2483.743530] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2483.743538] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2483.759413] 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2483.783151] Node 1 Normal: 99*4kB (UME) 76*8kB (ME) 59*16kB (ME) 50*32kB (UME) 41*64kB (UME) 15*128kB (M) 73*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26780kB [ 2483.784573] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2483.810552] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2483.815663] 37676 total pagecache pages [ 2483.823354] 0 pages in swap cache [ 2483.832312] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2483.835587] Swap cache stats: add 0, delete 0, find 0/0 [ 2483.852304] Free swap = 0kB [ 2483.855323] Total swap = 0kB [ 2483.857171] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2483.859534] 2097051 pages RAM [ 2483.872787] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2483.873382] 0 pages HighMem/MovableOnly [ 2483.894994] 363840 pages reserved [ 2483.895414] 37676 total pagecache pages [ 2483.898577] 0 pages cma reserved [ 2483.939787] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2483.965806] 0 pages in swap cache [ 2483.995170] Swap cache stats: add 0, delete 0, find 0/0 [ 2484.003745] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2484.011685] Free swap = 0kB [ 2484.014775] Total swap = 0kB [ 2484.021054] 2097051 pages RAM [ 2484.025694] Bluetooth: hci5 command 0x041b tx timeout [ 2484.036225] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2484.046786] 0 pages HighMem/MovableOnly [ 2484.051229] 363840 pages reserved [ 2484.059795] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2484.076881] team0: Port device team_slave_0 added [ 2484.077649] systemd[1]: Stopped Journal Service. [ 2484.087299] 0 pages cma reserved [ 2484.102100] Out of memory: Kill process 29500 (syz-executor.4) score 1004 or sacrifice child [ 2484.124118] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2484.130490] systemd[1]: Starting Journal Service... [ 2484.156079] Killed process 29501 (syz-executor.4) total-vm:93252kB, anon-rss:152kB, file-rss:34936kB, shmem-rss:0kB [ 2484.161839] team0: Port device team_slave_1 added [ 2484.231818] oom_reaper: reaped process 29501 (syz-executor.4), now anon-rss:0kB, file-rss:4kB, shmem-rss:0kB [ 2484.272732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2484.285720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2484.359385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2484.383699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2484.394872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2484.422880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2484.425629] Bluetooth: hci4 command 0x041b tx timeout [ 2484.473339] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2484.507390] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2484.522780] bridge0: port 1(bridge_slave_0) entered blocking state [ 2484.529939] bridge0: port 1(bridge_slave_0) entered disabled state [ 2484.540251] systemd-journald[29653]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 2484.557911] device bridge_slave_0 entered promiscuous mode [ 2484.582627] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2484.596170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2484.617102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2484.623843] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2484.657333] device bridge_slave_1 left promiscuous mode [ 2484.662899] bridge0: port 2(bridge_slave_1) entered disabled state [ 2484.687324] device bridge_slave_0 left promiscuous mode [ 2484.692915] bridge0: port 1(bridge_slave_0) entered disabled state [ 2484.718014] device veth1_macvtap left promiscuous mode [ 2484.723352] device veth0_macvtap left promiscuous mode [ 2484.736267] device veth1_vlan left promiscuous mode [ 2484.741341] device veth0_vlan left promiscuous mode [ 2484.949587] device hsr_slave_1 left promiscuous mode [ 2484.958378] device hsr_slave_0 left promiscuous mode [ 2484.996815] team0 (unregistering): Port device team_slave_1 removed [ 2485.017931] team0 (unregistering): Port device team_slave_0 removed [ 2485.040807] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2485.066554] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2485.097446] systemd[1]: Started Journal Service. [ 2485.131406] bond0 (unregistering): Released all slaves [ 2485.150880] bridge0: port 2(bridge_slave_1) entered blocking state [ 2485.158679] bridge0: port 2(bridge_slave_1) entered disabled state [ 2485.167057] device bridge_slave_1 entered promiscuous mode [ 2485.178339] device hsr_slave_0 entered promiscuous mode [ 2485.184774] device hsr_slave_1 entered promiscuous mode [ 2485.192962] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2485.218356] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2485.242920] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2485.253387] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2485.295646] Bluetooth: hci3 command 0x0419 tx timeout [ 2485.349282] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2485.359584] team0: Port device team_slave_0 added [ 2485.405102] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2485.413041] team0: Port device team_slave_1 added [ 2485.478840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2485.485115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2485.555432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2485.597244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2485.603518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2485.665400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2485.687746] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2485.696969] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2485.704530] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2485.795250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2485.810078] device hsr_slave_0 entered promiscuous mode [ 2485.826266] device hsr_slave_1 entered promiscuous mode [ 2485.834217] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2485.845763] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2485.852887] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2485.878116] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2485.886976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2485.893948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2485.924239] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2485.930746] 8021q: adding VLAN 0 to HW filter on device team0 [ 2485.949090] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2485.970281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2485.978978] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2485.995994] bridge0: port 1(bridge_slave_0) entered blocking state [ 2486.002379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2486.041304] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2486.048915] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2486.065977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2486.078260] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2486.095491] Bluetooth: hci5 command 0x040f tx timeout [ 2486.098422] bridge0: port 2(bridge_slave_1) entered blocking state [ 2486.107087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2486.144216] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2486.159836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2486.186201] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2486.198998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2486.231358] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2486.245785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2486.253583] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2486.285111] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2486.293519] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2486.300812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2486.318774] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2486.346690] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2486.366350] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2486.380076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2486.398702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2486.418784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2486.426580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2486.451526] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2486.465616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 00:43:33 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x484240, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)={0x101, 0x1, 0x4, 0x400, 0xffff, {0x0, 0x2710}, {0x1, 0x2, 0x8, 0x2, 0x7, 0x1, "db53d254"}, 0x8, 0x4, @fd=r1, 0x4, 0x0, r1}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x4, 0x90040) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x7fffffff, 0x1e, 0x1}) 00:43:33 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x8) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x4, 0x90040) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x7fffffff, 0x1e, 0x1}) [ 2486.509083] Bluetooth: hci4 command 0x040f tx timeout [ 2486.512696] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2486.536400] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2486.551157] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2486.586908] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2486.594883] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2486.622507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2486.673099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2486.683710] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2486.717767] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2486.723967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2486.735957] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2486.766646] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2486.772756] 8021q: adding VLAN 0 to HW filter on device team0 [ 2486.806065] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2486.813163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2486.821477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2486.845895] bridge0: port 1(bridge_slave_0) entered blocking state [ 2486.852319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2486.878442] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2486.887261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2486.894456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2486.916225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2486.923970] bridge0: port 2(bridge_slave_1) entered blocking state [ 2486.930422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2486.968060] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2486.977062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2486.987925] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2487.006791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2487.028052] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2487.037107] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2487.046463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2487.063157] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2487.092982] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2487.104460] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2487.117923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2487.134846] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2487.153600] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2487.166865] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2487.197081] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2487.218809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2487.231256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2487.258232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2487.281852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2487.302314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2487.318869] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2487.336310] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2487.342332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2487.393605] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2487.414528] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2487.434013] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2487.444681] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2487.473717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2487.493998] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2487.506192] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2487.521103] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2487.555880] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2487.586802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2487.598192] IPVS: ftp: loaded support on port[0] = 21 [ 2487.610623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2487.645534] device veth0_vlan entered promiscuous mode [ 2487.668603] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2487.682304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2487.726555] device veth1_vlan entered promiscuous mode [ 2487.732595] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2487.873894] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2487.917876] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2487.944853] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2487.959198] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2487.964386] CPU: 1 PID: 29796 Comm: syz-executor.5 Not tainted 4.14.224-syzkaller #0 [ 2487.966008] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2487.972260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2487.972264] Call Trace: [ 2487.972280] dump_stack+0x1b2/0x281 [ 2487.972293] warn_alloc.cold+0x96/0x1cc [ 2487.998610] ? zone_watermark_ok_safe+0x220/0x220 [ 2488.003459] __alloc_pages_nodemask+0x2127/0x2720 [ 2488.008286] ? _raw_spin_unlock_irq+0x5a/0x80 [ 2488.012762] ? finish_task_switch+0x178/0x610 [ 2488.017323] ? finish_task_switch+0x14d/0x610 [ 2488.021802] ? lock_acquire+0x170/0x3f0 [ 2488.025759] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2488.030586] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2488.036022] ? __mutex_unlock_slowpath+0x75/0x770 [ 2488.040845] ? alloc_pages_current+0x16/0x260 [ 2488.045346] alloc_pages_current+0x155/0x260 [ 2488.049738] ion_page_pool_alloc+0x118/0x1b0 [ 2488.054135] ion_system_heap_allocate+0x133/0x8c0 [ 2488.058975] ? ion_alloc+0x187/0x810 [ 2488.062669] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2488.068099] ? ion_system_contig_heap_create+0x130/0x130 [ 2488.073542] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2488.078564] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2488.083393] ion_alloc+0x204/0x810 [ 2488.086918] ? ion_dma_buf_release+0x40/0x40 [ 2488.091309] ? __might_fault+0x177/0x1b0 [ 2488.095352] ion_ioctl+0xea/0x1f0 [ 2488.098801] ? ion_query_heaps+0x360/0x360 [ 2488.103032] ? ion_query_heaps+0x360/0x360 [ 2488.107250] do_vfs_ioctl+0x75a/0xff0 [ 2488.111031] ? ioctl_preallocate+0x1a0/0x1a0 [ 2488.115418] ? lock_downgrade+0x740/0x740 [ 2488.119552] ? __fget+0x225/0x360 [ 2488.122987] ? do_vfs_ioctl+0xff0/0xff0 [ 2488.126961] ? security_file_ioctl+0x83/0xb0 [ 2488.131349] SyS_ioctl+0x7f/0xb0 [ 2488.134697] ? do_vfs_ioctl+0xff0/0xff0 [ 2488.138670] do_syscall_64+0x1d5/0x640 [ 2488.142542] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2488.147713] RIP: 0033:0x465f69 [ 2488.150883] RSP: 002b:00007f886bfb2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2488.158570] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 00:43:34 executing program 4: openat$nvram(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nvram\x00', 0x0, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000003840)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000000400)={0x2020}, 0x2020) [ 2488.165820] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2488.173068] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2488.180334] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2488.187935] R13: 00007ffe15f841ff R14: 00007f886bfb2300 R15: 0000000000022000 [ 2488.200367] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2488.200847] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2488.220181] Mem-Info: [ 2488.222689] active_anon:20895 inactive_anon:37192 isolated_anon:0 [ 2488.222689] active_file:2055 inactive_file:2032 isolated_file:0 [ 2488.222689] unevictable:0 dirty:80 writeback:0 unstable:0 [ 2488.222689] slab_reclaimable:12115 slab_unreclaimable:111444 [ 2488.222689] mapped:55427 shmem:39700 pagetables:706 bounce:0 [ 2488.222689] free:61081 free_pcp:212 free_cma:0 [ 2488.231841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2488.261526] Node 0 active_anon:81548kB inactive_anon:134772kB active_file:1292kB inactive_file:1920kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:74144kB dirty:112kB writeback:0kB shmem:144664kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2488.299575] Node 1 active_anon:2032kB inactive_anon:13996kB active_file:6928kB inactive_file:6208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:147564kB dirty:208kB writeback:0kB shmem:14136kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2488.306112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2488.331165] Node 0 DMA free:12144kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2488.372435] IPVS: ftp: loaded support on port[0] = 21 [ 2488.374938] lowmem_reserve[]: [ 2488.377812] Bluetooth: hci5 command 0x0419 tx timeout [ 2488.408577] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2488.416314] 0 2717 2718 2718 2718 [ 2488.420348] Node 0 DMA32 free:550956kB min:36200kB low:45248kB high:54296kB active_anon:81548kB inactive_anon:134772kB active_file:1292kB inactive_file:1920kB unevictable:0kB writepending:112kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7104kB pagetables:2116kB bounce:0kB free_pcp:672kB local_pcp:276kB free_cma:0kB [ 2488.454053] lowmem_reserve[]: 0 0 0 0 0 [ 2488.469282] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2488.501012] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2488.513620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2488.524642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2488.558369] device veth0_macvtap entered promiscuous mode [ 2488.564109] lowmem_reserve[]: 0 0 0 0 0 [ 2488.568042] device veth1_macvtap entered promiscuous mode [ 2488.573705] Node 1 Normal free:470340kB min:53696kB low:67120kB high:80544kB active_anon:2032kB inactive_anon:13996kB active_file:6544kB inactive_file:6372kB unevictable:0kB writepending:208kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:576kB pagetables:708kB bounce:0kB free_pcp:268kB local_pcp:0kB free_cma:0kB [ 2488.609151] Bluetooth: hci4 command 0x0419 tx timeout 00:43:35 executing program 4: clock_gettime(0x0, &(0x7f0000000000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x185483, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) [ 2488.634134] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2488.637202] lowmem_reserve[]: 0 0 0 0 0 00:43:35 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x484240, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)={0x101, 0x1, 0x4, 0x400, 0xffff, {0x0, 0x2710}, {0x1, 0x2, 0x8, 0x2, 0x7, 0x1, "db53d254"}, 0x8, 0x4, @fd=r1, 0x4, 0x0, r1}) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x8) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000340)={0x401, 0x2, 0x4, 0x8, 0x8, {}, {0x1, 0x8, 0xbc, 0xa2, 0xf7, 0x20, "450104da"}, 0xa87, 0x4, @fd=r3, 0x1ff}) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x4, 0x90040) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r4, 0xc00464be, &(0x7f0000000240)={0x1}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x7fffffff, 0x1e, 0x1}) [ 2488.671935] Node 0 DMA: 2*4kB (UE) 9*8kB (UE) 6*16kB (UE) 6*32kB (UE) 8*64kB (UE) 6*128kB (UE) 3*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 12144kB [ 2488.734431] Node 0 DMA32: 1339*4kB (UMEH) 6468*8kB (UEH) 1674*16kB (UMEH) 502*32kB (UMEH) 6616*64kB (UEH) 973*128kB (UH) 139*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 683500kB [ 2488.756935] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2488.758654] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2488.776070] Node 1 Normal: 219*4kB (UME) 293*8kB (UME) 251*16kB (UME) 252*32kB (UME) 11970*64kB (UME) 685*128kB (UM) 2*256kB (UM) 72*512kB (U) 58*1024kB (U) 0*2048kB 0*4096kB = 965828kB [ 2488.844029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2488.854095] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2488.866697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2488.877093] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2488.887788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2488.899097] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2488.910143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2488.920701] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2488.932487] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2488.941537] 43879 total pagecache pages [ 2488.946994] 0 pages in swap cache [ 2488.950629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2488.958885] Swap cache stats: add 0, delete 0, find 0/0 [ 2488.967130] Free swap = 0kB [ 2488.970245] Total swap = 0kB [ 2488.973349] 2097051 pages RAM [ 2488.978338] 0 pages HighMem/MovableOnly [ 2488.983711] 363840 pages reserved [ 2488.987528] 0 pages cma reserved [ 2489.116304] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2489.123492] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2489.148915] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2489.166170] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2489.178266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2489.203907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2489.224789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2489.239233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2489.249070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2489.263008] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2489.272362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2489.289027] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2489.301550] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2489.310789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2489.319990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2489.328524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2489.339184] chnl_net:caif_netlink_parms(): no params data found [ 2489.357772] chnl_net:caif_netlink_parms(): no params data found [ 2489.371545] device veth0_vlan entered promiscuous mode [ 2489.378141] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2489.387464] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2489.445947] device veth1_vlan entered promiscuous mode [ 2489.509121] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2489.529779] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2489.553232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2489.563517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2489.600500] device veth0_macvtap entered promiscuous mode [ 2489.612535] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2489.620942] Bluetooth: hci1 command 0x0409 tx timeout [ 2489.641865] device veth1_macvtap entered promiscuous mode [ 2489.664196] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2489.695520] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2489.729863] bridge0: port 1(bridge_slave_0) entered blocking state [ 2489.751653] bridge0: port 1(bridge_slave_0) entered disabled state [ 2489.779949] device bridge_slave_0 entered promiscuous mode [ 2489.799216] bridge0: port 2(bridge_slave_1) entered blocking state [ 2489.806427] bridge0: port 2(bridge_slave_1) entered disabled state [ 2489.826049] device bridge_slave_1 entered promiscuous mode [ 2489.852527] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2489.893346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2489.915210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2489.924360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2489.955008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2489.964159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2489.995003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2490.017307] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2490.024302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2490.054794] bridge0: port 1(bridge_slave_0) entered blocking state [ 2490.061506] bridge0: port 1(bridge_slave_0) entered disabled state [ 2490.109326] device bridge_slave_0 entered promiscuous mode [ 2490.144213] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2490.188111] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2490.215524] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2490.225980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2490.236992] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2490.245245] bridge0: port 2(bridge_slave_1) entered blocking state [ 2490.251603] bridge0: port 2(bridge_slave_1) entered disabled state [ 2490.282359] device bridge_slave_1 entered promiscuous mode [ 2490.301127] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2490.316777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2490.357792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2490.371043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2490.380789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2490.408921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2490.429958] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2490.450608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2490.454274] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2490.484423] CPU: 0 PID: 29926 Comm: syz-executor.4 Not tainted 4.14.224-syzkaller #0 [ 2490.492302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2490.501652] Call Trace: [ 2490.504249] dump_stack+0x1b2/0x281 [ 2490.507875] warn_alloc.cold+0x96/0x1cc [ 2490.511847] ? zone_watermark_ok_safe+0x220/0x220 [ 2490.516708] __alloc_pages_nodemask+0x2127/0x2720 [ 2490.519535] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2490.521548] ? io_schedule_timeout+0x140/0x140 [ 2490.532959] ? lock_acquire+0x170/0x3f0 [ 2490.537050] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2490.541912] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2490.547365] ? __mutex_unlock_slowpath+0x75/0x770 [ 2490.552202] ? __sanitizer_cov_trace_pc+0x3d/0x50 [ 2490.557049] alloc_pages_current+0x155/0x260 [ 2490.561463] ion_page_pool_alloc+0x118/0x1b0 [ 2490.562168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2490.565866] ion_system_heap_allocate+0x133/0x8c0 [ 2490.565877] ? ion_alloc+0x187/0x810 [ 2490.565886] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2490.565895] ? ion_system_contig_heap_create+0x130/0x130 [ 2490.565904] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2490.565914] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2490.565924] ion_alloc+0x204/0x810 [ 2490.565938] ? ion_dma_buf_release+0x40/0x40 [ 2490.565950] ? __might_fault+0x177/0x1b0 [ 2490.565961] ion_ioctl+0xea/0x1f0 [ 2490.565971] ? ion_query_heaps+0x360/0x360 [ 2490.565985] ? ion_query_heaps+0x360/0x360 [ 2490.616215] modprobe invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask= [ 2490.617967] do_vfs_ioctl+0x75a/0xff0 [ 2490.622170] (null) [ 2490.626391] ? ioctl_preallocate+0x1a0/0x1a0 [ 2490.626400] ? lock_downgrade+0x740/0x740 [ 2490.626413] ? __fget+0x225/0x360 [ 2490.626421] ? do_vfs_ioctl+0xff0/0xff0 [ 2490.626431] ? security_file_ioctl+0x83/0xb0 [ 2490.626440] SyS_ioctl+0x7f/0xb0 [ 2490.626448] ? do_vfs_ioctl+0xff0/0xff0 [ 2490.626460] do_syscall_64+0x1d5/0x640 [ 2490.626476] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2490.626484] RIP: 0033:0x465f69 [ 2490.626487] RSP: 002b:00007f380960e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2490.626497] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2490.626501] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2490.626505] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2490.626513] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2490.683528] , order=0, oom_score_adj=0 [ 2490.692593] R13: 00007fffbef2da3f R14: 00007f380960e300 R15: 0000000000022000 [ 2490.706258] Mem-Info: [ 2490.740144] active_anon:20908 inactive_anon:37191 isolated_anon:0 [ 2490.740144] active_file:51 inactive_file:14 isolated_file:0 [ 2490.740144] unevictable:0 dirty:19 writeback:0 unstable:0 [ 2490.740144] slab_reclaimable:12162 slab_unreclaimable:110526 [ 2490.740144] mapped:52685 shmem:39700 pagetables:743 bounce:0 [ 2490.740144] free:15076 free_pcp:49 free_cma:0 [ 2490.754067] modprobe cpuset= [ 2490.778069] Node 0 active_anon:81636kB inactive_anon:134768kB active_file:144kB inactive_file:124kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:72980kB dirty:48kB writeback:0kB shmem:144664kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2490.813448] Node 1 active_anon:1996kB inactive_anon:13996kB active_file:60kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:137760kB dirty:28kB writeback:0kB shmem:14136kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2490.814715] / [ 2490.851589] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2490.858386] mems_allowed=0-1 [ 2490.886791] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2490.887013] lowmem_reserve[]: [ 2490.903899] CPU: 1 PID: 30112 Comm: modprobe Not tainted 4.14.224-syzkaller #0 [ 2490.905512] 0 [ 2490.907023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2490.914451] 2717 [ 2490.916230] Call Trace: [ 2490.916248] dump_stack+0x1b2/0x281 [ 2490.916259] dump_header+0x178/0x82f [ 2490.916269] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2490.916277] ? ___ratelimit+0x2cd/0x530 [ 2490.916285] oom_kill_process.cold+0x10/0xb18 [ 2490.916300] out_of_memory+0xe3e/0x1190 [ 2490.916311] ? oom_killer_disable+0x1c0/0x1c0 [ 2490.916320] ? mutex_trylock+0x152/0x1a0 [ 2490.925692] 2718 [ 2490.927721] __alloc_pages_nodemask+0x23e1/0x2720 [ 2490.930277] 2718 [ 2490.933887] ? kasan_slab_free+0xc3/0x1a0 [ 2490.937595] 2718 [ 2490.942661] ? __handle_mm_fault+0xfcb/0x4620 [ 2490.951103] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2490.955081] Node 0 [ 2490.959542] ? lock_downgrade+0x740/0x740 [ 2490.963589] DMA32 free:17960kB min:36200kB low:45248kB high:54296kB active_anon:81680kB inactive_anon:134768kB active_file:64kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7200kB pagetables:2284kB bounce:0kB free_pcp:164kB local_pcp:44kB free_cma:0kB [ 2490.965625] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2490.965635] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2490.965644] ? debug_check_no_obj_freed+0x2c0/0x680 [ 2490.970460] lowmem_reserve[]: [ 2490.972508] ? __lock_acquire+0x5fc/0x3f20 [ 2490.976645] 0 [ 2490.978674] alloc_pages_current+0x155/0x260 [ 2490.978686] pte_alloc_one+0x15/0x100 [ 2490.983167] 0 0 [ 2490.987995] do_fault_around+0x3f1/0x620 [ 2490.988006] __handle_mm_fault+0x2b1f/0x4620 [ 2490.988016] ? vm_insert_page+0x7c0/0x7c0 [ 2490.990226] 0 [ 2490.994354] ? vm_mmap_pgoff+0x168/0x1a0 [ 2491.022624] 0 [ 2491.027692] ? vm_mmap_pgoff+0xcb/0x1a0 [ 2491.027710] handle_mm_fault+0x391/0x860 [ 2491.037882] __do_page_fault+0x549/0xad0 [ 2491.037893] ? spurious_fault+0x640/0x640 [ 2491.037902] ? do_page_fault+0x60/0x500 [ 2491.041004] Node 0 [ 2491.045215] ? page_fault+0x2f/0x50 [ 2491.045224] page_fault+0x45/0x50 [ 2491.045233] RIP: 7ffff1a0:0x801 [ 2491.047024] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2491.051417] RSP: a3c49000:00007ffc9111a110 EFLAGS: 7ffc9111a1f8 [ 2491.055212] lowmem_reserve[]: [ 2491.063217] syz-executor.5 cpuset= [ 2491.073483] 0 [ 2491.080903] / [ 2491.081412] 0 [ 2491.085498] mems_allowed=0-1 [ 2491.085521] CPU: 1 PID: 29796 Comm: syz-executor.5 Not tainted 4.14.224-syzkaller #0 [ 2491.085526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2491.085529] Call Trace: [ 2491.085545] dump_stack+0x1b2/0x281 [ 2491.085559] warn_alloc.cold+0x96/0x1cc [ 2491.085571] ? zone_watermark_ok_safe+0x220/0x220 [ 2491.085582] ? usleep_range+0x130/0x130 [ 2491.093170] 0 [ 2491.093780] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2491.097820] 0 [ 2491.099952] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2491.103547] 0 [ 2491.106984] ? run_timer_softirq+0x5a0/0x5a0 [ 2491.107001] __alloc_pages_nodemask+0x2127/0x2720 [ 2491.107016] ? lock_acquire+0x170/0x3f0 [ 2491.135169] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2491.135181] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2491.135195] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2491.135209] ? alloc_pages_current+0x21c/0x260 [ 2491.141257] Node 1 [ 2491.144343] alloc_pages_current+0x155/0x260 [ 2491.147921] Normal free:26920kB min:53696kB low:67120kB high:80544kB active_anon:1996kB inactive_anon:13996kB active_file:16kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:608kB pagetables:708kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 2491.149676] ion_page_pool_alloc+0x118/0x1b0 [ 2491.151359] lowmem_reserve[]: [ 2491.153148] ion_system_heap_allocate+0x133/0x8c0 [ 2491.156240] 0 [ 2491.164104] ? ion_alloc+0x187/0x810 [ 2491.173455] 0 [ 2491.176004] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2491.176013] ? ion_system_contig_heap_create+0x130/0x130 [ 2491.176023] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2491.179627] 0 [ 2491.183586] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2491.188420] 0 [ 2491.192360] ion_alloc+0x204/0x810 [ 2491.194133] 0 [ 2491.199241] ? ion_dma_buf_release+0x40/0x40 [ 2491.199254] ? __might_fault+0x177/0x1b0 [ 2491.206032] ion_ioctl+0xea/0x1f0 [ 2491.206042] ? ion_query_heaps+0x360/0x360 [ 2491.206055] ? ion_query_heaps+0x360/0x360 [ 2491.207829] Node 0 [ 2491.212216] do_vfs_ioctl+0x75a/0xff0 [ 2491.217050] DMA: [ 2491.220994] ? ioctl_preallocate+0x1a0/0x1a0 [ 2491.225837] Mem-Info: [ 2491.230283] ? lock_downgrade+0x740/0x740 [ 2491.230296] ? __fget+0x225/0x360 [ 2491.235742] 1*4kB [ 2491.240280] ? do_vfs_ioctl+0xff0/0xff0 [ 2491.242488] (E) [ 2491.246877] ? security_file_ioctl+0x83/0xb0 [ 2491.246888] SyS_ioctl+0x7f/0xb0 [ 2491.246897] ? do_vfs_ioctl+0xff0/0xff0 [ 2491.274750] active_anon:20919 inactive_anon:37191 isolated_anon:0 [ 2491.274750] active_file:20 inactive_file:12 isolated_file:0 [ 2491.274750] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2491.274750] slab_reclaimable:12166 slab_unreclaimable:110517 [ 2491.274750] mapped:52619 shmem:39700 pagetables:748 bounce:0 [ 2491.274750] free:13959 free_pcp:71 free_cma:0 [ 2491.279112] do_syscall_64+0x1d5/0x640 [ 2491.279130] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2491.282214] Node 0 active_anon:81680kB inactive_anon:134768kB active_file:64kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:72816kB dirty:0kB writeback:0kB shmem:144664kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2491.287030] RIP: 0033:0x465f69 [ 2491.287035] RSP: 002b:00007f886bfb2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2491.287047] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2491.288843] Node 1 active_anon:1996kB inactive_anon:13996kB active_file:16kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:137660kB dirty:0kB writeback:0kB shmem:14136kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2491.292523] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2491.294299] Node 0 [ 2491.299726] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2491.299732] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2491.299737] R13: 00007ffe15f841ff R14: 00007f886bfb2300 R15: 0000000000022000 [ 2491.522025] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2491.543294] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2491.546912] 1*8kB [ 2491.569535] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2491.577425] Node 0 DMA32 free:228100kB min:36200kB low:45248kB high:54296kB active_anon:81680kB inactive_anon:134768kB active_file:164kB inactive_file:5152kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7232kB pagetables:2284kB bounce:0kB free_pcp:244kB local_pcp:112kB free_cma:0kB [ 2491.607503] lowmem_reserve[]: 0 0 0 0 0 [ 2491.612430] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2491.638726] lowmem_reserve[]: 0 0 0 0 0 [ 2491.643080] Node 1 Normal free:45992kB min:53696kB low:67120kB high:80544kB active_anon:1996kB inactive_anon:13996kB active_file:16kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:608kB pagetables:708kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 2491.658215] (E) [ 2491.694913] Bluetooth: hci1 command 0x041b tx timeout [ 2491.704130] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2491.716626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2491.718426] 2*16kB (UE) 5*32kB (UE) 8*64kB (UE) 6*128kB (UE) 3*256kB (UE) 3*512kB (UE) 1*1024kB [ 2491.738228] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2491.744758] lowmem_reserve[]: [ 2491.747366] (E) 3*2048kB (UME) 0*4096kB = 10956kB [ 2491.747385] Node 0 DMA32: 115*4kB (UE) 135*8kB (UME) 69*16kB (ME) 15*32kB (ME) 3324*64kB (UEH) 235*128kB (U) 108*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 273588kB [ 2491.747458] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2491.747505] Node 1 Normal: 84*4kB (UME) 82*8kB (UME) 59*16kB (UME) 56*32kB (UME) 1581*64kB (UME) 20*128kB (M) 4*256kB (UM) 32*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 124880kB [ 2491.747578] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2491.747585] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2491.747591] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2491.747598] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2491.747602] 41175 total pagecache pages [ 2491.747614] 0 pages in swap cache [ 2491.747618] Swap cache stats: add 0, delete 0, find 0/0 [ 2491.747621] Free swap = 0kB [ 2491.747625] Total swap = 0kB [ 2491.747630] 2097051 pages RAM [ 2491.747634] 0 pages HighMem/MovableOnly [ 2491.747637] 363840 pages reserved [ 2491.747640] 0 pages cma reserved [ 2491.827469] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2491.879155] 0 0 0 0 0 [ 2491.881709] Node 0 DMA: 1*4kB (E) 1*8kB (E) 2*16kB (UE) 5*32kB (UE) 9*64kB (UE) 6*128kB (UE) 3*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 11020kB [ 2491.902566] Node 0 DMA32: 157*4kB (UME) 139*8kB (UMEH) 74*16kB (UE) 38*32kB (UE) 3123*64kB (UMEH) 261*128kB (U) 108*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 265068kB [ 2491.921691] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2491.933150] Node 1 Normal: 223*4kB (UME) 346*8kB (UME) 300*16kB (UME) 164*32kB (UME) 2032*64kB (UME) 169*128kB (UM) 48*256kB (UM) 71*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 214028kB [ 2491.966798] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2491.977013] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2492.006768] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2492.016190] team0: Port device team_slave_0 added [ 2492.016902] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2492.069355] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2492.086150] team0: Port device team_slave_1 added [ 2492.088816] 41186 total pagecache pages [ 2492.115032] 0 pages in swap cache [ 2492.119017] Swap cache stats: add 0, delete 0, find 0/0 [ 2492.124914] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2492.132276] team0: Port device team_slave_0 added [ 2492.139317] Free swap = 0kB [ 2492.142360] Total swap = 0kB [ 2492.161387] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2492.177002] team0: Port device team_slave_1 added [ 2492.182911] 2097051 pages RAM [ 2492.190400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2492.201392] 0 pages HighMem/MovableOnly [ 2492.215551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2492.240921] 363840 pages reserved [ 2492.244368] 0 pages cma reserved [ 2492.255115] Out of memory (oom_kill_allocating_task): Kill process 30112 (modprobe) score 0 or sacrifice child [ 2492.274899] Killed process 30112 (modprobe) total-vm:4188kB, anon-rss:40kB, file-rss:0kB, shmem-rss:0kB [ 2492.303867] oom_reaper: reaped process 29796 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2492.314592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2492.351160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2492.369308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2492.425161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2492.465183] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2492.472788] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2492.495733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2492.501993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2492.554885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2492.594109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2492.612344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2492.650378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2492.697634] device hsr_slave_0 entered promiscuous mode [ 2492.704052] device hsr_slave_1 entered promiscuous mode [ 2492.719773] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2492.729692] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2492.744406] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2492.780404] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2492.802052] device hsr_slave_0 entered promiscuous mode [ 2492.825216] device hsr_slave_1 entered promiscuous mode [ 2492.843730] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2492.856991] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2493.140197] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2493.178580] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2493.259068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2493.296166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2493.309008] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2493.321661] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2493.346853] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2493.359362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2493.368812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2493.392127] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2493.407539] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2493.413630] 8021q: adding VLAN 0 to HW filter on device team0 [ 2493.435984] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2493.443052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2493.453211] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2493.478978] 8021q: adding VLAN 0 to HW filter on device team0 [ 2493.487213] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2493.505592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2493.513710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2493.539937] bridge0: port 1(bridge_slave_0) entered blocking state [ 2493.546424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2493.567047] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2493.575298] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2493.582440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2493.595428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2493.603366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2493.625573] bridge0: port 1(bridge_slave_0) entered blocking state [ 2493.631968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2493.655057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2493.662991] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2493.685058] bridge0: port 2(bridge_slave_1) entered blocking state [ 2493.691449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2493.718086] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2493.733432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2493.755200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2493.763102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2493.780455] Bluetooth: hci1 command 0x040f tx timeout [ 2493.785339] bridge0: port 2(bridge_slave_1) entered blocking state [ 2493.792035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2493.816597] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2493.825875] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2493.832746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2493.856237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2493.865919] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2493.879542] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2493.891340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2493.905483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2493.914505] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2493.931808] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2493.946689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2493.954484] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2493.975745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2493.983545] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2494.005764] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2494.012815] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2494.037534] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2494.056930] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2494.073430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2494.083698] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2494.104319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2494.125023] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2494.147003] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2494.166272] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2494.180979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2494.198607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2494.219082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2494.227036] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2494.240385] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2494.248138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2494.260818] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2494.271197] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2494.288778] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2494.296026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2494.308402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2494.325215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2494.333989] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2494.344733] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2494.360957] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2494.368729] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2494.375196] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2494.382028] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2494.392241] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2494.423129] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2494.429937] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2494.458333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2494.467281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2494.488121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2494.672401] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2494.688254] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2494.700903] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2494.709802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2494.722258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2494.733302] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2494.750491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2494.762335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2494.838059] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2494.846332] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2494.853197] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2494.881414] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2494.889339] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2494.897901] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2494.908276] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2494.916790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2494.926142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2494.936560] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2494.951817] device veth0_vlan entered promiscuous mode [ 2494.958786] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2494.970863] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2494.980857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2494.994989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2495.002617] device veth0_vlan entered promiscuous mode [ 2495.017498] device veth1_vlan entered promiscuous mode [ 2495.023655] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2495.039469] device veth1_vlan entered promiscuous mode [ 2495.050185] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2495.059392] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2495.071178] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2495.079208] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2495.091284] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2495.101815] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2495.115369] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2495.136132] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2495.149455] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2495.167799] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2495.176887] device veth0_macvtap entered promiscuous mode [ 2495.182988] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2495.189915] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2495.197722] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2495.208426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2495.216421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2495.225221] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2495.238040] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2495.248491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2495.258953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2495.270037] device veth1_macvtap entered promiscuous mode [ 2495.280010] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2495.288102] device veth0_macvtap entered promiscuous mode [ 2495.296957] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2495.309975] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2495.319713] device veth1_macvtap entered promiscuous mode [ 2495.326476] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2495.336059] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2495.346518] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2495.357015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2495.367711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2495.377387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2495.387177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2495.396372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2495.406221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2495.415440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2495.425213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2495.435973] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2495.442968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2495.452639] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2495.460679] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2495.468287] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2495.476043] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2495.483296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2495.491734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2495.533185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2495.544173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2495.554328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2495.564952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2495.574080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2495.584964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2495.594081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2495.604902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2495.617630] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2495.624580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2495.631403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2495.649751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2495.659801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2495.669644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2495.678886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2495.688944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2495.698570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2495.709869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2495.719319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2495.729113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2495.740291] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2495.747418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2495.754708] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2495.763572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2495.775086] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2495.782961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2495.801374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2495.814857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2495.823988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2495.837365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2495.846618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2495.860541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2495.865233] Bluetooth: hci1 command 0x0419 tx timeout [ 2495.872650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2495.888046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2495.897322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2495.911390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2495.922390] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2495.936719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2495.947790] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2495.963979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 00:43:43 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x484240, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)={0x101, 0x1, 0x4, 0x400, 0xffff, {0x0, 0x2710}, {0x1, 0x2, 0x8, 0x2, 0x7, 0x1, "db53d254"}, 0x8, 0x4, @fd=r1, 0x4, 0x0, r1}) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x8) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x4, 0x90040) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x7fffffff, 0x1e, 0x1}) 00:43:43 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) wait4(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)) pkey_mprotect(&(0x7f0000ff1000/0x4000)=nil, 0x4000, 0x4, 0xffffffffffffffff) r0 = shmget(0x1, 0x13000, 0x54000000, &(0x7f0000fed000/0x13000)=nil) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000100)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20044001}, 0x0) shmat(r0, &(0x7f0000fed000/0x2000)=nil, 0x5000) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) getrusage(0x0, &(0x7f00000001c0)) 00:43:43 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x484240, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)={0x101, 0x1, 0x4, 0x400, 0xffff, {0x0, 0x2710}, {0x1, 0x2, 0x8, 0x2, 0x7, 0x1, "db53d254"}, 0x8, 0x4, @fd=r1, 0x4, 0x0, r1}) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x8) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000340)={0x401, 0x2, 0x4, 0x8, 0x8, {}, {0x1, 0x8, 0xbc, 0xa2, 0xf7, 0x20, "450104da"}, 0xa87, 0x4, @fd=r3, 0x1ff}) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x4, 0x90040) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, 0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x1, 0x621c0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x7fffffff, 0x1e, 0x1}) 00:43:43 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x484240, 0x0) inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0x8) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x4, 0x90040) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x7fffffff, 0x1e, 0x1}) 00:43:43 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x484240, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)={0x101, 0x1, 0x4, 0x400, 0xffff, {0x0, 0x2710}, {0x1, 0x2, 0x8, 0x2, 0x7, 0x1, "db53d254"}, 0x8, 0x4, @fd=r1, 0x4, 0x0, r1}) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x8) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x4, 0x90040) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x7fffffff, 0x1e, 0x1}) 00:43:43 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x484240, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)={0x101, 0x1, 0x4, 0x400, 0xffff, {0x0, 0x2710}, {0x1, 0x2, 0x8, 0x2, 0x7, 0x1, "db53d254"}, 0x8, 0x4, @fd=r1, 0x4, 0x0, r1}) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x8) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000340)={0x401, 0x2, 0x4, 0x8, 0x8, {}, {0x1, 0x8, 0xbc, 0xa2, 0xf7, 0x20, "450104da"}, 0xa87, 0x4, @fd=r3, 0x1ff}) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x4, 0x90040) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r4, 0xc00464be, &(0x7f0000000240)={0x1}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x7fffffff, 0x1e, 0x1}) 00:43:43 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff1000/0x4000)=nil, 0x4000, 0x4, 0xffffffffffffffff) pkey_alloc(0x0, 0x1) 00:43:43 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x484240, 0x0) inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0x8) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x4, 0x90040) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x7fffffff, 0x1e, 0x1}) 00:43:43 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) pkey_mprotect(&(0x7f0000ff2000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000000)={0x7b, 0x4, 0x4, 0x1000, 0x4a85, {0x77359400}, {0x4, 0x0, 0x3, 0xa9, 0xc8, 0x7, "2d9bd726"}, 0x6, 0x2, @userptr=0x10001, 0x172}) pkey_mprotect(&(0x7f0000ff1000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 00:43:43 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x484240, 0x0) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x8) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x4, 0x90040) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x7fffffff, 0x1e, 0x1}) 00:43:43 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x484240, 0x0) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x8) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x4, 0x90040) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x7fffffff, 0x1e, 0x1}) 00:43:43 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000003840)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000000400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r0, &(0x7f0000000040)={0x20, 0x0, r1}, 0x20) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000040)={0x38, 0x0, r1, [{0x1, 0x6, 0xb, 0x1, '/dev/nvram\x00'}]}, 0x38) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0xd41, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) r3 = shmget(0x2, 0x2000, 0x8c26067868c81d1a, &(0x7f0000ffc000/0x2000)=nil) shmat(r3, &(0x7f0000ffc000/0x2000)=nil, 0x1000) shmat(r3, &(0x7f0000ffb000/0x4000)=nil, 0x5000) [ 2497.955686] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2497.959160] syz-executor.2: [ 2497.967863] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2497.972147] syz-executor.3 cpuset= [ 2497.984897] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2497.989196] page allocation failure: order:4 [ 2498.001331] syz-executor.5 cpuset= [ 2498.007359] / [ 2498.009752] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2498.010995] mems_allowed=0-1 [ 2498.012663] / [ 2498.021102] syz-executor.4 cpuset= [ 2498.023710] (null) [ 2498.025036] CPU: 0 PID: 30360 Comm: syz-executor.3 Not tainted 4.14.224-syzkaller #0 [ 2498.032829] syz-executor.2 cpuset= [ 2498.038242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2498.038247] Call Trace: [ 2498.038265] dump_stack+0x1b2/0x281 [ 2498.038277] warn_alloc.cold+0x96/0x1cc [ 2498.038288] ? zone_watermark_ok_safe+0x220/0x220 [ 2498.038310] __alloc_pages_nodemask+0x2127/0x2720 [ 2498.038321] ? lock_acquire+0x170/0x3f0 [ 2498.038332] ? lock_acquire+0x170/0x3f0 [ 2498.048416] mems_allowed=0-1 [ 2498.051213] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2498.051232] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2498.053837] / [ 2498.057409] ? __mutex_unlock_slowpath+0x75/0x770 [ 2498.073142] mems_allowed=0-1 [ 2498.074971] alloc_pages_current+0x155/0x260 [ 2498.074986] ion_page_pool_alloc+0x118/0x1b0 [ 2498.074997] ion_system_heap_allocate+0x133/0x8c0 [ 2498.075006] ? ion_alloc+0x187/0x810 [ 2498.075017] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2498.124608] ? ion_system_contig_heap_create+0x130/0x130 [ 2498.130052] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2498.135316] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2498.140145] ion_alloc+0x204/0x810 [ 2498.143847] ? ion_dma_buf_release+0x40/0x40 [ 2498.148239] ? __might_fault+0x177/0x1b0 [ 2498.152285] ion_ioctl+0xea/0x1f0 [ 2498.155722] ? ion_query_heaps+0x360/0x360 [ 2498.159939] ? ion_query_heaps+0x360/0x360 [ 2498.164157] do_vfs_ioctl+0x75a/0xff0 [ 2498.167943] ? ioctl_preallocate+0x1a0/0x1a0 [ 2498.172333] ? lock_downgrade+0x740/0x740 [ 2498.176480] ? __fget+0x225/0x360 [ 2498.179924] ? do_vfs_ioctl+0xff0/0xff0 [ 2498.183903] ? security_file_ioctl+0x83/0xb0 [ 2498.188299] SyS_ioctl+0x7f/0xb0 [ 2498.191647] ? do_vfs_ioctl+0xff0/0xff0 [ 2498.195651] do_syscall_64+0x1d5/0x640 [ 2498.199527] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2498.204702] RIP: 0033:0x465f69 [ 2498.207880] RSP: 002b:00007f320e93e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2498.215572] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2498.222845] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2498.230212] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2498.237482] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2498.244744] R13: 00007ffc9a20464f R14: 00007f320e93e300 R15: 0000000000022000 [ 2498.252016] CPU: 1 PID: 30367 Comm: syz-executor.5 Not tainted 4.14.224-syzkaller #0 [ 2498.253267] / [ 2498.259896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2498.259998] mems_allowed=0-1 [ 2498.261632] Call Trace: [ 2498.261649] dump_stack+0x1b2/0x281 [ 2498.261662] warn_alloc.cold+0x96/0x1cc [ 2498.284194] ? zone_watermark_ok_safe+0x220/0x220 [ 2498.289028] __alloc_pages_nodemask+0x2127/0x2720 [ 2498.293852] ? retint_kernel+0x2d/0x2d [ 2498.297725] ? lock_acquire+0x170/0x3f0 [ 2498.301791] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2498.306622] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2498.312056] ? __mutex_unlock_slowpath+0x75/0x770 [ 2498.316878] ? retint_kernel+0x2d/0x2d [ 2498.320749] alloc_pages_current+0x155/0x260 [ 2498.325157] ion_page_pool_alloc+0x118/0x1b0 [ 2498.329556] ion_system_heap_allocate+0x133/0x8c0 [ 2498.334387] ? ion_alloc+0x187/0x810 [ 2498.338082] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2498.343514] ? ion_system_contig_heap_create+0x130/0x130 [ 2498.348945] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2498.353943] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2498.358770] ion_alloc+0x204/0x810 [ 2498.362293] ? ion_dma_buf_release+0x40/0x40 [ 2498.366688] ? __might_fault+0x177/0x1b0 [ 2498.370737] ion_ioctl+0xea/0x1f0 [ 2498.374177] ? ion_query_heaps+0x360/0x360 [ 2498.378396] ? ion_query_heaps+0x360/0x360 [ 2498.382613] do_vfs_ioctl+0x75a/0xff0 [ 2498.386397] ? ioctl_preallocate+0x1a0/0x1a0 [ 2498.390790] ? lock_downgrade+0x740/0x740 [ 2498.394939] ? __fget+0x225/0x360 [ 2498.398373] ? do_vfs_ioctl+0xff0/0xff0 [ 2498.402329] ? security_file_ioctl+0x83/0xb0 [ 2498.406722] SyS_ioctl+0x7f/0xb0 [ 2498.410067] ? do_vfs_ioctl+0xff0/0xff0 [ 2498.414024] do_syscall_64+0x1d5/0x640 [ 2498.417899] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2498.423071] RIP: 0033:0x465f69 [ 2498.426241] RSP: 002b:00007f886bfb2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2498.433929] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2498.441178] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2498.448432] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2498.455682] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2498.462935] R13: 00007ffe15f841ff R14: 00007f886bfb2300 R15: 0000000000022000 [ 2498.470288] CPU: 0 PID: 30366 Comm: syz-executor.4 Not tainted 4.14.224-syzkaller #0 [ 2498.478263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2498.487620] Call Trace: [ 2498.490216] dump_stack+0x1b2/0x281 [ 2498.493847] warn_alloc.cold+0x96/0x1cc [ 2498.497825] ? zone_watermark_ok_safe+0x220/0x220 [ 2498.502683] __alloc_pages_nodemask+0x2127/0x2720 [ 2498.507532] ? lock_acquire+0x170/0x3f0 [ 2498.511512] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2498.516358] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2498.521812] ? __mutex_unlock_slowpath+0x75/0x770 [ 2498.526663] alloc_pages_current+0x155/0x260 [ 2498.531068] ion_page_pool_alloc+0x118/0x1b0 [ 2498.535480] ion_system_heap_allocate+0x133/0x8c0 [ 2498.540318] ? ion_alloc+0x187/0x810 [ 2498.544018] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2498.549454] ? ion_system_contig_heap_create+0x130/0x130 [ 2498.554894] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2498.559927] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2498.564756] ion_alloc+0x204/0x810 [ 2498.568303] ? ion_dma_buf_release+0x40/0x40 [ 2498.572711] ? __might_fault+0x177/0x1b0 [ 2498.576762] ion_ioctl+0xea/0x1f0 [ 2498.580208] ? ion_query_heaps+0x360/0x360 [ 2498.584427] ? ion_query_heaps+0x360/0x360 [ 2498.588646] do_vfs_ioctl+0x75a/0xff0 [ 2498.592434] ? ioctl_preallocate+0x1a0/0x1a0 [ 2498.596830] ? lock_downgrade+0x740/0x740 [ 2498.600968] ? __fget+0x225/0x360 [ 2498.604407] ? do_vfs_ioctl+0xff0/0xff0 [ 2498.608388] ? security_file_ioctl+0x83/0xb0 [ 2498.612784] SyS_ioctl+0x7f/0xb0 [ 2498.616141] ? do_vfs_ioctl+0xff0/0xff0 [ 2498.620104] do_syscall_64+0x1d5/0x640 [ 2498.623977] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2498.629162] RIP: 0033:0x465f69 [ 2498.632345] RSP: 002b:00007f380960e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2498.640128] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2498.647478] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2498.654734] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2498.661999] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2498.669261] R13: 00007fffbef2da3f R14: 00007f380960e300 R15: 0000000000022000 [ 2498.678984] warn_alloc_show_mem: 1 callbacks suppressed [ 2498.678988] Mem-Info: [ 2498.686913] active_anon:20890 inactive_anon:37190 isolated_anon:0 [ 2498.686913] active_file:1675 inactive_file:2048 isolated_file:12 [ 2498.686913] unevictable:0 dirty:100 writeback:0 unstable:0 [ 2498.686913] slab_reclaimable:12187 slab_unreclaimable:112746 [ 2498.686913] mapped:55085 shmem:39699 pagetables:777 bounce:0 [ 2498.686913] free:222417 free_pcp:108 free_cma:0 [ 2498.688409] CPU: 1 PID: 30359 Comm: syz-executor.2 Not tainted 4.14.224-syzkaller #0 [ 2498.721290] Node 0 active_anon:81700kB inactive_anon:134764kB active_file:6692kB inactive_file:8188kB unevictable:0kB isolated(anon):0kB isolated(file):48kB mapped:82680kB dirty:388kB writeback:0kB shmem:144660kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2498.728745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2498.728750] Call Trace: [ 2498.728767] dump_stack+0x1b2/0x281 [ 2498.728780] warn_alloc.cold+0x96/0x1cc [ 2498.728795] ? zone_watermark_ok_safe+0x220/0x220 [ 2498.757142] Node 1 active_anon:1860kB inactive_anon:13996kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:137660kB dirty:12kB writeback:0kB shmem:14136kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2498.766408] __alloc_pages_nodemask+0x2127/0x2720 [ 2498.766419] ? __schedule+0x893/0x1de0 [ 2498.766435] ? lock_acquire+0x170/0x3f0 [ 2498.769036] Node 0 [ 2498.772618] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2498.772635] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2498.776667] DMA free:11080kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2498.781437] ? __mutex_unlock_slowpath+0x75/0x770 [ 2498.781451] alloc_pages_current+0x155/0x260 [ 2498.781466] ion_page_pool_alloc+0x118/0x1b0 [ 2498.808908] lowmem_reserve[]: [ 2498.813679] ion_system_heap_allocate+0x133/0x8c0 [ 2498.813689] ? ion_alloc+0x187/0x810 [ 2498.813701] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2498.817636] 0 [ 2498.821541] ? ion_system_contig_heap_create+0x130/0x130 [ 2498.821552] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2498.821564] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2498.823804] 2717 [ 2498.828603] ion_alloc+0x204/0x810 [ 2498.828619] ? ion_dma_buf_release+0x40/0x40 [ 2498.828630] ? __might_fault+0x177/0x1b0 [ 2498.828643] ion_ioctl+0xea/0x1f0 [ 2498.834096] 2718 [ 2498.859572] ? ion_query_heaps+0x360/0x360 [ 2498.859584] ? ion_query_heaps+0x360/0x360 [ 2498.859595] do_vfs_ioctl+0x75a/0xff0 [ 2498.859605] ? ioctl_preallocate+0x1a0/0x1a0 [ 2498.859615] ? lock_downgrade+0x740/0x740 [ 2498.864488] 2718 [ 2498.868830] ? __fget+0x225/0x360 [ 2498.868839] ? do_vfs_ioctl+0xff0/0xff0 [ 2498.868850] ? security_file_ioctl+0x83/0xb0 [ 2498.873260] 2718 [ 2498.876321] SyS_ioctl+0x7f/0xb0 [ 2498.876329] ? do_vfs_ioctl+0xff0/0xff0 [ 2498.876341] do_syscall_64+0x1d5/0x640 [ 2498.876358] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2498.884868] RIP: 0033:0x465f69 [ 2498.884874] RSP: 002b:00007fa2ca784188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2498.884884] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2498.884889] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2498.884894] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2498.884902] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2498.890364] Node 0 [ 2498.892110] R13: 00007fff4963426f R14: 00007fa2ca784300 R15: 0000000000022000 [ 2499.034929] DMA32 free:731916kB min:36200kB low:45248kB high:54296kB active_anon:81700kB inactive_anon:134764kB active_file:6732kB inactive_file:8276kB unevictable:0kB writepending:424kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7232kB pagetables:2400kB bounce:0kB free_pcp:432kB local_pcp:124kB free_cma:0kB [ 2499.065236] lowmem_reserve[]: 0 0 0 0 0 [ 2499.069282] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2499.094932] lowmem_reserve[]: 0 0 0 0 0 [ 2499.098984] Node 1 Normal free:53928kB min:53696kB low:67120kB high:80544kB active_anon:1860kB inactive_anon:13996kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:12kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:576kB pagetables:708kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2499.127549] lowmem_reserve[]: 0 0 0 0 0 [ 2499.131597] Node 0 DMA: 12*4kB (UE) 32*8kB (UE) 26*16kB (UE) 24*32kB (UE) 2*64kB (UE) 2*128kB (UE) 2*256kB (UE) 1*512kB (E) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11088kB [ 2499.147275] Node 0 DMA32: 22*4kB (UEH) 6360*8kB (UMEH) 16586*16kB (UMEH) 10281*32kB (UMEH) 46*64kB (UMH) 6*128kB (H) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 649048kB [ 2499.162995] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2499.174304] Node 1 Normal: 498*4kB (UME) 939*8kB (UME) 865*16kB (UME) 672*32kB (UME) 66*64kB (UME) 24*128kB (UM) 5*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 53936kB [ 2499.206628] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2499.225838] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2499.243243] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2499.253128] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2499.277451] 43459 total pagecache pages [ 2499.285867] 0 pages in swap cache [ 2499.293728] Swap cache stats: add 0, delete 0, find 0/0 [ 2499.305360] Free swap = 0kB [ 2499.311513] Total swap = 0kB [ 2499.319520] 2097051 pages RAM [ 2499.325957] 0 pages HighMem/MovableOnly [ 2499.329996] 363840 pages reserved [ 2499.340434] 0 pages cma reserved [ 2499.847792] oom_reaper: reaped process 30366 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2499.927939] oom_reaper: reaped process 30359 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2499.948151] syz-executor.4 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2499.963405] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2499.965127] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2499.969678] syz-executor.4: [ 2499.987491] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2499.993150] CPU: 1 PID: 28707 Comm: syz-executor.4 Not tainted 4.14.224-syzkaller #0 [ 2500.003513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2500.012874] Call Trace: [ 2500.015451] dump_stack+0x1b2/0x281 [ 2500.019066] dump_header+0x178/0x82f [ 2500.022761] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2500.027845] ? ___ratelimit+0x2cd/0x530 [ 2500.031817] oom_kill_process.cold+0x10/0xb18 [ 2500.036310] out_of_memory+0xe3e/0x1190 [ 2500.040266] ? oom_killer_disable+0x1c0/0x1c0 [ 2500.044743] ? mutex_trylock+0x152/0x1a0 [ 2500.048795] __alloc_pages_nodemask+0x23e1/0x2720 [ 2500.053624] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2500.058456] alloc_pages_current+0x155/0x260 [ 2500.063717] filemap_fault+0xea3/0x1980 [ 2500.067677] ext4_filemap_fault+0x84/0xb0 [ 2500.071804] __do_fault+0xfa/0x380 [ 2500.075324] __handle_mm_fault+0x2497/0x4620 [ 2500.079718] ? vm_insert_page+0x7c0/0x7c0 [ 2500.083848] ? nanosleep_copyout+0x100/0x100 [ 2500.088251] handle_mm_fault+0x391/0x860 [ 2500.092399] __do_page_fault+0x549/0xad0 [ 2500.096443] ? spurious_fault+0x640/0x640 [ 2500.100569] ? do_page_fault+0x60/0x500 [ 2500.104527] ? page_fault+0x2f/0x50 [ 2500.108133] page_fault+0x45/0x50 [ 2500.111573] RIP: 261cb6:0xf [ 2500.114480] RSP: 0013:00007fffbef2dcfc EFLAGS: 0000000e [ 2500.114521] CPU: 0 PID: 30359 Comm: syz-executor.2 Not tainted 4.14.224-syzkaller #0 [ 2500.127755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2500.128626] page allocation failure: order:0 [ 2500.137101] Call Trace: [ 2500.137119] dump_stack+0x1b2/0x281 [ 2500.137132] warn_alloc.cold+0x96/0x1cc [ 2500.137142] ? zone_watermark_ok_safe+0x220/0x220 [ 2500.137151] ? usleep_range+0x130/0x130 [ 2500.137160] ? try_to_free_pages+0x23f/0x6e0 [ 2500.137170] ? _find_next_bit+0xdb/0x100 [ 2500.137180] ? run_timer_softirq+0x5a0/0x5a0 [ 2500.137195] __alloc_pages_nodemask+0x2127/0x2720 [ 2500.137210] ? lock_acquire+0x170/0x3f0 [ 2500.137224] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2500.154136] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2500.156573] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2500.160516] (null) [ 2500.164913] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2500.164931] alloc_pages_current+0x155/0x260 [ 2500.164944] ion_page_pool_alloc+0x118/0x1b0 [ 2500.164956] ion_system_heap_allocate+0x133/0x8c0 [ 2500.164967] ? ion_alloc+0x187/0x810 [ 2500.164977] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2500.164987] ? ion_system_contig_heap_create+0x130/0x130 [ 2500.164995] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2500.165006] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2500.182436] syz-executor.4 cpuset= [ 2500.187084] ion_alloc+0x204/0x810 [ 2500.187100] ? ion_dma_buf_release+0x40/0x40 [ 2500.187112] ? __might_fault+0x177/0x1b0 [ 2500.187124] ion_ioctl+0xea/0x1f0 [ 2500.187136] ? ion_query_heaps+0x360/0x360 [ 2500.206931] / [ 2500.210756] ? ion_query_heaps+0x360/0x360 [ 2500.227716] mems_allowed=0-1 [ 2500.229118] do_vfs_ioctl+0x75a/0xff0 [ 2500.280365] ? ioctl_preallocate+0x1a0/0x1a0 [ 2500.284769] ? lock_downgrade+0x740/0x740 [ 2500.288908] ? __fget+0x225/0x360 [ 2500.292344] ? do_vfs_ioctl+0xff0/0xff0 [ 2500.296309] ? security_file_ioctl+0x83/0xb0 [ 2500.300711] SyS_ioctl+0x7f/0xb0 [ 2500.304089] ? do_vfs_ioctl+0xff0/0xff0 [ 2500.308055] do_syscall_64+0x1d5/0x640 [ 2500.311931] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2500.317112] RIP: 0033:0x465f69 [ 2500.320292] RSP: 002b:00007fa2ca784188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2500.327992] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2500.335248] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2500.342512] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2500.349777] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2500.357037] R13: 00007fff4963426f R14: 00007fa2ca784300 R15: 0000000000022000 [ 2500.368155] CPU: 1 PID: 30366 Comm: syz-executor.4 Not tainted 4.14.224-syzkaller #0 [ 2500.376057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2500.381835] warn_alloc_show_mem: 3 callbacks suppressed [ 2500.381838] Mem-Info: [ 2500.385405] Call Trace: [ 2500.385422] dump_stack+0x1b2/0x281 [ 2500.385436] warn_alloc.cold+0x96/0x1cc [ 2500.385447] ? zone_watermark_ok_safe+0x220/0x220 [ 2500.385455] ? usleep_range+0x130/0x130 [ 2500.385470] ? try_to_free_pages+0x23f/0x6e0 [ 2500.385480] ? _find_next_bit+0xdb/0x100 [ 2500.385491] ? run_timer_softirq+0x5a0/0x5a0 [ 2500.385507] __alloc_pages_nodemask+0x2127/0x2720 [ 2500.385521] ? lock_acquire+0x170/0x3f0 [ 2500.390879] active_anon:20843 inactive_anon:37190 isolated_anon:0 [ 2500.390879] active_file:5 inactive_file:15 isolated_file:0 [ 2500.390879] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2500.390879] slab_reclaimable:12180 slab_unreclaimable:112895 [ 2500.390879] mapped:52693 shmem:39699 pagetables:777 bounce:0 [ 2500.390879] free:13813 free_pcp:135 free_cma:0 [ 2500.393266] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2500.395887] Node 0 active_anon:81512kB inactive_anon:134764kB active_file:32kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:73112kB dirty:0kB writeback:0kB shmem:144660kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2500.399457] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2500.403411] Node 1 active_anon:1860kB inactive_anon:13996kB active_file:0kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:137660kB dirty:0kB writeback:0kB shmem:14136kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2500.408232] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2500.408245] ? __sanitizer_cov_trace_pc+0x2d/0x50 [ 2500.408258] alloc_pages_current+0x155/0x260 [ 2500.412234] Node 0 [ 2500.416629] ion_page_pool_alloc+0x118/0x1b0 [ 2500.416639] ion_system_heap_allocate+0x133/0x8c0 [ 2500.416648] ? ion_alloc+0x187/0x810 [ 2500.420697] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2500.425074] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2500.425084] ? ion_system_contig_heap_create+0x130/0x130 [ 2500.425094] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2500.429910] lowmem_reserve[]: [ 2500.433894] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2500.467028] 0 [ 2500.471839] ion_alloc+0x204/0x810 [ 2500.499600] 2717 [ 2500.504070] ? ion_dma_buf_release+0x40/0x40 [ 2500.504082] ? __might_fault+0x177/0x1b0 [ 2500.531274] 2718 [ 2500.536683] ion_ioctl+0xea/0x1f0 [ 2500.536695] ? ion_query_heaps+0x360/0x360 [ 2500.541511] 2718 [ 2500.545905] ? ion_query_heaps+0x360/0x360 [ 2500.545915] do_vfs_ioctl+0x75a/0xff0 [ 2500.545927] ? ioctl_preallocate+0x1a0/0x1a0 [ 2500.548137] 2718 [ 2500.552528] ? lock_downgrade+0x740/0x740 [ 2500.561058] ? __fget+0x225/0x360 [ 2500.586642] Node 0 [ 2500.592061] ? do_vfs_ioctl+0xff0/0xff0 [ 2500.597510] DMA32 free:17472kB min:36200kB low:45248kB high:54296kB active_anon:81512kB inactive_anon:134764kB active_file:132kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7232kB pagetables:2400kB bounce:0kB free_pcp:340kB local_pcp:124kB free_cma:0kB [ 2500.602482] ? security_file_ioctl+0x83/0xb0 [ 2500.605576] lowmem_reserve[]: [ 2500.610386] SyS_ioctl+0x7f/0xb0 [ 2500.612161] 0 [ 2500.615691] ? do_vfs_ioctl+0xff0/0xff0 [ 2500.615704] do_syscall_64+0x1d5/0x640 [ 2500.615721] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2500.617759] 0 [ 2500.622147] RIP: 0033:0x465f69 [ 2500.626213] 0 [ 2500.628241] RSP: 002b:00007f380960e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2500.631673] 0 [ 2500.635886] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2500.635891] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2500.635896] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2500.635901] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2500.635908] R13: 00007fffbef2da3f R14: 00007f380960e300 R15: 0000000000022000 [ 2500.637969] 0 [ 2500.647871] Mem-Info: [ 2500.706110] active_anon:20843 inactive_anon:37190 isolated_anon:0 [ 2500.706110] active_file:5 inactive_file:15 isolated_file:0 [ 2500.706110] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2500.706110] slab_reclaimable:12180 slab_unreclaimable:112895 [ 2500.706110] mapped:52693 shmem:39699 pagetables:777 bounce:0 [ 2500.706110] free:13813 free_pcp:134 free_cma:0 [ 2500.723410] Node 0 [ 2500.730524] Node 0 active_anon:81512kB inactive_anon:134764kB active_file:32kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:73112kB dirty:0kB writeback:0kB shmem:144660kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2500.734281] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2500.747905] Node 1 active_anon:1860kB inactive_anon:13996kB active_file:0kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:137660kB dirty:0kB writeback:0kB shmem:14136kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2500.764534] lowmem_reserve[]: [ 2500.773725] Node 0 [ 2500.793051] 0 [ 2500.820028] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2500.848789] 0 [ 2500.875528] lowmem_reserve[]: [ 2500.913342] 0 [ 2500.942019] 0 2717 2718 2718 2718 [ 2500.945340] 0 0 [ 2500.949471] Node 1 Normal free:26828kB min:53696kB low:67120kB high:80544kB active_anon:1860kB inactive_anon:13996kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:576kB pagetables:708kB bounce:0kB free_pcp:200kB local_pcp:120kB free_cma:0kB [ 2500.949772] Node 0 [ 2500.989176] lowmem_reserve[]: 0 0 0 0 0 [ 2500.993412] DMA32 free:17456kB min:36200kB low:45248kB high:54296kB active_anon:81512kB inactive_anon:134764kB active_file:36kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7232kB pagetables:2400kB bounce:0kB free_pcp:340kB local_pcp:216kB free_cma:0kB [ 2500.999033] Node 0 DMA: 2*4kB (UE) 20*8kB (UE) 26*16kB (UE) 24*32kB (UE) 2*64kB (UE) 2*128kB (UE) 2*256kB (UE) 1*512kB (E) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10952kB [ 2501.065339] lowmem_reserve[]: 0 0 0 0 0 [ 2501.069886] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2501.094039] Node 0 DMA32: 338*4kB (MEH) 140*8kB (UMEH) 94*16kB (UME) 241*32kB (UMEH) 68*64kB (UM) 12*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17576kB [ 2501.144081] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2501.177075] Node 1 Normal: 6*4kB (ME) 2*8kB (ME) 3*16kB (UE) 4*32kB (UE) 3640*64kB (UME) 238*128kB (UM) 5*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 265432kB [ 2501.177443] lowmem_reserve[]: [ 2501.234054] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2501.236733] 0 [ 2501.237212] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2501.237218] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2501.237223] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2501.237227] 40644 total pagecache pages [ 2501.237239] 0 pages in swap cache [ 2501.237243] Swap cache stats: add 0, delete 0, find 0/0 [ 2501.237247] Free swap = 0kB [ 2501.237250] Total swap = 0kB [ 2501.237264] 2097051 pages RAM [ 2501.265167] 0 [ 2501.314009] 0 pages HighMem/MovableOnly [ 2501.319882] 363840 pages reserved [ 2501.323325] 0 pages cma reserved [ 2501.458438] 0 0 0 [ 2501.460635] Node 1 Normal free:787624kB min:53696kB low:67120kB high:80544kB active_anon:1860kB inactive_anon:13996kB active_file:4kB inactive_file:4408kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:576kB pagetables:708kB bounce:0kB free_pcp:376kB local_pcp:148kB free_cma:0kB [ 2501.560052] lowmem_reserve[]: 0 0 0 0 0 [ 2501.566119] Node 0 DMA: 2*4kB (UE) 2*8kB (UE) 21*16kB (UE) 24*32kB (UE) 6*64kB (UE) 1*128kB (E) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11112kB [ 2501.586643] Node 0 DMA32: 320*4kB (UMEH) 136*8kB (UMEH) 91*16kB (UME) 303*32kB (UMEH) 444*64kB (UMH) 25*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 45136kB [ 2501.603783] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2501.637938] Node 1 Normal: 6*4kB (ME) 2*8kB (ME) 2*16kB (E) 4*32kB (UE) 8282*64kB (UME) 682*128kB (UM) 225*256kB (UM) 26*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 688456kB [ 2501.668209] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2501.697141] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2501.718256] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2501.737848] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2501.758148] 40803 total pagecache pages [ 2501.762185] 0 pages in swap cache [ 2501.804014] Swap cache stats: add 0, delete 0, find 0/0 [ 2501.809418] Free swap = 0kB [ 2501.812443] Total swap = 0kB [ 2501.860393] 2097051 pages RAM [ 2501.863534] 0 pages HighMem/MovableOnly [ 2501.894116] 363840 pages reserved [ 2501.897596] 0 pages cma reserved [ 2501.901352] Out of memory (oom_kill_allocating_task): Kill process 28707 (syz-executor.4) score 0 or sacrifice child [ 2501.909517] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2501.912245] syz-executor.2: [ 2501.928001] Killed process 28707 (syz-executor.4) total-vm:93120kB, anon-rss:108kB, file-rss:33740kB, shmem-rss:0kB [ 2501.939455] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2501.942502] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2501.951106] CPU: 1 PID: 30366 Comm: syz-executor.4 Not tainted 4.14.224-syzkaller #0 [ 2501.968896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2501.972022] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 2501.978240] Call Trace: [ 2501.978256] dump_stack+0x1b2/0x281 [ 2501.978269] warn_alloc.cold+0x96/0x1cc [ 2501.978280] ? zone_watermark_ok_safe+0x220/0x220 [ 2501.978302] __alloc_pages_nodemask+0x2127/0x2720 [ 2501.988032] syz-executor.2 cpuset= [ 2501.990561] ? ___preempt_schedule+0x16/0x18 [ 2501.994281] / [ 2501.998134] ? lock_acquire+0x170/0x3f0 [ 2502.002946] mems_allowed=0-1 [ 2502.007773] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2502.007789] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2502.007801] ? __mutex_unlock_slowpath+0x75/0x770 [ 2502.011315] (null) [ 2502.015701] alloc_pages_current+0x155/0x260 [ 2502.015715] ion_page_pool_alloc+0x118/0x1b0 [ 2502.015726] ion_system_heap_allocate+0x133/0x8c0 [ 2502.017418] , order=0, oom_score_adj=0 [ 2502.021370] ? _raw_spin_unlock+0x29/0x40 [ 2502.033922] syz-fuzzer cpuset= [ 2502.034715] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2502.039531] / [ 2502.041661] ? ion_system_contig_heap_create+0x130/0x130 [ 2502.053917] mems_allowed=0-1 [ 2502.056278] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2502.056288] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2502.092491] ion_alloc+0x27a/0x810 [ 2502.096013] ? ion_dma_buf_release+0x40/0x40 [ 2502.100401] ? __might_fault+0x177/0x1b0 [ 2502.104440] ion_ioctl+0xea/0x1f0 [ 2502.107873] ? ion_query_heaps+0x360/0x360 [ 2502.112088] ? ion_query_heaps+0x360/0x360 [ 2502.116302] do_vfs_ioctl+0x75a/0xff0 [ 2502.120084] ? ioctl_preallocate+0x1a0/0x1a0 [ 2502.124470] ? lock_downgrade+0x740/0x740 [ 2502.128597] ? __fget+0x225/0x360 [ 2502.132035] ? do_vfs_ioctl+0xff0/0xff0 [ 2502.135989] ? security_file_ioctl+0x83/0xb0 [ 2502.140376] SyS_ioctl+0x7f/0xb0 [ 2502.143722] ? do_vfs_ioctl+0xff0/0xff0 [ 2502.147677] do_syscall_64+0x1d5/0x640 [ 2502.151550] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2502.156719] RIP: 0033:0x465f69 [ 2502.159885] RSP: 002b:00007f380960e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2502.167573] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2502.174821] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2502.182080] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2502.189328] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2502.196587] R13: 00007fffbef2da3f R14: 00007f380960e300 R15: 0000000000022000 [ 2502.203848] CPU: 0 PID: 7980 Comm: syz-fuzzer Not tainted 4.14.224-syzkaller #0 [ 2502.211291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2502.220633] Call Trace: [ 2502.223219] dump_stack+0x1b2/0x281 [ 2502.226843] dump_header+0x178/0x82f [ 2502.230547] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2502.235640] ? ___ratelimit+0x2cd/0x530 [ 2502.239605] oom_kill_process.cold+0x10/0xb18 [ 2502.240584] warn_alloc_show_mem: 1 callbacks suppressed [ 2502.240588] Mem-Info: [ 2502.244095] out_of_memory+0xe3e/0x1190 [ 2502.244108] ? oom_killer_disable+0x1c0/0x1c0 [ 2502.244116] ? mutex_trylock+0x152/0x1a0 [ 2502.244125] __alloc_pages_nodemask+0x23e1/0x2720 [ 2502.244143] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2502.249491] active_anon:20847 inactive_anon:37190 isolated_anon:0 [ 2502.249491] active_file:21 inactive_file:29 isolated_file:0 [ 2502.249491] unevictable:0 dirty:11 writeback:0 unstable:0 [ 2502.249491] slab_reclaimable:12171 slab_unreclaimable:114079 [ 2502.249491] mapped:44028 shmem:39699 pagetables:777 bounce:0 [ 2502.249491] free:14162 free_pcp:87 free_cma:0 [ 2502.251887] alloc_pages_current+0x155/0x260 [ 2502.261342] Node 0 active_anon:81512kB inactive_anon:134764kB active_file:36kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:68604kB dirty:4kB writeback:0kB shmem:144660kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2502.264338] filemap_fault+0xea3/0x1980 [ 2502.264356] ext4_filemap_fault+0x84/0xb0 [ 2502.264366] __do_fault+0xfa/0x380 [ 2502.264378] __handle_mm_fault+0x2497/0x4620 [ 2502.269211] Node 1 active_anon:1876kB inactive_anon:13996kB active_file:48kB inactive_file:84kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:107508kB dirty:40kB writeback:0kB shmem:14136kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2502.274021] ? vm_insert_page+0x7c0/0x7c0 [ 2502.274051] handle_mm_fault+0x391/0x860 [ 2502.274065] __do_page_fault+0x549/0xad0 [ 2502.274077] ? spurious_fault+0x640/0x640 [ 2502.274085] ? do_page_fault+0x60/0x500 [ 2502.274093] ? page_fault+0x2f/0x50 [ 2502.274111] page_fault+0x45/0x50 [ 2502.313508] Node 0 [ 2502.340134] RIP: 0900:0x4 [ 2502.340139] RSP: 0284:000000c00003fe40 EFLAGS: 00000003 [ 2502.349100] Mem-Info: [ 2502.371846] CPU: 1 PID: 30359 Comm: syz-executor.2 Not tainted 4.14.224-syzkaller #0 [ 2502.389166] active_anon:20847 inactive_anon:37190 isolated_anon:0 [ 2502.389166] active_file:21 inactive_file:29 isolated_file:0 [ 2502.389166] unevictable:0 dirty:11 writeback:0 unstable:0 [ 2502.389166] slab_reclaimable:12171 slab_unreclaimable:114079 [ 2502.389166] mapped:44028 shmem:39699 pagetables:777 bounce:0 [ 2502.389166] free:14114 free_pcp:31 free_cma:0 [ 2502.392024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2502.396141] Node 0 active_anon:81512kB inactive_anon:134764kB active_file:36kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:68604kB dirty:4kB writeback:0kB shmem:144660kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2502.400208] Call Trace: [ 2502.404185] Node 1 active_anon:1876kB inactive_anon:13996kB active_file:48kB inactive_file:84kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:107508kB dirty:40kB writeback:0kB shmem:14136kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2502.407777] dump_stack+0x1b2/0x281 [ 2502.411192] Node 0 [ 2502.413416] warn_alloc.cold+0x96/0x1cc [ 2502.416170] DMA free:11000kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2502.421487] ? zone_watermark_ok_safe+0x220/0x220 [ 2502.423888] lowmem_reserve[]: [ 2502.431748] __alloc_pages_nodemask+0x2127/0x2720 [ 2502.464960] 0 [ 2502.474299] ? lock_acquire+0x170/0x3f0 [ 2502.474314] ? lock_acquire+0x170/0x3f0 [ 2502.502061] 2717 [ 2502.504618] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2502.504635] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2502.532109] 2718 [ 2502.535695] ? __mutex_unlock_slowpath+0x75/0x770 [ 2502.535711] alloc_pages_current+0x155/0x260 [ 2502.535725] ion_page_pool_alloc+0x118/0x1b0 [ 2502.535738] ion_system_heap_allocate+0x133/0x8c0 [ 2502.537963] 2718 [ 2502.541919] ? _raw_spin_unlock+0x29/0x40 [ 2502.567539] 2718 [ 2502.572330] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2502.580229] ? ion_system_contig_heap_create+0x130/0x130 [ 2502.582001] Node 0 [ 2502.585953] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2502.585963] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2502.585974] ion_alloc+0x27a/0x810 [ 2502.589932] DMA32 free:18256kB min:36200kB low:45248kB high:54296kB active_anon:81512kB inactive_anon:134764kB active_file:36kB inactive_file:32kB unevictable:0kB writepending:4kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7232kB pagetables:2400kB bounce:0kB free_pcp:124kB local_pcp:124kB free_cma:0kB [ 2502.591971] ? ion_dma_buf_release+0x40/0x40 [ 2502.596800] lowmem_reserve[]: [ 2502.602218] ? __might_fault+0x177/0x1b0 [ 2502.604266] 0 [ 2502.609077] ion_ioctl+0xea/0x1f0 [ 2502.613451] 0 [ 2502.617838] ? ion_query_heaps+0x360/0x360 [ 2502.617850] ? ion_query_heaps+0x360/0x360 [ 2502.617860] do_vfs_ioctl+0x75a/0xff0 [ 2502.622671] 0 [ 2502.624718] ? ioctl_preallocate+0x1a0/0x1a0 [ 2502.624726] ? lock_downgrade+0x740/0x740 [ 2502.624738] ? __fget+0x225/0x360 [ 2502.628854] 0 [ 2502.630912] ? do_vfs_ioctl+0xff0/0xff0 [ 2502.635827] 0 [ 2502.641245] ? security_file_ioctl+0x83/0xb0 [ 2502.648464] SyS_ioctl+0x7f/0xb0 [ 2502.648472] ? do_vfs_ioctl+0xff0/0xff0 [ 2502.648484] do_syscall_64+0x1d5/0x640 [ 2502.653300] Node 0 [ 2502.656825] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2502.656836] RIP: 0033:0x465f69 [ 2502.685204] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2502.689569] RSP: 002b:00007fa2ca784188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2502.692662] lowmem_reserve[]: [ 2502.696700] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2502.696705] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2502.696709] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2502.696713] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2502.696718] R13: 00007fff4963426f R14: 00007fa2ca784300 R15: 0000000000022000 [ 2502.705808] DMA free:11000kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2502.722822] 0 [ 2502.733638] lowmem_reserve[]: [ 2502.740864] 0 [ 2502.741937] 0 [ 2502.745327] 0 0 0 [ 2502.745340] Node 1 Normal free:27200kB min:53696kB low:67120kB high:80544kB active_anon:1876kB inactive_anon:13996kB active_file:16kB inactive_file:28kB unevictable:0kB writepending:104kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:576kB pagetables:708kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2502.745359] lowmem_reserve[]: 0 [ 2502.756710] 2717 [ 2502.765815] 0 [ 2502.796469] 2718 [ 2502.802122] 0 [ 2502.811066] 2718 [ 2502.820972] 0 [ 2502.829579] 2718 [ 2502.836552] 0 [ 2502.836560] Node 0 DMA: 2*4kB (UE) 2*8kB (UE) 18*16kB [ 2502.875387] (UE) [ 2502.908747] Node 0 [ 2502.915715] 24*32kB [ 2502.918172] DMA32 free:18932kB min:36200kB low:45248kB high:54296kB active_anon:81416kB inactive_anon:134764kB active_file:36kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7232kB pagetables:2308kB bounce:0kB free_pcp:136kB local_pcp:12kB free_cma:0kB [ 2502.918429] (UE) [ 2502.920206] lowmem_reserve[]: 0 [ 2502.928497] 5*64kB [ 2502.937105] 0 [ 2502.960489] (UE) 1*128kB (E) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11000kB [ 2502.975073] 0 0 0 [ 2502.979432] Node 0 DMA32: 355*4kB (UMEH) 153*8kB (UMEH) 97*16kB (UME) 452*32kB (UEH) 2*64kB (UH) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19044kB [ 2502.982214] Node 0 [ 2502.996166] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2502.996213] Node 1 Normal: 85*4kB (UME) 66*8kB (UME) 57*16kB (UME) 52*32kB (UME) 46*64kB (UME) 23*128kB (M) 18*256kB (UM) 26*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 27252kB [ 2502.996280] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2502.996286] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2502.996291] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2502.996299] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2503.011389] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2503.024678] 39720 total pagecache pages [ 2503.024695] 0 pages in swap cache [ 2503.024700] Swap cache stats: add 0, delete 0, find 0/0 [ 2503.024704] Free swap = 0kB [ 2503.024706] Total swap = 0kB [ 2503.024713] 2097051 pages RAM [ 2503.024716] 0 pages HighMem/MovableOnly [ 2503.024719] 363840 pages reserved [ 2503.024722] 0 pages cma reserved [ 2503.024730] Out of memory (oom_kill_allocating_task): Kill process 7980 (syz-fuzzer) score 0 or sacrifice child [ 2503.024792] Killed process 29362 (syz-executor.0) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 2503.044274] lowmem_reserve[]: [ 2503.053107] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 2503.113130] 0 [ 2503.150241] (null), order=0, oom_score_adj=0 [ 2503.157374] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2503.162140] CPU: 0 PID: 7980 Comm: syz-fuzzer Not tainted 4.14.224-syzkaller #0 [ 2503.169570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2503.178908] Call Trace: [ 2503.181496] dump_stack+0x1b2/0x281 [ 2503.185122] dump_header+0x178/0x82f [ 2503.188825] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2503.193915] ? ___ratelimit+0x2cd/0x530 [ 2503.197882] oom_kill_process.cold+0x10/0xb18 [ 2503.202402] out_of_memory+0xe3e/0x1190 [ 2503.206375] ? oom_killer_disable+0x1c0/0x1c0 [ 2503.210880] ? mutex_trylock+0x152/0x1a0 [ 2503.214935] __alloc_pages_nodemask+0x23e1/0x2720 [ 2503.219883] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2503.224735] alloc_pages_current+0x155/0x260 [ 2503.229134] filemap_fault+0xea3/0x1980 [ 2503.233098] ext4_filemap_fault+0x84/0xb0 [ 2503.237234] __do_fault+0xfa/0x380 [ 2503.240768] __handle_mm_fault+0x2497/0x4620 [ 2503.245170] ? vm_insert_page+0x7c0/0x7c0 [ 2503.249311] handle_mm_fault+0x391/0x860 [ 2503.253354] __do_page_fault+0x549/0xad0 [ 2503.257404] ? spurious_fault+0x640/0x640 [ 2503.261543] ? do_page_fault+0x60/0x500 [ 2503.263700] 0 [ 2503.265591] ? page_fault+0x2f/0x50 [ 2503.265598] page_fault+0x45/0x50 [ 2503.265605] RIP: 0900:0x4 [ 2503.265609] RSP: 0284:000000c00003fe40 EFLAGS: 00000003 [ 2503.265774] syz-executor.2: [ 2503.268190] 0 [ 2503.271064] page allocation failure: order:0 [ 2503.287482] 0 [ 2503.287718] Mem-Info: [ 2503.292095] 0 [ 2503.294857] active_anon:20821 inactive_anon:37190 isolated_anon:0 [ 2503.294857] active_file:11 inactive_file:10 isolated_file:0 [ 2503.294857] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2503.294857] slab_reclaimable:12171 slab_unreclaimable:113964 [ 2503.294857] mapped:44012 shmem:39699 pagetables:754 bounce:0 [ 2503.294857] free:13934 free_pcp:76 free_cma:0 [ 2503.330916] Node 1 Normal free:26756kB min:53696kB low:67120kB high:80544kB active_anon:1868kB inactive_anon:13996kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:576kB pagetables:708kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 2503.331862] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2503.362417] Node 0 active_anon:81416kB inactive_anon:134764kB active_file:36kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:68596kB dirty:0kB writeback:0kB shmem:144660kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2503.399573] (null) [ 2503.400487] lowmem_reserve[]: 0 [ 2503.401732] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2503.410232] CPU: 0 PID: 30359 Comm: syz-executor.2 Not tainted 4.14.224-syzkaller #0 [ 2503.416231] 0 [ 2503.418096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2503.418103] 0 [ 2503.419881] Call Trace: [ 2503.433584] dump_stack+0x1b2/0x281 [ 2503.437207] warn_alloc.cold+0x96/0x1cc [ 2503.439932] 0 0 [ 2503.441197] ? zone_watermark_ok_safe+0x220/0x220 [ 2503.441207] ? usleep_range+0x130/0x130 [ 2503.447984] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2503.447995] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2503.448003] ? run_timer_softirq+0x5a0/0x5a0 [ 2503.448018] __alloc_pages_nodemask+0x2127/0x2720 [ 2503.448033] ? lock_acquire+0x170/0x3f0 [ 2503.448047] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2503.448058] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2503.448074] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2503.462740] Node 0 [ 2503.466503] alloc_pages_current+0x155/0x260 [ 2503.466519] ion_page_pool_alloc+0x118/0x1b0 [ 2503.466530] ion_system_heap_allocate+0x133/0x8c0 [ 2503.466541] ? _raw_spin_unlock+0x29/0x40 [ 2503.466551] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2503.473007] DMA: [ 2503.475329] ? ion_system_contig_heap_create+0x130/0x130 [ 2503.475339] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2503.475349] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2503.475360] ion_alloc+0x27a/0x810 [ 2503.475375] ? ion_dma_buf_release+0x40/0x40 [ 2503.475387] ? __might_fault+0x177/0x1b0 [ 2503.475399] ion_ioctl+0xea/0x1f0 [ 2503.475408] ? ion_query_heaps+0x360/0x360 [ 2503.475420] ? ion_query_heaps+0x360/0x360 [ 2503.475430] do_vfs_ioctl+0x75a/0xff0 [ 2503.475443] ? ioctl_preallocate+0x1a0/0x1a0 [ 2503.487173] 2*4kB [ 2503.490240] ? lock_downgrade+0x740/0x740 [ 2503.490257] ? __fget+0x225/0x360 [ 2503.492481] (UE) [ 2503.496881] ? do_vfs_ioctl+0xff0/0xff0 [ 2503.496892] ? security_file_ioctl+0x83/0xb0 [ 2503.496902] SyS_ioctl+0x7f/0xb0 [ 2503.496910] ? do_vfs_ioctl+0xff0/0xff0 [ 2503.496921] do_syscall_64+0x1d5/0x640 [ 2503.496938] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2503.496947] RIP: 0033:0x465f69 [ 2503.496952] RSP: 002b:00007fa2ca784188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2503.496962] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2503.496967] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2503.496972] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2503.496977] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2503.496983] R13: 00007fff4963426f R14: 00007fa2ca784300 R15: 0000000000022000 [ 2503.501437] Node 1 active_anon:1868kB inactive_anon:13996kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:107452kB dirty:0kB writeback:0kB shmem:14136kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2503.514060] 1*8kB [ 2503.520506] Node 0 [ 2503.522824] (E) [ 2503.527899] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2503.527902] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2503.527922] Node 0 DMA32 free:18020kB min:36200kB low:45248kB high:54296kB active_anon:81416kB inactive_anon:134764kB active_file:36kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7232kB pagetables:2308kB bounce:0kB free_pcp:184kB local_pcp:172kB free_cma:0kB [ 2503.527940] lowmem_reserve[]: 0 0 0 0 [ 2503.539913] 16*16kB [ 2503.546595] 0 [ 2503.549476] (UE) [ 2503.563276] 24*32kB [ 2503.570652] Node 0 [ 2503.571978] (UE) [ 2503.574902] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2503.574905] lowmem_reserve[]: 0 0 0 0 0 [ 2503.574925] Node 1 Normal free:26756kB min:53696kB low:67120kB high:80544kB active_anon:1868kB inactive_anon:13996kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:576kB pagetables:708kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2503.574941] lowmem_reserve[]: 0 0 0 0 0 [ 2503.574959] Node 0 DMA: 2*4kB [ 2503.583498] 5*64kB [ 2503.590917] (UE) [ 2503.592698] (UE) [ 2503.596622] 1*8kB (E) 16*16kB (UE) 24*32kB (UE) 5*64kB (UE) 1*128kB (E) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10960kB [ 2503.608988] 1*128kB [ 2503.617677] warn_alloc_show_mem: 1 callbacks suppressed [ 2503.617680] Mem-Info: [ 2503.620136] (E) [ 2503.631113] active_anon:20821 inactive_anon:37190 isolated_anon:0 [ 2503.631113] active_file:11 inactive_file:10 isolated_file:0 [ 2503.631113] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2503.631113] slab_reclaimable:12171 slab_unreclaimable:113964 [ 2503.631113] mapped:44012 shmem:39699 pagetables:754 bounce:0 [ 2503.631113] free:13934 free_pcp:76 free_cma:0 [ 2503.642414] 1*256kB [ 2503.653013] Node 0 [ 2503.689609] (E) [ 2503.708382] Node 0 active_anon:81416kB inactive_anon:134764kB active_file:36kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:68596kB dirty:0kB writeback:0kB shmem:144660kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2503.708397] Node 1 active_anon:1868kB inactive_anon:13996kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:107452kB dirty:0kB writeback:0kB shmem:14136kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2503.708401] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2503.708420] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2503.723872] 2*512kB [ 2503.742450] Node 0 DMA32 free:18020kB min:36200kB low:45248kB high:54296kB active_anon:81416kB inactive_anon:134764kB active_file:36kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7232kB pagetables:2308kB bounce:0kB free_pcp:184kB local_pcp:172kB free_cma:0kB [ 2503.742471] lowmem_reserve[]: 0 0 [ 2503.759557] (UE) [ 2503.784154] DMA32: [ 2503.806384] 2*1024kB [ 2503.816729] 313*4kB (UME) 112*8kB (UME) 72*16kB (ME) 449*32kB (UE) 2*64kB (U) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB [ 2503.837228] (UE) [ 2503.843368] 0 [ 2503.852871] 3*2048kB [ 2503.853388] 0 [ 2503.863618] (UME) [ 2503.890587] 0*4096kB = 18052kB [ 2503.890595] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2503.890644] Node 1 [ 2503.905537] 0*4096kB [ 2503.925140] 0 [ 2503.925149] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2503.925169] lowmem_reserve[]: 0 0 0 0 0 [ 2503.925189] Node 1 Normal free:26756kB min:53696kB low:67120kB high:80544kB active_anon:1868kB inactive_anon:13996kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:576kB pagetables:708kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2503.925208] lowmem_reserve[]: 0 0 0 0 0 [ 2503.966236] = 10960kB [ 2503.981575] Normal: [ 2503.998822] Node 0 [ 2504.017853] 83*4kB [ 2504.033818] DMA32: [ 2504.042188] 313*4kB [ 2504.044016] Node 0 DMA: 2*4kB (UE) 1*8kB (E) 16*16kB (UE) 24*32kB (UE) 5*64kB (UE) 1*128kB (E) 1*256kB [ 2504.058927] (UME) [ 2504.064218] (UME) 65*8kB (ME) 57*16kB (UME) [ 2504.070075] 112*8kB [ 2504.070626] 51*32kB [ 2504.109056] (UME) [ 2504.128691] (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10960kB [ 2504.128722] Node 0 DMA32: 313*4kB (UME) 112*8kB (UME) 72*16kB (ME) 449*32kB (UE) 2*64kB [ 2504.145532] 72*16kB [ 2504.146435] (U) [ 2504.168569] (ME) [ 2504.169356] 2*128kB [ 2504.183475] 449*32kB [ 2504.184835] (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18052kB [ 2504.184861] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB [ 2504.192801] (UE) [ 2504.193504] 0*128kB [ 2504.202760] 2*64kB [ 2504.208217] (ME) 45*64kB (ME) 24*128kB (UM) 16*256kB (UM) 26*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26756kB [ 2504.208258] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2504.208264] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2504.208269] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2504.208275] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2504.208278] 39720 total pagecache pages [ 2504.208288] 0 pages in swap cache [ 2504.208293] Swap cache stats: add 0, delete 0, find 0/0 [ 2504.208296] Free swap = 0kB [ 2504.208299] Total swap = 0kB [ 2504.208305] 2097051 pages RAM [ 2504.222767] (U) [ 2504.224797] 0 pages HighMem/MovableOnly [ 2504.224801] 363840 pages reserved [ 2504.224804] 0 pages cma reserved [ 2504.224811] Out of memory (oom_kill_allocating_task): Kill process 7980 (syz-fuzzer) score 0 or sacrifice child [ 2504.224872] Killed process 29370 (syz-executor.3) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 2504.245045] 2*128kB [ 2504.251166] 0*256kB [ 2504.272363] (U) [ 2504.274266] 0*512kB [ 2504.296785] oom_reaper: reaped process 29370 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2504.333829] 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2504.338243] Node 1 Normal: 83*4kB (UME) 65*8kB (ME) 57*16kB (UME) 51*32kB (ME) 45*64kB (ME) 24*128kB (UM) 16*256kB (UM) 26*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26756kB [ 2504.348296] 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18052kB [ 2504.353653] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2504.368647] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2504.376926] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB [ 2504.377237] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2504.377245] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2504.383131] 0*128kB [ 2504.391988] 39720 total pagecache pages [ 2504.392004] 0 pages in swap cache [ 2504.392010] Swap cache stats: add 0, delete 0, find 0/0 [ 2504.392013] Free swap = 0kB [ 2504.392016] Total swap = 0kB [ 2504.392023] 2097051 pages RAM [ 2504.392027] 0 pages HighMem/MovableOnly [ 2504.392030] 363840 pages reserved [ 2504.392033] 0 pages cma reserved [ 2504.425315] oom_reaper: reaped process 29362 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2504.583068] 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2504.603949] Node 1 Normal: 7*4kB (UME) 2*8kB (ME) 3*16kB (ME) 3*32kB (E) 3020*64kB (UME) 121*128kB (UM) 86*256kB (UM) 26*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 244284kB [ 2504.703746] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2504.744111] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2504.752825] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2504.803900] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2504.812487] 42199 total pagecache pages [ 2504.844468] 0 pages in swap cache [ 2504.848025] Swap cache stats: add 0, delete 0, find 0/0 [ 2504.853475] Free swap = 0kB [ 2504.876671] Total swap = 0kB [ 2504.879762] 2097051 pages RAM [ 2504.883202] 0 pages HighMem/MovableOnly [ 2504.900758] 363840 pages reserved [ 2504.905052] 0 pages cma reserved [ 2505.163510] oom_reaper: reaped process 30360 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2505.195991] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2505.209090] systemd-journal cpuset=/ mems_allowed=0-1 [ 2505.215219] CPU: 0 PID: 29653 Comm: systemd-journal Not tainted 4.14.224-syzkaller #0 [ 2505.223200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2505.232556] Call Trace: [ 2505.235148] dump_stack+0x1b2/0x281 [ 2505.238768] dump_header+0x178/0x82f [ 2505.242461] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2505.247559] ? ___ratelimit+0x2cd/0x530 [ 2505.251513] oom_kill_process.cold+0x10/0xb18 [ 2505.255994] out_of_memory+0xe3e/0x1190 [ 2505.259949] ? oom_killer_disable+0x1c0/0x1c0 [ 2505.264421] ? mutex_trylock+0x152/0x1a0 [ 2505.268472] __alloc_pages_nodemask+0x23e1/0x2720 [ 2505.273299] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2505.278128] alloc_pages_current+0x155/0x260 [ 2505.282514] filemap_fault+0xea3/0x1980 [ 2505.286638] ext4_filemap_fault+0x84/0xb0 [ 2505.290776] __do_fault+0xfa/0x380 [ 2505.294294] __handle_mm_fault+0x2497/0x4620 [ 2505.298681] ? ep_poll+0x1ab/0xa50 [ 2505.302196] ? vm_insert_page+0x7c0/0x7c0 [ 2505.306330] handle_mm_fault+0x391/0x860 [ 2505.310371] __do_page_fault+0x549/0xad0 [ 2505.314412] ? spurious_fault+0x640/0x640 [ 2505.318538] ? do_page_fault+0x60/0x500 [ 2505.322505] ? page_fault+0x2f/0x50 [ 2505.326109] page_fault+0x45/0x50 [ 2505.329539] RIP: 0001:0xffffffffffffffff [ 2505.333574] RSP: 622281e0:00007ffcc80ebe70 EFLAGS: 7ffcc80ebc80 [ 2505.343875] Mem-Info: [ 2505.344848] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2505.350072] active_anon:20761 inactive_anon:37187 isolated_anon:0 [ 2505.350072] active_file:71 inactive_file:25 isolated_file:0 [ 2505.350072] unevictable:0 dirty:44 writeback:0 unstable:0 [ 2505.350072] slab_reclaimable:12152 slab_unreclaimable:116685 [ 2505.350072] mapped:26704 shmem:39695 pagetables:650 bounce:0 [ 2505.350072] free:13871 free_pcp:37 free_cma:0 [ 2505.352423] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2505.368326] Node 0 active_anon:80872kB inactive_anon:134752kB active_file:60kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:55368kB dirty:20kB writeback:0kB shmem:144644kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2505.401519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2505.433806] Node 1 active_anon:2172kB inactive_anon:13996kB active_file:224kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:51448kB dirty:156kB writeback:0kB shmem:14136kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2505.445467] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2505.467372] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2505.493883] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2505.495311] device bridge_slave_1 left promiscuous mode [ 2505.498919] Node 0 DMA32 free:18088kB min:36200kB low:45248kB high:54296kB active_anon:80972kB inactive_anon:134752kB active_file:148kB inactive_file:20kB unevictable:0kB writepending:20kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7168kB pagetables:2068kB bounce:0kB free_pcp:28kB local_pcp:0kB free_cma:0kB [ 2505.513785] bridge0: port 2(bridge_slave_1) entered disabled state [ 2505.534587] lowmem_reserve[]: 0 0 0 0 0 [ 2505.544407] device bridge_slave_0 left promiscuous mode [ 2505.549337] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2505.549906] bridge0: port 1(bridge_slave_0) entered disabled state [ 2505.578803] lowmem_reserve[]: 0 0 0 0 0 [ 2505.585803] Node 1 Normal free:26436kB min:53696kB low:67120kB high:80544kB active_anon:2172kB inactive_anon:13996kB active_file:204kB inactive_file:32kB unevictable:0kB writepending:156kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:532kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 2505.617385] device veth1_macvtap left promiscuous mode [ 2505.619050] lowmem_reserve[]: 0 0 0 0 0 [ 2505.622803] device veth0_macvtap left promiscuous mode [ 2505.622844] device veth1_vlan left promiscuous mode [ 2505.626810] Node 0 DMA: 2*4kB (UE) 1*8kB (E) 9*16kB (UE) 24*32kB (UE) 7*64kB (UE) 1*128kB (E) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10976kB [ 2505.653758] device veth0_vlan left promiscuous mode [ 2505.675918] Node 0 DMA32: 385*4kB (UME) 110*8kB (UME) 76*16kB (UME) 288*32kB (UE) 24*64kB (U) 26*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17972kB [ 2505.718392] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2505.737734] Node 1 Normal: 90*4kB (ME) 71*8kB (ME) 66*16kB (UME) 62*32kB (ME) 44*64kB (UME) 17*128kB (M) 20*256kB (UM) 25*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26880kB [ 2505.766665] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2505.788916] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2505.810510] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2505.832842] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2505.846004] 39759 total pagecache pages [ 2505.849994] 0 pages in swap cache [ 2505.853441] Swap cache stats: add 0, delete 0, find 0/0 [ 2505.872440] Free swap = 0kB [ 2505.877829] Total swap = 0kB [ 2505.880855] 2097051 pages RAM [ 2505.897112] 0 pages HighMem/MovableOnly [ 2505.901109] 363840 pages reserved [ 2505.912967] 0 pages cma reserved [ 2505.920665] Out of memory (oom_kill_allocating_task): Kill process 29653 (systemd-journal) score 0 or sacrifice child [ 2505.944695] Killed process 29653 (systemd-journal) total-vm:46096kB, anon-rss:476kB, file-rss:0kB, shmem-rss:1968kB [ 2505.969007] oom_reaper: reaped process 29653 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1968kB [ 2505.992418] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2506.014430] in:imklog cpuset=/ mems_allowed=0-1 [ 2506.019162] CPU: 1 PID: 29580 Comm: in:imklog Not tainted 4.14.224-syzkaller #0 [ 2506.026605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2506.036043] Call Trace: [ 2506.038637] dump_stack+0x1b2/0x281 [ 2506.042268] dump_header+0x178/0x82f [ 2506.046017] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2506.051115] ? ___ratelimit+0x2cd/0x530 [ 2506.055070] oom_kill_process.cold+0x10/0xb18 [ 2506.059548] out_of_memory+0xe3e/0x1190 [ 2506.063505] ? oom_killer_disable+0x1c0/0x1c0 [ 2506.067978] ? mutex_trylock+0x152/0x1a0 [ 2506.072018] __alloc_pages_nodemask+0x23e1/0x2720 [ 2506.076845] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2506.081679] alloc_pages_current+0x155/0x260 [ 2506.086065] filemap_fault+0xea3/0x1980 [ 2506.090023] ext4_filemap_fault+0x84/0xb0 [ 2506.094148] __do_fault+0xfa/0x380 [ 2506.097665] __handle_mm_fault+0x2497/0x4620 [ 2506.102052] ? vm_insert_page+0x7c0/0x7c0 [ 2506.106178] ? lock_downgrade+0x740/0x740 [ 2506.110321] handle_mm_fault+0x391/0x860 [ 2506.114361] __do_page_fault+0x549/0xad0 [ 2506.118407] ? spurious_fault+0x640/0x640 [ 2506.122533] ? do_page_fault+0x60/0x500 [ 2506.126507] ? page_fault+0x2f/0x50 [ 2506.130110] page_fault+0x45/0x50 [ 2506.133559] RIP: 1fa0:0x1f9f [ 2506.136660] RSP: 0000:00005588fd68b9d0 EFLAGS: 7fd86ca5cda0 [ 2506.151135] Mem-Info: [ 2506.163466] active_anon:20649 inactive_anon:37188 isolated_anon:0 [ 2506.163466] active_file:69 inactive_file:27 isolated_file:0 [ 2506.163466] unevictable:0 dirty:33 writeback:0 unstable:0 [ 2506.163466] slab_reclaimable:12152 slab_unreclaimable:116505 [ 2506.163466] mapped:26651 shmem:39696 pagetables:651 bounce:0 [ 2506.163466] free:13999 free_pcp:191 free_cma:0 [ 2506.205119] Node 0 active_anon:80732kB inactive_anon:134752kB active_file:52kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:55208kB dirty:0kB writeback:0kB shmem:144644kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2506.236914] Node 1 active_anon:1864kB inactive_anon:14000kB active_file:224kB inactive_file:100kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:51396kB dirty:132kB writeback:0kB shmem:14140kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2506.330584] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2506.360589] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2506.363633] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2506.365666] Node 0 [ 2506.377487] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2506.391436] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2506.391760] DMA32 free:18016kB min:36200kB low:45248kB high:54296kB active_anon:80732kB inactive_anon:134752kB active_file:32kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7168kB pagetables:2068kB bounce:0kB free_pcp:316kB local_pcp:120kB free_cma:0kB [ 2506.399980] systemd-journal: [ 2506.431103] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2506.436010] CPU: 0 PID: 30360 Comm: syz-executor.3 Not tainted 4.14.224-syzkaller #0 [ 2506.447247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2506.456578] Call Trace: [ 2506.459153] dump_stack+0x1b2/0x281 [ 2506.462773] warn_alloc.cold+0x96/0x1cc [ 2506.466735] ? zone_watermark_ok_safe+0x220/0x220 [ 2506.471564] ? usleep_range+0x130/0x130 [ 2506.473543] lowmem_reserve[]: [ 2506.475518] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2506.475530] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2506.478610] 0 [ 2506.483692] ? run_timer_softirq+0x5a0/0x5a0 [ 2506.483709] __alloc_pages_nodemask+0x2127/0x2720 [ 2506.483723] ? lock_acquire+0x170/0x3f0 [ 2506.483738] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2506.483749] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2506.483763] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2506.483783] alloc_pages_current+0x155/0x260 [ 2506.506900] 0 [ 2506.508555] ion_page_pool_alloc+0x118/0x1b0 [ 2506.513019] 0 [ 2506.518473] ion_system_heap_allocate+0x133/0x8c0 [ 2506.518484] ? ion_alloc+0x187/0x810 [ 2506.518494] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2506.518503] ? ion_system_contig_heap_create+0x130/0x130 [ 2506.518512] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2506.518525] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2506.546882] 0 [ 2506.550237] ion_alloc+0x204/0x810 [ 2506.565357] ? ion_dma_buf_release+0x40/0x40 [ 2506.566880] 0 [ 2506.569755] ? __might_fault+0x177/0x1b0 [ 2506.569767] ion_ioctl+0xea/0x1f0 [ 2506.571542] Node 0 [ 2506.575596] ? ion_query_heaps+0x360/0x360 [ 2506.575608] ? ion_query_heaps+0x360/0x360 [ 2506.575618] do_vfs_ioctl+0x75a/0xff0 [ 2506.575628] ? ioctl_preallocate+0x1a0/0x1a0 [ 2506.575636] ? lock_downgrade+0x740/0x740 [ 2506.575649] ? __fget+0x225/0x360 [ 2506.575658] ? do_vfs_ioctl+0xff0/0xff0 [ 2506.575667] ? security_file_ioctl+0x83/0xb0 [ 2506.575678] SyS_ioctl+0x7f/0xb0 [ 2506.586870] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2506.589758] ? do_vfs_ioctl+0xff0/0xff0 [ 2506.606844] lowmem_reserve[]: [ 2506.609426] do_syscall_64+0x1d5/0x640 [ 2506.626833] 0 [ 2506.642023] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2506.642032] RIP: 0033:0x465f69 [ 2506.642037] RSP: 002b:00007f320e93e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2506.666911] 0 [ 2506.670734] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2506.670741] 0 [ 2506.672521] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2506.672528] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2506.696087] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2506.703341] R13: 00007ffc9a20464f R14: 00007f320e93e300 R15: 0000000000022000 [ 2506.706875] 0 0 [ 2506.712592] Node 1 Normal free:26756kB min:53696kB low:67120kB high:80544kB active_anon:1864kB inactive_anon:14000kB active_file:192kB inactive_file:48kB unevictable:0kB writepending:132kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:536kB bounce:0kB free_pcp:448kB local_pcp:120kB free_cma:0kB [ 2506.722222] page allocation failure: order:0 [ 2506.745748] CPU: 1 PID: 30366 Comm: syz-executor.4 Not tainted 4.14.224-syzkaller #0 [ 2506.753790] , mode:0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 2506.758027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2506.758035] (null) [ 2506.764843] Call Trace: [ 2506.764863] dump_stack+0x1b2/0x281 [ 2506.764876] warn_alloc.cold+0x96/0x1cc [ 2506.764886] ? zone_watermark_ok_safe+0x220/0x220 [ 2506.764895] ? usleep_range+0x130/0x130 [ 2506.764905] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2506.774270] systemd-journal cpuset= [ 2506.776379] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2506.778932] / [ 2506.782539] ? run_timer_softirq+0x5a0/0x5a0 [ 2506.786514] mems_allowed=0-1 [ 2506.791316] __alloc_pages_nodemask+0x2127/0x2720 [ 2506.822908] ? lock_acquire+0x170/0x3f0 [ 2506.826865] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2506.831686] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2506.836163] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2506.841595] ? alloc_pages_current+0x16/0x260 [ 2506.846070] alloc_pages_current+0x155/0x260 [ 2506.850459] ion_page_pool_alloc+0x118/0x1b0 [ 2506.854847] ion_system_heap_allocate+0x133/0x8c0 [ 2506.859669] ? _raw_spin_unlock+0x29/0x40 [ 2506.863795] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2506.868717] ? ion_system_contig_heap_create+0x130/0x130 [ 2506.874171] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2506.879164] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2506.883986] ion_alloc+0x27a/0x810 [ 2506.887508] ? ion_dma_buf_release+0x40/0x40 [ 2506.891908] ? __might_fault+0x177/0x1b0 [ 2506.895960] ion_ioctl+0xea/0x1f0 [ 2506.899411] ? ion_query_heaps+0x360/0x360 [ 2506.903629] ? ion_query_heaps+0x360/0x360 [ 2506.907844] do_vfs_ioctl+0x75a/0xff0 [ 2506.911624] ? ioctl_preallocate+0x1a0/0x1a0 [ 2506.916011] ? lock_downgrade+0x740/0x740 [ 2506.920141] ? __fget+0x225/0x360 [ 2506.923582] ? do_vfs_ioctl+0xff0/0xff0 [ 2506.927649] ? security_file_ioctl+0x83/0xb0 [ 2506.932064] SyS_ioctl+0x7f/0xb0 [ 2506.935422] ? do_vfs_ioctl+0xff0/0xff0 [ 2506.939380] do_syscall_64+0x1d5/0x640 [ 2506.943251] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2506.948423] RIP: 0033:0x465f69 [ 2506.951589] RSP: 002b:00007f380960e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2506.959276] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2506.966526] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2506.973775] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2506.981023] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2506.988286] R13: 00007fffbef2da3f R14: 00007f380960e300 R15: 0000000000022000 [ 2506.995548] CPU: 0 PID: 29653 Comm: systemd-journal Not tainted 4.14.224-syzkaller #0 [ 2507.003513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2507.006333] lowmem_reserve[]: [ 2507.012852] Call Trace: [ 2507.012854] 0 0 [ 2507.015949] dump_stack+0x1b2/0x281 [ 2507.015961] warn_alloc.cold+0x96/0x1cc [ 2507.015969] ? dccp_v4_rcv+0xcb0/0x17e0 [ 2507.015977] ? zone_watermark_ok_safe+0x220/0x220 [ 2507.015985] ? usleep_range+0x130/0x130 [ 2507.015991] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2507.016000] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2507.016009] ? run_timer_softirq+0x5a0/0x5a0 [ 2507.016023] __alloc_pages_nodemask+0x2127/0x2720 [ 2507.016042] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2507.016065] alloc_pages_current+0x155/0x260 [ 2507.021897] 0 [ 2507.024193] filemap_fault+0xea3/0x1980 [ 2507.024210] ext4_filemap_fault+0x84/0xb0 [ 2507.024221] __do_fault+0xfa/0x380 [ 2507.024229] __handle_mm_fault+0x2497/0x4620 [ 2507.028175] 0 [ 2507.032128] ? ep_poll+0x1ab/0xa50 [ 2507.040397] 0 [ 2507.040896] ? vm_insert_page+0x7c0/0x7c0 [ 2507.050980] handle_mm_fault+0x391/0x860 [ 2507.058690] Node 0 [ 2507.060183] __do_page_fault+0x549/0xad0 [ 2507.065029] DMA: [ 2507.069387] ? spurious_fault+0x640/0x640 [ 2507.071158] 2*4kB [ 2507.075108] ? do_page_fault+0x60/0x500 [ 2507.075119] ? page_fault+0x2f/0x50 [ 2507.075126] page_fault+0x45/0x50 [ 2507.075135] RIP: 0001:0xffffffffffffffff [ 2507.075139] RSP: 622281e0:00007ffcc80ebe70 EFLAGS: 7ffcc80ebc80 [ 2507.090465] Mem-Info: [ 2507.092677] (UE) [ 2507.105967] active_anon:20630 inactive_anon:37188 isolated_anon:0 [ 2507.105967] active_file:34 inactive_file:32 isolated_file:0 [ 2507.105967] unevictable:0 dirty:33 writeback:0 unstable:0 [ 2507.105967] slab_reclaimable:12152 slab_unreclaimable:116400 [ 2507.105967] mapped:26651 shmem:39696 pagetables:651 bounce:0 [ 2507.105967] free:14045 free_pcp:211 free_cma:0 [ 2507.109105] 1*8kB [ 2507.111280] Node 0 active_anon:80684kB inactive_anon:134752kB active_file:32kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:55208kB dirty:0kB writeback:0kB shmem:144644kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2507.118758] (E) [ 2507.126106] Node 1 active_anon:1836kB inactive_anon:14000kB active_file:104kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):104kB mapped:51396kB dirty:132kB writeback:0kB shmem:14140kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2507.131924] 9*16kB [ 2507.132772] Node 0 [ 2507.148000] (UE) [ 2507.179791] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2507.215930] 24*32kB [ 2507.253799] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2507.281093] Node 0 DMA32 free:18748kB min:36200kB low:45248kB high:54296kB active_anon:80684kB inactive_anon:134752kB active_file:32kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7168kB pagetables:2068kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2507.296855] (UE) 7*64kB (UE) 1*128kB (E) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10976kB [ 2507.316930] lowmem_reserve[]: 0 0 0 0 0 [ 2507.333503] Node 0 DMA32: 409*4kB (UME) 165*8kB (UME) 82*16kB (UME) 288*32kB (UE) 26*64kB (U) 27*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18860kB [ 2507.363527] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2507.374382] Node 1 Normal: 99*4kB (UME) 73*8kB (UME) 61*16kB (UME) 57*32kB (UME) 1850*64kB (UME) 369*128kB (UM) 21*256kB (UM) 26*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 188100kB [ 2507.383506] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2507.390520] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2507.443494] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2507.452093] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2507.493502] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2507.502108] 39762 total pagecache pages [ 2507.553472] lowmem_reserve[]: 0 0 0 0 0 [ 2507.553515] 0 pages in swap cache [ 2507.557486] Node 1 [ 2507.560922] Swap cache stats: add 0, delete 0, find 0/0 [ 2507.560942] Normal free:848676kB min:53696kB low:67120kB high:80544kB active_anon:1836kB inactive_anon:14000kB active_file:136kB inactive_file:8kB unevictable:0kB writepending:132kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:536kB bounce:0kB free_pcp:1344kB local_pcp:724kB free_cma:0kB [ 2507.563141] Free swap = 0kB [ 2507.608080] lowmem_reserve[]: 0 0 0 0 0 [ 2507.618220] Node 0 DMA: 2*4kB (UE) 1*8kB (E) 16*16kB (UE) 24*32kB (UE) 13*64kB (UE) 7*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 12496kB [ 2507.648511] Node 0 DMA32: 214*4kB (E) 876*8kB (UE) 138*16kB (UE) 444*32kB (UE) 2199*64kB (U) 64*128kB (UM) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 173464kB [ 2507.668967] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2507.680288] Node 1 Normal: 250*4kB (UME) 128*8kB (UME) 104*16kB (UME) 93*32kB (UME) 9673*64kB (UME) 822*128kB (UM) 412*256kB (UM) 69*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 871752kB [ 2507.693656] Total swap = 0kB [ 2507.702845] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2507.703159] 2097051 pages RAM [ 2507.712046] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2507.727614] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2507.736881] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2507.743826] 0 pages HighMem/MovableOnly [ 2507.749093] 40440 total pagecache pages [ 2507.749486] 363840 pages reserved [ 2507.753717] 0 pages in swap cache [ 2507.760830] Swap cache stats: add 0, delete 0, find 0/0 [ 2507.771134] Free swap = 0kB [ 2507.775504] 0 pages cma reserved [ 2507.779760] Total swap = 0kB [ 2507.783724] 2097051 pages RAM [ 2507.789229] 0 pages HighMem/MovableOnly [ 2507.793192] 363840 pages reserved [ 2507.795831] Out of memory (oom_kill_allocating_task): Kill process 29580 (in:imklog) score 0 or sacrifice child [ 2507.800000] 0 pages cma reserved [ 2507.834278] Killed process 29383 (rsyslogd) total-vm:254332kB, anon-rss:704kB, file-rss:0kB, shmem-rss:0kB [ 2507.894488] device hsr_slave_1 left promiscuous mode [ 2507.933952] device hsr_slave_0 left promiscuous mode [ 2507.959059] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2507.967002] team0 (unregistering): Port device team_slave_1 removed [ 2507.988690] team0 (unregistering): Port device team_slave_0 removed [ 2508.005053] systemd[1]: Started Load/Save RF Kill Switch Status. [ 2508.011651] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2508.014947] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2508.031723] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2508.065709] systemd[1]: rsyslog.service: Service hold-off time over, scheduling restart. [ 2508.086040] systemd[1]: Stopped System Logging Service. [ 2508.105921] bond0 (unregistering): Released all slaves [ 2508.127690] systemd[1]: Starting System Logging Service... [ 2508.152861] systemd[1]: Stopped Journal Service. [ 2508.172861] systemd[1]: Starting Journal Service... [ 2508.378856] systemd-journald[30399]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 2508.478139] systemd[1]: Started System Logging Service. [ 2508.950282] systemd[1]: Started Journal Service. [ 2509.848743] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2509.856064] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2509.870851] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2509.877797] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2509.890292] device bridge_slave_1 left promiscuous mode [ 2509.896509] bridge0: port 2(bridge_slave_1) entered disabled state [ 2509.908358] device bridge_slave_0 left promiscuous mode [ 2509.926651] bridge0: port 1(bridge_slave_0) entered disabled state [ 2509.936581] device veth1_macvtap left promiscuous mode [ 2509.941895] device veth0_macvtap left promiscuous mode [ 2509.951686] device veth1_vlan left promiscuous mode [ 2509.957593] device veth0_vlan left promiscuous mode [ 2510.063940] device hsr_slave_1 left promiscuous mode [ 2510.072331] device hsr_slave_0 left promiscuous mode [ 2510.090527] team0 (unregistering): Port device team_slave_1 removed [ 2510.101542] team0 (unregistering): Port device team_slave_0 removed [ 2510.112217] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2510.125399] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2510.157950] bond0 (unregistering): Released all slaves 00:43:56 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000003840)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000000400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r0, &(0x7f0000000040)={0x20, 0x0, r1}, 0x20) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000040)={0x38, 0x0, r1, [{0x1, 0x6, 0xb, 0x1, '/dev/nvram\x00'}]}, 0x38) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0xd41, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) r3 = shmget(0x2, 0x2000, 0x8c26067868c81d1a, &(0x7f0000ffc000/0x2000)=nil) shmat(r3, &(0x7f0000ffc000/0x2000)=nil, 0x1000) shmat(r3, &(0x7f0000ffb000/0x4000)=nil, 0x5000) 00:43:56 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x484240, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)={0x101, 0x1, 0x4, 0x400, 0xffff, {0x0, 0x2710}, {0x1, 0x2, 0x8, 0x2, 0x7, 0x1, "db53d254"}, 0x8, 0x4, @fd=r1, 0x4, 0x0, r1}) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x8) openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x4, 0x90040) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x7fffffff, 0x1e, 0x1}) 00:43:56 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x484240, 0x0) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x8) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x4, 0x90040) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x7fffffff, 0x1e, 0x1}) 00:43:56 executing program 5: socketpair(0x23, 0x0, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) accept4$alg(r0, 0x0, 0x0, 0x80000) 00:43:57 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x484240, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)={0x101, 0x1, 0x4, 0x400, 0xffff, {0x0, 0x2710}, {0x1, 0x2, 0x8, 0x2, 0x7, 0x1, "db53d254"}, 0x8, 0x4, @fd=r1, 0x4, 0x0, r1}) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x8) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000340)={0x401, 0x2, 0x4, 0x8, 0x8, {}, {0x1, 0x8, 0xbc, 0xa2, 0xf7, 0x20, "450104da"}, 0xa87, 0x4, @fd=r3, 0x1ff}) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x4, 0x90040) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r4, 0xc00464be, &(0x7f0000000240)={0x1}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x7fffffff, 0x1e, 0x1}) 00:43:57 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x484240, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)={0x101, 0x1, 0x4, 0x400, 0xffff, {0x0, 0x2710}, {0x1, 0x2, 0x8, 0x2, 0x7, 0x1, "db53d254"}, 0x8, 0x4, @fd=r1, 0x4, 0x0, r1}) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x8) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000340)={0x401, 0x2, 0x4, 0x8, 0x8, {}, {0x1, 0x8, 0xbc, 0xa2, 0xf7, 0x20, "450104da"}, 0xa87, 0x4, @fd=r3, 0x1ff}) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x4, 0x90040) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r4, 0xc00464be, &(0x7f0000000240)={0x1}) syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x1, 0x621c0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x7fffffff, 0x1e, 0x1}) 00:43:57 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x200000, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000002140)={r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x3, &(0x7f00000021c0)=@raw=[@ldst={0x0, 0x3, 0x2, 0x2, 0x7, 0xffffffffffffff7e, 0x10}, @exit, @alu={0x7, 0x1, 0x5, 0xb, 0x8, 0x10, 0xffffffffffffffff}], &(0x7f0000002200)='GPL\x00', 0x2, 0xe8, &(0x7f0000002240)=""/232, 0x41000, 0x6, [], 0x0, 0x0, r2, 0x8, &(0x7f0000002340)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000002380)={0x2, 0xa, 0x2, 0x1a87}, 0x10}, 0x78) bpf$LINK_DETACH(0x22, &(0x7f0000002180)=r2, 0x4) write$FUSE_LSEEK(r0, &(0x7f0000002100)={0x18, 0x0, r1, {0x1ff}}, 0x18) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0xffff, 0x2a}) 00:43:57 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x484240, 0x0) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x8) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x4, 0x90040) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x7fffffff, 0x1e, 0x1}) 00:43:57 executing program 5: socketpair(0x21, 0x2, 0x2, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) 00:43:57 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) write$FUSE_BMAP(r0, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0x400}}, 0x18) openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000003840)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r1, &(0x7f0000000040)={0x20, 0x0, r2}, 0x20) write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18, 0xfffffffffffffff5, r2}, 0x18) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x100, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0xfffe, 0x29, 0x1}) 00:43:57 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x500, 0x0) getresgid(&(0x7f0000000040)=0x0, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$TUNSETGROUP(r0, 0x400454ce, r1) pkey_mprotect(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff1000/0x4000)=nil, 0x4000, 0x4, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 00:43:57 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x500, 0x0) getresgid(&(0x7f0000000040)=0x0, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$TUNSETGROUP(r0, 0x400454ce, r1) pkey_mprotect(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff1000/0x4000)=nil, 0x4000, 0x4, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) [ 2511.178125] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2511.191550] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2511.196959] CPU: 1 PID: 30421 Comm: syz-executor.1 Not tainted 4.14.224-syzkaller #0 [ 2511.204927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2511.214281] Call Trace: [ 2511.216878] dump_stack+0x1b2/0x281 [ 2511.220598] warn_alloc.cold+0x96/0x1cc [ 2511.224574] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2511.229589] ? zone_watermark_ok_safe+0x220/0x220 [ 2511.234447] __alloc_pages_nodemask+0x2127/0x2720 [ 2511.239298] ? lock_acquire+0x170/0x3f0 [ 2511.243281] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2511.248133] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2511.253588] ? __mutex_unlock_slowpath+0x75/0x770 [ 2511.258434] ? alloc_pages_current+0x73/0x260 [ 2511.264153] alloc_pages_current+0x155/0x260 [ 2511.268575] ion_page_pool_alloc+0x118/0x1b0 [ 2511.273009] ion_system_heap_allocate+0x133/0x8c0 [ 2511.277857] ? ion_alloc+0x187/0x810 [ 2511.281570] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2511.287026] ? ion_system_contig_heap_create+0x130/0x130 [ 2511.292472] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2511.297486] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2511.302327] ion_alloc+0x204/0x810 [ 2511.305871] ? ion_dma_buf_release+0x40/0x40 [ 2511.310277] ? __might_fault+0x177/0x1b0 [ 2511.314336] ion_ioctl+0xea/0x1f0 [ 2511.317788] ? ion_query_heaps+0x360/0x360 [ 2511.322022] ? ion_query_heaps+0x360/0x360 [ 2511.326258] do_vfs_ioctl+0x75a/0xff0 [ 2511.330058] ? ioctl_preallocate+0x1a0/0x1a0 [ 2511.334466] ? lock_downgrade+0x740/0x740 [ 2511.338613] ? __fget+0x225/0x360 [ 2511.342066] ? do_vfs_ioctl+0xff0/0xff0 [ 2511.346035] ? security_file_ioctl+0x83/0xb0 [ 2511.350441] SyS_ioctl+0x7f/0xb0 [ 2511.353804] ? do_vfs_ioctl+0xff0/0xff0 [ 2511.357775] do_syscall_64+0x1d5/0x640 [ 2511.361668] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2511.366853] RIP: 0033:0x465f69 [ 2511.370035] RSP: 002b:00007f747aa45188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2511.377739] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2511.385012] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2511.392292] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2511.399563] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2511.406836] R13: 00007fff04d0b2bf R14: 00007f747aa45300 R15: 0000000000022000 [ 2511.415771] warn_alloc_show_mem: 2 callbacks suppressed [ 2511.415774] Mem-Info: [ 2511.423852] active_anon:20687 inactive_anon:39214 isolated_anon:0 [ 2511.423852] active_file:2499 inactive_file:3005 isolated_file:24 [ 2511.423852] unevictable:0 dirty:28 writeback:0 unstable:0 [ 2511.423852] slab_reclaimable:12163 slab_unreclaimable:113791 [ 2511.423852] mapped:31057 shmem:41736 pagetables:645 bounce:0 [ 2511.423852] free:451221 free_pcp:44 free_cma:0 [ 2511.459417] Node 0 active_anon:81120kB inactive_anon:134684kB active_file:9932kB inactive_file:12024kB unevictable:0kB isolated(anon):0kB isolated(file):96kB mapped:71408kB dirty:72kB writeback:0kB shmem:144632kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2511.488939] Node 1 active_anon:1628kB inactive_anon:22172kB active_file:64kB inactive_file:96kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:52820kB dirty:40kB writeback:0kB shmem:22312kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2511.516860] Node 0 DMA free:11104kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:28kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2511.546584] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2511.551719] Node 0 DMA32 free:1202760kB min:36200kB low:45248kB high:54296kB active_anon:81220kB inactive_anon:134684kB active_file:9852kB inactive_file:12080kB unevictable:0kB writepending:172kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7136kB pagetables:2060kB bounce:0kB free_pcp:284kB local_pcp:228kB free_cma:0kB [ 2511.582592] lowmem_reserve[]: 0 0 0 0 0 [ 2511.587164] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2511.638101] lowmem_reserve[]: 0 0 0 0 0 [ 2511.647006] Node 1 Normal free:1010536kB min:53696kB low:67120kB high:80544kB active_anon:1628kB inactive_anon:22172kB active_file:128kB inactive_file:256kB unevictable:0kB writepending:40kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:520kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2511.680192] lowmem_reserve[]: 0 0 0 0 0 [ 2511.684264] Node 0 DMA: 10*4kB (UE) 17*8kB (UME) 21*16kB (UME) 23*32kB (UE) 6*64kB (UME) 2*128kB (ME) 3*256kB (UME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11360kB [ 2511.700678] Node 0 DMA32: 17062*4kB (UE) 19786*8kB (UE) 16428*16kB (UME) 10331*32kB (UME) 6631*64kB (UM) 572*128kB (UM) 9*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 1319880kB [ 2511.724411] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2511.749296] Node 1 Normal: 340*4kB (UM) 1265*8kB (UM) 1215*16kB (U) 1014*32kB (UM) 13370*64kB (UM) 2357*128kB (U) 241*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 1282440kB [ 2511.784316] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2511.811875] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2511.833115] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2511.842074] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2511.873125] 47260 total pagecache pages [ 2511.877166] 0 pages in swap cache [ 2511.880617] Swap cache stats: add 0, delete 0, find 0/0 [ 2511.900879] Free swap = 0kB [ 2511.903956] Total swap = 0kB [ 2511.906970] 2097051 pages RAM [ 2511.910066] 0 pages HighMem/MovableOnly [ 2511.917724] 363840 pages reserved [ 2511.921188] 0 pages cma reserved [ 2512.185512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2512.192255] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2512.214793] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2512.221523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2512.229876] device bridge_slave_1 left promiscuous mode [ 2512.235866] bridge0: port 2(bridge_slave_1) entered disabled state [ 2512.243516] device bridge_slave_0 left promiscuous mode [ 2512.249044] bridge0: port 1(bridge_slave_0) entered disabled state [ 2512.258604] device veth1_macvtap left promiscuous mode [ 2512.264447] device veth0_macvtap left promiscuous mode [ 2512.269770] device veth1_vlan left promiscuous mode [ 2512.275152] device veth0_vlan left promiscuous mode [ 2512.376340] device hsr_slave_1 left promiscuous mode [ 2512.384994] device hsr_slave_0 left promiscuous mode [ 2512.409574] team0 (unregistering): Port device team_slave_1 removed [ 2512.420402] team0 (unregistering): Port device team_slave_0 removed [ 2512.430413] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2512.441911] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2512.476599] bond0 (unregistering): Released all slaves [ 2513.380302] IPVS: ftp: loaded support on port[0] = 21 [ 2513.433928] IPVS: ftp: loaded support on port[0] = 21 [ 2513.540852] chnl_net:caif_netlink_parms(): no params data found [ 2513.578671] IPVS: ftp: loaded support on port[0] = 21 [ 2513.730771] chnl_net:caif_netlink_parms(): no params data found [ 2513.856116] bridge0: port 1(bridge_slave_0) entered blocking state [ 2513.862523] bridge0: port 1(bridge_slave_0) entered disabled state [ 2513.872565] device bridge_slave_0 entered promiscuous mode [ 2513.887578] chnl_net:caif_netlink_parms(): no params data found [ 2513.898674] bridge0: port 2(bridge_slave_1) entered blocking state [ 2513.906264] bridge0: port 2(bridge_slave_1) entered disabled state [ 2513.914168] device bridge_slave_1 entered promiscuous mode [ 2513.990091] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2514.001153] bridge0: port 1(bridge_slave_0) entered blocking state [ 2514.007664] bridge0: port 1(bridge_slave_0) entered disabled state [ 2514.016269] device bridge_slave_0 entered promiscuous mode [ 2514.024718] bridge0: port 2(bridge_slave_1) entered blocking state [ 2514.031071] bridge0: port 2(bridge_slave_1) entered disabled state [ 2514.038733] device bridge_slave_1 entered promiscuous mode [ 2514.046303] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2514.080578] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2514.091219] team0: Port device team_slave_0 added [ 2514.098582] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2514.107159] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2514.118182] team0: Port device team_slave_1 added [ 2514.125589] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2514.185804] bridge0: port 1(bridge_slave_0) entered blocking state [ 2514.192204] bridge0: port 1(bridge_slave_0) entered disabled state [ 2514.201191] device bridge_slave_0 entered promiscuous mode [ 2514.212957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2514.219208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2514.244556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2514.256177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2514.262414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2514.292174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2514.309221] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2514.321549] team0: Port device team_slave_0 added [ 2514.327031] bridge0: port 2(bridge_slave_1) entered blocking state [ 2514.334280] bridge0: port 2(bridge_slave_1) entered disabled state [ 2514.341602] device bridge_slave_1 entered promiscuous mode [ 2514.348634] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2514.356389] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2514.364078] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2514.371394] team0: Port device team_slave_1 added [ 2514.429429] device hsr_slave_0 entered promiscuous mode [ 2514.439856] device hsr_slave_1 entered promiscuous mode [ 2514.448883] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2514.457377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2514.463919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2514.489524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2514.500711] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2514.509085] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2514.519526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2514.525862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2514.551407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2514.563983] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2514.587699] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2514.603070] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2514.610450] team0: Port device team_slave_0 added [ 2514.616464] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2514.624348] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2514.631813] team0: Port device team_slave_1 added [ 2514.696806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2514.703424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2514.729241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2514.743886] device hsr_slave_0 entered promiscuous mode [ 2514.750368] device hsr_slave_1 entered promiscuous mode [ 2514.760993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2514.767880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2514.793742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2514.808829] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2514.826531] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2514.834292] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2514.847382] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2514.927313] device hsr_slave_0 entered promiscuous mode [ 2514.934239] device hsr_slave_1 entered promiscuous mode [ 2514.952348] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2514.961419] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2514.984635] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2515.053160] Bluetooth: hci4 command 0x0409 tx timeout [ 2515.056643] Bluetooth: hci2 command 0x0409 tx timeout [ 2515.058565] Bluetooth: hci5 command 0x0409 tx timeout [ 2515.069534] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2515.133878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2515.171666] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2515.187297] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2515.205294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2515.212332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2515.226564] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2515.232639] 8021q: adding VLAN 0 to HW filter on device team0 [ 2515.243653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2515.254512] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2515.263424] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2515.269760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2515.278221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2515.285923] bridge0: port 1(bridge_slave_0) entered blocking state [ 2515.292281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2515.299494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2515.308720] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2515.320963] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2515.329376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2515.341005] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2515.348761] bridge0: port 2(bridge_slave_1) entered blocking state [ 2515.355176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2515.368726] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2515.378357] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2515.389097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2515.396681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2515.404202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2515.414619] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2515.420675] 8021q: adding VLAN 0 to HW filter on device team0 [ 2515.434372] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2515.447244] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2515.454450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2515.462238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2515.471197] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2515.480024] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2515.490666] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2515.501282] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2515.512970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2515.520774] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2515.529338] bridge0: port 1(bridge_slave_0) entered blocking state [ 2515.535757] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2515.543548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2515.551427] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2515.562185] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2515.576530] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2515.584623] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2515.591848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2515.600156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2515.607965] bridge0: port 2(bridge_slave_1) entered blocking state [ 2515.614383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2515.622016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2515.629773] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2515.646853] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2515.656709] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2515.674036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2515.680206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2515.688508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2515.696522] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2515.706945] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2515.716377] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2515.722432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2515.732654] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2515.740746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2515.752177] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2515.766149] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2515.774330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2515.782233] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2515.790584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2515.797663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2515.808882] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2515.818018] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2515.826251] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2515.834197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2515.842058] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2515.852623] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2515.861990] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2515.868914] 8021q: adding VLAN 0 to HW filter on device team0 [ 2515.876595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2515.884776] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2515.895243] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2515.902525] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2515.913687] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2515.928141] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2515.936665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2515.949062] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2515.956959] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2515.967897] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2515.974720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2515.982662] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2515.994419] bridge0: port 1(bridge_slave_0) entered blocking state [ 2516.000798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2516.010440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2516.020995] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2516.031302] bridge0: port 2(bridge_slave_1) entered blocking state [ 2516.037714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2516.051445] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2516.058093] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2516.075752] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2516.083073] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2516.090275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2516.105572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2516.119362] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2516.128741] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2516.137297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2516.152070] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2516.161835] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2516.169935] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2516.177906] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2516.185095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2516.193181] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2516.205711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2516.214877] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2516.223751] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2516.230834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2516.239628] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2516.255154] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2516.263145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2516.280808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2516.297089] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2516.305117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2516.323356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2516.337725] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2516.346901] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2516.360489] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2516.376864] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2516.389987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2516.398388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2516.421586] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2516.434469] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2516.443062] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2516.449786] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2516.471813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2516.482570] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2516.495473] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2516.506064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2516.518025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2516.539934] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2516.559576] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2516.566816] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2516.590960] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2516.600678] device veth0_vlan entered promiscuous mode [ 2516.608427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2516.622029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2516.631256] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2516.639120] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2516.657573] device veth1_vlan entered promiscuous mode [ 2516.670392] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2516.682326] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2516.694796] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2516.701930] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2516.715463] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2516.729008] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2516.739992] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2516.750368] device veth0_vlan entered promiscuous mode [ 2516.760889] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2516.770835] device veth0_macvtap entered promiscuous mode [ 2516.777125] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2516.784949] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2516.792313] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2516.804550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2516.812084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2516.820918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2516.829567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2516.838800] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2516.852551] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2516.868555] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2516.880680] device veth1_vlan entered promiscuous mode [ 2516.888819] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2516.903220] device veth1_macvtap entered promiscuous mode [ 2516.909544] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2516.919094] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2516.931728] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2516.941254] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2516.952395] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2516.962997] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2516.970860] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2516.980309] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2516.988223] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2516.996680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2517.005054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2517.018012] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2517.031704] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2517.040144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2517.053350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2517.063063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2517.075804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2517.086509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2517.096892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2517.107069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2517.117546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2517.128781] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2517.136261] Bluetooth: hci2 command 0x041b tx timeout [ 2517.141946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2517.142933] Bluetooth: hci5 command 0x041b tx timeout [ 2517.151520] device veth0_macvtap entered promiscuous mode [ 2517.158514] Bluetooth: hci4 command 0x041b tx timeout [ 2517.162154] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2517.175400] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2517.183624] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2517.191491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2517.202494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2517.214377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2517.224207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2517.234673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2517.244400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2517.254871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2517.265703] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2517.273343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2517.281350] device veth1_macvtap entered promiscuous mode [ 2517.288949] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2517.298327] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2517.306462] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2517.314950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2517.329169] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2517.370198] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2517.392305] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2517.400227] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2517.408979] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2517.420816] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2517.429702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2517.443651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2517.453163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2517.464057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2517.478724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2517.489569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2517.499215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2517.509505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2517.519011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2517.529222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2517.539465] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2517.546932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2517.557019] device veth0_vlan entered promiscuous mode [ 2517.563642] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2517.571030] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2517.578054] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2517.586269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2517.595905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2517.606237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2517.616339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2517.626552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2517.635781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2517.645572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2517.654790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2517.664581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2517.674677] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2517.681582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2517.693816] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2517.701488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2517.721029] device veth1_vlan entered promiscuous mode [ 2517.752530] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2517.763749] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2517.770938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2517.785137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2517.798523] device veth0_macvtap entered promiscuous mode [ 2517.807092] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2517.817725] device veth1_macvtap entered promiscuous mode [ 2517.824298] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2517.834747] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2517.845441] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2517.855640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2517.865951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2517.875902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2517.885760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2517.894958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2517.905451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2517.914786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2517.924647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2517.934238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2517.944037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2517.954016] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2517.960949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2517.969842] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2517.977493] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2517.985058] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2517.993007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2518.003576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2518.014836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2518.024467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2518.034736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2518.043921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2518.054269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2518.063540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2518.073675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2518.082868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2518.093282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2518.103639] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2518.110559] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2518.121375] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2518.130243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 00:44:04 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000003840)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000000400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r0, &(0x7f0000000040)={0x20, 0x0, r1}, 0x20) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000040)={0x38, 0x0, r1, [{0x1, 0x6, 0xb, 0x1, '/dev/nvram\x00'}]}, 0x38) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0xd41, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) r3 = shmget(0x2, 0x2000, 0x8c26067868c81d1a, &(0x7f0000ffc000/0x2000)=nil) shmat(r3, &(0x7f0000ffc000/0x2000)=nil, 0x1000) shmat(r3, &(0x7f0000ffb000/0x4000)=nil, 0x5000) 00:44:05 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x484240, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)={0x101, 0x1, 0x4, 0x400, 0xffff, {0x0, 0x2710}, {0x1, 0x2, 0x8, 0x2, 0x7, 0x1, "db53d254"}, 0x8, 0x4, @fd=r1, 0x4, 0x0, r1}) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x8) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000340)={0x401, 0x2, 0x4, 0x8, 0x8, {}, {0x1, 0x8, 0xbc, 0xa2, 0xf7, 0x20, "450104da"}, 0xa87, 0x4, @fd=r3, 0x1ff}) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x4, 0x90040) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r4, 0xc00464be, &(0x7f0000000240)={0x1}) syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x1, 0x621c0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x7fffffff, 0x1e, 0x1}) 00:44:05 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x484240, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)={0x101, 0x1, 0x4, 0x400, 0xffff, {0x0, 0x2710}, {0x1, 0x2, 0x8, 0x2, 0x7, 0x1, "db53d254"}, 0x8, 0x4, @fd=r1, 0x4, 0x0, r1}) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x8) openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x4, 0x90040) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x7fffffff, 0x1e, 0x1}) 00:44:05 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x484240, 0x0) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x8) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x4, 0x90040) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x7fffffff, 0x1e, 0x1}) 00:44:05 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x500, 0x0) getresgid(&(0x7f0000000040)=0x0, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$TUNSETGROUP(r0, 0x400454ce, r1) pkey_mprotect(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff1000/0x4000)=nil, 0x4000, 0x4, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 00:44:05 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x500, 0x0) getresgid(&(0x7f0000000040)=0x0, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$TUNSETGROUP(r0, 0x400454ce, r1) pkey_mprotect(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 00:44:05 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x484240, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)={0x101, 0x1, 0x4, 0x400, 0xffff, {0x0, 0x2710}, {0x1, 0x2, 0x8, 0x2, 0x7, 0x1, "db53d254"}, 0x8, 0x4, @fd=r1, 0x4, 0x0, r1}) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x8) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000340)={0x401, 0x2, 0x4, 0x8, 0x8, {}, {0x1, 0x8, 0xbc, 0xa2, 0xf7, 0x20, "450104da"}, 0xa87, 0x4, @fd=r3, 0x1ff}) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x4, 0x90040) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r4, 0xc00464be, &(0x7f0000000240)={0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x7fffffff, 0x1e, 0x1}) 00:44:05 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x484240, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)={0x101, 0x1, 0x4, 0x400, 0xffff, {0x0, 0x2710}, {0x1, 0x2, 0x8, 0x2, 0x7, 0x1, "db53d254"}, 0x8, 0x4, @fd=r1, 0x4, 0x0, r1}) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x8) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000340)={0x401, 0x2, 0x4, 0x8, 0x8, {}, {0x1, 0x8, 0xbc, 0xa2, 0xf7, 0x20, "450104da"}, 0xa87, 0x4, @fd=r3, 0x1ff}) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x4, 0x90040) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r4, 0xc00464be, &(0x7f0000000240)={0x1}) syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x1, 0x621c0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x7fffffff, 0x1e, 0x1}) 00:44:05 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x500, 0x0) getresgid(&(0x7f0000000040)=0x0, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$TUNSETGROUP(r0, 0x400454ce, r1) pkey_mprotect(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 00:44:05 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x500, 0x0) getresgid(&(0x7f0000000040)=0x0, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$TUNSETGROUP(r0, 0x400454ce, r1) pkey_mprotect(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) [ 2519.223093] Bluetooth: hci4 command 0x040f tx timeout [ 2519.242765] Bluetooth: hci5 command 0x040f tx timeout [ 2519.275632] Bluetooth: hci2 command 0x040f tx timeout 00:44:06 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x500, 0x0) getresgid(&(0x7f0000000040)=0x0, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$TUNSETGROUP(r0, 0x400454ce, r1) pkey_mprotect(&(0x7f0000ff1000/0x4000)=nil, 0x4000, 0x4, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 00:44:06 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x500, 0x0) getresgid(&(0x7f0000000040)=0x0, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$TUNSETGROUP(r0, 0x400454ce, r1) pkey_mprotect(&(0x7f0000ff1000/0x4000)=nil, 0x4000, 0x4, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) [ 2519.821047] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2519.825496] syz-executor.2: [ 2519.833301] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2519.837901] syz-executor.1: [ 2519.851458] syz-executor.3 cpuset= [ 2519.856102] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2519.875886] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2519.881158] / mems_allowed=0-1 [ 2519.885212] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2519.888979] CPU: 0 PID: 31157 Comm: syz-executor.3 Not tainted 4.14.224-syzkaller #0 [ 2519.903524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2519.904546] page allocation failure: order:4 [ 2519.912890] Call Trace: [ 2519.912909] dump_stack+0x1b2/0x281 [ 2519.912924] warn_alloc.cold+0x96/0x1cc [ 2519.912934] ? zone_watermark_ok_safe+0x220/0x220 [ 2519.912957] __alloc_pages_nodemask+0x2127/0x2720 [ 2519.912968] ? _raw_spin_unlock_irq+0x24/0x80 [ 2519.912982] ? lock_acquire+0x170/0x3f0 [ 2519.912996] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2519.913011] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2519.913022] ? __mutex_unlock_slowpath+0x75/0x770 [ 2519.913035] alloc_pages_current+0x155/0x260 [ 2519.929440] syz-executor.2 cpuset= [ 2519.932402] ion_page_pool_alloc+0x118/0x1b0 [ 2519.932413] ion_system_heap_allocate+0x133/0x8c0 [ 2519.932423] ? ion_alloc+0x187/0x810 [ 2519.932432] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2519.932441] ? ion_system_contig_heap_create+0x130/0x130 [ 2519.932449] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2519.932457] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2519.932466] ion_alloc+0x204/0x810 [ 2519.932479] ? ion_dma_buf_release+0x40/0x40 [ 2519.932490] ? __might_fault+0x177/0x1b0 [ 2519.932503] ion_ioctl+0xea/0x1f0 [ 2519.932512] ? ion_query_heaps+0x360/0x360 [ 2519.932524] ? ion_query_heaps+0x360/0x360 [ 2519.932534] do_vfs_ioctl+0x75a/0xff0 [ 2519.932543] ? ioctl_preallocate+0x1a0/0x1a0 [ 2519.932551] ? lock_downgrade+0x740/0x740 [ 2519.932564] ? __fget+0x225/0x360 [ 2519.932571] ? do_vfs_ioctl+0xff0/0xff0 [ 2519.932579] ? security_file_ioctl+0x83/0xb0 [ 2519.932588] SyS_ioctl+0x7f/0xb0 [ 2519.932595] ? do_vfs_ioctl+0xff0/0xff0 [ 2519.932606] do_syscall_64+0x1d5/0x640 [ 2519.932620] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2519.932626] RIP: 0033:0x465f69 00:44:06 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x500, 0x0) getresgid(&(0x7f0000000040)=0x0, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$TUNSETGROUP(r0, 0x400454ce, r1) pkey_mprotect(&(0x7f0000ff1000/0x4000)=nil, 0x4000, 0x4, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) [ 2519.932630] RSP: 002b:00007ff4fd266188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2519.932637] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2519.932641] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2519.932645] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2519.932650] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2519.932655] R13: 00007ffd0ee6c0cf R14: 00007ff4fd266300 R15: 0000000000022000 [ 2519.944983] CPU: 0 PID: 31161 Comm: syz-executor.4 Not tainted 4.14.224-syzkaller #0 [ 2519.952823] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2519.956771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2519.956775] Call Trace: [ 2519.956791] dump_stack+0x1b2/0x281 [ 2519.956804] warn_alloc.cold+0x96/0x1cc [ 2519.969243] (null) [ 2519.969542] ? zone_watermark_ok_safe+0x220/0x220 [ 2519.978392] syz-executor.1 cpuset= [ 2519.978773] __alloc_pages_nodemask+0x2127/0x2720 [ 2519.989310] / [ 2519.993323] ? lock_acquire+0x170/0x3f0 [ 2520.000596] / [ 2520.003149] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2520.021314] mems_allowed=0-1 [ 2520.022765] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2520.022776] ? __mutex_unlock_slowpath+0x75/0x770 [ 2520.022792] alloc_pages_current+0x155/0x260 [ 2520.022805] ion_page_pool_alloc+0x118/0x1b0 [ 2520.022815] ion_system_heap_allocate+0x133/0x8c0 [ 2520.022825] ? ion_alloc+0x187/0x810 [ 2520.022836] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2520.022846] ? ion_system_contig_heap_create+0x130/0x130 [ 2520.022855] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2520.022865] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2520.033714] mems_allowed=0-1 [ 2520.035302] ion_alloc+0x204/0x810 [ 2520.035318] ? ion_dma_buf_release+0x40/0x40 [ 2520.232420] syz-executor.0 cpuset= [ 2520.234447] ? __might_fault+0x177/0x1b0 [ 2520.234462] ion_ioctl+0xea/0x1f0 [ 2520.249902] ? ion_query_heaps+0x360/0x360 [ 2520.250164] / [ 2520.254134] ? SyS_epoll_ctl+0x1e0/0x2780 [ 2520.259965] ? ion_query_heaps+0x360/0x360 [ 2520.264191] do_vfs_ioctl+0x75a/0xff0 [ 2520.267987] ? ioctl_preallocate+0x1a0/0x1a0 [ 2520.271186] mems_allowed=0-1 [ 2520.272385] ? lock_downgrade+0x740/0x740 [ 2520.272398] ? __fget+0x225/0x360 [ 2520.272405] ? do_vfs_ioctl+0xff0/0xff0 [ 2520.272415] ? security_file_ioctl+0x83/0xb0 [ 2520.272424] SyS_ioctl+0x7f/0xb0 [ 2520.272432] ? do_vfs_ioctl+0xff0/0xff0 [ 2520.272441] do_syscall_64+0x1d5/0x640 [ 2520.272457] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2520.307867] RIP: 0033:0x465f69 [ 2520.311042] RSP: 002b:00007f1dbb0fc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2520.318753] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2520.326030] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2520.333301] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2520.340561] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2520.347818] R13: 00007fff344be07f R14: 00007f1dbb0fc300 R15: 0000000000022000 [ 2520.355093] CPU: 1 PID: 31163 Comm: syz-executor.0 Not tainted 4.14.224-syzkaller #0 [ 2520.362984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2520.365692] Mem-Info: [ 2520.372328] Call Trace: [ 2520.372347] dump_stack+0x1b2/0x281 [ 2520.372362] warn_alloc.cold+0x96/0x1cc [ 2520.372372] ? zone_watermark_ok_safe+0x220/0x220 [ 2520.372394] __alloc_pages_nodemask+0x2127/0x2720 [ 2520.374864] active_anon:20837 inactive_anon:39222 isolated_anon:0 [ 2520.374864] active_file:3054 inactive_file:3138 isolated_file:0 [ 2520.374864] unevictable:0 dirty:6 writeback:0 unstable:0 [ 2520.374864] slab_reclaimable:12198 slab_unreclaimable:111053 [ 2520.374864] mapped:57427 shmem:41747 pagetables:842 bounce:0 [ 2520.374864] free:303613 free_pcp:274 free_cma:0 [ 2520.377363] ? lock_acquire+0x170/0x3f0 [ 2520.377379] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2520.377396] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2520.381062] Node 0 active_anon:81368kB inactive_anon:134716kB active_file:12204kB inactive_file:12540kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176696kB dirty:16kB writeback:0kB shmem:144680kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2520.384969] ? __mutex_unlock_slowpath+0x75/0x770 [ 2520.384986] alloc_pages_current+0x155/0x260 [ 2520.385001] ion_page_pool_alloc+0x118/0x1b0 [ 2520.385011] ion_system_heap_allocate+0x133/0x8c0 [ 2520.385021] ? ion_alloc+0x187/0x810 [ 2520.385030] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2520.385039] ? ion_system_contig_heap_create+0x130/0x130 [ 2520.385048] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2520.385059] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2520.395854] Node 1 active_anon:1980kB inactive_anon:22172kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:53012kB dirty:8kB writeback:0kB shmem:22308kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2520.428390] ion_alloc+0x204/0x810 [ 2520.428407] ? ion_dma_buf_release+0x40/0x40 [ 2520.428421] ? __might_fault+0x177/0x1b0 [ 2520.428431] ion_ioctl+0xea/0x1f0 [ 2520.428439] ? ion_query_heaps+0x360/0x360 [ 2520.428451] ? ion_query_heaps+0x360/0x360 [ 2520.428461] do_vfs_ioctl+0x75a/0xff0 [ 2520.432537] Node 0 [ 2520.437248] ? ioctl_preallocate+0x1a0/0x1a0 [ 2520.437258] ? lock_downgrade+0x740/0x740 [ 2520.437271] ? __fget+0x225/0x360 [ 2520.437280] ? do_vfs_ioctl+0xff0/0xff0 [ 2520.446295] DMA free:11244kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:40kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2520.471065] ? security_file_ioctl+0x83/0xb0 [ 2520.471077] SyS_ioctl+0x7f/0xb0 [ 2520.471086] ? do_vfs_ioctl+0xff0/0xff0 [ 2520.471097] do_syscall_64+0x1d5/0x640 [ 2520.471113] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2520.471121] RIP: 0033:0x465f69 [ 2520.471126] RSP: 002b:00007fb3e357a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2520.471135] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2520.471140] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2520.471144] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2520.471151] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2520.480100] lowmem_reserve[]: [ 2520.480374] R13: 00007fffc0af773f R14: 00007fb3e357a300 R15: 0000000000022000 [ 2520.485464] 0 [ 2520.491104] CPU: 1 PID: 31156 Comm: syz-executor.2 Not tainted 4.14.224-syzkaller #0 [ 2520.499358] 2717 [ 2520.504230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2520.504234] Call Trace: [ 2520.504252] dump_stack+0x1b2/0x281 [ 2520.504266] warn_alloc.cold+0x96/0x1cc [ 2520.504277] ? zone_watermark_ok_safe+0x220/0x220 [ 2520.504299] __alloc_pages_nodemask+0x2127/0x2720 [ 2520.509383] 2718 [ 2520.514234] ? __schedule+0x893/0x1de0 [ 2520.514251] ? lock_acquire+0x170/0x3f0 [ 2520.514266] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2520.514280] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2520.514291] ? __mutex_unlock_slowpath+0x75/0x770 [ 2520.514300] ? retint_kernel+0x2d/0x2d [ 2520.514312] alloc_pages_current+0x155/0x260 [ 2520.514327] ion_page_pool_alloc+0x118/0x1b0 [ 2520.545970] 2718 [ 2520.549398] ion_system_heap_allocate+0x133/0x8c0 [ 2520.549411] ? ion_alloc+0x187/0x810 [ 2520.549421] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2520.549432] ? ion_system_contig_heap_create+0x130/0x130 [ 2520.553566] 2718 [ 2520.556905] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2520.556917] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2520.556929] ion_alloc+0x204/0x810 [ 2520.556943] ? ion_dma_buf_release+0x40/0x40 [ 2520.565398] ? __might_fault+0x177/0x1b0 [ 2520.565412] ion_ioctl+0xea/0x1f0 [ 2520.565422] ? ion_query_heaps+0x360/0x360 [ 2520.565433] ? ion_query_heaps+0x360/0x360 [ 2520.565442] do_vfs_ioctl+0x75a/0xff0 [ 2520.565453] ? ioctl_preallocate+0x1a0/0x1a0 [ 2520.565464] ? lock_downgrade+0x740/0x740 [ 2520.574937] Node 0 [ 2520.575857] ? __fget+0x225/0x360 [ 2520.575868] ? do_vfs_ioctl+0xff0/0xff0 [ 2520.575878] ? security_file_ioctl+0x83/0xb0 [ 2520.575888] SyS_ioctl+0x7f/0xb0 [ 2520.580091] DMA32 free:1046164kB min:36200kB low:45248kB high:54296kB active_anon:81364kB inactive_anon:134716kB active_file:12164kB inactive_file:12540kB unevictable:0kB writepending:16kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7424kB pagetables:2412kB bounce:0kB free_pcp:1032kB local_pcp:656kB free_cma:0kB [ 2520.583457] ? do_vfs_ioctl+0xff0/0xff0 [ 2520.583468] do_syscall_64+0x1d5/0x640 [ 2520.583484] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2520.583491] RIP: 0033:0x465f69 [ 2520.583496] RSP: 002b:00007fa2ca784188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2520.583506] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2520.583511] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2520.583519] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2520.591337] lowmem_reserve[]: [ 2520.613041] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2520.613046] R13: 00007fff4963426f R14: 00007fa2ca784300 R15: 0000000000022000 [ 2520.617906] CPU: 1 PID: 31153 Comm: syz-executor.1 Not tainted 4.14.224-syzkaller #0 [ 2520.623884] 0 [ 2520.624886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2520.624891] Call Trace: [ 2520.624908] dump_stack+0x1b2/0x281 [ 2520.624923] warn_alloc.cold+0x96/0x1cc [ 2520.628838] 0 [ 2520.633965] ? zone_watermark_ok_safe+0x220/0x220 [ 2520.633988] __alloc_pages_nodemask+0x2127/0x2720 [ 2520.634004] ? lock_acquire+0x170/0x3f0 [ 2520.634018] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2520.634035] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2520.641182] 0 [ 2520.644927] ? __mutex_unlock_slowpath+0x75/0x770 [ 2520.644936] ? retint_kernel+0x2d/0x2d [ 2520.644950] alloc_pages_current+0x155/0x260 [ 2520.644965] ion_page_pool_alloc+0x118/0x1b0 [ 2520.644974] ion_system_heap_allocate+0x133/0x8c0 [ 2520.644984] ? ion_alloc+0x187/0x810 [ 2520.654228] 0 [ 2520.659506] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2520.659518] ? ion_system_contig_heap_create+0x130/0x130 [ 2520.659529] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2520.666861] 0 [ 2520.674035] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2520.674049] ion_alloc+0x204/0x810 [ 2520.674063] ? ion_dma_buf_release+0x40/0x40 [ 2520.674076] ? __might_fault+0x177/0x1b0 [ 2520.674087] ion_ioctl+0xea/0x1f0 [ 2520.684433] ? ion_query_heaps+0x360/0x360 [ 2520.684447] ? ion_query_heaps+0x360/0x360 [ 2520.684458] do_vfs_ioctl+0x75a/0xff0 [ 2520.684469] ? ioctl_preallocate+0x1a0/0x1a0 [ 2520.684477] ? lock_downgrade+0x740/0x740 [ 2520.684489] ? __fget+0x225/0x360 [ 2520.687946] Node 0 [ 2520.694154] ? do_vfs_ioctl+0xff0/0xff0 [ 2520.694165] ? security_file_ioctl+0x83/0xb0 [ 2520.694176] SyS_ioctl+0x7f/0xb0 [ 2520.694185] ? do_vfs_ioctl+0xff0/0xff0 [ 2520.694198] do_syscall_64+0x1d5/0x640 [ 2520.694215] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2520.694227] RIP: 0033:0x465f69 [ 2520.698552] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2520.705616] RSP: 002b:00007f747aa45188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2520.705627] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2520.705631] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2520.705637] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2520.705642] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2520.705649] R13: 00007fff04d0b2bf R14: 00007f747aa45300 R15: 0000000000022000 [ 2521.193820] lowmem_reserve[]: 0 0 0 0 0 [ 2521.197956] Node 1 Normal free:638344kB min:53696kB low:67120kB high:80544kB active_anon:1980kB inactive_anon:22172kB active_file:20kB inactive_file:4kB unevictable:0kB writepending:24kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:956kB bounce:0kB free_pcp:704kB local_pcp:0kB free_cma:0kB [ 2521.226971] lowmem_reserve[]: 0 0 0 0 0 [ 2521.231127] Node 0 DMA: 11*4kB (UME) 8*8kB (UE) 22*16kB (UME) 23*32kB (UE) 8*64kB (UME) 2*128kB (ME) 3*256kB (UME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11436kB [ 2521.247270] Node 0 DMA32: 116*4kB (ME) 129*8kB (UE) 7356*16kB (UME) 10404*32kB (UME) 3258*64kB (UME) 1570*128kB (UM) 254*256kB (UM) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 927640kB [ 2521.264168] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2521.282364] Node 1 Normal: 26*4kB (UM) 1020*8kB (U) 1096*16kB (U) 858*32kB (U) 8020*64kB (U) 509*128kB (U) 26*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 638344kB [ 2521.302579] Bluetooth: hci2 command 0x0419 tx timeout [ 2521.310080] Bluetooth: hci5 command 0x0419 tx timeout [ 2521.322338] Bluetooth: hci4 command 0x0419 tx timeout [ 2521.336590] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2521.355672] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2521.375622] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2521.394044] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2521.407232] 47813 total pagecache pages [ 2521.420628] 0 pages in swap cache [ 2521.428678] Swap cache stats: add 0, delete 0, find 0/0 [ 2521.440056] Free swap = 0kB [ 2521.447702] Total swap = 0kB [ 2521.455277] 2097051 pages RAM [ 2521.461799] 0 pages HighMem/MovableOnly [ 2521.477114] 363840 pages reserved [ 2521.488759] 0 pages cma reserved [ 2522.593436] oom_reaper: reaped process 31157 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2522.661336] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2522.691725] systemd-journal cpuset=/ mems_allowed=0-1 [ 2522.708046] CPU: 1 PID: 30399 Comm: systemd-journal Not tainted 4.14.224-syzkaller #0 [ 2522.716037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2522.725386] Call Trace: [ 2522.727973] dump_stack+0x1b2/0x281 [ 2522.731599] dump_header+0x178/0x82f [ 2522.735304] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2522.740394] ? ___ratelimit+0x2cd/0x530 [ 2522.744367] oom_kill_process.cold+0x10/0xb18 [ 2522.748888] out_of_memory+0xe3e/0x1190 [ 2522.752844] ? oom_killer_disable+0x1c0/0x1c0 [ 2522.757332] ? mutex_trylock+0x152/0x1a0 [ 2522.761373] __alloc_pages_nodemask+0x23e1/0x2720 [ 2522.766201] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2522.771041] alloc_pages_current+0x155/0x260 [ 2522.775429] filemap_fault+0xea3/0x1980 [ 2522.779387] ext4_filemap_fault+0x84/0xb0 [ 2522.783516] __do_fault+0xfa/0x380 [ 2522.787034] __handle_mm_fault+0x2497/0x4620 [ 2522.791419] ? ep_poll+0x1ab/0xa50 [ 2522.794936] ? vm_insert_page+0x7c0/0x7c0 [ 2522.799069] handle_mm_fault+0x391/0x860 [ 2522.803115] __do_page_fault+0x549/0xad0 [ 2522.807156] ? spurious_fault+0x640/0x640 [ 2522.811282] ? do_page_fault+0x60/0x500 [ 2522.815235] ? page_fault+0x2f/0x50 [ 2522.818850] page_fault+0x45/0x50 [ 2522.822284] RIP: 0001:0xffffffffffffffff [ 2522.826317] RSP: 68aaa1e0:00007ffe64bbc660 EFLAGS: 7ffe64bbc470 [ 2522.832384] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2522.840677] Mem-Info: [ 2522.858351] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2522.862650] active_anon:20910 inactive_anon:39222 isolated_anon:0 [ 2522.862650] active_file:30 inactive_file:0 isolated_file:0 [ 2522.862650] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2522.862650] slab_reclaimable:12176 slab_unreclaimable:111401 [ 2522.862650] mapped:52686 shmem:41747 pagetables:822 bounce:0 [ 2522.862650] free:13891 free_pcp:63 free_cma:0 [ 2522.865617] CPU: 0 PID: 31157 Comm: syz-executor.3 Not tainted 4.14.224-syzkaller #0 [ 2522.904394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2522.905693] Node 0 active_anon:81660kB inactive_anon:134716kB active_file:100kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:157608kB dirty:0kB writeback:0kB shmem:144680kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2522.913733] Call Trace: [ 2522.913750] dump_stack+0x1b2/0x281 [ 2522.913764] warn_alloc.cold+0x96/0x1cc [ 2522.913775] ? zone_watermark_ok_safe+0x220/0x220 [ 2522.913784] ? usleep_range+0x130/0x130 [ 2522.913792] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2522.913804] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2522.913813] ? run_timer_softirq+0x5a0/0x5a0 [ 2522.913828] __alloc_pages_nodemask+0x2127/0x2720 [ 2522.950509] Node 1 active_anon:1980kB inactive_anon:22172kB active_file:20kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:53136kB dirty:0kB writeback:0kB shmem:22308kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2522.951814] ? lock_acquire+0x170/0x3f0 [ 2522.956690] Node 0 [ 2522.960588] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2522.975218] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2522.979976] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2523.015882] lowmem_reserve[]: [ 2523.018108] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2523.053450] 0 2717 2718 2718 [ 2523.057393] alloc_pages_current+0x155/0x260 [ 2523.057407] ion_page_pool_alloc+0x118/0x1b0 [ 2523.060489] 2718 [ 2523.064882] ion_system_heap_allocate+0x133/0x8c0 [ 2523.064891] ? ion_alloc+0x187/0x810 [ 2523.064900] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2523.064909] ? ion_system_contig_heap_create+0x130/0x130 [ 2523.064918] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2523.064927] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2523.064937] ion_alloc+0x204/0x810 [ 2523.064950] ? ion_dma_buf_release+0x40/0x40 [ 2523.064962] ? __might_fault+0x177/0x1b0 [ 2523.064974] ion_ioctl+0xea/0x1f0 [ 2523.064982] ? ion_query_heaps+0x360/0x360 [ 2523.064994] ? ion_query_heaps+0x360/0x360 [ 2523.079942] do_vfs_ioctl+0x75a/0xff0 [ 2523.085417] Node 0 [ 2523.090809] ? ioctl_preallocate+0x1a0/0x1a0 [ 2523.105023] DMA32 free:17640kB min:36200kB low:45248kB high:54296kB active_anon:81656kB inactive_anon:134716kB active_file:44kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7392kB pagetables:2332kB bounce:0kB free_pcp:132kB local_pcp:16kB free_cma:0kB [ 2523.108619] ? lock_downgrade+0x740/0x740 [ 2523.117885] lowmem_reserve[]: [ 2523.120304] ? __fget+0x225/0x360 [ 2523.128077] 0 [ 2523.128291] ? do_vfs_ioctl+0xff0/0xff0 [ 2523.130501] 0 [ 2523.134889] ? security_file_ioctl+0x83/0xb0 [ 2523.134898] SyS_ioctl+0x7f/0xb0 [ 2523.134907] ? do_vfs_ioctl+0xff0/0xff0 [ 2523.134917] do_syscall_64+0x1d5/0x640 [ 2523.134932] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2523.134938] RIP: 0033:0x465f69 [ 2523.134942] RSP: 002b:00007ff4fd266188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2523.134951] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2523.134955] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2523.134960] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2523.134964] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2523.134970] R13: 00007ffd0ee6c0cf R14: 00007ff4fd266300 R15: 0000000000022000 [ 2523.152142] warn_alloc_show_mem: 4 callbacks suppressed [ 2523.152145] Mem-Info: [ 2523.173068] 0 [ 2523.181571] active_anon:20885 inactive_anon:39222 isolated_anon:0 [ 2523.181571] active_file:10 inactive_file:11 isolated_file:0 [ 2523.181571] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2523.181571] slab_reclaimable:12174 slab_unreclaimable:111390 [ 2523.181571] mapped:52662 shmem:41747 pagetables:822 bounce:0 [ 2523.181571] free:13891 free_pcp:62 free_cma:0 [ 2523.181705] 0 [ 2523.183799] Node 0 active_anon:81644kB inactive_anon:134716kB active_file:28kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:157512kB dirty:0kB writeback:0kB shmem:144680kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2523.196810] 0 [ 2523.206355] Node 1 active_anon:1896kB inactive_anon:22172kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:53136kB dirty:0kB writeback:0kB shmem:22308kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2523.222012] Node 0 [ 2523.233812] Node 0 [ 2523.242321] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2523.258997] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2523.264656] lowmem_reserve[]: [ 2523.307027] lowmem_reserve[]: [ 2523.335343] 0 [ 2523.363077] 0 [ 2523.394368] 2717 [ 2523.417913] 0 0 0 0 [ 2523.426430] Node 1 Normal free:26968kB min:53696kB low:67120kB high:80544kB active_anon:1896kB inactive_anon:22172kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:956kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 2523.428260] 2718 2718 2718 [ 2523.469097] lowmem_reserve[]: 0 0 0 0 0 [ 2523.469769] Node 0 DMA32 free:17640kB min:36200kB low:45248kB high:54296kB active_anon:81640kB inactive_anon:134716kB active_file:28kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7392kB pagetables:2332kB bounce:0kB free_pcp:124kB local_pcp:108kB free_cma:0kB [ 2523.479701] Node 0 [ 2523.514840] lowmem_reserve[]: 0 0 0 0 0 [ 2523.520929] DMA: [ 2523.521209] Node 0 [ 2523.521212] 3*4kB (UME) [ 2523.525212] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2523.528428] 2*8kB [ 2523.559983] lowmem_reserve[]: 0 0 0 0 0 [ 2523.564936] (ME) [ 2523.566173] Node 1 [ 2523.566175] 3*16kB (UME) [ 2523.568231] Normal free:26968kB min:53696kB low:67120kB high:80544kB active_anon:1896kB inactive_anon:22172kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:956kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2523.570437] 20*32kB (UME) [ 2523.578512] lowmem_reserve[]: 0 0 0 0 0 [ 2523.614443] 8*64kB (UME) 2*128kB (ME) 3*256kB (UME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10956kB [ 2523.614948] Node 0 DMA: 3*4kB (UME) 2*8kB (ME) 3*16kB (UME) 20*32kB (UME) 8*64kB (UME) 2*128kB (ME) 3*256kB (UME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10956kB [ 2523.636543] Node 0 DMA32: 380*4kB (UME) 234*8kB (UME) 189*16kB (UME) 83*32kB (UME) 25*64kB (UME) 15*128kB (M) 16*256kB (UM) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 17712kB [ 2523.656435] Node 0 DMA32: 380*4kB (UME) 234*8kB (UME) 189*16kB (UME) 83*32kB (UME) 25*64kB (UME) 15*128kB (M) 16*256kB (UM) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 17712kB [ 2523.672952] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2523.690371] Node 0 [ 2523.700539] Node 1 [ 2523.702721] Normal: [ 2523.702834] Normal: [ 2523.705022] 0*4kB [ 2523.707322] 8*4kB [ 2523.709620] 0*8kB [ 2523.711742] (UM) [ 2523.723802] 0*16kB [ 2523.724306] 11*8kB [ 2523.725873] 0*32kB [ 2523.728105] (M) [ 2523.730317] 0*64kB [ 2523.736443] 0*16kB 1*32kB (M) 1*64kB (U) 157*128kB (U) 26*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26968kB [ 2523.741773] 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2523.756456] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2523.764565] Node 1 Normal: 8*4kB (UM) 11*8kB (M) 0*16kB 1*32kB (M) 1*64kB (U) 157*128kB (U) 26*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26968kB [ 2523.768226] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2523.791575] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2523.797907] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2523.807336] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2523.811192] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2523.826906] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2523.833752] 41768 total pagecache pages [ 2523.839712] 0 pages in swap cache [ 2523.842604] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2523.848408] Swap cache stats: add 0, delete 0, find 0/0 [ 2523.851715] 41768 total pagecache pages [ 2523.869043] Free swap = 0kB [ 2523.873080] 0 pages in swap cache [ 2523.875874] Total swap = 0kB [ 2523.876533] Swap cache stats: add 0, delete 0, find 0/0 [ 2523.879532] 2097051 pages RAM [ 2523.888234] Free swap = 0kB [ 2523.891247] Total swap = 0kB [ 2523.896432] 2097051 pages RAM [ 2523.899002] 0 pages HighMem/MovableOnly [ 2523.899526] 0 pages HighMem/MovableOnly [ 2523.899531] 363840 pages reserved [ 2523.906936] 363840 pages reserved [ 2523.910797] 0 pages cma reserved [ 2523.910944] 0 pages cma reserved [ 2523.922931] Out of memory (oom_kill_allocating_task): Kill process 30399 (systemd-journal) score 0 or sacrifice child [ 2524.002114] Killed process 30399 (systemd-journal) total-vm:46096kB, anon-rss:464kB, file-rss:4kB, shmem-rss:1536kB [ 2524.282280] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2524.316174] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2524.353200] systemd[1]: Stopped Journal Service. [ 2524.408004] systemd[1]: Starting Journal Service... [ 2524.523107] oom_reaper: reaped process 31163 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2524.536418] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2524.559823] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2524.565061] CPU: 0 PID: 31157 Comm: syz-executor.3 Not tainted 4.14.224-syzkaller #0 [ 2524.572936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2524.582283] Call Trace: [ 2524.584872] dump_stack+0x1b2/0x281 [ 2524.588645] warn_alloc.cold+0x96/0x1cc [ 2524.590675] oom_reaper: reaped process 31156 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2524.592610] ? zone_watermark_ok_safe+0x220/0x220 [ 2524.592630] __alloc_pages_nodemask+0x2127/0x2720 [ 2524.592645] ? lock_acquire+0x170/0x3f0 [ 2524.592658] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2524.592673] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2524.592685] ? __mutex_unlock_slowpath+0x75/0x770 [ 2524.592699] alloc_pages_current+0x155/0x260 [ 2524.592712] ion_page_pool_alloc+0x118/0x1b0 [ 2524.592722] ion_system_heap_allocate+0x133/0x8c0 [ 2524.592732] ? _raw_spin_unlock+0x29/0x40 [ 2524.592742] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2524.652052] syz-executor.0: page allocation failure: order:0 [ 2524.654041] ? ion_system_contig_heap_create+0x130/0x130 [ 2524.654053] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2524.659830] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2524.665256] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2524.665267] ion_alloc+0x27a/0x810 [ 2524.665281] ? ion_dma_buf_release+0x40/0x40 [ 2524.665294] ? __might_fault+0x177/0x1b0 [ 2524.665306] ion_ioctl+0xea/0x1f0 [ 2524.665315] ? ion_query_heaps+0x360/0x360 [ 2524.665326] ? ion_query_heaps+0x360/0x360 [ 2524.665336] do_vfs_ioctl+0x75a/0xff0 [ 2524.665348] ? ioctl_preallocate+0x1a0/0x1a0 [ 2524.665357] ? lock_downgrade+0x740/0x740 [ 2524.665370] ? __fget+0x225/0x360 [ 2524.700062] oom_reaper: reaped process 31153 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2524.702028] ? do_vfs_ioctl+0xff0/0xff0 [ 2524.702038] ? security_file_ioctl+0x83/0xb0 [ 2524.702047] SyS_ioctl+0x7f/0xb0 [ 2524.702054] ? do_vfs_ioctl+0xff0/0xff0 [ 2524.702064] do_syscall_64+0x1d5/0x640 [ 2524.702079] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2524.702086] RIP: 0033:0x465f69 [ 2524.702092] RSP: 002b:00007ff4fd266188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2524.702102] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2524.702107] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2524.702111] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2524.702116] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2524.702121] R13: 00007ffd0ee6c0cf R14: 00007ff4fd266300 R15: 0000000000022000 [ 2524.735984] Mem-Info: [ 2524.760235] (null) [ 2524.791714] active_anon:20785 inactive_anon:39222 isolated_anon:0 [ 2524.791714] active_file:49 inactive_file:2 isolated_file:0 [ 2524.791714] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2524.791714] slab_reclaimable:12172 slab_unreclaimable:111106 [ 2524.791714] mapped:52262 shmem:41747 pagetables:822 bounce:0 [ 2524.791714] free:13690 free_pcp:0 free_cma:0 [ 2524.816630] syz-executor.0 cpuset= [ 2524.842392] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2524.857812] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2524.859184] Node 0 active_anon:81340kB inactive_anon:134716kB active_file:80kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:157536kB dirty:0kB writeback:0kB shmem:144680kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2524.870168] / [ 2524.897630] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2524.904505] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2524.909626] CPU: 1 PID: 31156 Comm: syz-executor.2 Not tainted 4.14.224-syzkaller #0 [ 2524.914890] Node 1 active_anon:1756kB inactive_anon:22168kB active_file:40kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:51396kB dirty:48kB writeback:0kB shmem:22308kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2524.917497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2524.944761] Node 0 [ 2524.954485] Call Trace: [ 2524.954505] dump_stack+0x1b2/0x281 [ 2524.954519] warn_alloc.cold+0x96/0x1cc [ 2524.956738] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2524.959293] ? zone_watermark_ok_safe+0x220/0x220 [ 2524.962904] lowmem_reserve[]: [ 2524.966845] ? usleep_range+0x130/0x130 [ 2524.992335] 0 [ 2524.997150] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2525.000223] 2717 [ 2525.004178] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2525.004187] ? run_timer_softirq+0x5a0/0x5a0 [ 2525.004204] __alloc_pages_nodemask+0x2127/0x2720 [ 2525.005974] 2718 [ 2525.011060] ? __schedule+0x893/0x1de0 [ 2525.013109] 2718 [ 2525.018097] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2525.022500] 2718 [ 2525.027310] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2525.033217] ? retint_kernel+0x2d/0x2d [ 2525.033233] ? alloc_pages_current+0x73/0x260 [ 2525.035271] Node 0 [ 2525.040092] alloc_pages_current+0x155/0x260 [ 2525.042157] DMA32 free:17488kB min:36200kB low:45248kB high:54296kB active_anon:81308kB inactive_anon:134716kB active_file:36kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7392kB pagetables:2308kB bounce:0kB free_pcp:272kB local_pcp:120kB free_cma:0kB [ 2525.046870] ion_page_pool_alloc+0x118/0x1b0 [ 2525.050722] lowmem_reserve[]: [ 2525.055198] ion_system_heap_allocate+0x133/0x8c0 [ 2525.055207] ? ion_alloc+0x187/0x810 [ 2525.055218] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2525.057424] 0 [ 2525.061814] ? ion_system_contig_heap_create+0x130/0x130 [ 2525.090166] 0 [ 2525.094537] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2525.094547] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2525.094558] ion_alloc+0x204/0x810 [ 2525.097634] 0 [ 2525.102461] ? ion_dma_buf_release+0x40/0x40 [ 2525.102474] ? __might_fault+0x177/0x1b0 [ 2525.106171] 0 [ 2525.111604] ion_ioctl+0xea/0x1f0 [ 2525.113394] 0 [ 2525.118820] ? ion_query_heaps+0x360/0x360 [ 2525.125592] ? ion_query_heaps+0x360/0x360 [ 2525.125601] do_vfs_ioctl+0x75a/0xff0 [ 2525.125613] ? ioctl_preallocate+0x1a0/0x1a0 [ 2525.130469] Node 0 [ 2525.133991] ? lock_downgrade+0x740/0x740 [ 2525.134004] ? __fget+0x225/0x360 [ 2525.134012] ? do_vfs_ioctl+0xff0/0xff0 [ 2525.134020] ? security_file_ioctl+0x83/0xb0 [ 2525.134030] SyS_ioctl+0x7f/0xb0 [ 2525.139661] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2525.140208] ? do_vfs_ioctl+0xff0/0xff0 [ 2525.144280] lowmem_reserve[]: [ 2525.146039] do_syscall_64+0x1d5/0x640 [ 2525.149473] 0 [ 2525.151262] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2525.155487] 0 [ 2525.159685] RIP: 0033:0x465f69 [ 2525.163482] 0 [ 2525.167848] RSP: 002b:00007fa2ca784188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2525.170064] 0 [ 2525.174185] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2525.174191] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2525.174196] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2525.174201] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2525.174208] R13: 00007fff4963426f R14: 00007fa2ca784300 R15: 0000000000022000 [ 2525.177644] 0 [ 2525.187055] mems_allowed=0-1 [ 2525.206718] CPU: 0 PID: 31153 Comm: syz-executor.1 Not tainted 4.14.224-syzkaller #0 [ 2525.297846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2525.307180] Call Trace: [ 2525.309758] dump_stack+0x1b2/0x281 [ 2525.313377] warn_alloc.cold+0x96/0x1cc [ 2525.317344] ? zone_watermark_ok_safe+0x220/0x220 [ 2525.322166] ? usleep_range+0x130/0x130 [ 2525.326118] ? try_to_free_pages+0x23f/0x6e0 [ 2525.330517] ? _find_next_bit+0xdb/0x100 [ 2525.334559] ? run_timer_softirq+0x5a0/0x5a0 [ 2525.338953] __alloc_pages_nodemask+0x2127/0x2720 [ 2525.343782] ? lock_acquire+0x170/0x3f0 [ 2525.347750] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2525.352576] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2525.353812] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null) [ 2525.357079] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2525.357082] , order=0, oom_score_adj=0 [ 2525.357088] syz-fuzzer cpuset= [ 2525.367297] alloc_pages_current+0x155/0x260 [ 2525.367311] ion_page_pool_alloc+0x118/0x1b0 [ 2525.367321] ion_system_heap_allocate+0x133/0x8c0 [ 2525.367330] ? ion_alloc+0x187/0x810 [ 2525.367338] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2525.367349] ? ion_system_contig_heap_create+0x130/0x130 [ 2525.391971] / [ 2525.393483] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2525.397167] mems_allowed=0-1 [ 2525.402610] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2525.402623] ion_alloc+0x204/0x810 [ 2525.402641] ? ion_dma_buf_release+0x40/0x40 [ 2525.430627] ? __might_fault+0x177/0x1b0 [ 2525.434673] ion_ioctl+0xea/0x1f0 [ 2525.438106] ? ion_query_heaps+0x360/0x360 [ 2525.442328] ? ion_query_heaps+0x360/0x360 [ 2525.446551] do_vfs_ioctl+0x75a/0xff0 [ 2525.450332] ? ioctl_preallocate+0x1a0/0x1a0 [ 2525.454722] ? lock_downgrade+0x740/0x740 [ 2525.458863] ? __fget+0x225/0x360 [ 2525.462308] ? do_vfs_ioctl+0xff0/0xff0 [ 2525.466262] ? security_file_ioctl+0x83/0xb0 [ 2525.470649] SyS_ioctl+0x7f/0xb0 [ 2525.473996] ? do_vfs_ioctl+0xff0/0xff0 [ 2525.477953] do_syscall_64+0x1d5/0x640 [ 2525.481827] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2525.486995] RIP: 0033:0x465f69 [ 2525.490177] RSP: 002b:00007f747aa45188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2525.497867] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2525.505121] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2525.512386] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2525.519648] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2525.526912] R13: 00007fff04d0b2bf R14: 00007f747aa45300 R15: 0000000000022000 [ 2525.534186] CPU: 1 PID: 31163 Comm: syz-executor.0 Not tainted 4.14.224-syzkaller #0 [ 2525.542071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2525.551421] Call Trace: [ 2525.553997] Node 1 [ 2525.554010] dump_stack+0x1b2/0x281 [ 2525.554023] warn_alloc.cold+0x96/0x1cc [ 2525.556252] Normal free:26520kB min:53696kB low:67120kB high:80544kB active_anon:1756kB inactive_anon:22168kB active_file:40kB inactive_file:72kB unevictable:0kB writepending:48kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:1064kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2525.559876] ? zone_watermark_ok_safe+0x220/0x220 [ 2525.568748] lowmem_reserve[]: [ 2525.591740] ? usleep_range+0x130/0x130 [ 2525.591749] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2525.591760] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2525.591772] ? run_timer_softirq+0x5a0/0x5a0 [ 2525.596612] 0 [ 2525.599708] __alloc_pages_nodemask+0x2127/0x2720 [ 2525.603658] 0 [ 2525.608735] ? lock_acquire+0x170/0x3f0 [ 2525.613744] 0 [ 2525.618122] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2525.619895] 0 [ 2525.624716] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2525.624731] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2525.626509] 0 [ 2525.630470] alloc_pages_current+0x155/0x260 [ 2525.637064] ion_page_pool_alloc+0x118/0x1b0 [ 2525.638846] Node 0 [ 2525.643326] ion_system_heap_allocate+0x133/0x8c0 [ 2525.643335] ? ion_alloc+0x187/0x810 [ 2525.643346] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2525.648766] DMA: [ 2525.650551] ? ion_system_contig_heap_create+0x130/0x130 [ 2525.654946] 1*4kB [ 2525.659322] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2525.661542] (E) [ 2525.666375] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2525.666387] ion_alloc+0x204/0x810 [ 2525.666401] ? ion_dma_buf_release+0x40/0x40 [ 2525.670081] 1*8kB [ 2525.675511] ? __might_fault+0x177/0x1b0 [ 2525.675524] ion_ioctl+0xea/0x1f0 [ 2525.677577] (E) [ 2525.683006] ? ion_query_heaps+0x360/0x360 [ 2525.683017] ? ion_query_heaps+0x360/0x360 [ 2525.683027] do_vfs_ioctl+0x75a/0xff0 [ 2525.685160] 2*16kB [ 2525.690171] ? ioctl_preallocate+0x1a0/0x1a0 [ 2525.692165] (UE) [ 2525.696961] ? lock_downgrade+0x740/0x740 [ 2525.700482] 19*32kB [ 2525.704875] ? __fget+0x225/0x360 [ 2525.704884] ? do_vfs_ioctl+0xff0/0xff0 [ 2525.704893] ? security_file_ioctl+0x83/0xb0 [ 2525.704903] SyS_ioctl+0x7f/0xb0 [ 2525.707039] (UE) [ 2525.711080] ? do_vfs_ioctl+0xff0/0xff0 [ 2525.714526] 7*64kB [ 2525.716463] do_syscall_64+0x1d5/0x640 [ 2525.720678] (UE) [ 2525.724898] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2525.724910] RIP: 0033:0x465f69 [ 2525.728690] 1*128kB [ 2525.730899] RSP: 002b:00007fb3e357a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2525.735301] (E) [ 2525.737332] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2525.741450] 2*256kB [ 2525.743749] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2525.743754] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2525.743759] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2525.743764] R13: 00007fffc0af773f R14: 00007fb3e357a300 R15: 0000000000022000 [ 2525.745657] CPU: 1 PID: 7979 Comm: syz-fuzzer Not tainted 4.14.224-syzkaller #0 [ 2525.747206] (UE) [ 2525.751158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2525.751164] Call Trace: [ 2525.773090] 2*512kB [ 2525.773172] dump_stack+0x1b2/0x281 [ 2525.778334] (UE) [ 2525.781532] dump_header+0x178/0x82f [ 2525.783861] Mem-Info: [ 2525.791518] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2525.793487] 2*1024kB [ 2525.800721] ? ___ratelimit+0x2cd/0x530 [ 2525.803050] active_anon:20766 inactive_anon:39221 isolated_anon:0 [ 2525.803050] active_file:19 inactive_file:27 isolated_file:0 [ 2525.803050] unevictable:0 dirty:12 writeback:0 unstable:0 [ 2525.803050] slab_reclaimable:12169 slab_unreclaimable:110961 [ 2525.803050] mapped:52225 shmem:41747 pagetables:843 bounce:0 [ 2525.803050] free:13741 free_pcp:68 free_cma:0 [ 2525.810282] oom_kill_process.cold+0x10/0xb18 [ 2525.817633] (UE) [ 2525.824889] out_of_memory+0xe3e/0x1190 [ 2525.824902] ? oom_killer_disable+0x1c0/0x1c0 [ 2525.832174] Node 0 active_anon:81308kB inactive_anon:134716kB active_file:36kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:157504kB dirty:0kB writeback:0kB shmem:144680kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2525.839573] ? mutex_trylock+0x152/0x1a0 [ 2525.841620] Node 1 active_anon:1756kB inactive_anon:22168kB active_file:40kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:51396kB dirty:48kB writeback:0kB shmem:22308kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2525.850945] __alloc_pages_nodemask+0x23e1/0x2720 [ 2525.850967] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2525.853559] 3*2048kB [ 2525.855858] alloc_pages_current+0x155/0x260 [ 2525.859705] (UME) [ 2525.861750] filemap_fault+0xea3/0x1980 [ 2525.865451] 0*4096kB [ 2525.867933] ext4_filemap_fault+0x84/0xb0 [ 2525.873020] Node 0 [ 2525.875395] __do_fault+0xfa/0x380 [ 2525.879378] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2525.912574] __handle_mm_fault+0x2497/0x4620 [ 2525.912584] ? vm_insert_page+0x7c0/0x7c0 [ 2525.912592] ? lock_downgrade+0x740/0x740 [ 2525.912610] handle_mm_fault+0x391/0x860 [ 2525.917083] = 10956kB [ 2525.919122] __do_page_fault+0x549/0xad0 [ 2525.923084] Node 0 [ 2525.927562] ? spurious_fault+0x640/0x640 [ 2525.955836] DMA32: [ 2525.959863] ? do_page_fault+0x60/0x500 [ 2525.987098] lowmem_reserve[]: [ 2525.991897] ? page_fault+0x2f/0x50 [ 2525.991905] page_fault+0x45/0x50 [ 2525.991913] RIP: 0000:0x93f060 [ 2525.996729] 0 [ 2525.999111] RSP: 2e000:000000c00003dec8 EFLAGS: 0043b6a0 [ 2526.074571] Mem-Info: [ 2526.091412] 2717 [ 2526.122452] 380*4kB (ME) 230*8kB (UME) 183*16kB (UME) 79*32kB (ME) 31*64kB (UME) 83*128kB (UM) 14*256kB (UM) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26032kB [ 2526.126148] 2718 2718 2718 [ 2526.142193] active_anon:20766 inactive_anon:39221 isolated_anon:0 [ 2526.142193] active_file:48 inactive_file:873 isolated_file:0 [ 2526.142193] unevictable:0 dirty:12 writeback:0 unstable:0 [ 2526.142193] slab_reclaimable:12159 slab_unreclaimable:110960 [ 2526.142193] mapped:52800 shmem:41747 pagetables:843 bounce:0 [ 2526.142193] free:36081 free_pcp:94 free_cma:0 [ 2526.146079] Node 0 [ 2526.180101] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2526.208902] Node 1 Normal: 0*4kB 1*8kB (M) 2*16kB (UM) 2*32kB (UM) 1173*64kB (U) 349*128kB (UM) 92*256kB (UM) 4*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 145448kB [ 2526.241900] DMA32 free:25952kB min:36200kB low:45248kB high:54296kB active_anon:81308kB inactive_anon:134716kB active_file:36kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7392kB pagetables:2308kB bounce:0kB free_pcp:272kB local_pcp:120kB free_cma:0kB [ 2526.261922] Node 0 active_anon:81308kB inactive_anon:134716kB active_file:36kB inactive_file:736kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:158104kB dirty:0kB writeback:0kB shmem:144680kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2526.274285] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2526.325407] lowmem_reserve[]: 0 0 0 0 0 [ 2526.329446] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2526.371921] Node 1 active_anon:2056kB inactive_anon:22168kB active_file:256kB inactive_file:6356kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:55796kB dirty:48kB writeback:0kB shmem:22308kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2526.375199] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2526.429079] lowmem_reserve[]: 0 0 0 0 0 [ 2526.433147] Node 1 Normal free:374536kB min:53696kB low:67120kB high:80544kB active_anon:2056kB inactive_anon:22168kB active_file:256kB inactive_file:6356kB unevictable:0kB writepending:196kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:1064kB bounce:0kB free_pcp:236kB local_pcp:48kB free_cma:0kB [ 2526.481763] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2526.501886] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2526.507309] Node 0 [ 2526.510612] 43902 total pagecache pages [ 2526.510625] 0 pages in swap cache [ 2526.510629] Swap cache stats: add 0, delete 0, find 0/0 [ 2526.510632] Free swap = 0kB [ 2526.510635] Total swap = 0kB [ 2526.510642] 2097051 pages RAM [ 2526.510645] 0 pages HighMem/MovableOnly [ 2526.510648] 363840 pages reserved [ 2526.510651] 0 pages cma reserved [ 2526.521895] lowmem_reserve[]: [ 2526.561886] DMA free:11068kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:420kB inactive_file:380kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2526.602132] 0 0 0 0 0 [ 2526.604675] Node 0 DMA: 2*4kB (ME) 2*8kB (UE) 2*16kB (UE) 18*32kB (UME) 7*64kB (UME) 2*128kB (ME) 2*256kB (UE) 2*512kB (UE) 4*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11064kB [ 2526.641863] Node 0 DMA32: 378*4kB (UME) 407*8kB (UE) 2419*16kB (UME) 781*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 68464kB [ 2526.662205] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2526.667623] Node 0 DMA32 free:73172kB min:36200kB low:45248kB high:54296kB active_anon:81608kB inactive_anon:134716kB active_file:236kB inactive_file:836kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7360kB pagetables:2308kB bounce:0kB free_pcp:808kB local_pcp:188kB free_cma:0kB [ 2526.711923] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2526.728364] systemd-journald[31175]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 2526.751892] Node 1 Normal: 200*4kB (UM) 180*8kB (UM) 151*16kB (U) 150*32kB (U) 6*64kB (M) 0*128kB 56*256kB (U) 5*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26736kB [ 2526.781945] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2526.790812] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2526.799711] lowmem_reserve[]: 0 0 0 0 0 [ 2526.812061] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2526.851837] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2526.860699] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2526.871886] lowmem_reserve[]: 0 0 0 0 0 [ 2526.875895] Node 1 Normal free:26800kB min:53696kB low:67120kB high:80544kB active_anon:1712kB inactive_anon:22168kB active_file:2028kB inactive_file:4732kB unevictable:0kB writepending:132kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:888kB bounce:0kB free_pcp:840kB local_pcp:164kB free_cma:0kB [ 2526.912105] 46063 total pagecache pages [ 2526.916105] 0 pages in swap cache [ 2526.919637] Swap cache stats: add 0, delete 0, find 0/0 [ 2526.941831] Free swap = 0kB [ 2526.944870] Total swap = 0kB [ 2526.947878] 2097051 pages RAM [ 2526.950979] 0 pages HighMem/MovableOnly [ 2526.955290] 363840 pages reserved [ 2526.958739] 0 pages cma reserved [ 2526.962325] lowmem_reserve[]: 0 0 0 0 0 [ 2526.991827] Node 0 DMA: 9*4kB (UME) 2*8kB (UE) 2*16kB (UE) 18*32kB (UME) 6*64kB (UME) 2*128kB (ME) 2*256kB (UE) 2*512kB (UE) 4*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11028kB [ 2527.012082] Node 0 DMA32: 4708*4kB (UM) 5760*8kB (UME) 3736*16kB (UME) 1677*32kB (UME) 295*64kB (UM) 55*128kB (U) 25*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 210672kB [ 2527.091808] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2527.126288] Node 1 Normal: 4333*4kB (UM) 1698*8kB (UM) 346*16kB (UM) 297*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 45956kB [ 2527.171806] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2527.180755] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2527.213647] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2527.253676] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2527.264189] 46063 total pagecache pages [ 2527.268182] 0 pages in swap cache [ 2527.271625] Swap cache stats: add 0, delete 0, find 0/0 [ 2527.305670] Free swap = 0kB [ 2527.308713] Total swap = 0kB [ 2527.311721] 2097051 pages RAM [ 2527.315173] 0 pages HighMem/MovableOnly [ 2527.319148] 363840 pages reserved [ 2527.335782] 0 pages cma reserved [ 2527.339162] Out of memory (oom_kill_allocating_task): Kill process 7979 (syz-fuzzer) score 0 or sacrifice child [ 2527.405670] Killed process 30431 (syz-executor.3) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 2527.462782] oom_reaper: reaped process 30431 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2527.590366] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2527.591926] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2527.632903] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2527.648739] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2527.661784] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2527.665111] syz-executor.2 cpuset= [ 2527.666920] CPU: 1 PID: 31153 Comm: syz-executor.1 Not tainted 4.14.224-syzkaller #0 [ 2527.666921] / mems_allowed=0-1 [ 2527.670441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2527.690925] Call Trace: [ 2527.693515] dump_stack+0x1b2/0x281 [ 2527.697150] warn_alloc.cold+0x96/0x1cc [ 2527.701125] ? zone_watermark_ok_safe+0x220/0x220 [ 2527.705994] __alloc_pages_nodemask+0x2127/0x2720 [ 2527.710818] ? lock_acquire+0x170/0x3f0 [ 2527.714774] ? lock_acquire+0x170/0x3f0 [ 2527.718730] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2527.723573] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2527.729022] ? __mutex_unlock_slowpath+0x75/0x770 [ 2527.733878] alloc_pages_current+0x155/0x260 [ 2527.738270] ion_page_pool_alloc+0x118/0x1b0 [ 2527.742659] ion_system_heap_allocate+0x133/0x8c0 [ 2527.747483] ? _raw_spin_unlock+0x29/0x40 [ 2527.751607] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2527.756541] ? ion_system_contig_heap_create+0x130/0x130 [ 2527.761983] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2527.766990] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2527.771815] ion_alloc+0x27a/0x810 [ 2527.775339] ? ion_dma_buf_release+0x40/0x40 [ 2527.779726] ? __might_fault+0x177/0x1b0 [ 2527.783777] ion_ioctl+0xea/0x1f0 [ 2527.787227] ? ion_query_heaps+0x360/0x360 [ 2527.791461] ? ion_query_heaps+0x360/0x360 [ 2527.795683] do_vfs_ioctl+0x75a/0xff0 [ 2527.799466] ? ioctl_preallocate+0x1a0/0x1a0 [ 2527.803852] ? lock_downgrade+0x740/0x740 [ 2527.807980] ? __fget+0x225/0x360 [ 2527.811412] ? do_vfs_ioctl+0xff0/0xff0 [ 2527.815585] ? security_file_ioctl+0x83/0xb0 [ 2527.819989] SyS_ioctl+0x7f/0xb0 [ 2527.823345] ? do_vfs_ioctl+0xff0/0xff0 [ 2527.827300] do_syscall_64+0x1d5/0x640 [ 2527.831172] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2527.836340] RIP: 0033:0x465f69 [ 2527.839508] RSP: 002b:00007f747aa45188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2527.847203] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2527.854459] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2527.861709] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2527.868957] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2527.876243] R13: 00007fff04d0b2bf R14: 00007f747aa45300 R15: 0000000000022000 [ 2527.883516] CPU: 0 PID: 31156 Comm: syz-executor.2 Not tainted 4.14.224-syzkaller #0 [ 2527.891401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2527.900871] Call Trace: [ 2527.903461] dump_stack+0x1b2/0x281 [ 2527.907090] warn_alloc.cold+0x96/0x1cc [ 2527.911067] ? zone_watermark_ok_safe+0x220/0x220 [ 2527.915922] __alloc_pages_nodemask+0x2127/0x2720 [ 2527.920764] ? lock_acquire+0x170/0x3f0 [ 2527.924742] ? lock_acquire+0x170/0x3f0 [ 2527.927011] systemd[1]: Started Journal Service. [ 2527.928738] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2527.938311] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2527.943854] ? __mutex_unlock_slowpath+0x75/0x770 [ 2527.948698] alloc_pages_current+0x155/0x260 [ 2527.953111] ion_page_pool_alloc+0x118/0x1b0 [ 2527.957518] ion_system_heap_allocate+0x133/0x8c0 [ 2527.962361] ? _raw_spin_unlock+0x29/0x40 [ 2527.966508] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2527.971438] ? ion_system_contig_heap_create+0x130/0x130 [ 2527.976890] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2527.981905] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2527.986746] ion_alloc+0x27a/0x810 [ 2527.990287] ? ion_dma_buf_release+0x40/0x40 [ 2527.994711] ? __might_fault+0x177/0x1b0 [ 2527.998774] ion_ioctl+0xea/0x1f0 [ 2528.002225] ? ion_query_heaps+0x360/0x360 [ 2528.006457] ? ion_query_heaps+0x360/0x360 [ 2528.010772] do_vfs_ioctl+0x75a/0xff0 [ 2528.014560] ? ioctl_preallocate+0x1a0/0x1a0 [ 2528.018958] ? lock_downgrade+0x740/0x740 [ 2528.023096] ? __fget+0x225/0x360 [ 2528.026543] ? do_vfs_ioctl+0xff0/0xff0 [ 2528.030510] ? security_file_ioctl+0x83/0xb0 [ 2528.034907] SyS_ioctl+0x7f/0xb0 [ 2528.038250] ? do_vfs_ioctl+0xff0/0xff0 [ 2528.042210] do_syscall_64+0x1d5/0x640 [ 2528.046099] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2528.051279] RIP: 0033:0x465f69 [ 2528.054453] RSP: 002b:00007fa2ca784188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2528.062143] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2528.069405] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2528.076664] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2528.083921] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2528.091185] R13: 00007fff4963426f R14: 00007fa2ca784300 R15: 0000000000022000 [ 2528.098457] CPU: 1 PID: 31163 Comm: syz-executor.0 Not tainted 4.14.224-syzkaller #0 [ 2528.106429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2528.115777] Call Trace: [ 2528.118363] dump_stack+0x1b2/0x281 [ 2528.121988] warn_alloc.cold+0x96/0x1cc [ 2528.125958] ? zone_watermark_ok_safe+0x220/0x220 [ 2528.130811] __alloc_pages_nodemask+0x2127/0x2720 [ 2528.135649] ? ___preempt_schedule+0x16/0x18 [ 2528.140066] ? lock_acquire+0x170/0x3f0 [ 2528.144044] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2528.148889] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2528.154339] ? __mutex_unlock_slowpath+0x75/0x770 [ 2528.159177] ? __list_del_entry_valid+0xb3/0xf0 [ 2528.163847] alloc_pages_current+0x155/0x260 [ 2528.168253] ion_page_pool_alloc+0x118/0x1b0 [ 2528.172659] ion_system_heap_allocate+0x133/0x8c0 [ 2528.177499] ? _raw_spin_unlock+0x29/0x40 [ 2528.181648] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2528.186574] ? ion_system_contig_heap_create+0x130/0x130 [ 2528.192035] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2528.197129] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2528.201977] ion_alloc+0x27a/0x810 [ 2528.205520] ? ion_dma_buf_release+0x40/0x40 [ 2528.209926] ? __might_fault+0x177/0x1b0 [ 2528.213987] ion_ioctl+0xea/0x1f0 [ 2528.217438] ? ion_query_heaps+0x360/0x360 [ 2528.221676] ? ion_query_heaps+0x360/0x360 [ 2528.225907] do_vfs_ioctl+0x75a/0xff0 [ 2528.229707] ? ioctl_preallocate+0x1a0/0x1a0 [ 2528.234111] ? lock_downgrade+0x740/0x740 [ 2528.238259] ? __fget+0x225/0x360 [ 2528.241710] ? do_vfs_ioctl+0xff0/0xff0 [ 2528.245680] ? security_file_ioctl+0x83/0xb0 [ 2528.250086] SyS_ioctl+0x7f/0xb0 [ 2528.253446] ? do_vfs_ioctl+0xff0/0xff0 [ 2528.257415] do_syscall_64+0x1d5/0x640 [ 2528.261307] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2528.266486] RIP: 0033:0x465f69 [ 2528.269665] RSP: 002b:00007fb3e357a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2528.277364] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2528.284626] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2528.291889] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2528.297505] syz-executor.3 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2528.299145] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2528.299151] (null) [ 2528.309435] R13: 00007fffc0af773f R14: 00007fb3e357a300 R15: 0000000000022000 [ 2528.315695] warn_alloc_show_mem: 2 callbacks suppressed [ 2528.315698] Mem-Info: [ 2528.343215] active_anon:20797 inactive_anon:41254 isolated_anon:0 [ 2528.343215] active_file:42 inactive_file:0 isolated_file:0 [ 2528.343215] unevictable:0 dirty:5 writeback:0 unstable:0 [ 2528.343215] slab_reclaimable:12121 slab_unreclaimable:112909 [ 2528.343215] mapped:43913 shmem:43795 pagetables:777 bounce:0 [ 2528.343215] free:13918 free_pcp:4 free_cma:0 [ 2528.345278] , order=0, oom_score_adj=1000 [ 2528.382268] Node 0 active_anon:81480kB inactive_anon:142908kB active_file:124kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:124220kB dirty:12kB writeback:0kB shmem:152872kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2528.387408] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2528.416362] Node 1 active_anon:1708kB inactive_anon:22108kB active_file:44kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:51432kB dirty:8kB writeback:0kB shmem:22308kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2528.419171] CPU: 0 PID: 31157 Comm: syz-executor.3 Not tainted 4.14.224-syzkaller #0 [ 2528.452397] Node 0 [ 2528.454070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2528.454075] Call Trace: [ 2528.456305] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2528.465725] dump_stack+0x1b2/0x281 [ 2528.465738] dump_header+0x178/0x82f [ 2528.465749] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2528.465760] ? ___ratelimit+0x2cd/0x530 [ 2528.465770] oom_kill_process.cold+0x10/0xb18 [ 2528.465788] out_of_memory+0xe3e/0x1190 [ 2528.465803] ? oom_killer_disable+0x1c0/0x1c0 [ 2528.474356] lowmem_reserve[]: [ 2528.493959] ? mutex_trylock+0x152/0x1a0 [ 2528.493974] __alloc_pages_nodemask+0x23e1/0x2720 [ 2528.493990] ? lock_acquire+0x170/0x3f0 [ 2528.494003] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2528.494013] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2528.494026] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2528.494043] alloc_pages_current+0x155/0x260 [ 2528.494054] ion_page_pool_alloc+0x118/0x1b0 [ 2528.494063] ion_system_heap_allocate+0x133/0x8c0 [ 2528.494074] ? _raw_spin_unlock+0x29/0x40 [ 2528.494082] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2528.494092] ? ion_system_contig_heap_create+0x130/0x130 [ 2528.494102] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2528.494111] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2528.494123] ion_alloc+0x27a/0x810 [ 2528.494134] ? ion_dma_buf_release+0x40/0x40 [ 2528.494146] ? __might_fault+0x177/0x1b0 [ 2528.494158] ion_ioctl+0xea/0x1f0 [ 2528.494167] ? ion_query_heaps+0x360/0x360 [ 2528.494179] ? ion_query_heaps+0x360/0x360 [ 2528.494189] do_vfs_ioctl+0x75a/0xff0 [ 2528.494200] ? ioctl_preallocate+0x1a0/0x1a0 [ 2528.494208] ? lock_downgrade+0x740/0x740 [ 2528.494220] ? __fget+0x225/0x360 [ 2528.494230] ? do_vfs_ioctl+0xff0/0xff0 [ 2528.506473] 0 [ 2528.506630] ? security_file_ioctl+0x83/0xb0 [ 2528.510573] 2717 [ 2528.515070] SyS_ioctl+0x7f/0xb0 [ 2528.515078] ? do_vfs_ioctl+0xff0/0xff0 [ 2528.515089] do_syscall_64+0x1d5/0x640 [ 2528.515105] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2528.515113] RIP: 0033:0x465f69 [ 2528.515117] RSP: 002b:00007ff4fd266188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2528.515126] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2528.515131] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2528.515136] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2528.515141] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2528.515148] R13: 00007ffd0ee6c0cf R14: 00007ff4fd266300 R15: 0000000000022000 [ 2528.521211] 2718 [ 2528.545877] Mem-Info: [ 2528.549091] syz-executor.0: [ 2528.561565] active_anon:20797 inactive_anon:41254 isolated_anon:0 [ 2528.561565] active_file:42 inactive_file:0 isolated_file:0 [ 2528.561565] unevictable:0 dirty:5 writeback:0 unstable:0 [ 2528.561565] slab_reclaimable:12121 slab_unreclaimable:112909 [ 2528.561565] mapped:43913 shmem:43795 pagetables:777 bounce:0 [ 2528.561565] free:13772 free_pcp:34 free_cma:0 [ 2528.569112] page allocation failure: order:0 [ 2528.572429] syz-executor.2: [ 2528.580624] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2528.586436] page allocation failure: order:0 [ 2528.593883] (null) [ 2528.596217] Node 0 active_anon:81480kB inactive_anon:142908kB active_file:124kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:124220kB dirty:12kB writeback:0kB shmem:152872kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2528.600584] syz-executor.0 cpuset= [ 2528.608323] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2528.621535] 2718 [ 2528.628395] Node 1 active_anon:1708kB inactive_anon:22108kB active_file:44kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:51432kB dirty:8kB writeback:0kB shmem:22308kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2528.628908] 2718 [ 2528.632377] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2528.632396] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2528.632417] Node 0 DMA32 free:17860kB min:36200kB low:45248kB high:54296kB active_anon:81480kB inactive_anon:142908kB active_file:24kB inactive_file:0kB unevictable:0kB writepending:12kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7328kB pagetables:2220kB bounce:0kB free_pcp:136kB local_pcp:16kB free_cma:0kB [ 2528.632440] lowmem_reserve[]: 0 0 [ 2528.650991] (null) [ 2528.667400] / [ 2528.675093] 0 [ 2528.679691] Node 0 [ 2528.690845] 0 [ 2528.704944] mems_allowed=0-1 [ 2528.712577] syz-executor.2 cpuset= [ 2528.718870] DMA32 free:17860kB min:36200kB low:45248kB high:54296kB active_anon:81480kB inactive_anon:142908kB active_file:24kB inactive_file:0kB unevictable:0kB writepending:12kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7328kB pagetables:2220kB bounce:0kB free_pcp:136kB local_pcp:120kB free_cma:0kB [ 2528.753241] 0 [ 2528.763688] CPU: 1 PID: 31163 Comm: syz-executor.0 Not tainted 4.14.224-syzkaller #0 [ 2528.768406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2528.770530] Node 0 [ 2528.798539] Call Trace: [ 2528.798559] dump_stack+0x1b2/0x281 [ 2528.798572] warn_alloc.cold+0x96/0x1cc [ 2528.798584] ? zone_watermark_ok_safe+0x220/0x220 [ 2528.802134] / [ 2528.809190] ? usleep_range+0x130/0x130 [ 2528.811225] mems_allowed=0-1 [ 2528.838625] ? try_to_free_pages+0x23f/0x6e0 [ 2528.838634] ? _find_next_bit+0xdb/0x100 [ 2528.838645] ? run_timer_softirq+0x5a0/0x5a0 [ 2528.838661] __alloc_pages_nodemask+0x2127/0x2720 [ 2528.840718] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2528.866807] ? lock_acquire+0x170/0x3f0 [ 2528.866825] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2528.891622] lowmem_reserve[]: [ 2528.900714] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2528.911620] 0 [ 2528.912126] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2528.913898] 0 [ 2528.916989] ? __list_del_entry_valid+0xb3/0xf0 [ 2528.920493] 0 [ 2528.948842] alloc_pages_current+0x155/0x260 [ 2528.948856] ion_page_pool_alloc+0x118/0x1b0 [ 2528.948867] ion_system_heap_allocate+0x133/0x8c0 [ 2528.991615] 0 [ 2528.993679] ? _raw_spin_unlock+0x29/0x40 [ 2528.998055] 0 [ 2529.008865] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2529.008875] ? ion_system_contig_heap_create+0x130/0x130 [ 2529.008885] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2529.008897] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2529.042988] ion_alloc+0x27a/0x810 [ 2529.043003] ? ion_dma_buf_release+0x40/0x40 [ 2529.061630] Node 1 [ 2529.066542] ? __might_fault+0x177/0x1b0 [ 2529.068326] Normal free:26256kB min:53696kB low:67120kB high:80544kB active_anon:1708kB inactive_anon:22108kB active_file:28kB inactive_file:4kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:888kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2529.072968] ion_ioctl+0xea/0x1f0 [ 2529.072979] ? ion_query_heaps+0x360/0x360 [ 2529.072993] ? ion_query_heaps+0x360/0x360 [ 2529.091606] lowmem_reserve[]: [ 2529.094235] do_vfs_ioctl+0x75a/0xff0 [ 2529.096008] 0 [ 2529.100918] ? ioctl_preallocate+0x1a0/0x1a0 [ 2529.121602] 0 [ 2529.124047] ? lock_downgrade+0x740/0x740 [ 2529.124061] ? __fget+0x225/0x360 [ 2529.126268] 0 [ 2529.130309] ? do_vfs_ioctl+0xff0/0xff0 [ 2529.191598] 0 [ 2529.192154] ? security_file_ioctl+0x83/0xb0 [ 2529.193926] 0 [ 2529.197880] SyS_ioctl+0x7f/0xb0 [ 2529.204040] ? do_vfs_ioctl+0xff0/0xff0 [ 2529.204051] do_syscall_64+0x1d5/0x640 [ 2529.204067] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2529.221595] Node 0 DMA: [ 2529.222146] RIP: 0033:0x465f69 [ 2529.222152] RSP: 002b:00007fb3e357a188 EFLAGS: 00000246 [ 2529.224800] 1*4kB [ 2529.227968] ORIG_RAX: 0000000000000010 [ 2529.239391] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2529.241595] (E) [ 2529.246647] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2529.246654] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2529.248604] 1*8kB [ 2529.255859] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2529.255865] R13: 00007fffc0af773f R14: 00007fb3e357a300 R15: 0000000000022000 [ 2529.269422] lowmem_reserve[]: [ 2529.282183] CPU: 0 PID: 31156 Comm: syz-executor.2 Not tainted 4.14.224-syzkaller #0 [ 2529.284451] 0 [ 2529.285289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2529.294768] 0 [ 2529.294952] Call Trace: [ 2529.307160] 0 0 0 [ 2529.308650] dump_stack+0x1b2/0x281 [ 2529.308664] warn_alloc.cold+0x96/0x1cc [ 2529.314400] ? zone_watermark_ok_safe+0x220/0x220 [ 2529.314409] ? usleep_range+0x130/0x130 [ 2529.314417] ? try_to_free_pages+0x23f/0x6e0 [ 2529.314426] ? _find_next_bit+0xdb/0x100 [ 2529.314436] ? run_timer_softirq+0x5a0/0x5a0 [ 2529.314450] __alloc_pages_nodemask+0x2127/0x2720 [ 2529.314465] ? lock_acquire+0x170/0x3f0 [ 2529.314479] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2529.314492] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2529.320526] Node 0 [ 2529.323268] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2529.323286] alloc_pages_current+0x155/0x260 [ 2529.323300] ion_page_pool_alloc+0x118/0x1b0 [ 2529.323311] ion_system_heap_allocate+0x133/0x8c0 [ 2529.323322] ? _raw_spin_unlock+0x29/0x40 [ 2529.323330] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2529.323342] ? ion_system_contig_heap_create+0x130/0x130 [ 2529.323356] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2529.330121] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2529.331695] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2529.331706] ion_alloc+0x27a/0x810 [ 2529.331719] ? ion_dma_buf_release+0x40/0x40 [ 2529.331730] ? __might_fault+0x177/0x1b0 [ 2529.331742] ion_ioctl+0xea/0x1f0 [ 2529.331752] ? ion_query_heaps+0x360/0x360 [ 2529.337146] lowmem_reserve[]: [ 2529.340223] ? ion_query_heaps+0x360/0x360 [ 2529.348793] 0 [ 2529.348999] do_vfs_ioctl+0x75a/0xff0 [ 2529.353864] 0 [ 2529.358291] ? ioctl_preallocate+0x1a0/0x1a0 [ 2529.360493] 0 [ 2529.365922] ? lock_downgrade+0x740/0x740 [ 2529.365936] ? __fget+0x225/0x360 [ 2529.365944] ? do_vfs_ioctl+0xff0/0xff0 [ 2529.365954] ? security_file_ioctl+0x83/0xb0 [ 2529.365962] SyS_ioctl+0x7f/0xb0 [ 2529.365971] ? do_vfs_ioctl+0xff0/0xff0 [ 2529.365982] do_syscall_64+0x1d5/0x640 [ 2529.365998] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2529.366006] RIP: 0033:0x465f69 [ 2529.366011] RSP: 002b:00007fa2ca784188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2529.375156] 0 [ 2529.379618] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2529.384558] 0 [ 2529.388650] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2529.399096] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2529.428932] Node 1 [ 2529.432322] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2529.432331] R13: 00007fff4963426f R14: 00007fa2ca784300 R15: 0000000000022000 [ 2529.439780] (E) [ 2529.443702] Normal free:26344kB min:53696kB low:67120kB high:80544kB active_anon:1708kB inactive_anon:22108kB active_file:20kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:888kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2529.444299] 1*16kB [ 2529.448486] lowmem_reserve[]: [ 2529.458948] (E) [ 2529.469861] 0 [ 2529.481345] 2*32kB [ 2529.491551] 0 [ 2529.500348] (UE) [ 2529.507446] 0 [ 2529.518685] 2*64kB [ 2529.529891] 0 [ 2529.531329] (UE) [ 2529.548891] 0 [ 2529.555828] 2*128kB [ 2529.559631] (UE) [ 2529.598584] Node 0 [ 2529.600157] 1*256kB [ 2529.605945] DMA: [ 2529.608041] warn_alloc_show_mem: 2 callbacks suppressed [ 2529.608044] Mem-Info: [ 2529.609813] 1*4kB [ 2529.612222] active_anon:20798 inactive_anon:41254 isolated_anon:0 [ 2529.612222] active_file:26 inactive_file:3 isolated_file:0 [ 2529.612222] unevictable:0 dirty:9 writeback:0 unstable:0 [ 2529.612222] slab_reclaimable:12108 slab_unreclaimable:112786 [ 2529.612222] mapped:43937 shmem:43795 pagetables:777 bounce:0 [ 2529.612222] free:13894 free_pcp:53 free_cma:0 [ 2529.621107] (E) [ 2529.622621] (E) 2*512kB (UE) 3*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10972kB [ 2529.622653] Node 0 DMA32: 166*4kB (UME) 139*8kB (UME) 74*16kB (UME) 471*32kB (UE) [ 2529.629930] 1*8kB [ 2529.630085] 1*64kB [ 2529.639847] (E) [ 2529.667754] Node 0 active_anon:81484kB inactive_anon:142908kB active_file:68kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:124288kB dirty:28kB writeback:0kB shmem:152872kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2529.667769] Node 1 active_anon:1708kB inactive_anon:22108kB active_file:36kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:51460kB dirty:8kB writeback:0kB shmem:22308kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2529.667772] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2529.667790] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2529.667811] Node 0 DMA32 free:18260kB min:36200kB low:45248kB high:54296kB active_anon:81484kB inactive_anon:142908kB active_file:68kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7328kB pagetables:2220kB bounce:0kB free_pcp:212kB local_pcp:16kB free_cma:0kB [ 2529.667830] lowmem_reserve[]: 0 0 0 0 0 [ 2529.667849] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2529.667866] lowmem_reserve[]: [ 2529.683182] 1*16kB [ 2529.684816] 0 [ 2529.686932] (E) [ 2529.689144] 0 [ 2529.691096] 2*32kB [ 2529.731380] (U) [ 2529.752194] (UE) [ 2529.782957] 0 [ 2529.808792] 2*64kB [ 2529.821382] 0 [ 2529.838897] (UE) [ 2529.850243] 2*128kB [ 2529.853579] 2*128kB [ 2529.853709] (U) [ 2529.855462] (UE) [ 2529.857681] 0*256kB [ 2529.859544] 1*256kB [ 2529.872197] 0*512kB [ 2529.874530] (E) [ 2529.874846] 0*1024kB [ 2529.877146] 2*512kB [ 2529.879098] 0*2048kB [ 2529.881479] (UE) 3*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10972kB [ 2529.894769] Node 0 DMA32: 166*4kB (UME) 139*8kB (UME) 74*16kB (UME) 471*32kB (UE) [ 2529.894813] 0 [ 2529.902553] 1*64kB (U) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18352kB [ 2529.911338] Node 1 [ 2529.921578] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2529.925255] 0*4096kB [ 2529.934926] Normal free:50272kB min:53696kB low:67120kB high:80544kB active_anon:1708kB inactive_anon:22108kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:888kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2529.951603] Node 1 Normal: 50*4kB (UM) 23*8kB (UME) 6*16kB (M) 770*32kB (UME) 3231*64kB (UM) 214*128kB (U) 6*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 260832kB [ 2530.021563] = 18352kB [ 2530.023995] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2530.061564] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2530.061566] Node 1 Normal: [ 2530.070415] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2530.070418] 50*4kB (UM) [ 2530.105926] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2530.111536] lowmem_reserve[]: 0 0 0 0 0 [ 2530.125550] Node 0 DMA: 1*4kB (E) 1*8kB (E) 1*16kB (E) 2*32kB (UE) 3*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 3*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11036kB [ 2530.130877] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2530.140592] 23*8kB (UME) 6*16kB (M) 770*32kB (UME) 5959*64kB (UM) 1199*128kB (U) 184*256kB (U) 11*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 612704kB [ 2530.174149] 44308 total pagecache pages [ 2530.187257] Node 0 DMA32: 26*4kB (UE) 117*8kB (UME) 70*16kB (E) 48*32kB (UE) 1593*64kB (UME) 201*128kB (UM) 3*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 132144kB [ 2530.216065] 0 pages in swap cache [ 2530.218698] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2530.219711] Swap cache stats: add 0, delete 0, find 0/0 [ 2530.229832] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2530.246534] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2530.256988] Node 1 Normal: 50*4kB (UM) 23*8kB (UME) 6*16kB (M) 770*32kB (UME) 7125*64kB (UM) 1458*128kB (U) 214*256kB (U) 11*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 728160kB [ 2530.273550] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2530.281546] Free swap = 0kB [ 2530.285922] Total swap = 0kB [ 2530.286748] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2530.289045] 2097051 pages RAM [ 2530.298947] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2530.310953] 44850 total pagecache pages [ 2530.316227] 0 pages in swap cache [ 2530.321909] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2530.330493] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2530.332136] 0 pages HighMem/MovableOnly [ 2530.339587] Swap cache stats: add 0, delete 0, find 0/0 [ 2530.348954] Free swap = 0kB [ 2530.352281] Total swap = 0kB [ 2530.355301] 2097051 pages RAM [ 2530.358393] 0 pages HighMem/MovableOnly [ 2530.362700] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2530.371278] 44887 total pagecache pages [ 2530.371561] 363840 pages reserved [ 2530.375615] 363840 pages reserved [ 2530.378685] 0 pages cma reserved [ 2530.382331] 0 pages cma reserved [ 2530.388920] Out of memory (oom_kill_allocating_task): Kill process 31157 (syz-executor.3) score 0 or sacrifice child [ 2530.399903] 0 pages in swap cache [ 2530.403579] Swap cache stats: add 0, delete 0, find 0/0 [ 2530.408937] Free swap = 0kB [ 2530.412261] Total swap = 0kB [ 2530.415409] 2097051 pages RAM [ 2530.418506] 0 pages HighMem/MovableOnly [ 2530.422779] Killed process 31157 (syz-executor.3) total-vm:93252kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2530.441540] 363840 pages reserved [ 2530.445005] 0 pages cma reserved [ 2530.449154] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2530.471554] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2530.480882] CPU: 0 PID: 31157 Comm: syz-executor.3 Not tainted 4.14.224-syzkaller #0 [ 2530.488776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2530.498124] Call Trace: [ 2530.500719] dump_stack+0x1b2/0x281 [ 2530.504349] warn_alloc.cold+0x96/0x1cc [ 2530.508322] ? lock_downgrade+0x740/0x740 [ 2530.512474] ? zone_watermark_ok_safe+0x220/0x220 [ 2530.517319] ? wake_up_q+0x82/0xd0 [ 2530.520862] ? wait_for_completion_io+0x10/0x10 [ 2530.525535] __alloc_pages_nodemask+0x2127/0x2720 [ 2530.530392] ? lock_acquire+0x170/0x3f0 [ 2530.534374] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2530.539217] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2530.543718] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2530.549177] alloc_pages_current+0x155/0x260 [ 2530.553594] ion_page_pool_alloc+0x118/0x1b0 [ 2530.558006] ion_system_heap_allocate+0x133/0x8c0 [ 2530.562848] ? _raw_spin_unlock+0x29/0x40 [ 2530.566995] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2530.571929] ? ion_system_contig_heap_create+0x130/0x130 [ 2530.577379] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2530.582401] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2530.587243] ion_alloc+0x27a/0x810 [ 2530.590790] ? ion_dma_buf_release+0x40/0x40 [ 2530.595201] ? __might_fault+0x177/0x1b0 [ 2530.599262] ion_ioctl+0xea/0x1f0 [ 2530.602712] ? ion_query_heaps+0x360/0x360 [ 2530.606943] ? ion_query_heaps+0x360/0x360 [ 2530.611179] do_vfs_ioctl+0x75a/0xff0 [ 2530.614980] ? ioctl_preallocate+0x1a0/0x1a0 [ 2530.619386] ? lock_downgrade+0x740/0x740 [ 2530.623533] ? __fget+0x225/0x360 [ 2530.626978] ? do_vfs_ioctl+0xff0/0xff0 [ 2530.631021] ? security_file_ioctl+0x83/0xb0 [ 2530.635449] SyS_ioctl+0x7f/0xb0 [ 2530.638824] ? do_vfs_ioctl+0xff0/0xff0 [ 2530.642802] do_syscall_64+0x1d5/0x640 [ 2530.646697] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2530.651886] RIP: 0033:0x465f69 [ 2530.655068] RSP: 002b:00007ff4fd266188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2530.662781] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2530.670138] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2530.677413] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2530.684682] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2530.691947] R13: 00007ffd0ee6c0cf R14: 00007ff4fd266300 R15: 0000000000022000 [ 2530.702864] warn_alloc_show_mem: 1 callbacks suppressed [ 2530.702868] Mem-Info: [ 2530.716800] active_anon:20798 inactive_anon:41254 isolated_anon:0 [ 2530.716800] active_file:357 inactive_file:1152 isolated_file:0 [ 2530.716800] unevictable:0 dirty:25 writeback:0 unstable:0 [ 2530.716800] slab_reclaimable:12058 slab_unreclaimable:114829 [ 2530.716800] mapped:45053 shmem:43795 pagetables:740 bounce:0 [ 2530.716800] free:153174 free_pcp:181 free_cma:0 [ 2530.756144] Node 0 active_anon:81484kB inactive_anon:142908kB active_file:1212kB inactive_file:3092kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:127916kB dirty:100kB writeback:0kB shmem:152872kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2530.788255] Node 1 active_anon:1708kB inactive_anon:22108kB active_file:216kB inactive_file:2316kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:52796kB dirty:0kB writeback:0kB shmem:22308kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2530.829605] Node 0 DMA free:11036kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 00:44:17 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x500, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) pkey_mprotect(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff1000/0x4000)=nil, 0x4000, 0x4, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) [ 2530.891574] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2530.896645] Node 0 DMA32 free:40740kB min:36200kB low:45248kB high:54296kB active_anon:81504kB inactive_anon:142908kB active_file:1248kB inactive_file:3160kB unevictable:0kB writepending:132kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7296kB pagetables:2208kB bounce:0kB free_pcp:636kB local_pcp:100kB free_cma:0kB [ 2530.957005] lowmem_reserve[]: 0 0 0 0 0 [ 2530.961041] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2530.990242] lowmem_reserve[]: 0 0 0 0 0 [ 2531.006091] Node 1 Normal free:277420kB min:53696kB low:67120kB high:80544kB active_anon:1644kB inactive_anon:22108kB active_file:288kB inactive_file:4600kB unevictable:0kB writepending:64kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:840kB bounce:0kB free_pcp:316kB local_pcp:148kB free_cma:0kB [ 2531.071535] lowmem_reserve[]: 0 0 0 0 0 [ 2531.075579] Node 0 DMA: 1*4kB (E) 1*8kB (E) 1*16kB (E) 2*32kB (UE) 3*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 3*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11036kB [ 2531.114387] Node 0 DMA32: 27*4kB (UME) 125*8kB (ME) 72*16kB (UE) 11*32kB (E) 200*64kB (UE) 194*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 40244kB [ 2531.151602] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2531.191552] Node 1 Normal: 2*4kB (UM) 3*8kB (UME) 0*16kB 3*32kB (UME) 1*64kB (M) 74*128kB (U) 214*256kB (U) 5*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 67008kB [ 2531.241627] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2531.250746] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2531.268667] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2531.281576] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2531.290170] 44012 total pagecache pages [ 2531.311494] 0 pages in swap cache [ 2531.315005] Swap cache stats: add 0, delete 0, find 0/0 [ 2531.320367] Free swap = 0kB [ 2531.334681] Total swap = 0kB [ 2531.337742] 2097051 pages RAM [ 2531.340836] 0 pages HighMem/MovableOnly [ 2531.345467] 363840 pages reserved [ 2531.348914] 0 pages cma reserved 00:44:18 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x484240, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)={0x101, 0x1, 0x4, 0x400, 0xffff, {0x0, 0x2710}, {0x1, 0x2, 0x8, 0x2, 0x7, 0x1, "db53d254"}, 0x8, 0x4, @fd=r1, 0x4, 0x0, r1}) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x8) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000340)={0x401, 0x2, 0x4, 0x8, 0x8, {}, {0x1, 0x8, 0xbc, 0xa2, 0xf7, 0x20, "450104da"}, 0xa87, 0x4, @fd=r3, 0x1ff}) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x4, 0x90040) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r4, 0xc00464be, &(0x7f0000000240)={0x1}) syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x1, 0x621c0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x7fffffff, 0x1e, 0x1}) [ 2532.723780] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2532.730586] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2532.756088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2532.774329] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2532.794514] device bridge_slave_1 left promiscuous mode [ 2532.809599] bridge0: port 2(bridge_slave_1) entered disabled state [ 2532.832771] device bridge_slave_0 left promiscuous mode [ 2532.847535] bridge0: port 1(bridge_slave_0) entered disabled state [ 2532.867462] device veth1_macvtap left promiscuous mode [ 2532.881978] device veth0_macvtap left promiscuous mode [ 2532.900008] device veth1_vlan left promiscuous mode [ 2532.910780] device veth0_vlan left promiscuous mode [ 2533.050785] oom_reaper: reaped process 31161 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2533.108181] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2533.132230] systemd-journal cpuset=/ mems_allowed=0-1 [ 2533.137458] CPU: 1 PID: 31175 Comm: systemd-journal Not tainted 4.14.224-syzkaller #0 [ 2533.145414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2533.154756] Call Trace: [ 2533.157341] dump_stack+0x1b2/0x281 [ 2533.160972] dump_header+0x178/0x82f [ 2533.164667] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2533.169752] ? ___ratelimit+0x2cd/0x530 [ 2533.173715] oom_kill_process.cold+0x10/0xb18 [ 2533.178192] out_of_memory+0xe3e/0x1190 [ 2533.182146] ? oom_killer_disable+0x1c0/0x1c0 [ 2533.186628] ? mutex_trylock+0x152/0x1a0 [ 2533.190669] __alloc_pages_nodemask+0x23e1/0x2720 [ 2533.195512] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2533.200341] alloc_pages_current+0x155/0x260 [ 2533.204729] filemap_fault+0xea3/0x1980 [ 2533.208687] ext4_filemap_fault+0x84/0xb0 [ 2533.212812] __do_fault+0xfa/0x380 [ 2533.216330] __handle_mm_fault+0x2497/0x4620 [ 2533.220715] ? ep_poll+0x1ab/0xa50 [ 2533.224240] ? vm_insert_page+0x7c0/0x7c0 [ 2533.228374] handle_mm_fault+0x391/0x860 [ 2533.232416] __do_page_fault+0x549/0xad0 [ 2533.237421] ? spurious_fault+0x640/0x640 [ 2533.241559] ? do_page_fault+0x60/0x500 [ 2533.245511] ? page_fault+0x2f/0x50 [ 2533.249115] page_fault+0x45/0x50 [ 2533.252545] RIP: 0001:0xffffffffffffffff [ 2533.256580] RSP: a92b61e0:00007ffd2cd158b0 EFLAGS: 7ffd2cd156c0 [ 2533.257880] syz-executor.0: [ 2533.264688] syz-executor.4: [ 2533.264698] page allocation failure: order:4 [ 2533.267706] page allocation failure: order:0 [ 2533.270705] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2533.294159] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2533.306128] (null) [ 2533.317659] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2533.320391] (null) [ 2533.326414] CPU: 1 PID: 31189 Comm: syz-executor.0 Not tainted 4.14.224-syzkaller #0 [ 2533.334295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2533.335503] syz-executor.4 cpuset= [ 2533.343635] Call Trace: [ 2533.343656] dump_stack+0x1b2/0x281 [ 2533.343669] warn_alloc.cold+0x96/0x1cc [ 2533.357319] ? zone_watermark_ok_safe+0x220/0x220 [ 2533.358984] / [ 2533.362163] __alloc_pages_nodemask+0x2127/0x2720 [ 2533.362167] mems_allowed=0-1 [ 2533.371766] ? io_schedule_timeout+0x140/0x140 [ 2533.376330] ? lock_acquire+0x170/0x3f0 [ 2533.380287] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2533.385112] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2533.390545] ? __mutex_unlock_slowpath+0x75/0x770 [ 2533.395369] alloc_pages_current+0x155/0x260 [ 2533.399761] ion_page_pool_alloc+0x118/0x1b0 [ 2533.404168] ion_system_heap_allocate+0x133/0x8c0 [ 2533.409017] ? ion_alloc+0x187/0x810 [ 2533.412722] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2533.418156] ? ion_system_contig_heap_create+0x130/0x130 [ 2533.423588] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2533.428588] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2533.433413] ion_alloc+0x204/0x810 [ 2533.436935] ? ion_dma_buf_release+0x40/0x40 [ 2533.441337] ? __might_fault+0x177/0x1b0 [ 2533.445379] ion_ioctl+0xea/0x1f0 [ 2533.448825] ? ion_query_heaps+0x360/0x360 [ 2533.453042] ? ion_query_heaps+0x360/0x360 [ 2533.457257] do_vfs_ioctl+0x75a/0xff0 [ 2533.461037] ? ioctl_preallocate+0x1a0/0x1a0 [ 2533.465423] ? lock_downgrade+0x740/0x740 [ 2533.469552] ? __fget+0x225/0x360 [ 2533.471242] Mem-Info: [ 2533.472988] ? do_vfs_ioctl+0xff0/0xff0 [ 2533.475393] active_anon:20911 inactive_anon:41252 isolated_anon:0 [ 2533.475393] active_file:26 inactive_file:15 isolated_file:0 [ 2533.475393] unevictable:0 dirty:19 writeback:0 unstable:0 [ 2533.475393] slab_reclaimable:12047 slab_unreclaimable:114675 [ 2533.475393] mapped:43971 shmem:43792 pagetables:747 bounce:0 [ 2533.475393] free:13871 free_pcp:0 free_cma:0 [ 2533.479345] ? security_file_ioctl+0x83/0xb0 [ 2533.516973] SyS_ioctl+0x7f/0xb0 [ 2533.520325] ? do_vfs_ioctl+0xff0/0xff0 [ 2533.524298] do_syscall_64+0x1d5/0x640 [ 2533.528176] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2533.533349] RIP: 0033:0x465f69 [ 2533.536520] RSP: 002b:00007fb3e357a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2533.544209] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2533.551245] Node 0 active_anon:82160kB inactive_anon:142900kB active_file:56kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:124488kB dirty:36kB writeback:0kB shmem:152860kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2533.551457] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2533.551464] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2533.593875] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2533.601141] R13: 00007fffc0af773f R14: 00007fb3e357a300 R15: 0000000000022000 [ 2533.608404] CPU: 0 PID: 31161 Comm: syz-executor.4 Not tainted 4.14.224-syzkaller #0 [ 2533.615200] Node 1 active_anon:1484kB inactive_anon:22108kB active_file:48kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:51396kB dirty:40kB writeback:0kB shmem:22308kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2533.616279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2533.649279] Mem-Info: [ 2533.653306] Call Trace: [ 2533.653327] dump_stack+0x1b2/0x281 [ 2533.653340] warn_alloc.cold+0x96/0x1cc [ 2533.653352] ? zone_watermark_ok_safe+0x220/0x220 [ 2533.653360] ? usleep_range+0x130/0x130 [ 2533.653372] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2533.655775] active_anon:20911 inactive_anon:41252 isolated_anon:0 [ 2533.655775] active_file:26 inactive_file:15 isolated_file:0 [ 2533.655775] unevictable:0 dirty:19 writeback:0 unstable:0 [ 2533.655775] slab_reclaimable:12047 slab_unreclaimable:114675 [ 2533.655775] mapped:43971 shmem:43792 pagetables:747 bounce:0 [ 2533.655775] free:13871 free_pcp:0 free_cma:0 [ 2533.658351] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2533.667217] Node 0 active_anon:82160kB inactive_anon:142900kB active_file:56kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:124488kB dirty:36kB writeback:0kB shmem:152860kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2533.670732] ? run_timer_softirq+0x5a0/0x5a0 [ 2533.674748] Node 1 active_anon:1484kB inactive_anon:22108kB active_file:48kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:51396kB dirty:40kB writeback:0kB shmem:22308kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2533.679791] __alloc_pages_nodemask+0x2127/0x2720 [ 2533.718219] Node 0 [ 2533.745933] ? lock_acquire+0x170/0x3f0 [ 2533.745949] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2533.745959] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2533.745975] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2533.745995] alloc_pages_current+0x155/0x260 [ 2533.746006] ion_page_pool_alloc+0x118/0x1b0 [ 2533.746016] ion_system_heap_allocate+0x133/0x8c0 [ 2533.746025] ? ion_alloc+0x187/0x810 [ 2533.746037] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2533.756089] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2533.777652] ? ion_system_contig_heap_create+0x130/0x130 [ 2533.777664] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2533.777674] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2533.777684] ion_alloc+0x204/0x810 [ 2533.777698] ? ion_dma_buf_release+0x40/0x40 [ 2533.777709] ? __might_fault+0x177/0x1b0 [ 2533.777720] ion_ioctl+0xea/0x1f0 [ 2533.777730] ? ion_query_heaps+0x360/0x360 [ 2533.777741] ? SyS_epoll_ctl+0x1e0/0x2780 [ 2533.777750] ? ion_query_heaps+0x360/0x360 [ 2533.777761] do_vfs_ioctl+0x75a/0xff0 [ 2533.787777] Node 0 [ 2533.788765] ? ioctl_preallocate+0x1a0/0x1a0 [ 2533.793652] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2533.798055] ? lock_downgrade+0x740/0x740 [ 2533.808594] lowmem_reserve[]: [ 2533.812253] ? __fget+0x225/0x360 [ 2533.812264] ? do_vfs_ioctl+0xff0/0xff0 [ 2533.812274] ? security_file_ioctl+0x83/0xb0 [ 2533.812284] SyS_ioctl+0x7f/0xb0 [ 2533.812292] ? do_vfs_ioctl+0xff0/0xff0 [ 2533.812303] do_syscall_64+0x1d5/0x640 [ 2533.812319] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2533.812327] RIP: 0033:0x465f69 [ 2533.817161] 0 [ 2533.820838] RSP: 002b:00007f1dbb0fc188 EFLAGS: 00000246 [ 2533.831423] lowmem_reserve[]: [ 2533.851740] ORIG_RAX: 0000000000000010 [ 2533.851746] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2533.851751] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2533.851756] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2533.851760] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2533.851765] R13: 00007fff344be07f R14: 00007f1dbb0fc300 R15: 0000000000022000 [ 2533.861238] syz-executor.1: [ 2533.868239] 2717 [ 2533.870907] page allocation failure: order:0 [ 2533.875351] 2718 [ 2533.892272] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2533.901336] 2718 [ 2533.909078] (null) [ 2533.936774] 0 [ 2533.938932] syz-executor.1 cpuset= [ 2533.942405] 2717 2718 2718 2718 [ 2533.942420] Node 0 DMA32 free:18212kB min:36200kB low:45248kB high:54296kB active_anon:82132kB inactive_anon:142900kB active_file:48kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7360kB pagetables:2400kB bounce:0kB free_pcp:124kB local_pcp:116kB free_cma:0kB [ 2533.942439] lowmem_reserve[]: 0 0 0 0 0 [ 2533.942457] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2533.942472] lowmem_reserve[]: 0 0 0 0 0 [ 2533.942491] Node 1 Normal free:26412kB min:53696kB low:67120kB high:80544kB active_anon:1420kB inactive_anon:22108kB active_file:16kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:588kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2533.942508] lowmem_reserve[]: [ 2533.957643] / [ 2533.963427] 0 [ 2533.972385] mems_allowed=0-1 [ 2533.978789] 0 [ 2533.980800] CPU: 0 PID: 31153 Comm: syz-executor.1 Not tainted 4.14.224-syzkaller #0 [ 2533.988649] 2718 [ 2533.992254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2533.992258] Call Trace: [ 2533.992278] dump_stack+0x1b2/0x281 [ 2533.992292] warn_alloc.cold+0x96/0x1cc [ 2533.992303] ? zone_watermark_ok_safe+0x220/0x220 [ 2533.992314] ? usleep_range+0x130/0x130 [ 2534.007341] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2534.007353] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2534.007363] ? run_timer_softirq+0x5a0/0x5a0 [ 2534.007379] __alloc_pages_nodemask+0x2127/0x2720 [ 2534.007393] ? lock_acquire+0x170/0x3f0 [ 2534.007408] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2534.018721] 0 [ 2534.021927] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2534.021942] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2534.021962] alloc_pages_current+0x155/0x260 [ 2534.021974] ion_page_pool_alloc+0x118/0x1b0 [ 2534.021983] ion_system_heap_allocate+0x133/0x8c0 [ 2534.021993] ? _raw_spin_unlock+0x29/0x40 [ 2534.022003] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2534.025013] 0 [ 2534.027047] ? ion_system_contig_heap_create+0x130/0x130 [ 2534.037047] 0 [ 2534.040556] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2534.044721] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2534.046493] Node 0 [ 2534.050014] ion_alloc+0x27a/0x810 [ 2534.058487] Node 0 [ 2534.082316] ? ion_dma_buf_release+0x40/0x40 [ 2534.082329] ? __might_fault+0x177/0x1b0 [ 2534.082340] ion_ioctl+0xea/0x1f0 [ 2534.082350] ? ion_query_heaps+0x360/0x360 [ 2534.082362] ? ion_query_heaps+0x360/0x360 [ 2534.082372] do_vfs_ioctl+0x75a/0xff0 [ 2534.082382] ? ioctl_preallocate+0x1a0/0x1a0 [ 2534.082390] ? lock_downgrade+0x740/0x740 [ 2534.082401] ? __fget+0x225/0x360 [ 2534.082411] ? do_vfs_ioctl+0xff0/0xff0 [ 2534.091545] DMA: [ 2534.111873] ? security_file_ioctl+0x83/0xb0 [ 2534.111884] SyS_ioctl+0x7f/0xb0 [ 2534.111892] ? do_vfs_ioctl+0xff0/0xff0 [ 2534.111903] do_syscall_64+0x1d5/0x640 [ 2534.111919] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2534.111927] RIP: 0033:0x465f69 [ 2534.111932] RSP: 002b:00007f747aa45188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2534.111942] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2534.111946] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2534.111952] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2534.111957] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2534.111962] R13: 00007fff04d0b2bf R14: 00007f747aa45300 R15: 0000000000022000 [ 2534.398132] DMA32 free:42392kB min:36200kB low:45248kB high:54296kB active_anon:82132kB inactive_anon:142900kB active_file:48kB inactive_file:852kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7360kB pagetables:2400kB bounce:0kB free_pcp:124kB local_pcp:116kB free_cma:0kB [ 2534.426696] lowmem_reserve[]: 0 0 0 0 0 [ 2534.430688] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2534.456489] lowmem_reserve[]: 0 0 0 0 0 [ 2534.460518] Node 1 Normal free:227828kB min:53696kB low:67120kB high:80544kB active_anon:1420kB inactive_anon:22108kB active_file:16kB inactive_file:2012kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:588kB bounce:0kB free_pcp:96kB local_pcp:0kB free_cma:0kB [ 2534.498770] lowmem_reserve[]: 0 0 0 0 0 [ 2534.503590] Node 0 DMA: 2*4kB (UE) 12*8kB (UE) 3*16kB (UE) 4*32kB (UE) 2*64kB (UE) 1*128kB (E) 1*256kB (E) 2*512kB (UE) 3*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11032kB [ 2534.519553] Node 0 DMA32: 50*4kB (UME) 210*8kB (UE) 73*16kB (UE) 15*32kB (UME) 680*64kB (UME) 30*128kB (UM) 46*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 62664kB [ 2534.537588] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2534.548994] Node 1 Normal: 1*4kB (U) 4*8kB (UME) 5*16kB (UME) 2*32kB (ME) 3327*64kB (U) 316*128kB (UM) 129*256kB (UM) 3*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 288116kB [ 2534.568334] device hsr_slave_1 left promiscuous mode [ 2534.581223] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2534.606923] device hsr_slave_0 left promiscuous mode [ 2534.615405] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2534.649096] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2534.658878] team0 (unregistering): Port device team_slave_1 removed [ 2534.666855] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2534.689663] team0 (unregistering): Port device team_slave_0 removed [ 2534.697914] 45230 total pagecache pages [ 2534.708794] 0 pages in swap cache [ 2534.724625] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2534.732010] Swap cache stats: add 0, delete 0, find 0/0 [ 2534.737374] Free swap = 0kB [ 2534.740387] Total swap = 0kB [ 2534.751822] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2534.759554] 2097051 pages RAM [ 2534.781541] 0 pages HighMem/MovableOnly [ 2534.785542] 363840 pages reserved [ 2534.788981] 0 pages cma reserved [ 2534.839173] bond0 (unregistering): Released all slaves [ 2534.861172] 2*4kB (UE) 12*8kB (UE) 3*16kB (UE) 4*32kB (UE) 2*64kB (UE) 1*128kB (E) 1*256kB (E) 2*512kB (UE) 3*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11032kB [ 2534.889909] Node 0 DMA32: 165*4kB (UME) 878*8kB (UME) 116*16kB (UME) 53*32kB (UME) 2163*64kB (UME) 155*128kB (U) 71*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 187684kB [ 2534.948559] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2534.982658] Node 1 Normal: 8246*4kB (U) 125*8kB (UME) 102*16kB (UME) 140*32kB (UE) 6277*64kB (UM) 702*128kB (U) 217*256kB (U) 12*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 593376kB [ 2535.038073] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2535.064962] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2535.096566] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2535.113878] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2535.134441] 45277 total pagecache pages [ 2535.139864] 0 pages in swap cache [ 2535.164981] Swap cache stats: add 0, delete 0, find 0/0 [ 2535.170415] Free swap = 0kB [ 2535.194435] Total swap = 0kB [ 2535.197480] 2097051 pages RAM [ 2535.200577] 0 pages HighMem/MovableOnly [ 2535.221137] 363840 pages reserved [ 2535.224609] 0 pages cma reserved [ 2535.227967] Out of memory (oom_kill_allocating_task): Kill process 31175 (systemd-journal) score 0 or sacrifice child [ 2535.253100] Killed process 31175 (systemd-journal) total-vm:46096kB, anon-rss:468kB, file-rss:0kB, shmem-rss:1728kB [ 2535.271786] oom_reaper: reaped process 31175 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1728kB 00:44:21 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x500, 0x0) pkey_mprotect(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff1000/0x4000)=nil, 0x4000, 0x4, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 00:44:21 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x484240, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)={0x101, 0x1, 0x4, 0x400, 0xffff, {0x0, 0x2710}, {0x1, 0x2, 0x8, 0x2, 0x7, 0x1, "db53d254"}, 0x8, 0x4, @fd=r1, 0x4, 0x0, r1}) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x8) openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x4, 0x90040) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x7fffffff, 0x1e, 0x1}) [ 2535.376892] systemd[1]: systemd-journald.service: Failed with result 'signal'. 00:44:22 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x484240, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)={0x101, 0x1, 0x4, 0x400, 0xffff, {0x0, 0x2710}, {0x1, 0x2, 0x8, 0x2, 0x7, 0x1, "db53d254"}, 0x8, 0x4, @fd=r1, 0x4, 0x0, r1}) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x8) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000340)={0x401, 0x2, 0x4, 0x8, 0x8, {}, {0x1, 0x8, 0xbc, 0xa2, 0xf7, 0x20, "450104da"}, 0xa87, 0x4, @fd=r3, 0x1ff}) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x4, 0x90040) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r4, 0xc00464be, &(0x7f0000000240)={0x1}) syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x1, 0x621c0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x7fffffff, 0x1e, 0x1}) [ 2535.424488] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2535.447358] systemd[1]: Stopped Journal Service. [ 2535.502769] systemd[1]: Starting Journal Service... [ 2535.789810] systemd-journald[31192]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 2536.048165] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2536.085093] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2536.100079] CPU: 1 PID: 31161 Comm: syz-executor.4 Not tainted 4.14.224-syzkaller #0 [ 2536.107992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2536.117346] Call Trace: [ 2536.119938] dump_stack+0x1b2/0x281 [ 2536.123567] warn_alloc.cold+0x96/0x1cc [ 2536.127541] ? zone_watermark_ok_safe+0x220/0x220 [ 2536.132397] __alloc_pages_nodemask+0x2127/0x2720 [ 2536.137245] ? _raw_spin_unlock_irq+0x24/0x80 [ 2536.141744] ? lock_acquire+0x170/0x3f0 [ 2536.145723] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2536.150578] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2536.156029] ? __mutex_unlock_slowpath+0x75/0x770 [ 2536.160873] alloc_pages_current+0x155/0x260 [ 2536.165284] ion_page_pool_alloc+0x118/0x1b0 [ 2536.169697] ion_system_heap_allocate+0x133/0x8c0 [ 2536.174539] ? _raw_spin_unlock+0x29/0x40 [ 2536.178685] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2536.183610] ? ion_system_contig_heap_create+0x130/0x130 [ 2536.189057] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2536.194069] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2536.198910] ion_alloc+0x27a/0x810 [ 2536.202480] ? ion_dma_buf_release+0x40/0x40 [ 2536.206887] ? __might_fault+0x177/0x1b0 [ 2536.210948] ion_ioctl+0xea/0x1f0 [ 2536.214397] ? ion_query_heaps+0x360/0x360 [ 2536.218637] ? SyS_epoll_ctl+0x1e0/0x2780 [ 2536.222784] ? ion_query_heaps+0x360/0x360 [ 2536.227014] do_vfs_ioctl+0x75a/0xff0 [ 2536.230812] ? ioctl_preallocate+0x1a0/0x1a0 [ 2536.235215] ? lock_downgrade+0x740/0x740 [ 2536.239361] ? __fget+0x225/0x360 [ 2536.242807] ? do_vfs_ioctl+0xff0/0xff0 [ 2536.246787] ? security_file_ioctl+0x83/0xb0 [ 2536.251205] SyS_ioctl+0x7f/0xb0 [ 2536.254571] ? do_vfs_ioctl+0xff0/0xff0 [ 2536.258542] do_syscall_64+0x1d5/0x640 [ 2536.262438] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2536.267622] RIP: 0033:0x465f69 [ 2536.270801] RSP: 002b:00007f1dbb0fc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2536.278502] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2536.285766] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2536.293027] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2536.300291] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2536.307580] R13: 00007fff344be07f R14: 00007f1dbb0fc300 R15: 0000000000022000 [ 2536.412741] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2536.438255] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2536.456235] CPU: 0 PID: 31194 Comm: syz-executor.2 Not tainted 4.14.224-syzkaller #0 [ 2536.464139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2536.473607] Call Trace: [ 2536.476202] dump_stack+0x1b2/0x281 [ 2536.479831] warn_alloc.cold+0x96/0x1cc [ 2536.483824] ? zone_watermark_ok_safe+0x220/0x220 [ 2536.488683] __alloc_pages_nodemask+0x2127/0x2720 [ 2536.493533] ? lock_acquire+0x170/0x3f0 [ 2536.497536] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2536.502381] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2536.507830] ? __mutex_unlock_slowpath+0x75/0x770 [ 2536.512676] alloc_pages_current+0x155/0x260 [ 2536.517088] ion_page_pool_alloc+0x118/0x1b0 [ 2536.521501] ion_system_heap_allocate+0x133/0x8c0 [ 2536.526338] ? ion_alloc+0x187/0x810 [ 2536.530040] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2536.535489] ? ion_system_contig_heap_create+0x130/0x130 [ 2536.541034] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2536.546162] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2536.551008] ion_alloc+0x204/0x810 [ 2536.554544] ? ion_dma_buf_release+0x40/0x40 [ 2536.558947] ? __might_fault+0x177/0x1b0 [ 2536.563003] ion_ioctl+0xea/0x1f0 [ 2536.566449] ? ion_query_heaps+0x360/0x360 [ 2536.570680] ? ion_query_heaps+0x360/0x360 [ 2536.574909] do_vfs_ioctl+0x75a/0xff0 [ 2536.578704] ? ioctl_preallocate+0x1a0/0x1a0 [ 2536.583117] ? lock_downgrade+0x740/0x740 [ 2536.587261] ? __fget+0x225/0x360 [ 2536.590702] ? do_vfs_ioctl+0xff0/0xff0 [ 2536.594669] ? security_file_ioctl+0x83/0xb0 [ 2536.599100] SyS_ioctl+0x7f/0xb0 [ 2536.602480] ? do_vfs_ioctl+0xff0/0xff0 [ 2536.606450] do_syscall_64+0x1d5/0x640 [ 2536.610338] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2536.615539] RIP: 0033:0x465f69 [ 2536.618720] RSP: 002b:00007fa2ca784188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2536.626423] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2536.633694] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2536.640959] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2536.648221] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2536.655489] R13: 00007fff4963426f R14: 00007fa2ca784300 R15: 0000000000022000 [ 2536.747717] systemd[1]: Started Journal Service. [ 2536.750480] warn_alloc_show_mem: 2 callbacks suppressed [ 2536.750484] Mem-Info: [ 2536.760353] active_anon:20884 inactive_anon:43260 isolated_anon:0 [ 2536.760353] active_file:950 inactive_file:5923 isolated_file:0 [ 2536.760353] unevictable:0 dirty:59 writeback:0 unstable:0 [ 2536.760353] slab_reclaimable:12063 slab_unreclaimable:113923 [ 2536.760353] mapped:48365 shmem:45817 pagetables:744 bounce:0 [ 2536.760353] free:146315 free_pcp:474 free_cma:0 [ 2536.800727] Node 0 active_anon:82152kB inactive_anon:150932kB active_file:3568kB inactive_file:21868kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:140176kB dirty:124kB writeback:0kB shmem:160960kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2536.835514] Node 1 active_anon:1384kB inactive_anon:22108kB active_file:332kB inactive_file:1824kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:53284kB dirty:112kB writeback:0kB shmem:22308kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2536.876685] Node 0 DMA free:11448kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2536.949922] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2536.964942] Node 0 DMA32 free:352204kB min:36200kB low:45248kB high:54296kB active_anon:82216kB inactive_anon:151024kB active_file:4280kB inactive_file:21676kB unevictable:0kB writepending:164kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7360kB pagetables:2364kB bounce:0kB free_pcp:884kB local_pcp:144kB free_cma:0kB [ 2537.024677] lowmem_reserve[]: 0 0 0 0 0 [ 2537.028773] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2537.062297] lowmem_reserve[]: 0 0 0 0 0 [ 2537.067299] Node 1 Normal free:307740kB min:53696kB low:67120kB high:80544kB active_anon:1384kB inactive_anon:22108kB active_file:332kB inactive_file:1724kB unevictable:0kB writepending:112kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:484kB bounce:0kB free_pcp:624kB local_pcp:0kB free_cma:0kB [ 2537.098279] lowmem_reserve[]: 0 0 0 0 0 [ 2537.103072] Node 0 DMA: 56*4kB (UE) 27*8kB (UE) 9*16kB (UE) 4*32kB (UE) 2*64kB (UE) 1*128kB (E) 1*256kB (E) 2*512kB (UE) 3*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11464kB [ 2537.119399] Node 0 DMA32: 28*4kB (UME) 128*8kB (ME) 1787*16kB (UME) 3744*32kB (UME) 960*64kB (UM) 65*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 219296kB [ 2537.135268] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2537.146751] Node 1 Normal: 26192*4kB (UM) 5446*8kB (UME) 2957*16kB (UME) 2224*32kB (UE) 428*64kB (U) 106*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 307776kB [ 2537.162846] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2537.172446] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2537.181798] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2537.190720] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2537.200455] 52850 total pagecache pages [ 2537.205189] 0 pages in swap cache [ 2537.208703] Swap cache stats: add 0, delete 0, find 0/0 [ 2537.215129] Free swap = 0kB [ 2537.218208] Total swap = 0kB [ 2537.223302] 2097051 pages RAM [ 2537.226461] 0 pages HighMem/MovableOnly [ 2537.230472] 363840 pages reserved [ 2537.235246] 0 pages cma reserved [ 2539.118518] IPVS: ftp: loaded support on port[0] = 21 [ 2539.496593] chnl_net:caif_netlink_parms(): no params data found [ 2539.749752] oom_reaper: reaped process 31194 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2539.793189] kworker/u4:1 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 [ 2539.809762] kworker/u4:1 cpuset=/ mems_allowed=0-1 [ 2539.814916] CPU: 1 PID: 31313 Comm: kworker/u4:1 Not tainted 4.14.224-syzkaller #0 [ 2539.823152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2539.832494] Call Trace: [ 2539.835073] dump_stack+0x1b2/0x281 [ 2539.838679] dump_header+0x178/0x82f [ 2539.842385] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2539.847468] ? ___ratelimit+0x2cd/0x530 [ 2539.851422] oom_kill_process.cold+0x10/0xb18 [ 2539.855897] ? lock_downgrade+0x740/0x740 [ 2539.860025] out_of_memory+0x2dc/0x1190 [ 2539.863980] ? oom_killer_disable+0x1c0/0x1c0 [ 2539.868453] ? mutex_trylock+0x152/0x1a0 [ 2539.872494] __alloc_pages_nodemask+0x23e1/0x2720 [ 2539.877317] ? do_execveat_common+0x9a9/0x1f30 [ 2539.881876] ? call_usermodehelper_exec_async+0x2ed/0x510 [ 2539.887393] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2539.892229] ? sched_ttwu_pending+0x1a0/0x1a0 [ 2539.896703] ? sched_ttwu_pending+0x1a0/0x1a0 [ 2539.901176] ? fs_reclaim_release+0xd0/0x110 [ 2539.905566] alloc_pages_current+0x155/0x260 [ 2539.909953] __get_free_pages+0xb/0x40 [ 2539.913816] pgd_alloc+0x20/0x2b0 [ 2539.917251] mm_init+0x578/0x960 [ 2539.920595] mm_alloc+0xa2/0xc0 [ 2539.923851] do_execveat_common+0x9a9/0x1f30 [ 2539.928239] ? copy_strings_kernel+0x110/0x110 [ 2539.932812] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2539.938242] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2539.943238] do_execve+0x33/0x50 [ 2539.946584] call_usermodehelper_exec_async+0x2ed/0x510 [ 2539.951925] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 2539.957366] ret_from_fork+0x24/0x30 [ 2539.966174] Mem-Info: [ 2539.968608] active_anon:20936 inactive_anon:43286 isolated_anon:0 [ 2539.968608] active_file:27 inactive_file:23 isolated_file:0 [ 2539.968608] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2539.968608] slab_reclaimable:12054 slab_unreclaimable:113235 [ 2539.968608] mapped:52601 shmem:45844 pagetables:764 bounce:0 [ 2539.968608] free:13921 free_pcp:25 free_cma:0 [ 2539.974528] syz-executor.2: [ 2540.002021] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2540.006724] Node 0 active_anon:82376kB inactive_anon:151036kB active_file:28kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:158936kB dirty:0kB writeback:0kB shmem:161068kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2540.021191] syz-executor.4 cpuset= [ 2540.048909] Node 1 active_anon:1352kB inactive_anon:22108kB active_file:32kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:51396kB dirty:0kB writeback:0kB shmem:22308kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2540.049178] page allocation failure: order:0 [ 2540.052509] Node 0 [ 2540.086404] / [ 2540.087791] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2540.088668] mems_allowed=0-1 [ 2540.090360] lowmem_reserve[]: [ 2540.120745] CPU: 0 PID: 31161 Comm: syz-executor.4 Not tainted 4.14.224-syzkaller #0 [ 2540.126022] 0 [ 2540.131716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2540.131720] Call Trace: [ 2540.131737] dump_stack+0x1b2/0x281 [ 2540.131749] warn_alloc.cold+0x96/0x1cc [ 2540.131762] ? zone_watermark_ok_safe+0x220/0x220 [ 2540.131770] ? usleep_range+0x130/0x130 [ 2540.131778] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2540.131789] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2540.131800] ? run_timer_softirq+0x5a0/0x5a0 [ 2540.137465] 2717 [ 2540.142946] __alloc_pages_nodemask+0x2127/0x2720 [ 2540.142963] ? lock_acquire+0x170/0x3f0 [ 2540.142976] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2540.142987] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2540.143003] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2540.143021] alloc_pages_current+0x155/0x260 [ 2540.143033] ion_page_pool_alloc+0x118/0x1b0 [ 2540.148885] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2540.149213] ion_system_heap_allocate+0x133/0x8c0 [ 2540.155110] 2718 [ 2540.157983] ? _raw_spin_unlock+0x29/0x40 [ 2540.165293] (null) [ 2540.167014] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2540.172130] Bluetooth: hci2 command 0x0409 tx timeout [ 2540.176412] ? ion_system_contig_heap_create+0x130/0x130 [ 2540.180514] 2718 [ 2540.183361] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2540.183373] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2540.183384] ion_alloc+0x27a/0x810 [ 2540.183397] ? ion_dma_buf_release+0x40/0x40 [ 2540.183409] ? __might_fault+0x177/0x1b0 [ 2540.183421] ion_ioctl+0xea/0x1f0 [ 2540.183430] ? ion_query_heaps+0x360/0x360 [ 2540.183440] ? SyS_epoll_ctl+0x1e0/0x2780 [ 2540.183449] ? ion_query_heaps+0x360/0x360 [ 2540.183458] do_vfs_ioctl+0x75a/0xff0 [ 2540.183470] ? ioctl_preallocate+0x1a0/0x1a0 [ 2540.192920] syz-executor.2 cpuset= [ 2540.196726] ? lock_downgrade+0x740/0x740 [ 2540.205081] 2718 [ 2540.206560] ? __fget+0x225/0x360 [ 2540.218364] ? do_vfs_ioctl+0xff0/0xff0 [ 2540.225981] / [ 2540.229353] ? security_file_ioctl+0x83/0xb0 [ 2540.233962] mems_allowed=0-1 [ 2540.236385] SyS_ioctl+0x7f/0xb0 [ 2540.244345] Node 0 [ 2540.246980] ? do_vfs_ioctl+0xff0/0xff0 [ 2540.249040] DMA32 free:17840kB min:36200kB low:45248kB high:54296kB active_anon:82296kB inactive_anon:151036kB active_file:40kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7392kB pagetables:2572kB bounce:0kB free_pcp:92kB local_pcp:0kB free_cma:0kB [ 2540.254024] do_syscall_64+0x1d5/0x640 [ 2540.254041] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2540.254049] RIP: 0033:0x465f69 [ 2540.254054] RSP: 002b:00007f1dbb0fc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2540.254064] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2540.254068] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2540.254073] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2540.254078] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2540.254083] R13: 00007fff344be07f R14: 00007f1dbb0fc300 R15: 0000000000022000 [ 2540.271823] warn_alloc_show_mem: 1 callbacks suppressed [ 2540.271826] Mem-Info: [ 2540.275040] CPU: 1 PID: 31194 Comm: syz-executor.2 Not tainted 4.14.224-syzkaller #0 [ 2540.278785] active_anon:20912 inactive_anon:43286 isolated_anon:0 [ 2540.278785] active_file:18 inactive_file:16 isolated_file:0 [ 2540.278785] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2540.278785] slab_reclaimable:12054 slab_unreclaimable:113241 [ 2540.278785] mapped:52583 shmem:45844 pagetables:764 bounce:0 [ 2540.278785] free:13976 free_pcp:27 free_cma:0 [ 2540.282896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2540.282900] Call Trace: [ 2540.282917] dump_stack+0x1b2/0x281 [ 2540.282930] warn_alloc.cold+0x96/0x1cc [ 2540.282941] ? zone_watermark_ok_safe+0x220/0x220 [ 2540.282950] ? usleep_range+0x130/0x130 [ 2540.282959] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2540.282971] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2540.282983] ? run_timer_softirq+0x5a0/0x5a0 [ 2540.293236] Node 0 active_anon:82296kB inactive_anon:151036kB active_file:40kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:158936kB dirty:0kB writeback:0kB shmem:161068kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2540.295378] __alloc_pages_nodemask+0x2127/0x2720 [ 2540.298897] Node 1 active_anon:1352kB inactive_anon:22108kB active_file:32kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:51396kB dirty:0kB writeback:0kB shmem:22308kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2540.303052] ? lock_acquire+0x170/0x3f0 [ 2540.303067] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2540.305100] Node 0 [ 2540.308534] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2540.308550] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2540.312549] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2540.314218] ? __sanitizer_cov_trace_pc+0x3d/0x50 [ 2540.318596] lowmem_reserve[]: [ 2540.321689] alloc_pages_current+0x155/0x260 [ 2540.321701] ion_page_pool_alloc+0x118/0x1b0 [ 2540.321712] ion_system_heap_allocate+0x133/0x8c0 [ 2540.325053] 0 [ 2540.327280] ? ion_alloc+0x187/0x810 [ 2540.331244] 2717 [ 2540.359505] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2540.359516] ? ion_system_contig_heap_create+0x130/0x130 [ 2540.359531] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2540.363405] 2718 [ 2540.368566] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2540.371748] 2718 [ 2540.379422] ion_alloc+0x204/0x810 [ 2540.390663] 2718 [ 2540.393935] ? ion_dma_buf_release+0x40/0x40 [ 2540.408437] ? __might_fault+0x177/0x1b0 [ 2540.415698] Node 0 [ 2540.421033] ion_ioctl+0xea/0x1f0 [ 2540.421047] ? ion_query_heaps+0x360/0x360 [ 2540.423444] DMA32 free:17840kB min:36200kB low:45248kB high:54296kB active_anon:82296kB inactive_anon:151036kB active_file:40kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7392kB pagetables:2572kB bounce:0kB free_pcp:92kB local_pcp:92kB free_cma:0kB [ 2540.431314] ? ion_query_heaps+0x360/0x360 [ 2540.431325] do_vfs_ioctl+0x75a/0xff0 [ 2540.431345] ? ioctl_preallocate+0x1a0/0x1a0 [ 2540.464476] lowmem_reserve[]: [ 2540.473800] ? lock_downgrade+0x740/0x740 [ 2540.473813] ? __fget+0x225/0x360 [ 2540.473822] ? do_vfs_ioctl+0xff0/0xff0 [ 2540.476382] 0 [ 2540.479989] ? security_file_ioctl+0x83/0xb0 [ 2540.483951] 0 [ 2540.488761] SyS_ioctl+0x7f/0xb0 [ 2540.492724] 0 [ 2540.497938] ? do_vfs_ioctl+0xff0/0xff0 [ 2540.502979] 0 [ 2540.507350] do_syscall_64+0x1d5/0x640 [ 2540.535200] 0 [ 2540.540006] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2540.571083] RIP: 0033:0x465f69 [ 2540.571088] RSP: 002b:00007fa2ca784188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2540.575918] Node 0 [ 2540.578152] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2540.582651] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2540.588048] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2540.588055] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2540.613632] lowmem_reserve[]: [ 2540.618455] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2540.621556] 0 [ 2540.625924] R13: 00007fff4963426f R14: 00007fa2ca784300 R15: 0000000000022000 [ 2540.626859] lowmem_reserve[]: [ 2540.640683] 0 0 0 0 [ 2540.640699] Node 1 Normal free:27096kB min:53696kB low:67120kB high:80544kB active_anon:1352kB inactive_anon:22108kB active_file:32kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:484kB bounce:0kB free_pcp:16kB local_pcp:16kB free_cma:0kB [ 2540.640719] lowmem_reserve[]: 0 0 0 0 0 [ 2540.640738] Node 0 DMA: 2*4kB (UE) 2*8kB (UE) [ 2540.642795] 0 0 [ 2540.648236] 2*16kB [ 2540.653697] 0 0 0 [ 2540.653709] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2540.653725] lowmem_reserve[]: 0 0 0 0 0 [ 2540.653743] Node 1 Normal free:27096kB min:53696kB low:67120kB high:80544kB active_anon:1352kB inactive_anon:22108kB active_file:32kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:484kB bounce:0kB free_pcp:16kB local_pcp:0kB free_cma:0kB [ 2540.653761] lowmem_reserve[]: [ 2540.669135] (UE) [ 2540.671282] 0 0 [ 2540.673381] 1*32kB [ 2540.677742] 0 [ 2540.692484] (E) [ 2540.720770] 0 0 [ 2540.720782] Node 0 DMA: 2*4kB (UE) 2*8kB (UE) 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 3*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10968kB [ 2540.720849] Node 0 DMA32: 254*4kB [ 2540.735693] 2*64kB [ 2540.736405] (UME) [ 2540.740533] (UE) [ 2540.744035] 201*8kB (UME) 133*16kB (UME) 41*32kB (UME) 18*64kB (M) 65*128kB (UM) 9*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17840kB [ 2540.744082] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB [ 2540.754267] 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 3*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10968kB [ 2540.754303] Node 0 DMA32: 254*4kB (UME) [ 2540.756573] 0*1024kB [ 2540.759444] 201*8kB (UME) [ 2540.761282] 0*2048kB 0*4096kB = 0kB [ 2540.761292] Node 1 Normal: 36*4kB (UM) 23*8kB (ME) 25*16kB (UME) [ 2540.772518] 133*16kB [ 2540.775652] 14*32kB [ 2540.777906] (UME) [ 2540.781133] (ME) [ 2540.791844] 41*32kB [ 2540.800662] 5*64kB [ 2540.825223] (UME) [ 2540.838452] (UM) [ 2540.842948] 18*64kB [ 2540.848439] 114*128kB [ 2540.850221] (M) [ 2540.866391] (UM) [ 2540.893578] 65*128kB [ 2540.905168] 43*256kB [ 2540.906685] (UM) [ 2540.941115] (UM) [ 2540.966521] 9*256kB [ 2540.976896] 0*512kB [ 2540.977859] (UM) [ 2540.979822] 0*1024kB [ 2540.998529] 0*512kB [ 2541.005653] 0*2048kB [ 2541.021350] 0*1024kB [ 2541.033110] 0*4096kB [ 2541.038263] 0*2048kB [ 2541.038680] = 27096kB [ 2541.038688] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2541.041116] 0*4096kB = 17840kB [ 2541.041123] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2541.041170] Node 1 Normal: 36*4kB (UM) 23*8kB (ME) 25*16kB (UME) [ 2541.047308] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2541.047627] 14*32kB [ 2541.057644] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2541.062416] (ME) [ 2541.067193] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2541.068357] 5*64kB [ 2541.070493] 45878 total pagecache pages [ 2541.073604] (UM) [ 2541.078634] 0 pages in swap cache [ 2541.079399] 114*128kB [ 2541.084788] Swap cache stats: add 0, delete 0, find 0/0 [ 2541.087657] (UM) [ 2541.088345] Free swap = 0kB [ 2541.090385] 43*256kB [ 2541.098331] Total swap = 0kB [ 2541.099499] (UM) [ 2541.105827] 2097051 pages RAM [ 2541.106625] 0*512kB [ 2541.109011] 0 pages HighMem/MovableOnly [ 2541.111427] 0*1024kB 0*2048kB 0*4096kB = 27096kB [ 2541.111446] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2541.111453] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2541.111459] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2541.111464] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2541.111468] 45878 total pagecache pages [ 2541.111479] 0 pages in swap cache [ 2541.111485] Swap cache stats: add 0, delete 0, find 0/0 [ 2541.119342] 363840 pages reserved [ 2541.122732] Free swap = 0kB [ 2541.122736] Total swap = 0kB [ 2541.122742] 2097051 pages RAM [ 2541.122745] 0 pages HighMem/MovableOnly [ 2541.122749] 363840 pages reserved [ 2541.122752] 0 pages cma reserved [ 2541.293043] 0 pages cma reserved [ 2541.296901] Out of memory: Kill process 7978 (syz-fuzzer) score 8 or sacrifice child [ 2541.305661] Killed process 31196 (syz-executor.3) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 2541.354996] oom_reaper: reaped process 31196 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 00:44:28 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x484240, 0x0) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x8) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x4, 0x90040) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x7fffffff, 0x1e, 0x1}) 00:44:28 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x484240, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)={0x101, 0x1, 0x4, 0x400, 0xffff, {0x0, 0x2710}, {0x1, 0x2, 0x8, 0x2, 0x7, 0x1, "db53d254"}, 0x8, 0x4, @fd=r1, 0x4, 0x0, r1}) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x8) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000340)={0x401, 0x2, 0x4, 0x8, 0x8, {}, {0x1, 0x8, 0xbc, 0xa2, 0xf7, 0x20, "450104da"}, 0xa87, 0x4, @fd=r3, 0x1ff}) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x4, 0x90040) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r4, 0xc00464be, &(0x7f0000000240)={0x1}) syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x1, 0x621c0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x7fffffff, 0x1e, 0x1}) 00:44:28 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff1000/0x4000)=nil, 0x4000, 0x4, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 00:44:28 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x484240, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)={0x101, 0x1, 0x4, 0x400, 0xffff, {0x0, 0x2710}, {0x1, 0x2, 0x8, 0x2, 0x7, 0x1, "db53d254"}, 0x8, 0x4, @fd=r1, 0x4, 0x0, r1}) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x8) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000340)={0x401, 0x2, 0x4, 0x8, 0x8, {}, {0x1, 0x8, 0xbc, 0xa2, 0xf7, 0x20, "450104da"}, 0xa87, 0x4, @fd=r3, 0x1ff}) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x4, 0x90040) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r4, 0xc00464be, &(0x7f0000000240)={0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x7fffffff, 0x1e, 0x1}) 00:44:28 executing program 5: pkey_mprotect(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff1000/0x4000)=nil, 0x4000, 0x4, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 00:44:28 executing program 5: pkey_mprotect(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff1000/0x4000)=nil, 0x4000, 0x4, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 00:44:28 executing program 5: pkey_mprotect(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff1000/0x4000)=nil, 0x4000, 0x4, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 00:44:28 executing program 5: openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) pkey_mprotect(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff1000/0x4000)=nil, 0x4000, 0x4, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) [ 2542.294903] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) 00:44:29 executing program 5: openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) pkey_mprotect(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff1000/0x4000)=nil, 0x4000, 0x4, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) [ 2542.372568] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2542.372630] syz-executor.1: [ 2542.384881] syz-executor.0: [ 2542.390049] syz-executor.2 cpuset= [ 2542.401271] page allocation failure: order:4 [ 2542.405131] page allocation failure: order:4 [ 2542.406523] / [ 2542.414552] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2542.416003] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2542.416349] (null) [ 2542.432894] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2542.438107] mems_allowed=0-1 [ 2542.441389] CPU: 1 PID: 31194 Comm: syz-executor.2 Not tainted 4.14.224-syzkaller #0 [ 2542.441757] (null) [ 2542.449261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2542.449266] Call Trace: [ 2542.449283] dump_stack+0x1b2/0x281 [ 2542.449298] warn_alloc.cold+0x96/0x1cc [ 2542.449310] ? zone_watermark_ok_safe+0x220/0x220 [ 2542.469460] syz-executor.1 cpuset= [ 2542.470951] __alloc_pages_nodemask+0x2127/0x2720 [ 2542.470971] ? lock_acquire+0x170/0x3f0 [ 2542.470985] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2542.471001] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2542.477008] / [ 2542.479365] ? __mutex_unlock_slowpath+0x75/0x770 [ 2542.493048] mems_allowed=0-1 [ 2542.498426] alloc_pages_current+0x155/0x260 [ 2542.498443] ion_page_pool_alloc+0x118/0x1b0 [ 2542.498454] ion_system_heap_allocate+0x133/0x8c0 [ 2542.521677] ? _raw_spin_unlock+0x29/0x40 [ 2542.525822] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2542.530748] ? ion_system_contig_heap_create+0x130/0x130 [ 2542.536190] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2542.541202] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2542.546037] ion_alloc+0x27a/0x810 [ 2542.549575] ? ion_dma_buf_release+0x40/0x40 [ 2542.553982] ? __might_fault+0x177/0x1b0 [ 2542.558039] ion_ioctl+0xea/0x1f0 [ 2542.561484] ? ion_query_heaps+0x360/0x360 [ 2542.565705] ? ion_query_heaps+0x360/0x360 [ 2542.569927] do_vfs_ioctl+0x75a/0xff0 [ 2542.573723] ? ioctl_preallocate+0x1a0/0x1a0 [ 2542.578129] ? lock_downgrade+0x740/0x740 [ 2542.582274] ? __fget+0x225/0x360 [ 2542.585720] ? do_vfs_ioctl+0xff0/0xff0 [ 2542.589682] ? security_file_ioctl+0x83/0xb0 [ 2542.594078] SyS_ioctl+0x7f/0xb0 [ 2542.597433] ? do_vfs_ioctl+0xff0/0xff0 [ 2542.601667] do_syscall_64+0x1d5/0x640 [ 2542.605578] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2542.610759] RIP: 0033:0x465f69 [ 2542.613944] RSP: 002b:00007fa2ca784188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2542.621642] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2542.628904] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2542.636162] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2542.643423] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2542.650692] R13: 00007fff4963426f R14: 00007fa2ca784300 R15: 0000000000022000 [ 2542.657973] CPU: 0 PID: 31324 Comm: syz-executor.1 Not tainted 4.14.224-syzkaller #0 [ 2542.665862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2542.669020] syz-executor.0 cpuset= [ 2542.675294] Call Trace: [ 2542.675316] dump_stack+0x1b2/0x281 [ 2542.675330] warn_alloc.cold+0x96/0x1cc [ 2542.675342] ? zone_watermark_ok_safe+0x220/0x220 [ 2542.675362] __alloc_pages_nodemask+0x2127/0x2720 [ 2542.675377] ? lock_acquire+0x170/0x3f0 [ 2542.675390] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2542.675406] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2542.685490] / [ 2542.689055] ? __mutex_unlock_slowpath+0x75/0x770 [ 2542.702719] mems_allowed=0-1 [ 2542.707524] alloc_pages_current+0x155/0x260 [ 2542.707540] ion_page_pool_alloc+0x118/0x1b0 [ 2542.707551] ion_system_heap_allocate+0x133/0x8c0 [ 2542.736267] ? ion_alloc+0x187/0x810 [ 2542.739981] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2542.745413] ? ion_system_contig_heap_create+0x130/0x130 [ 2542.750846] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2542.755844] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2542.760691] ion_alloc+0x204/0x810 [ 2542.764249] ? ion_dma_buf_release+0x40/0x40 [ 2542.768642] ? __might_fault+0x177/0x1b0 [ 2542.772780] ion_ioctl+0xea/0x1f0 [ 2542.776217] ? ion_query_heaps+0x360/0x360 [ 2542.780460] ? ion_query_heaps+0x360/0x360 [ 2542.784695] do_vfs_ioctl+0x75a/0xff0 [ 2542.788494] ? ioctl_preallocate+0x1a0/0x1a0 [ 2542.792899] ? lock_downgrade+0x740/0x740 [ 2542.797037] ? __fget+0x225/0x360 [ 2542.800480] ? do_vfs_ioctl+0xff0/0xff0 [ 2542.804447] ? security_file_ioctl+0x83/0xb0 [ 2542.808864] SyS_ioctl+0x7f/0xb0 [ 2542.812219] ? do_vfs_ioctl+0xff0/0xff0 [ 2542.816190] do_syscall_64+0x1d5/0x640 [ 2542.820068] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2542.825274] RIP: 0033:0x465f69 [ 2542.828456] RSP: 002b:00007f747aa45188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2542.836159] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2542.843502] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2542.850758] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2542.858032] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2542.865299] R13: 00007fff04d0b2bf R14: 00007f747aa45300 R15: 0000000000022000 [ 2542.872576] CPU: 1 PID: 31325 Comm: syz-executor.4 Not tainted 4.14.224-syzkaller #0 [ 2542.880464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2542.889820] Call Trace: [ 2542.892416] dump_stack+0x1b2/0x281 [ 2542.896052] warn_alloc.cold+0x96/0x1cc [ 2542.900033] ? zone_watermark_ok_safe+0x220/0x220 [ 2542.904899] __alloc_pages_nodemask+0x2127/0x2720 [ 2542.909748] ? _raw_spin_unlock_irq+0x5a/0x80 [ 2542.914246] ? finish_task_switch+0x178/0x610 [ 2542.918743] ? finish_task_switch+0x14d/0x610 [ 2542.923243] ? lock_acquire+0x170/0x3f0 [ 2542.927225] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2542.932166] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2542.937621] ? __mutex_unlock_slowpath+0x75/0x770 [ 2542.942464] ? alloc_pages_current+0x123/0x260 [ 2542.947049] alloc_pages_current+0x155/0x260 [ 2542.951462] ion_page_pool_alloc+0x118/0x1b0 [ 2542.955872] ion_system_heap_allocate+0x133/0x8c0 [ 2542.960716] ? ion_alloc+0x187/0x810 [ 2542.964433] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2542.970098] ? ion_system_contig_heap_create+0x130/0x130 [ 2542.975556] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2542.980579] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2542.985423] ion_alloc+0x204/0x810 [ 2542.988967] ? ion_dma_buf_release+0x40/0x40 [ 2542.993378] ? __might_fault+0x177/0x1b0 [ 2542.997442] ion_ioctl+0xea/0x1f0 [ 2543.000894] ? ion_query_heaps+0x360/0x360 [ 2543.005829] ? SyS_epoll_ctl+0x1e0/0x2780 [ 2543.010007] ? ion_query_heaps+0x360/0x360 [ 2543.014242] do_vfs_ioctl+0x75a/0xff0 [ 2543.018075] ? ioctl_preallocate+0x1a0/0x1a0 [ 2543.022488] ? lock_downgrade+0x740/0x740 [ 2543.026644] ? __fget+0x225/0x360 [ 2543.030097] ? do_vfs_ioctl+0xff0/0xff0 [ 2543.034070] ? security_file_ioctl+0x83/0xb0 [ 2543.038477] SyS_ioctl+0x7f/0xb0 [ 2543.041842] ? do_vfs_ioctl+0xff0/0xff0 [ 2543.045818] do_syscall_64+0x1d5/0x640 [ 2543.049713] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2543.054904] RIP: 0033:0x465f69 [ 2543.058085] RSP: 002b:00007f1dbb0fc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2543.065812] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2543.073077] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2543.080344] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2543.087613] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2543.094886] R13: 00007fff344be07f R14: 00007f1dbb0fc300 R15: 0000000000022000 [ 2543.107909] CPU: 1 PID: 31320 Comm: syz-executor.0 Not tainted 4.14.224-syzkaller #0 [ 2543.115168] warn_alloc_show_mem: 1 callbacks suppressed [ 2543.115172] Mem-Info: [ 2543.115796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2543.127818] active_anon:20906 inactive_anon:43284 isolated_anon:0 [ 2543.127818] active_file:2036 inactive_file:3430 isolated_file:0 [ 2543.127818] unevictable:0 dirty:36 writeback:0 unstable:0 [ 2543.127818] slab_reclaimable:12054 slab_unreclaimable:112312 [ 2543.127818] mapped:48006 shmem:45840 pagetables:772 bounce:0 [ 2543.127818] free:209015 free_pcp:692 free_cma:0 [ 2543.132924] Call Trace: [ 2543.132944] dump_stack+0x1b2/0x281 [ 2543.132958] warn_alloc.cold+0x96/0x1cc [ 2543.132969] ? zone_watermark_ok_safe+0x220/0x220 [ 2543.132994] __alloc_pages_nodemask+0x2127/0x2720 [ 2543.186568] ? __schedule+0x893/0x1de0 [ 2543.190467] ? lock_acquire+0x170/0x3f0 [ 2543.195593] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2543.200481] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2543.205942] ? __mutex_unlock_slowpath+0x75/0x770 [ 2543.207269] Node 0 active_anon:82296kB inactive_anon:151028kB active_file:8116kB inactive_file:13688kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:140628kB dirty:132kB writeback:0kB shmem:161052kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2543.210790] alloc_pages_current+0x155/0x260 [ 2543.210806] ion_page_pool_alloc+0x118/0x1b0 [ 2543.210816] ion_system_heap_allocate+0x133/0x8c0 [ 2543.210827] ? ion_alloc+0x187/0x810 [ 2543.256644] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2543.262098] ? ion_system_contig_heap_create+0x130/0x130 [ 2543.267560] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2543.272581] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2543.274399] Node 1 active_anon:1328kB inactive_anon:22108kB active_file:28kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:51396kB dirty:12kB writeback:0kB shmem:22308kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2543.277423] ion_alloc+0x204/0x810 [ 2543.277438] ? ion_dma_buf_release+0x40/0x40 [ 2543.315413] ? __might_fault+0x177/0x1b0 [ 2543.319485] ion_ioctl+0xea/0x1f0 [ 2543.322944] ? ion_query_heaps+0x360/0x360 [ 2543.327182] ? ion_query_heaps+0x360/0x360 [ 2543.331419] do_vfs_ioctl+0x75a/0xff0 [ 2543.335223] ? ioctl_preallocate+0x1a0/0x1a0 [ 2543.339625] ? lock_downgrade+0x740/0x740 [ 2543.342584] Node 0 [ 2543.343860] ? __fget+0x225/0x360 [ 2543.343869] ? do_vfs_ioctl+0xff0/0xff0 [ 2543.343880] ? security_file_ioctl+0x83/0xb0 [ 2543.347242] DMA free:11436kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2543.349555] SyS_ioctl+0x7f/0xb0 [ 2543.349564] ? do_vfs_ioctl+0xff0/0xff0 [ 2543.349576] do_syscall_64+0x1d5/0x640 [ 2543.360131] lowmem_reserve[]: [ 2543.383428] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2543.383437] RIP: 0033:0x465f69 [ 2543.383442] RSP: 002b:00007fb3e357a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2543.383453] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2543.383458] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2543.383466] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2543.432627] 0 [ 2543.435816] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2543.435822] R13: 00007fffc0af773f R14: 00007fb3e357a300 R15: 0000000000022000 [ 2543.457086] 2717 2718 2718 2718 [ 2543.477403] Node 0 DMA32 free:552684kB min:36200kB low:45248kB high:54296kB active_anon:82296kB inactive_anon:151028kB active_file:8116kB inactive_file:13688kB unevictable:0kB writepending:132kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7392kB pagetables:2688kB bounce:0kB free_pcp:1440kB local_pcp:672kB free_cma:0kB [ 2543.514826] lowmem_reserve[]: 0 0 0 0 0 [ 2543.521356] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2543.554559] lowmem_reserve[]: 0 0 0 0 0 [ 2543.559684] Node 1 Normal free:483192kB min:53696kB low:67120kB high:80544kB active_anon:1328kB inactive_anon:22108kB active_file:28kB inactive_file:32kB unevictable:0kB writepending:12kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:400kB bounce:0kB free_pcp:1408kB local_pcp:672kB free_cma:0kB [ 2543.652094] lowmem_reserve[]: 0 0 0 0 0 [ 2543.660692] Node 0 DMA: 58*4kB (UE) 29*8kB (UE) 11*16kB (UE) 2*32kB (UE) 2*64kB (UE) 1*128kB (E) 1*256kB (E) 2*512kB (UE) 3*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11456kB [ 2543.692535] Node 0 DMA32: 3748*4kB (UMH) 13743*8kB (UMEH) 9999*16kB (UMEH) 5793*32kB (UMEH) 991*64kB (UMH) 31*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 537688kB [ 2543.711112] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2543.725198] Node 1 Normal: 22812*4kB (UM) 10969*8kB (UE) 4921*16kB (UME) 3237*32kB (UME) 2013*64kB (U) 43*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 495912kB [ 2543.741274] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2543.750304] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2543.759256] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2543.768457] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2543.777374] 51437 total pagecache pages [ 2543.782559] 0 pages in swap cache [ 2543.788307] Swap cache stats: add 0, delete 0, find 0/0 [ 2543.794075] Free swap = 0kB [ 2543.797191] Total swap = 0kB [ 2543.800294] 2097051 pages RAM [ 2543.813881] 0 pages HighMem/MovableOnly [ 2543.822625] 363840 pages reserved [ 2543.826222] 0 pages cma reserved [ 2544.472738] bond0 (unregistering): Released all slaves [ 2545.091057] syz-executor.1 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2545.123410] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2545.128574] CPU: 1 PID: 29669 Comm: syz-executor.1 Not tainted 4.14.224-syzkaller #0 [ 2545.136543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2545.145903] Call Trace: [ 2545.148507] dump_stack+0x1b2/0x281 [ 2545.152116] dump_header+0x178/0x82f [ 2545.155822] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2545.160902] ? ___ratelimit+0x2cd/0x530 [ 2545.164855] oom_kill_process.cold+0x10/0xb18 [ 2545.169334] out_of_memory+0xe3e/0x1190 [ 2545.173288] ? oom_killer_disable+0x1c0/0x1c0 [ 2545.177764] ? mutex_trylock+0x152/0x1a0 [ 2545.181809] __alloc_pages_nodemask+0x23e1/0x2720 [ 2545.186639] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2545.191523] alloc_pages_current+0x155/0x260 [ 2545.195933] filemap_fault+0xea3/0x1980 [ 2545.199892] ext4_filemap_fault+0x84/0xb0 [ 2545.204019] __do_fault+0xfa/0x380 [ 2545.207542] __handle_mm_fault+0x2497/0x4620 [ 2545.211929] ? vm_insert_page+0x7c0/0x7c0 [ 2545.216070] ? nanosleep_copyout+0x100/0x100 [ 2545.220465] handle_mm_fault+0x391/0x860 [ 2545.224506] __do_page_fault+0x549/0xad0 [ 2545.228557] ? spurious_fault+0x640/0x640 [ 2545.232684] ? do_page_fault+0x60/0x500 [ 2545.236636] ? page_fault+0x2f/0x50 [ 2545.240243] page_fault+0x45/0x50 [ 2545.243677] RIP: 26cdfe:0x8 [ 2545.246586] RSP: 0013:00007fff04d0b57c EFLAGS: 00000000 [ 2545.257220] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2545.295878] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2545.310050] CPU: 0 PID: 31194 Comm: syz-executor.2 Not tainted 4.14.224-syzkaller #0 [ 2545.317940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2545.327285] Call Trace: [ 2545.329872] dump_stack+0x1b2/0x281 [ 2545.333497] warn_alloc.cold+0x96/0x1cc [ 2545.337466] ? zone_watermark_ok_safe+0x220/0x220 [ 2545.342302] ? usleep_range+0x130/0x130 [ 2545.346273] ? try_to_free_pages+0x23f/0x6e0 [ 2545.350673] ? _find_next_bit+0xdb/0x100 [ 2545.354727] ? run_timer_softirq+0x5a0/0x5a0 [ 2545.359135] __alloc_pages_nodemask+0x2127/0x2720 [ 2545.363977] ? lock_acquire+0x170/0x3f0 [ 2545.367951] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2545.372785] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2545.377279] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2545.382728] ? retint_kernel+0x2d/0x2d [ 2545.386615] alloc_pages_current+0x155/0x260 [ 2545.391028] ion_page_pool_alloc+0x118/0x1b0 [ 2545.395432] ion_system_heap_allocate+0x133/0x8c0 [ 2545.400270] ? _raw_spin_unlock+0x29/0x40 [ 2545.404497] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2545.409429] ? ion_system_contig_heap_create+0x130/0x130 [ 2545.414871] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2545.419878] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2545.424719] ion_alloc+0x27a/0x810 [ 2545.428260] ? ion_dma_buf_release+0x40/0x40 [ 2545.431981] Mem-Info: [ 2545.432660] ? __might_fault+0x177/0x1b0 [ 2545.435063] active_anon:20958 inactive_anon:43284 isolated_anon:0 [ 2545.435063] active_file:19 inactive_file:19 isolated_file:0 [ 2545.435063] unevictable:0 dirty:25 writeback:0 unstable:0 [ 2545.435063] slab_reclaimable:12051 slab_unreclaimable:114781 [ 2545.435063] mapped:52662 shmem:45840 pagetables:818 bounce:0 [ 2545.435063] free:13780 free_pcp:0 free_cma:0 [ 2545.439106] ion_ioctl+0xea/0x1f0 [ 2545.475668] ? ion_query_heaps+0x360/0x360 [ 2545.479905] ? ion_query_heaps+0x360/0x360 [ 2545.484134] do_vfs_ioctl+0x75a/0xff0 [ 2545.487927] ? ioctl_preallocate+0x1a0/0x1a0 [ 2545.492326] ? lock_downgrade+0x740/0x740 [ 2545.496474] ? __fget+0x225/0x360 [ 2545.499919] ? do_vfs_ioctl+0xff0/0xff0 [ 2545.503894] ? security_file_ioctl+0x83/0xb0 [ 2545.508304] SyS_ioctl+0x7f/0xb0 [ 2545.511664] ? do_vfs_ioctl+0xff0/0xff0 [ 2545.515637] do_syscall_64+0x1d5/0x640 [ 2545.519542] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2545.520279] Node 0 active_anon:82504kB inactive_anon:151028kB active_file:48kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:159252kB dirty:88kB writeback:0kB shmem:161052kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2545.524731] RIP: 0033:0x465f69 [ 2545.555761] RSP: 002b:00007fa2ca784188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2545.563473] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2545.570734] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2545.577994] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2545.585434] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2545.592698] R13: 00007fff4963426f R14: 00007fa2ca784300 R15: 0000000000022000 [ 2545.600251] Node 1 active_anon:1328kB inactive_anon:22108kB active_file:28kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:51396kB dirty:12kB writeback:0kB shmem:22308kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2545.623803] warn_alloc_show_mem: 3 callbacks suppressed [ 2545.623807] Mem-Info: [ 2545.658595] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2545.661313] active_anon:20958 inactive_anon:43284 isolated_anon:0 [ 2545.661313] active_file:19 inactive_file:19 isolated_file:0 [ 2545.661313] unevictable:0 dirty:25 writeback:0 unstable:0 [ 2545.661313] slab_reclaimable:12051 slab_unreclaimable:114781 [ 2545.661313] mapped:52662 shmem:45840 pagetables:818 bounce:0 [ 2545.661313] free:13780 free_pcp:0 free_cma:0 [ 2545.723492] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2545.732339] Node 0 DMA32 free:17568kB min:36200kB low:45248kB high:54296kB active_anon:82404kB inactive_anon:151028kB active_file:592kB inactive_file:548kB unevictable:0kB writepending:188kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:2872kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2545.767753] Node 0 active_anon:82504kB inactive_anon:151028kB active_file:148kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:159252kB dirty:88kB writeback:0kB shmem:161052kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2545.804313] lowmem_reserve[]: 0 0 0 0 0 [ 2545.808323] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2545.817360] Node 1 active_anon:1328kB inactive_anon:22108kB active_file:28kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:51396kB dirty:12kB writeback:0kB shmem:22308kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2545.876375] lowmem_reserve[]: 0 0 0 0 0 [ 2545.908625] Node 1 Normal free:26728kB min:53696kB low:67120kB high:80544kB active_anon:1328kB inactive_anon:22108kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:400kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2545.910213] Node 0 [ 2546.008653] lowmem_reserve[]: [ 2546.009619] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2546.027672] 0 0 0 0 0 [ 2546.059045] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2546.084599] Node 0 DMA: 2*4kB (UE) 1*8kB (E) 9*16kB (UE) 2*32kB (UE) 2*64kB (UE) 1*128kB (E) 1*256kB (E) 2*512kB (UE) 3*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10976kB [ 2546.094120] Node 0 DMA32 free:17560kB min:36200kB low:45248kB high:54296kB active_anon:82560kB inactive_anon:151028kB active_file:132kB inactive_file:56kB unevictable:0kB writepending:60kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:2872kB bounce:0kB free_pcp:32kB local_pcp:20kB free_cma:0kB [ 2546.144761] lowmem_reserve[]: 0 0 0 0 0 [ 2546.148784] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2546.168797] Node 0 [ 2546.195663] lowmem_reserve[]: 0 0 0 0 0 [ 2546.217738] Node 1 Normal free:26728kB min:53696kB low:67120kB high:80544kB active_anon:1328kB inactive_anon:22108kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:400kB bounce:0kB free_pcp:24kB local_pcp:0kB free_cma:0kB [ 2546.237463] DMA32: 294*4kB (UMEH) 428*8kB (UMEH) 151*16kB (MEH) 63*32kB (UMEH) 90*64kB (UMH) 33*128kB (UM) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19272kB [ 2546.281555] lowmem_reserve[]: [ 2546.329008] Node 0 [ 2546.333466] 0 0 0 0 0 [ 2546.338212] Node 0 DMA: 2*4kB (UE) 1*8kB (E) 9*16kB (UE) 2*32kB (UE) 2*64kB (UE) 1*128kB (E) 1*256kB (E) 2*512kB (UE) 3*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10976kB [ 2546.343858] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2546.382113] Node 0 DMA32: 294*4kB (UMEH) 428*8kB (UMEH) 151*16kB (MEH) 63*32kB (UMEH) 90*64kB (UMH) 33*128kB (UM) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19272kB [ 2546.418307] Node 1 Normal: 4*4kB (M) 12*8kB (UE) 7*16kB (UME) 5*32kB (UME) 290*64kB (U) 59*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26752kB [ 2546.425657] Node 0 [ 2546.476378] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2546.478628] Normal: [ 2546.478749] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2546.497165] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2546.534361] Node 1 Normal: 4*4kB (M) 12*8kB (UE) 7*16kB (UME) 5*32kB (UME) 290*64kB (U) 59*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26752kB [ 2546.545385] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2546.552210] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2546.584214] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2546.587608] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2546.599743] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2546.623119] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2546.631881] 45877 total pagecache pages [ 2546.635867] 0 pages in swap cache [ 2546.639311] Swap cache stats: add 0, delete 0, find 0/0 [ 2546.665482] 45877 total pagecache pages [ 2546.669500] 0 pages in swap cache [ 2546.679907] Free swap = 0kB [ 2546.684733] Swap cache stats: add 0, delete 0, find 0/0 [ 2546.685209] Total swap = 0kB [ 2546.708873] 2097051 pages RAM [ 2546.711955] Free swap = 0kB [ 2546.715006] Total swap = 0kB [ 2546.717314] 0 pages HighMem/MovableOnly [ 2546.718014] 2097051 pages RAM [ 2546.739300] 363840 pages reserved [ 2546.741508] 0 pages HighMem/MovableOnly [ 2546.746746] 363840 pages reserved [ 2546.749199] 0 pages cma reserved [ 2546.766372] 0 pages cma reserved [ 2546.770308] Out of memory (oom_kill_allocating_task): Kill process 29669 (syz-executor.1) score 0 or sacrifice child [ 2546.902267] Killed process 31324 (syz-executor.1) total-vm:93252kB, anon-rss:148kB, file-rss:34816kB, shmem-rss:0kB [ 2546.938988] oom_reaper: reaped process 31324 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2547.058301] IPVS: ftp: loaded support on port[0] = 21 [ 2547.344160] chnl_net:caif_netlink_parms(): no params data found [ 2547.546736] bridge0: port 1(bridge_slave_0) entered blocking state [ 2547.570236] bridge0: port 1(bridge_slave_0) entered disabled state [ 2547.597547] device bridge_slave_0 entered promiscuous mode [ 2547.621503] bridge0: port 2(bridge_slave_1) entered blocking state [ 2547.627939] bridge0: port 2(bridge_slave_1) entered disabled state [ 2547.636261] device bridge_slave_1 entered promiscuous mode [ 2547.768144] oom_reaper: reaped process 31325 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2547.831361] oom_reaper: reaped process 31320 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2547.853833] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2547.880076] in:imklog cpuset=/ mems_allowed=0-1 [ 2547.884800] CPU: 0 PID: 30401 Comm: in:imklog Not tainted 4.14.224-syzkaller #0 [ 2547.890197] syz-executor.0: [ 2547.892240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2547.892249] page allocation failure: order:0 [ 2547.895241] Call Trace: [ 2547.908024] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2547.908992] dump_stack+0x1b2/0x281 [ 2547.911607] (null) [ 2547.918648] dump_header+0x178/0x82f [ 2547.925575] syz-executor.0 cpuset= [ 2547.928078] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2547.928079] / mems_allowed=0-1 [ 2547.931602] ? ___ratelimit+0x2cd/0x530 [ 2547.931611] oom_kill_process.cold+0x10/0xb18 [ 2547.931628] out_of_memory+0xe3e/0x1190 [ 2547.931640] ? oom_killer_disable+0x1c0/0x1c0 [ 2547.931648] ? mutex_trylock+0x152/0x1a0 [ 2547.960787] __alloc_pages_nodemask+0x23e1/0x2720 [ 2547.965647] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2547.970502] alloc_pages_current+0x155/0x260 [ 2547.974895] filemap_fault+0xea3/0x1980 [ 2547.978854] ext4_filemap_fault+0x84/0xb0 [ 2547.982992] __do_fault+0xfa/0x380 [ 2547.986530] __handle_mm_fault+0x2497/0x4620 [ 2547.990926] ? vm_insert_page+0x7c0/0x7c0 [ 2547.995089] ? lock_downgrade+0x740/0x740 [ 2547.999233] handle_mm_fault+0x391/0x860 [ 2548.003292] __do_page_fault+0x549/0xad0 [ 2548.007348] ? spurious_fault+0x640/0x640 [ 2548.011478] ? do_page_fault+0x60/0x500 [ 2548.015440] ? page_fault+0x2f/0x50 [ 2548.019064] page_fault+0x45/0x50 [ 2548.022501] RIP: 1fa0:0x1f9f [ 2548.025591] RSP: 0000:000055fd139b19d0 EFLAGS: 7f0461456da0 [ 2548.025610] CPU: 1 PID: 31320 Comm: syz-executor.0 Not tainted 4.14.224-syzkaller #0 [ 2548.029859] Mem-Info: [ 2548.031325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2548.031331] Call Trace: [ 2548.031348] dump_stack+0x1b2/0x281 [ 2548.031364] warn_alloc.cold+0x96/0x1cc [ 2548.039252] active_anon:20912 inactive_anon:43287 isolated_anon:0 [ 2548.039252] active_file:12 inactive_file:13 isolated_file:0 [ 2548.039252] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2548.039252] slab_reclaimable:12067 slab_unreclaimable:114215 [ 2548.039252] mapped:52654 shmem:45844 pagetables:793 bounce:0 [ 2548.039252] free:13716 free_pcp:61 free_cma:0 [ 2548.041638] ? zone_watermark_ok_safe+0x220/0x220 [ 2548.041647] ? usleep_range+0x130/0x130 [ 2548.041655] ? try_to_free_pages+0x23f/0x6e0 [ 2548.041666] ? _find_next_bit+0xdb/0x100 [ 2548.051050] Node 0 active_anon:82356kB inactive_anon:151040kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:159220kB dirty:0kB writeback:0kB shmem:161068kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2548.053597] ? run_timer_softirq+0x5a0/0x5a0 [ 2548.053613] __alloc_pages_nodemask+0x2127/0x2720 [ 2548.057221] Node 1 active_anon:1292kB inactive_anon:22108kB active_file:16kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:51396kB dirty:0kB writeback:0kB shmem:22308kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2548.061175] ? lock_acquire+0x170/0x3f0 [ 2548.061196] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2548.094327] Node 0 [ 2548.099144] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2548.103392] DMA free:10948kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2548.107763] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2548.111805] lowmem_reserve[]: [ 2548.139544] ? alloc_pages_current+0x21c/0x260 [ 2548.139554] alloc_pages_current+0x155/0x260 [ 2548.139567] ion_page_pool_alloc+0x118/0x1b0 [ 2548.143959] 0 [ 2548.148777] ion_system_heap_allocate+0x133/0x8c0 [ 2548.175932] 2717 [ 2548.179880] ? ion_alloc+0x187/0x810 [ 2548.184706] 2718 [ 2548.186916] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2548.191394] 2718 [ 2548.216867] ? ion_system_contig_heap_create+0x130/0x130 [ 2548.216877] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2548.216889] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2548.222326] 2718 [ 2548.225402] ion_alloc+0x204/0x810 [ 2548.234349] ? ion_dma_buf_release+0x40/0x40 [ 2548.234363] ? __might_fault+0x177/0x1b0 [ 2548.238757] Node 0 [ 2548.240547] ion_ioctl+0xea/0x1f0 [ 2548.240556] ? ion_query_heaps+0x360/0x360 [ 2548.240568] ? ion_query_heaps+0x360/0x360 [ 2548.245395] DMA32 free:17568kB min:36200kB low:45248kB high:54296kB active_anon:82356kB inactive_anon:151040kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:2772kB bounce:0kB free_pcp:124kB local_pcp:0kB free_cma:0kB [ 2548.247432] do_vfs_ioctl+0x75a/0xff0 [ 2548.251137] lowmem_reserve[]: [ 2548.253174] ? ioctl_preallocate+0x1a0/0x1a0 [ 2548.258593] 0 [ 2548.260634] ? lock_downgrade+0x740/0x740 [ 2548.260647] ? __fget+0x225/0x360 [ 2548.260656] ? do_vfs_ioctl+0xff0/0xff0 [ 2548.266075] 0 [ 2548.271077] ? security_file_ioctl+0x83/0xb0 [ 2548.271088] SyS_ioctl+0x7f/0xb0 [ 2548.271099] ? do_vfs_ioctl+0xff0/0xff0 [ 2548.276446] 0 [ 2548.278504] do_syscall_64+0x1d5/0x640 [ 2548.282030] 0 [ 2548.286412] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2548.290452] 0 [ 2548.292659] RIP: 0033:0x465f69 [ 2548.300337] RSP: 002b:00007fb3e357a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2548.300348] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2548.300352] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2548.300357] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2548.300362] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2548.300366] R13: 00007fffc0af773f R14: 00007fb3e357a300 R15: 0000000000022000 [ 2548.329770] Mem-Info: [ 2548.335360] syz-executor.1: [ 2548.336731] active_anon:20912 inactive_anon:43287 isolated_anon:0 [ 2548.336731] active_file:12 inactive_file:13 isolated_file:0 [ 2548.336731] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2548.336731] slab_reclaimable:12067 slab_unreclaimable:114215 [ 2548.336731] mapped:52654 shmem:45844 pagetables:793 bounce:0 [ 2548.336731] free:13766 free_pcp:0 free_cma:0 [ 2548.339744] page allocation failure: order:0 [ 2548.351042] Node 0 active_anon:82356kB inactive_anon:151040kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:159220kB dirty:0kB writeback:0kB shmem:161068kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2548.359646] syz-executor.4: [ 2548.368888] Node 1 active_anon:1292kB inactive_anon:22108kB active_file:16kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:51396kB dirty:0kB writeback:0kB shmem:22308kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2548.376491] page allocation failure: order:0 [ 2548.378038] Node 0 [ 2548.378721] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2548.390007] DMA free:10948kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2548.401924] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2548.411372] lowmem_reserve[]: [ 2548.423230] (null) [ 2548.433228] 0 [ 2548.439770] syz-executor.1 cpuset= [ 2548.478465] syz-executor.4 cpuset= [ 2548.505744] Node 0 [ 2548.522148] / [ 2548.540680] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2548.553431] 2717 [ 2548.583259] / [ 2548.593255] mems_allowed=0-1 [ 2548.598209] lowmem_reserve[]: [ 2548.606719] CPU: 1 PID: 31325 Comm: syz-executor.4 Not tainted 4.14.224-syzkaller #0 [ 2548.628818] mems_allowed=0-1 [ 2548.630831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2548.630836] Call Trace: [ 2548.630858] dump_stack+0x1b2/0x281 [ 2548.659974] 0 [ 2548.661647] warn_alloc.cold+0x96/0x1cc [ 2548.665244] 0 [ 2548.667032] ? zone_watermark_ok_safe+0x220/0x220 [ 2548.677705] ? usleep_range+0x130/0x130 [ 2548.679992] 0 [ 2548.681664] ? queue_work_on+0x10d/0x1d0 [ 2548.681675] ? _find_next_bit+0xdb/0x100 [ 2548.683459] 0 [ 2548.687503] ? run_timer_softirq+0x5a0/0x5a0 [ 2548.697719] __alloc_pages_nodemask+0x2127/0x2720 [ 2548.699957] 0 [ 2548.702554] ? lock_acquire+0x170/0x3f0 [ 2548.704329] Node 1 Normal free:26448kB min:53696kB low:67120kB high:80544kB active_anon:1292kB inactive_anon:22108kB active_file:16kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:400kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2548.708296] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2548.708307] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2548.745958] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2548.751394] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2548.755883] alloc_pages_current+0x155/0x260 [ 2548.760288] ion_page_pool_alloc+0x118/0x1b0 [ 2548.764680] ion_system_heap_allocate+0x133/0x8c0 [ 2548.769502] ? ion_alloc+0x187/0x810 [ 2548.773198] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2548.778646] ? ion_system_contig_heap_create+0x130/0x130 [ 2548.779945] lowmem_reserve[]: [ 2548.784076] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2548.784086] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2548.787169] 0 [ 2548.792167] ion_alloc+0x204/0x810 [ 2548.792181] ? ion_dma_buf_release+0x40/0x40 [ 2548.792192] ? __might_fault+0x177/0x1b0 [ 2548.809940] 0 0 [ 2548.810725] ion_ioctl+0xea/0x1f0 [ 2548.810736] ? ion_query_heaps+0x360/0x360 [ 2548.812683] 0 [ 2548.816119] ? SyS_epoll_ctl+0x1e0/0x2780 [ 2548.826230] ? ion_query_heaps+0x360/0x360 [ 2548.829937] 0 [ 2548.830465] do_vfs_ioctl+0x75a/0xff0 [ 2548.830477] ? ioctl_preallocate+0x1a0/0x1a0 [ 2548.832257] Node 0 [ 2548.836037] ? lock_downgrade+0x740/0x740 [ 2548.846758] ? __fget+0x225/0x360 [ 2548.849936] DMA: [ 2548.850194] ? do_vfs_ioctl+0xff0/0xff0 [ 2548.850196] 1*4kB (E) [ 2548.852246] ? security_file_ioctl+0x83/0xb0 [ 2548.856205] 2*8kB [ 2548.858684] SyS_ioctl+0x7f/0xb0 [ 2548.868533] ? do_vfs_ioctl+0xff0/0xff0 [ 2548.872490] do_syscall_64+0x1d5/0x640 [ 2548.876362] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2548.879934] (UE) 1*16kB [ 2548.881622] RIP: 0033:0x465f69 [ 2548.881628] RSP: 002b:00007f1dbb0fc188 EFLAGS: 00000246 [ 2548.884275] (E) [ 2548.887441] ORIG_RAX: 0000000000000010 [ 2548.887448] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2548.905934] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2548.909932] 1*32kB [ 2548.913184] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2548.913190] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2548.915401] (E) [ 2548.922650] R13: 00007fff344be07f R14: 00007f1dbb0fc300 R15: 0000000000022000 [ 2548.932471] 2718 [ 2548.940466] CPU: 0 PID: 31324 Comm: syz-executor.1 Not tainted 4.14.224-syzkaller #0 [ 2548.940473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2548.940477] Call Trace: [ 2548.940493] dump_stack+0x1b2/0x281 [ 2548.940507] warn_alloc.cold+0x96/0x1cc [ 2548.940519] ? zone_watermark_ok_safe+0x220/0x220 [ 2548.946137] 2718 [ 2548.950433] ? usleep_range+0x130/0x130 [ 2548.950442] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2548.950453] ? _find_next_bit+0xdb/0x100 [ 2548.950463] ? run_timer_softirq+0x5a0/0x5a0 [ 2548.950479] __alloc_pages_nodemask+0x2127/0x2720 [ 2548.950495] ? lock_acquire+0x170/0x3f0 [ 2548.965025] 2718 [ 2548.966016] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2548.974786] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2548.976820] Node 0 [ 2548.980781] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2548.980794] ? __sanitizer_cov_trace_pc+0x23/0x50 [ 2548.980808] alloc_pages_current+0x155/0x260 [ 2548.980826] ion_page_pool_alloc+0x118/0x1b0 [ 2548.980836] ion_system_heap_allocate+0x133/0x8c0 [ 2548.980846] ? ion_alloc+0x187/0x810 [ 2548.990545] DMA32 free:17752kB min:36200kB low:45248kB high:54296kB active_anon:82356kB inactive_anon:151040kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:2772kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2548.994359] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2548.999174] lowmem_reserve[]: [ 2549.003130] ? ion_system_contig_heap_create+0x130/0x130 [ 2549.003140] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2549.003150] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2549.003161] ion_alloc+0x204/0x810 [ 2549.003173] ? ion_dma_buf_release+0x40/0x40 [ 2549.003185] ? __might_fault+0x177/0x1b0 [ 2549.003198] ion_ioctl+0xea/0x1f0 [ 2549.007750] 0 [ 2549.010081] ? ion_query_heaps+0x360/0x360 [ 2549.010094] ? ion_query_heaps+0x360/0x360 [ 2549.010105] do_vfs_ioctl+0x75a/0xff0 [ 2549.010116] ? ioctl_preallocate+0x1a0/0x1a0 [ 2549.010124] ? lock_downgrade+0x740/0x740 [ 2549.010137] ? __fget+0x225/0x360 [ 2549.016346] 0 [ 2549.016827] ? do_vfs_ioctl+0xff0/0xff0 [ 2549.026680] 0 [ 2549.028031] ? security_file_ioctl+0x83/0xb0 [ 2549.034205] 0 [ 2549.036807] SyS_ioctl+0x7f/0xb0 [ 2549.045103] 0 [ 2549.045320] ? do_vfs_ioctl+0xff0/0xff0 [ 2549.073496] Bluetooth: hci2 command 0x0409 tx timeout [ 2549.078857] do_syscall_64+0x1d5/0x640 [ 2549.087725] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2549.093312] Node 0 [ 2549.097545] RIP: 0033:0x465f69 [ 2549.106286] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2549.109485] RSP: 002b:00007f747aa45188 EFLAGS: 00000246 [ 2549.112959] lowmem_reserve[]: [ 2549.114696] ORIG_RAX: 0000000000000010 [ 2549.118908] 0 [ 2549.123129] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2549.123134] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2549.123139] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2549.123144] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2549.123150] R13: 00007fff04d0b2bf R14: 00007f747aa45300 R15: 0000000000022000 [ 2549.138070] 2*64kB [ 2549.144294] 0 [ 2549.148278] (UE) [ 2549.154398] 0 [ 2549.156192] 2*128kB [ 2549.157972] 0 [ 2549.165586] (UE) [ 2549.175051] 0 [ 2549.176265] 1*256kB [ 2549.185141] (E) [ 2549.214385] Node 1 [ 2549.218563] 2*512kB [ 2549.219060] Normal free:26468kB min:53696kB low:67120kB high:80544kB active_anon:1292kB inactive_anon:22108kB active_file:16kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:400kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2549.220851] (UE) 3*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10948kB [ 2549.220872] Node 0 DMA32: 312*4kB (UME) 219*8kB (ME) 140*16kB (UME) [ 2549.228638] lowmem_reserve[]: [ 2549.238890] 65*32kB [ 2549.251274] 0 [ 2549.260213] (UME) [ 2549.268165] 0 [ 2549.269335] 27*64kB [ 2549.273155] 0 [ 2549.275673] (ME) [ 2549.277489] 0 [ 2549.279705] 68*128kB [ 2549.288777] 0 [ 2549.313285] (UM) [ 2549.325692] 0*256kB [ 2549.327995] Node 0 [ 2549.329774] 0*512kB [ 2549.334922] DMA: [ 2549.336014] 0*1024kB [ 2549.337810] 1*4kB [ 2549.339865] 0*2048kB [ 2549.346393] (E) [ 2549.350806] 0*4096kB [ 2549.356971] 2*8kB [ 2549.359327] = 17752kB [ 2549.366034] (UE) [ 2549.368934] Mem-Info: [ 2549.374976] 1*16kB [ 2549.377319] active_anon:20912 inactive_anon:43287 isolated_anon:0 [ 2549.377319] active_file:12 inactive_file:13 isolated_file:0 [ 2549.377319] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2549.377319] slab_reclaimable:12066 slab_unreclaimable:114191 [ 2549.377319] mapped:52654 shmem:45844 pagetables:793 bounce:0 [ 2549.377319] free:13792 free_pcp:0 free_cma:0 [ 2549.377794] (E) [ 2549.381803] Node 0 active_anon:82356kB inactive_anon:151040kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:159220kB dirty:0kB writeback:0kB shmem:161068kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2549.446546] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2549.458333] Node 1 Normal: 2*4kB (UM) 2*8kB (ME) 4*16kB (UME) 5*32kB (UME) 869*64kB (U) 22*128kB (UM) 87*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 80952kB [ 2549.465193] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2549.473482] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2549.489838] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2549.494016] 1*32kB [ 2549.498924] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2549.514408] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2549.523159] Node 1 active_anon:1292kB inactive_anon:22108kB active_file:16kB inactive_file:4020kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:53996kB dirty:0kB writeback:0kB shmem:22308kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2549.527669] (E) [ 2549.557031] 47090 total pagecache pages [ 2549.563128] 0 pages in swap cache [ 2549.566586] Swap cache stats: add 0, delete 0, find 0/0 [ 2549.575832] Free swap = 0kB [ 2549.578856] Total swap = 0kB [ 2549.581968] 2097051 pages RAM [ 2549.585065] 0 pages HighMem/MovableOnly [ 2549.589028] 363840 pages reserved [ 2549.601522] Node 0 DMA free:11032kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2549.632049] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2549.639924] 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 3*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10948kB [ 2549.649906] 0 pages cma reserved [ 2549.653411] Out of memory (oom_kill_allocating_task): Kill process 30401 (in:imklog) score 0 or sacrifice child [ 2549.679966] Node 0 DMA32: 3915*4kB (UMEH) 453*8kB (UMEH) 242*16kB (UMEH) 162*32kB (UME) 93*64kB (UME) 70*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 43252kB [ 2549.698823] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2549.706820] Killed process 30396 (rsyslogd) total-vm:254332kB, anon-rss:796kB, file-rss:0kB, shmem-rss:0kB [ 2549.730100] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2549.735167] Node 0 DMA32 free:56720kB min:36200kB low:45248kB high:54296kB active_anon:82356kB inactive_anon:151040kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7424kB pagetables:2772kB bounce:0kB free_pcp:760kB local_pcp:112kB free_cma:0kB [ 2549.743973] Node 0 [ 2549.765041] team0: Port device team_slave_0 added [ 2549.773384] oom_reaper: reaped process 30396 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2549.803033] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2549.820905] team0: Port device team_slave_1 added [ 2549.823260] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2549.870610] Node 1 Normal: 10005*4kB (UM) 2622*8kB (UME) 964*16kB (UME) 492*32kB (UME) 2076*64kB (UM) 215*128kB (UM) 153*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 291716kB [ 2549.880245] lowmem_reserve[]: 0 0 0 0 0 [ 2549.892262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2549.898506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2549.922717] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2549.929874] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2549.950504] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2550.011465] lowmem_reserve[]: 0 0 0 0 0 [ 2550.015518] Node 1 Normal free:314540kB min:53696kB low:67120kB high:80544kB active_anon:444kB inactive_anon:22108kB active_file:20kB inactive_file:5204kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:400kB bounce:0kB free_pcp:1336kB local_pcp:644kB free_cma:0kB [ 2550.017996] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2550.046650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2550.056844] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2550.081628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2550.087893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2550.103254] 47169 total pagecache pages [ 2550.114125] lowmem_reserve[]: 0 0 0 0 0 [ 2550.130774] Node 0 DMA: 21*4kB (UE) 4*8kB (UE) 4*16kB (UE) 1*32kB (E) 3*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 3*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11156kB [ 2550.146141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2550.157881] Node 0 DMA32: 15034*4kB (UMEH) 3870*8kB (UMEH) 2655*16kB (UMEH) 941*32kB (UMEH) 221*64kB (UMEH) 74*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 187304kB [ 2550.159902] 0 pages in swap cache [ 2550.175556] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2550.185273] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2550.192605] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2550.209963] Node 1 Normal: 18866*4kB (UM) 3795*8kB (UME) 1339*16kB (UME) 785*32kB (UME) 2378*64kB (UM) 234*128kB (UM) 153*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 373680kB [ 2550.229862] Swap cache stats: add 0, delete 0, find 0/0 [ 2550.235246] Free swap = 0kB [ 2550.238226] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2550.238287] Total swap = 0kB [ 2550.255044] device hsr_slave_0 entered promiscuous mode [ 2550.263827] device hsr_slave_1 entered promiscuous mode [ 2550.269383] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2550.279492] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2550.287211] 2097051 pages RAM [ 2550.290721] 0 pages HighMem/MovableOnly [ 2550.294688] 363840 pages reserved [ 2550.298127] 0 pages cma reserved [ 2550.303180] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2550.310235] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2550.319072] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2550.351906] 47169 total pagecache pages [ 2550.355920] 0 pages in swap cache [ 2550.359379] Swap cache stats: add 0, delete 0, find 0/0 [ 2550.386108] Free swap = 0kB [ 2550.389727] Total swap = 0kB [ 2550.396983] 2097051 pages RAM [ 2550.413429] 0 pages HighMem/MovableOnly [ 2550.420280] 363840 pages reserved [ 2550.423759] 0 pages cma reserved [ 2550.682750] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2550.750130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2550.773114] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2550.792402] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2550.798596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2550.810840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2550.820960] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2550.827042] 8021q: adding VLAN 0 to HW filter on device team0 [ 2550.853647] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2550.870503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2550.878496] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2550.900257] bridge0: port 1(bridge_slave_0) entered blocking state [ 2550.906655] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2550.936337] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2550.950557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2550.958124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2550.983851] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2550.992394] bridge0: port 2(bridge_slave_1) entered blocking state [ 2550.998808] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2551.014229] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2551.032860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2551.059132] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2551.083153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2551.096122] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2551.122369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2551.129821] Bluetooth: hci2 command 0x041b tx timeout [ 2551.133856] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2551.164622] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2551.174541] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2551.184545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2551.200538] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2551.233082] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2551.243598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2551.252507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2551.286473] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2551.295532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2551.310370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2551.320600] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2551.326668] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2551.347808] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2551.374789] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2551.393935] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2551.401349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2551.416767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2551.738457] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2551.774039] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2551.781189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2551.789099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2551.888384] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2551.944304] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2551.961296] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2551.981394] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2552.000729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2552.008099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2552.019232] device veth0_vlan entered promiscuous mode [ 2552.036146] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2552.054823] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2552.113525] device veth1_vlan entered promiscuous mode [ 2552.119371] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2552.171270] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2552.252520] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2552.295407] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2552.313866] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2552.345012] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2552.352978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2552.384624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2552.413671] device veth0_macvtap entered promiscuous mode [ 2552.424912] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2552.452325] device veth1_macvtap entered promiscuous mode [ 2552.458469] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2552.486490] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2552.519801] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2552.527083] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2552.582993] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2552.602252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2552.659664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2552.668826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2552.683399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2552.700006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2552.719721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2552.746852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2552.779664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2552.788802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2552.798621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2552.831008] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2552.838071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2552.900189] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2552.909079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2552.971781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2552.981899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2553.009656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2553.019412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2553.079670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2553.089431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2553.139645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2553.149385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2553.212100] Bluetooth: hci2 command 0x040f tx timeout [ 2553.217413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2553.259757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2553.292046] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2553.321187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2553.328643] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2553.342227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2553.708300] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2553.718413] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2553.726778] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2553.734786] syz-executor.0: [ 2553.744507] CPU: 1 PID: 31325 Comm: syz-executor.4 Not tainted 4.14.224-syzkaller #0 [ 2553.746066] page allocation failure: order:4 [ 2553.747545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2553.762990] syz-executor.1 cpuset= [ 2553.769177] Call Trace: [ 2553.769178] / mems_allowed=0-1 [ 2553.772711] dump_stack+0x1b2/0x281 [ 2553.772724] warn_alloc.cold+0x96/0x1cc [ 2553.772737] ? zone_watermark_ok_safe+0x220/0x220 [ 2553.779567] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2553.782101] __alloc_pages_nodemask+0x2127/0x2720 [ 2553.786047] (null) [ 2553.790873] ? ___preempt_schedule+0x16/0x18 [ 2553.790888] ? lock_acquire+0x170/0x3f0 [ 2553.790902] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2553.818452] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2553.823896] ? __mutex_unlock_slowpath+0x75/0x770 [ 2553.827296] syz-executor.0 cpuset=/ [ 2553.828736] alloc_pages_current+0x155/0x260 [ 2553.828750] ion_page_pool_alloc+0x118/0x1b0 [ 2553.841156] ion_system_heap_allocate+0x133/0x8c0 [ 2553.845994] ? _raw_spin_unlock+0x29/0x40 [ 2553.849529] mems_allowed=0-1 [ 2553.850132] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2553.858132] ? ion_system_contig_heap_create+0x130/0x130 [ 2553.863563] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2553.868567] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2553.873403] ion_alloc+0x27a/0x810 [ 2553.876935] ? ion_dma_buf_release+0x40/0x40 [ 2553.881327] ? __might_fault+0x177/0x1b0 [ 2553.885373] ion_ioctl+0xea/0x1f0 [ 2553.888809] ? ion_query_heaps+0x360/0x360 [ 2553.893026] ? SyS_epoll_ctl+0x1e0/0x2780 [ 2553.897154] ? ion_query_heaps+0x360/0x360 [ 2553.901369] do_vfs_ioctl+0x75a/0xff0 [ 2553.905170] ? ioctl_preallocate+0x1a0/0x1a0 [ 2553.909559] ? lock_downgrade+0x740/0x740 [ 2553.914126] ? __fget+0x225/0x360 [ 2553.917559] ? do_vfs_ioctl+0xff0/0xff0 [ 2553.921516] ? security_file_ioctl+0x83/0xb0 [ 2553.925904] SyS_ioctl+0x7f/0xb0 [ 2553.929252] ? do_vfs_ioctl+0xff0/0xff0 [ 2553.933209] do_syscall_64+0x1d5/0x640 [ 2553.937087] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2553.942260] RIP: 0033:0x465f69 [ 2553.945431] RSP: 002b:00007f1dbb0fc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2553.953119] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2553.960370] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2553.967622] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2553.974878] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2553.982127] R13: 00007fff344be07f R14: 00007f1dbb0fc300 R15: 0000000000022000 [ 2553.990025] CPU: 0 PID: 31320 Comm: syz-executor.0 Not tainted 4.14.224-syzkaller #0 [ 2553.997919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2553.998695] warn_alloc_show_mem: 1 callbacks suppressed [ 2553.998698] Mem-Info: [ 2554.007281] Call Trace: [ 2554.007298] dump_stack+0x1b2/0x281 [ 2554.007312] warn_alloc.cold+0x96/0x1cc [ 2554.007323] ? zone_watermark_ok_safe+0x220/0x220 [ 2554.007342] __alloc_pages_nodemask+0x2127/0x2720 [ 2554.007350] ? __schedule+0x893/0x1de0 [ 2554.007365] ? lock_acquire+0x170/0x3f0 [ 2554.007379] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2554.007394] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2554.007404] ? __mutex_unlock_slowpath+0x75/0x770 [ 2554.007417] alloc_pages_current+0x155/0x260 [ 2554.007430] ion_page_pool_alloc+0x118/0x1b0 [ 2554.007440] ion_system_heap_allocate+0x133/0x8c0 [ 2554.007451] ? _raw_spin_unlock+0x29/0x40 [ 2554.007491] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2554.016897] active_anon:20594 inactive_anon:43286 isolated_anon:0 [ 2554.016897] active_file:599 inactive_file:685 isolated_file:0 [ 2554.016897] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2554.016897] slab_reclaimable:12060 slab_unreclaimable:116671 [ 2554.016897] mapped:53120 shmem:45843 pagetables:792 bounce:0 [ 2554.016897] free:242772 free_pcp:255 free_cma:0 [ 2554.017869] ? ion_system_contig_heap_create+0x130/0x130 [ 2554.017881] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2554.017896] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2554.017908] ion_alloc+0x27a/0x810 [ 2554.017924] ? ion_dma_buf_release+0x40/0x40 [ 2554.021973] Node 0 active_anon:81932kB inactive_anon:151036kB active_file:2388kB inactive_file:2780kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:161128kB dirty:0kB writeback:0kB shmem:161064kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2554.025502] ? __might_fault+0x177/0x1b0 [ 2554.025517] ion_ioctl+0xea/0x1f0 [ 2554.025526] ? ion_query_heaps+0x360/0x360 [ 2554.025539] ? ion_query_heaps+0x360/0x360 [ 2554.025549] do_vfs_ioctl+0x75a/0xff0 [ 2554.025560] ? ioctl_preallocate+0x1a0/0x1a0 [ 2554.034615] Node 1 active_anon:444kB inactive_anon:22108kB active_file:8kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:51452kB dirty:0kB writeback:0kB shmem:22308kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2554.035211] ? lock_downgrade+0x740/0x740 [ 2554.039074] Node 0 [ 2554.043030] ? __fget+0x225/0x360 [ 2554.043039] ? do_vfs_ioctl+0xff0/0xff0 [ 2554.043048] ? security_file_ioctl+0x83/0xb0 [ 2554.043057] SyS_ioctl+0x7f/0xb0 [ 2554.043064] ? do_vfs_ioctl+0xff0/0xff0 [ 2554.043077] do_syscall_64+0x1d5/0x640 [ 2554.047904] DMA free:10992kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2554.053332] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2554.053340] RIP: 0033:0x465f69 [ 2554.053344] RSP: 002b:00007fb3e357a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2554.053353] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2554.053357] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2554.053362] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2554.053366] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2554.053372] R13: 00007fffc0af773f R14: 00007fb3e357a300 R15: 0000000000022000 [ 2554.057120] CPU: 0 PID: 31324 Comm: syz-executor.1 Not tainted 4.14.224-syzkaller #0 [ 2554.062291] lowmem_reserve[]: [ 2554.062643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2554.067490] 0 [ 2554.071845] Call Trace: [ 2554.071862] dump_stack+0x1b2/0x281 [ 2554.071875] warn_alloc.cold+0x96/0x1cc [ 2554.071891] ? zone_watermark_ok_safe+0x220/0x220 [ 2554.071912] __alloc_pages_nodemask+0x2127/0x2720 [ 2554.071928] ? lock_acquire+0x170/0x3f0 [ 2554.071943] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2554.071959] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2554.071970] ? __mutex_unlock_slowpath+0x75/0x770 [ 2554.071983] alloc_pages_current+0x155/0x260 [ 2554.071996] ion_page_pool_alloc+0x118/0x1b0 [ 2554.072007] ion_system_heap_allocate+0x133/0x8c0 [ 2554.077153] 2717 [ 2554.081054] ? _raw_spin_unlock+0x29/0x40 [ 2554.081064] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2554.081074] ? ion_system_contig_heap_create+0x130/0x130 [ 2554.081084] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2554.081093] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2554.081104] ion_alloc+0x27a/0x810 [ 2554.081117] ? ion_dma_buf_release+0x40/0x40 [ 2554.081128] ? __might_fault+0x177/0x1b0 [ 2554.081140] ion_ioctl+0xea/0x1f0 [ 2554.081149] ? ion_query_heaps+0x360/0x360 [ 2554.081160] ? ion_query_heaps+0x360/0x360 [ 2554.081169] do_vfs_ioctl+0x75a/0xff0 [ 2554.081181] ? ioctl_preallocate+0x1a0/0x1a0 [ 2554.081190] ? lock_downgrade+0x740/0x740 [ 2554.081203] ? __fget+0x225/0x360 [ 2554.081211] ? do_vfs_ioctl+0xff0/0xff0 [ 2554.081232] ? security_file_ioctl+0x83/0xb0 [ 2554.119431] 2718 [ 2554.120320] SyS_ioctl+0x7f/0xb0 [ 2554.120327] ? do_vfs_ioctl+0xff0/0xff0 [ 2554.120338] do_syscall_64+0x1d5/0x640 [ 2554.120353] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2554.120361] RIP: 0033:0x465f69 [ 2554.120365] RSP: 002b:00007f747aa45188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2554.120374] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2554.120378] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2554.120383] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2554.120388] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2554.120396] R13: 00007fff04d0b2bf R14: 00007f747aa45300 R15: 0000000000022000 [ 2554.126611] 2718 2718 [ 2554.553319] Node 0 DMA32 free:618260kB min:36200kB low:45248kB high:54296kB active_anon:82088kB inactive_anon:151036kB active_file:3512kB inactive_file:5928kB unevictable:0kB writepending:4kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:2696kB bounce:0kB free_pcp:328kB local_pcp:108kB free_cma:0kB [ 2554.589724] lowmem_reserve[]: 0 0 0 0 0 [ 2554.593745] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2554.629887] lowmem_reserve[]: 0 0 0 0 0 [ 2554.633909] Node 1 Normal free:41624kB min:53696kB low:67120kB high:80544kB active_anon:440kB inactive_anon:22108kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:304kB bounce:0kB free_pcp:620kB local_pcp:0kB free_cma:0kB [ 2554.663499] lowmem_reserve[]: 0 0 0 0 0 [ 2554.667519] Node 0 DMA: 10*4kB (UE) 30*8kB (UE) 28*16kB (UE) 23*32kB (UE) 3*64kB (UE) 1*128kB (E) 2*256kB (UE) 1*512kB (E) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11000kB [ 2554.685888] Node 0 DMA32: 1*4kB (U) 1*8kB (U) 8216*16kB (UME) 11920*32kB (UE) 22*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 514316kB [ 2554.731698] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2554.759570] Node 1 Normal: 312*4kB (UM) 949*8kB (U) 787*16kB (UM) 515*32kB (U) 8*64kB (U) 3*128kB (U) 9*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 41624kB [ 2554.786378] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2554.795805] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2554.811877] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2554.823150] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2554.838306] 49003 total pagecache pages [ 2554.849310] 0 pages in swap cache [ 2554.854562] Swap cache stats: add 0, delete 0, find 0/0 [ 2554.863607] Free swap = 0kB [ 2554.866705] Total swap = 0kB [ 2554.871189] 2097051 pages RAM [ 2554.874360] 0 pages HighMem/MovableOnly [ 2554.878369] 363840 pages reserved [ 2554.885062] 0 pages cma reserved [ 2554.955060] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2554.976811] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2554.984413] CPU: 0 PID: 31585 Comm: syz-executor.3 Not tainted 4.14.224-syzkaller #0 [ 2554.992313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2555.001671] Call Trace: [ 2555.004269] dump_stack+0x1b2/0x281 [ 2555.007902] warn_alloc.cold+0x96/0x1cc [ 2555.011878] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2555.016894] ? zone_watermark_ok_safe+0x220/0x220 [ 2555.021749] __alloc_pages_nodemask+0x2127/0x2720 [ 2555.026599] ? lock_acquire+0x170/0x3f0 [ 2555.030579] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2555.035426] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2555.040875] ? __mutex_unlock_slowpath+0x75/0x770 [ 2555.045719] alloc_pages_current+0x155/0x260 [ 2555.050134] ion_page_pool_alloc+0x118/0x1b0 [ 2555.054549] ion_system_heap_allocate+0x133/0x8c0 [ 2555.059394] ? ion_alloc+0x187/0x810 [ 2555.063104] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2555.068556] ? ion_system_contig_heap_create+0x130/0x130 [ 2555.074005] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2555.079026] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2555.083874] ion_alloc+0x204/0x810 [ 2555.087419] ? ion_dma_buf_release+0x40/0x40 [ 2555.091829] ? __might_fault+0x177/0x1b0 [ 2555.095891] ion_ioctl+0xea/0x1f0 [ 2555.099344] ? ion_query_heaps+0x360/0x360 [ 2555.103583] ? ion_query_heaps+0x360/0x360 [ 2555.107818] do_vfs_ioctl+0x75a/0xff0 [ 2555.111621] ? ioctl_preallocate+0x1a0/0x1a0 [ 2555.116027] ? lock_downgrade+0x740/0x740 [ 2555.120205] ? __fget+0x225/0x360 [ 2555.123654] ? do_vfs_ioctl+0xff0/0xff0 [ 2555.127626] ? security_file_ioctl+0x83/0xb0 [ 2555.132036] SyS_ioctl+0x7f/0xb0 [ 2555.135406] ? do_vfs_ioctl+0xff0/0xff0 [ 2555.139384] do_syscall_64+0x1d5/0x640 [ 2555.143274] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2555.148458] RIP: 0033:0x465f69 [ 2555.151641] RSP: 002b:00007fa2477dd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2555.159347] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2555.166623] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2555.173894] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2555.181160] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2555.188433] R13: 00007ffe9cbfad0f R14: 00007fa2477dd300 R15: 0000000000022000 [ 2555.210262] warn_alloc_show_mem: 2 callbacks suppressed [ 2555.210265] Mem-Info: [ 2555.220492] active_anon:20802 inactive_anon:43286 isolated_anon:0 [ 2555.220492] active_file:1024 inactive_file:2343 isolated_file:0 [ 2555.220492] unevictable:0 dirty:67 writeback:0 unstable:0 [ 2555.220492] slab_reclaimable:12093 slab_unreclaimable:117900 [ 2555.220492] mapped:54766 shmem:45843 pagetables:769 bounce:0 [ 2555.220492] free:26109 free_pcp:85 free_cma:0 [ 2555.254987] Node 0 active_anon:82768kB inactive_anon:151040kB active_file:5636kB inactive_file:5264kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:167668kB dirty:264kB writeback:0kB shmem:161068kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2555.291044] Bluetooth: hci2 command 0x0419 tx timeout [ 2555.355520] Node 1 active_anon:440kB inactive_anon:22104kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:51396kB dirty:4kB writeback:0kB shmem:22304kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2555.394112] syz-executor.3 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=1000 [ 2555.419677] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2555.433908] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2555.450112] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2555.455040] CPU: 1 PID: 31581 Comm: syz-executor.3 Not tainted 4.14.224-syzkaller #0 [ 2555.456691] Node 0 [ 2555.464699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2555.464703] Call Trace: [ 2555.464723] dump_stack+0x1b2/0x281 [ 2555.464735] dump_header+0x178/0x82f [ 2555.464745] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2555.464753] ? ___ratelimit+0x2cd/0x530 [ 2555.464762] oom_kill_process.cold+0x10/0xb18 [ 2555.464777] out_of_memory+0xe3e/0x1190 [ 2555.464789] ? oom_killer_disable+0x1c0/0x1c0 [ 2555.464795] ? mutex_trylock+0x152/0x1a0 [ 2555.464804] __alloc_pages_nodemask+0x23e1/0x2720 [ 2555.464823] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2555.464848] alloc_pages_current+0x155/0x260 [ 2555.464856] filemap_fault+0xea3/0x1980 [ 2555.464875] ext4_filemap_fault+0x84/0xb0 [ 2555.464885] __do_fault+0xfa/0x380 [ 2555.464895] __handle_mm_fault+0x2497/0x4620 [ 2555.464904] ? vm_insert_page+0x7c0/0x7c0 [ 2555.464912] ? nanosleep_copyout+0x100/0x100 [ 2555.464927] handle_mm_fault+0x391/0x860 [ 2555.464939] __do_page_fault+0x549/0xad0 [ 2555.464950] ? spurious_fault+0x640/0x640 [ 2555.464957] ? do_page_fault+0x60/0x500 [ 2555.464963] ? page_fault+0x2f/0x50 [ 2555.464970] page_fault+0x45/0x50 [ 2555.464976] RIP: 56c9e0:0x56bf60 [ 2555.464980] RSP: 26ffee:0000000000000001 EFLAGS: 0056bf60 [ 2555.468940] Mem-Info: [ 2555.481085] DMA32 free:17776kB min:36200kB low:45248kB high:54296kB active_anon:82768kB inactive_anon:151040kB active_file:428kB inactive_file:348kB unevictable:0kB writepending:212kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7552kB pagetables:2772kB bounce:0kB free_pcp:664kB local_pcp:0kB free_cma:0kB [ 2555.506310] active_anon:20802 inactive_anon:43286 isolated_anon:0 [ 2555.506310] active_file:51 inactive_file:40 isolated_file:0 [ 2555.506310] unevictable:0 dirty:67 writeback:0 unstable:0 [ 2555.506310] slab_reclaimable:12093 slab_unreclaimable:117900 [ 2555.506310] mapped:52766 shmem:45843 pagetables:769 bounce:0 [ 2555.506310] free:13871 free_pcp:30 free_cma:0 [ 2555.508901] lowmem_reserve[]: [ 2555.525035] Node 0 active_anon:82768kB inactive_anon:151040kB active_file:196kB inactive_file:256kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:159668kB dirty:264kB writeback:0kB shmem:161068kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2555.527332] 0 [ 2555.537734] Node 1 active_anon:440kB inactive_anon:22104kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:51396kB dirty:4kB writeback:0kB shmem:22304kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2555.538992] 0 [ 2555.557888] Node 0 [ 2555.569530] 0 [ 2555.579772] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2555.591876] 0 [ 2555.629299] lowmem_reserve[]: [ 2555.661879] 0 [ 2555.694952] 0 [ 2555.747847] 2717 [ 2555.756439] Node 0 [ 2555.759261] 2718 [ 2555.759496] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2555.761647] 2718 [ 2555.766821] lowmem_reserve[]: [ 2555.793349] 2718 [ 2555.798509] Node 0 DMA32 free:17744kB min:36200kB low:45248kB high:54296kB active_anon:82768kB inactive_anon:151040kB active_file:124kB inactive_file:152kB unevictable:0kB writepending:212kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7552kB pagetables:2772kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2555.802002] 0 [ 2555.831935] lowmem_reserve[]: 0 0 0 0 0 [ 2555.837744] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2555.842201] 0 [ 2555.864167] lowmem_reserve[]: 0 0 0 0 0 [ 2555.871172] 0 0 0 [ 2555.879973] Node 1 Normal free:26808kB min:53696kB low:67120kB high:80544kB active_anon:440kB inactive_anon:22104kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:304kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2555.887366] Node 1 Normal free:26808kB min:53696kB low:67120kB high:80544kB active_anon:440kB inactive_anon:22104kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:304kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2555.923041] lowmem_reserve[]: 0 0 0 0 0 [ 2555.962331] lowmem_reserve[]: [ 2555.965338] Node 0 [ 2555.965341] 0 0 [ 2555.968427] DMA: 1*4kB (E) 28*8kB (UE) 28*16kB (UE) 23*32kB (UE) 3*64kB (UE) 1*128kB (E) 2*256kB (UE) 1*512kB (E) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10948kB [ 2555.976564] 0 [ 2555.991132] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2555.991158] syz-executor.4 cpuset=/ [ 2556.002354] 0 [ 2556.006870] Node 0 [ 2556.008339] 0 [ 2556.014159] DMA32: 207*4kB (ME) 152*8kB (UME) 119*16kB (UME) 391*32kB (UME) 13*64kB (UM) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17548kB [ 2556.034088] mems_allowed=0-1 [ 2556.036460] syz-executor.1: page allocation failure: order:0, mode:0x14000c0(GFP_KERNEL), nodemask=(null) [ 2556.037209] CPU: 1 PID: 31325 Comm: syz-executor.4 Not tainted 4.14.224-syzkaller #0 [ 2556.046986] Node 0 [ 2556.054750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2556.054754] Call Trace: [ 2556.054771] dump_stack+0x1b2/0x281 [ 2556.054785] warn_alloc.cold+0x96/0x1cc [ 2556.054796] ? zone_watermark_ok_safe+0x220/0x220 [ 2556.054805] ? usleep_range+0x130/0x130 [ 2556.054814] ? try_to_free_pages+0x23f/0x6e0 [ 2556.054824] ? _find_next_bit+0xdb/0x100 [ 2556.057057] syz-executor.1 cpuset= [ 2556.066404] ? run_timer_softirq+0x5a0/0x5a0 [ 2556.066420] __alloc_pages_nodemask+0x2127/0x2720 [ 2556.066436] ? lock_acquire+0x170/0x3f0 [ 2556.069003] DMA: [ 2556.072611] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2556.072621] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2556.072637] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2556.076586] 1*4kB [ 2556.081417] alloc_pages_current+0x155/0x260 [ 2556.081429] ion_page_pool_alloc+0x118/0x1b0 [ 2556.085384] / [ 2556.089772] ion_system_heap_allocate+0x133/0x8c0 [ 2556.093824] mems_allowed=0-1 [ 2556.097328] ? _raw_spin_unlock+0x29/0x40 [ 2556.101729] (E) [ 2556.106536] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2556.119328] 28*8kB [ 2556.121808] ? ion_system_contig_heap_create+0x130/0x130 [ 2556.139326] (UE) [ 2556.139908] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2556.144716] 28*16kB [ 2556.147802] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2556.159323] (UE) [ 2556.160983] ion_alloc+0x27a/0x810 [ 2556.166402] 23*32kB [ 2556.168462] ? ion_dma_buf_release+0x40/0x40 [ 2556.189320] (UE) 3*64kB [ 2556.192804] ? __might_fault+0x177/0x1b0 [ 2556.192817] ion_ioctl+0xea/0x1f0 [ 2556.195456] (UE) [ 2556.199497] ? ion_query_heaps+0x360/0x360 [ 2556.199508] ? SyS_epoll_ctl+0x1e0/0x2780 [ 2556.199519] ? ion_query_heaps+0x360/0x360 [ 2556.217513] do_vfs_ioctl+0x75a/0xff0 [ 2556.219318] 1*128kB (E) [ 2556.221295] ? ioctl_preallocate+0x1a0/0x1a0 [ 2556.221301] 2*256kB [ 2556.223952] ? lock_downgrade+0x740/0x740 [ 2556.228327] (UE) [ 2556.230634] ? __fget+0x225/0x360 [ 2556.230643] ? do_vfs_ioctl+0xff0/0xff0 [ 2556.230653] ? security_file_ioctl+0x83/0xb0 [ 2556.248557] SyS_ioctl+0x7f/0xb0 [ 2556.249318] 1*512kB [ 2556.251901] ? do_vfs_ioctl+0xff0/0xff0 [ 2556.251903] (E) 2*1024kB [ 2556.254213] do_syscall_64+0x1d5/0x640 [ 2556.258160] (UE) [ 2556.260904] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2556.260914] RIP: 0033:0x465f69 [ 2556.275137] RSP: 002b:00007f1dbb0fc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2556.279314] 3*2048kB [ 2556.282825] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2556.282831] (UME) [ 2556.285216] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2556.285223] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2556.299312] 0*4096kB [ 2556.301848] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2556.301855] R13: 00007fff344be07f R14: 00007f1dbb0fc300 R15: 0000000000022000 [ 2556.309100] = 10948kB [ 2556.313611] Node 0 [ 2556.326185] CPU: 0 PID: 31324 Comm: syz-executor.1 Not tainted 4.14.224-syzkaller #0 [ 2556.328498] Normal: [ 2556.330695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2556.330699] Call Trace: [ 2556.330714] dump_stack+0x1b2/0x281 [ 2556.330727] warn_alloc.cold+0x96/0x1cc [ 2556.330739] ? zone_watermark_ok_safe+0x220/0x220 [ 2556.330749] ? usleep_range+0x130/0x130 [ 2556.330757] ? try_to_free_pages+0x23f/0x6e0 [ 2556.330767] ? _find_next_bit+0xdb/0x100 [ 2556.330780] ? run_timer_softirq+0x5a0/0x5a0 [ 2556.343189] 0*4kB [ 2556.350294] __alloc_pages_nodemask+0x2127/0x2720 [ 2556.350316] ? mark_held_locks+0xa6/0xf0 [ 2556.350323] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2556.350333] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2556.354339] 0*8kB [ 2556.356526] alloc_pages_current+0x155/0x260 [ 2556.364316] 0*16kB [ 2556.365285] __get_free_pages+0xb/0x40 [ 2556.369226] 0*32kB [ 2556.373617] sg_kmalloc+0x44/0x60 [ 2556.373628] __sg_alloc_table.part.0+0x23f/0x370 [ 2556.373638] ? sg_init_one+0x170/0x170 [ 2556.373649] sg_alloc_table+0x4e/0x250 [ 2556.373658] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2556.373673] ion_system_heap_allocate+0x367/0x8c0 [ 2556.373684] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2556.383696] 0*64kB [ 2556.384247] ? ion_system_contig_heap_create+0x130/0x130 [ 2556.389061] 0*128kB [ 2556.393102] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2556.393112] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2556.393123] ion_alloc+0x27a/0x810 [ 2556.393137] ? ion_dma_buf_release+0x40/0x40 [ 2556.393148] ? __might_fault+0x177/0x1b0 [ 2556.393159] ion_ioctl+0xea/0x1f0 [ 2556.393168] ? ion_query_heaps+0x360/0x360 [ 2556.393180] ? ion_query_heaps+0x360/0x360 [ 2556.397992] 0*256kB [ 2556.402985] do_vfs_ioctl+0x75a/0xff0 [ 2556.402995] ? ioctl_preallocate+0x1a0/0x1a0 [ 2556.403005] ? lock_downgrade+0x740/0x740 [ 2556.403018] ? __fget+0x225/0x360 [ 2556.403026] ? do_vfs_ioctl+0xff0/0xff0 [ 2556.403037] ? security_file_ioctl+0x83/0xb0 [ 2556.403046] SyS_ioctl+0x7f/0xb0 [ 2556.403054] ? do_vfs_ioctl+0xff0/0xff0 [ 2556.403064] do_syscall_64+0x1d5/0x640 [ 2556.403080] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2556.411934] 0*512kB [ 2556.415682] RIP: 0033:0x465f69 [ 2556.417895] 0*1024kB [ 2556.421325] RSP: 002b:00007f747aa45188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2556.421335] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2556.421339] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2556.421343] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2556.421348] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2556.421353] R13: 00007fff04d0b2bf R14: 00007f747aa45300 R15: 0000000000022000 [ 2556.436660] Node 0 [ 2556.446943] 0*2048kB [ 2556.454518] DMA32: [ 2556.456414] 0*4096kB [ 2556.458696] 207*4kB [ 2556.469688] = 0kB [ 2556.481468] (ME) [ 2556.488110] Node 1 [ 2556.488425] 152*8kB [ 2556.498884] Normal: [ 2556.501329] (UME) [ 2556.507341] 2*4kB [ 2556.514918] 119*16kB [ 2556.517144] (M) [ 2556.521557] (UME) [ 2556.526834] 0*8kB [ 2556.526909] 391*32kB [ 2556.532782] 341*16kB [ 2556.542659] (UME) [ 2556.547968] (UM) [ 2556.557797] 13*64kB [ 2556.563166] 505*32kB [ 2556.568391] (UM) [ 2556.575076] (U) [ 2556.590856] 2*128kB [ 2556.597620] 11*64kB [ 2556.606978] Mem-Info: [ 2556.608394] (U) [ 2556.612839] active_anon:20811 inactive_anon:43286 isolated_anon:0 [ 2556.612839] active_file:47 inactive_file:49 isolated_file:0 [ 2556.612839] unevictable:0 dirty:53 writeback:0 unstable:0 [ 2556.612839] slab_reclaimable:12093 slab_unreclaimable:117768 [ 2556.612839] mapped:52733 shmem:45843 pagetables:772 bounce:0 [ 2556.612839] free:13826 free_pcp:30 free_cma:0 [ 2556.618648] 3*128kB [ 2556.623426] (U) [ 2556.627036] (U) [ 2556.628522] 0*256kB [ 2556.636442] 14*256kB [ 2556.638690] 0*512kB [ 2556.645081] (U) [ 2556.647304] Node 0 active_anon:82804kB inactive_anon:151040kB active_file:180kB inactive_file:176kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:159536kB dirty:212kB writeback:0kB shmem:161068kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2556.648514] 1*512kB [ 2556.650784] 0*1024kB [ 2556.695159] (U) [ 2556.699000] Node 1 active_anon:440kB inactive_anon:22104kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:51396kB dirty:0kB writeback:0kB shmem:22304kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2556.699149] 0*1024kB [ 2556.731478] Node 0 [ 2556.746937] 0*2048kB [ 2556.765454] 0*2048kB 0*4096kB = 17548kB [ 2556.773315] 0*4096kB = 26808kB [ 2556.776320] Node 0 [ 2556.776509] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2556.776511] Normal: 0*4kB [ 2556.778731] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2556.791534] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2556.819916] DMA free:10948kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2556.847057] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2556.865151] Node 1 Normal: 2*4kB (UM) 0*8kB 333*16kB (UM) 506*32kB (UM) 1987*64kB (U) 176*128kB (U) 8*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 173272kB [ 2556.879339] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2556.888292] 46629 total pagecache pages [ 2556.905127] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2556.912442] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2556.912659] 0 pages in swap cache [ 2556.928316] Node 0 DMA32 free:62224kB min:36200kB low:45248kB high:54296kB active_anon:82804kB inactive_anon:151040kB active_file:124kB inactive_file:196kB unevictable:0kB writepending:92kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7552kB pagetables:2784kB bounce:0kB free_pcp:240kB local_pcp:120kB free_cma:0kB [ 2556.939398] Swap cache stats: add 0, delete 0, find 0/0 [ 2556.963772] Free swap = 0kB [ 2556.967043] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2556.979535] Total swap = 0kB [ 2556.979877] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2556.985865] 2097051 pages RAM [ 2556.991655] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2557.001069] 0 pages HighMem/MovableOnly [ 2557.006686] lowmem_reserve[]: 0 0 0 0 0 [ 2557.011529] 363840 pages reserved [ 2557.011778] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2557.021533] 0 pages cma reserved [ 2557.044120] 46713 total pagecache pages [ 2557.048106] 0 pages in swap cache [ 2557.052407] Swap cache stats: add 0, delete 0, find 0/0 [ 2557.057778] Free swap = 0kB [ 2557.064650] Total swap = 0kB [ 2557.067681] 2097051 pages RAM [ 2557.071147] 0 pages HighMem/MovableOnly [ 2557.075116] 363840 pages reserved [ 2557.078556] 0 pages cma reserved [ 2557.084871] Out of memory (oom_kill_allocating_task): Kill process 31581 (syz-executor.3) score 0 or sacrifice child [ 2557.086053] lowmem_reserve[]: 0 0 0 0 0 [ 2557.106853] Node 1 Normal free:649388kB min:53696kB low:67120kB high:80544kB active_anon:456kB inactive_anon:22104kB active_file:216kB inactive_file:2836kB unevictable:0kB writepending:80kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:304kB bounce:0kB free_pcp:464kB local_pcp:252kB free_cma:0kB [ 2557.151637] Killed process 31581 (syz-executor.3) total-vm:93252kB, anon-rss:104kB, file-rss:33828kB, shmem-rss:0kB [ 2557.187145] oom_reaper: reaped process 31581 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2557.209539] lowmem_reserve[]: 0 0 0 0 0 [ 2557.213559] Node 0 DMA: 1*4kB (E) 28*8kB (UE) 28*16kB (UE) 23*32kB (UE) 25*64kB (UE) 2*128kB (UE) 2*256kB (UE) 1*512kB (E) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 12484kB [ 2557.249305] Node 0 DMA32: 26*4kB (UE) 99*8kB (ME) 112*16kB (ME) 39*32kB (UME) 1180*64kB (UME) 576*128kB (UM) 10*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 155744kB [ 2557.289517] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2557.319354] Node 1 Normal: 1*4kB (U) 1*8kB (M) 332*16kB (U) 505*32kB (U) 10888*64kB (UM) 2476*128kB (UM) 688*256kB (U) 26*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 1224684kB [ 2557.349273] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2557.358466] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2557.387918] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2557.412682] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2557.439246] 47698 total pagecache pages [ 2557.443255] 0 pages in swap cache [ 2557.446701] Swap cache stats: add 0, delete 0, find 0/0 [ 2557.459299] Free swap = 0kB [ 2557.462371] Total swap = 0kB [ 2557.465389] 2097051 pages RAM [ 2557.468484] 0 pages HighMem/MovableOnly [ 2557.477296] 363840 pages reserved [ 2557.481085] 0 pages cma reserved 00:44:45 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x484240, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)={0x101, 0x1, 0x4, 0x400, 0xffff, {0x0, 0x2710}, {0x1, 0x2, 0x8, 0x2, 0x7, 0x1, "db53d254"}, 0x8, 0x4, @fd=r1, 0x4, 0x0, r1}) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x8) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x4, 0x90040) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x7fffffff, 0x1e, 0x1}) 00:44:45 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x0, 0x0) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x8) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x4, 0x90040) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x7fffffff, 0x1e, 0x1}) 00:44:45 executing program 5: openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) pkey_mprotect(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff1000/0x4000)=nil, 0x4000, 0x4, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 00:44:45 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x484240, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)={0x101, 0x1, 0x4, 0x400, 0xffff, {0x0, 0x2710}, {0x1, 0x2, 0x8, 0x2, 0x7, 0x1, "db53d254"}, 0x8, 0x4, @fd=r1, 0x4, 0x0, r1}) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x8) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000340)={0x401, 0x2, 0x4, 0x8, 0x8, {}, {0x1, 0x8, 0xbc, 0xa2, 0xf7, 0x20, "450104da"}, 0xa87, 0x4, @fd=r3, 0x1ff}) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x4, 0x90040) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r4, 0xc00464be, &(0x7f0000000240)={0x1}) syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x1, 0x621c0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x7fffffff, 0x1e, 0x1}) 00:44:45 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x484240, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)={0x101, 0x1, 0x4, 0x400, 0xffff, {0x0, 0x2710}, {0x1, 0x2, 0x8, 0x2, 0x7, 0x1, "db53d254"}, 0x8, 0x4, @fd=r1, 0x4, 0x0, r1}) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x8) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000340)={0x401, 0x2, 0x4, 0x8, 0x8, {}, {0x1, 0x8, 0xbc, 0xa2, 0xf7, 0x20, "450104da"}, 0xa87, 0x4, @fd=r3, 0x1ff}) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x4, 0x90040) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000240)={0x1}) syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x1, 0x621c0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x7fffffff, 0x1e, 0x1}) 00:44:45 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x484240, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)={0x101, 0x1, 0x4, 0x400, 0xffff, {0x0, 0x2710}, {0x1, 0x2, 0x8, 0x2, 0x7, 0x1, "db53d254"}, 0x8, 0x4, @fd=r1, 0x4, 0x0, r1}) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x8) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000340)={0x401, 0x2, 0x4, 0x8, 0x8, {}, {0x1, 0x8, 0xbc, 0xa2, 0xf7, 0x20, "450104da"}, 0xa87, 0x4, @fd=r3, 0x1ff}) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x4, 0x90040) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r4, 0xc00464be, &(0x7f0000000240)={0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x7fffffff, 0x1e, 0x1}) 00:44:45 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff1000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 00:44:45 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff1000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 00:44:45 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff1000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 00:44:45 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff1000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 00:44:46 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x484240, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)={0x101, 0x1, 0x4, 0x400, 0xffff, {0x0, 0x2710}, {0x1, 0x2, 0x8, 0x2, 0x7, 0x1, "db53d254"}, 0x8, 0x4, @fd=r1, 0x4, 0x0, r1}) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x8) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000340)={0x401, 0x2, 0x4, 0x8, 0x8, {}, {0x1, 0x8, 0xbc, 0xa2, 0xf7, 0x20, "450104da"}, 0xa87, 0x4, @fd=r3, 0x1ff}) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x4, 0x90040) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r4, 0xc00464be, &(0x7f0000000240)={0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x7fffffff, 0x1e, 0x1}) [ 2559.498972] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2559.523918] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2559.544848] CPU: 0 PID: 31587 Comm: syz-executor.3 Not tainted 4.14.224-syzkaller #0 [ 2559.552853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2559.562289] Call Trace: [ 2559.564900] dump_stack+0x1b2/0x281 [ 2559.568534] warn_alloc.cold+0x96/0x1cc [ 2559.572509] ? zone_watermark_ok_safe+0x220/0x220 [ 2559.577368] __alloc_pages_nodemask+0x2127/0x2720 [ 2559.582211] ? ___preempt_schedule+0x16/0x18 [ 2559.586627] ? lock_acquire+0x170/0x3f0 [ 2559.590609] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2559.595463] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2559.600922] ? __mutex_unlock_slowpath+0x75/0x770 [ 2559.605769] alloc_pages_current+0x155/0x260 [ 2559.610181] ion_page_pool_alloc+0x118/0x1b0 [ 2559.614593] ion_system_heap_allocate+0x133/0x8c0 [ 2559.619441] ? ion_alloc+0x187/0x810 [ 2559.623165] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2559.628621] ? ion_system_contig_heap_create+0x130/0x130 [ 2559.634074] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2559.639092] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2559.643940] ion_alloc+0x204/0x810 [ 2559.647484] ? ion_dma_buf_release+0x40/0x40 [ 2559.651887] ? __might_fault+0x177/0x1b0 [ 2559.655935] ion_ioctl+0xea/0x1f0 [ 2559.659370] ? ion_query_heaps+0x360/0x360 [ 2559.663587] ? ion_query_heaps+0x360/0x360 [ 2559.667801] do_vfs_ioctl+0x75a/0xff0 [ 2559.671583] ? ioctl_preallocate+0x1a0/0x1a0 [ 2559.675983] ? lock_downgrade+0x740/0x740 [ 2559.680132] ? __fget+0x225/0x360 [ 2559.683575] ? do_vfs_ioctl+0xff0/0xff0 [ 2559.687542] ? security_file_ioctl+0x83/0xb0 [ 2559.691940] SyS_ioctl+0x7f/0xb0 [ 2559.695296] ? do_vfs_ioctl+0xff0/0xff0 [ 2559.699265] do_syscall_64+0x1d5/0x640 [ 2559.703143] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2559.708314] RIP: 0033:0x465f69 [ 2559.711486] RSP: 002b:00007fa2477dd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2559.719198] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2559.726557] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2559.733819] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2559.741068] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2559.748315] R13: 00007ffe9cbfad0f R14: 00007fa2477dd300 R15: 0000000000022000 [ 2559.762635] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2559.769807] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2559.788809] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2559.790077] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2559.805952] CPU: 0 PID: 31607 Comm: syz-executor.5 Not tainted 4.14.224-syzkaller #0 [ 2559.812616] syz-executor.1: [ 2559.813932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2559.813937] Call Trace: [ 2559.813956] dump_stack+0x1b2/0x281 [ 2559.813971] warn_alloc.cold+0x96/0x1cc [ 2559.813983] ? zone_watermark_ok_safe+0x220/0x220 [ 2559.813993] ? i2400m_report_hook_work+0x480/0x760 [ 2559.814013] __alloc_pages_nodemask+0x2127/0x2720 [ 2559.817132] page allocation failure: order:4 [ 2559.826438] ? lock_acquire+0x170/0x3f0 [ 2559.826461] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2559.826479] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2559.826490] ? __mutex_unlock_slowpath+0x75/0x770 [ 2559.826502] alloc_pages_current+0x155/0x260 [ 2559.826516] ion_page_pool_alloc+0x118/0x1b0 [ 2559.826525] ion_system_heap_allocate+0x133/0x8c0 [ 2559.826534] ? ion_alloc+0x187/0x810 [ 2559.826544] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2559.826553] ? ion_system_contig_heap_create+0x130/0x130 [ 2559.826563] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2559.826572] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2559.826582] ion_alloc+0x204/0x810 [ 2559.826596] ? ion_dma_buf_release+0x40/0x40 [ 2559.921412] ? __might_fault+0x177/0x1b0 [ 2559.925459] ion_ioctl+0xea/0x1f0 [ 2559.928895] ? ion_query_heaps+0x360/0x360 [ 2559.933109] ? SyS_epoll_ctl+0x1e0/0x2780 [ 2559.937237] ? ion_query_heaps+0x360/0x360 [ 2559.941475] do_vfs_ioctl+0x75a/0xff0 [ 2559.945256] ? ioctl_preallocate+0x1a0/0x1a0 [ 2559.949642] ? lock_downgrade+0x740/0x740 [ 2559.953775] ? __fget+0x225/0x360 [ 2559.957208] ? do_vfs_ioctl+0xff0/0xff0 [ 2559.961163] ? security_file_ioctl+0x83/0xb0 [ 2559.965553] SyS_ioctl+0x7f/0xb0 [ 2559.968897] ? do_vfs_ioctl+0xff0/0xff0 [ 2559.972862] do_syscall_64+0x1d5/0x640 [ 2559.976746] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2559.981918] RIP: 0033:0x465f69 [ 2559.985087] RSP: 002b:00007f886bfb2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2559.992776] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2560.000039] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2560.007288] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2560.014539] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2560.021787] R13: 00007ffe15f841ff R14: 00007f886bfb2300 R15: 0000000000022000 [ 2560.032911] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2560.050717] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2560.055678] CPU: 1 PID: 31598 Comm: syz-executor.4 Not tainted 4.14.224-syzkaller #0 [ 2560.063820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2560.073154] Call Trace: [ 2560.075729] dump_stack+0x1b2/0x281 [ 2560.079347] warn_alloc.cold+0x96/0x1cc [ 2560.083316] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2560.088315] ? zone_watermark_ok_safe+0x220/0x220 [ 2560.093149] __alloc_pages_nodemask+0x2127/0x2720 [ 2560.097972] ? __schedule+0x893/0x1de0 [ 2560.101859] ? lock_acquire+0x170/0x3f0 [ 2560.105818] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2560.110646] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2560.116094] ? __mutex_unlock_slowpath+0x75/0x770 [ 2560.120921] alloc_pages_current+0x155/0x260 [ 2560.125317] ion_page_pool_alloc+0x118/0x1b0 [ 2560.129708] ion_system_heap_allocate+0x133/0x8c0 [ 2560.134530] ? ion_alloc+0x187/0x810 [ 2560.138226] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2560.143655] ? ion_system_contig_heap_create+0x130/0x130 [ 2560.149096] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2560.154092] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2560.158916] ion_alloc+0x204/0x810 [ 2560.162439] ? ion_dma_buf_release+0x40/0x40 [ 2560.166829] ? __might_fault+0x177/0x1b0 [ 2560.170882] ion_ioctl+0xea/0x1f0 [ 2560.174314] ? ion_query_heaps+0x360/0x360 [ 2560.178528] ? SyS_epoll_ctl+0x1e0/0x2780 [ 2560.182653] ? ion_query_heaps+0x360/0x360 [ 2560.186868] do_vfs_ioctl+0x75a/0xff0 [ 2560.190661] ? ioctl_preallocate+0x1a0/0x1a0 [ 2560.195046] ? lock_downgrade+0x740/0x740 [ 2560.199184] ? __fget+0x225/0x360 [ 2560.202616] ? do_vfs_ioctl+0xff0/0xff0 [ 2560.206569] ? security_file_ioctl+0x83/0xb0 [ 2560.210958] SyS_ioctl+0x7f/0xb0 [ 2560.214302] ? do_vfs_ioctl+0xff0/0xff0 [ 2560.218255] do_syscall_64+0x1d5/0x640 [ 2560.222126] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2560.227293] RIP: 0033:0x465f69 [ 2560.230460] RSP: 002b:00007f1dbb0fc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2560.238147] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2560.245397] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2560.252645] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2560.259893] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2560.267141] R13: 00007fff344be07f R14: 00007f1dbb0fc300 R15: 0000000000022000 [ 2560.274873] warn_alloc_show_mem: 1 callbacks suppressed [ 2560.274876] Mem-Info: [ 2560.283628] CPU: 1 PID: 31593 Comm: syz-executor.0 Not tainted 4.14.224-syzkaller #0 [ 2560.291601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2560.295577] active_anon:20946 inactive_anon:43286 isolated_anon:0 [ 2560.295577] active_file:975 inactive_file:1009 isolated_file:4 [ 2560.295577] unevictable:0 dirty:13 writeback:0 unstable:0 [ 2560.295577] slab_reclaimable:12153 slab_unreclaimable:119179 [ 2560.295577] mapped:54361 shmem:45843 pagetables:850 bounce:0 [ 2560.295577] free:52323 free_pcp:240 free_cma:0 [ 2560.300954] Call Trace: [ 2560.300975] dump_stack+0x1b2/0x281 [ 2560.300989] warn_alloc.cold+0x96/0x1cc [ 2560.301000] ? zone_watermark_ok_safe+0x220/0x220 [ 2560.301029] __alloc_pages_nodemask+0x2127/0x2720 [ 2560.354367] ? lock_acquire+0x170/0x3f0 [ 2560.358328] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2560.363154] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2560.368585] ? __mutex_unlock_slowpath+0x75/0x770 [ 2560.373406] ? retint_kernel+0x2d/0x2d [ 2560.377278] alloc_pages_current+0x155/0x260 [ 2560.381669] ion_page_pool_alloc+0x118/0x1b0 [ 2560.386056] ion_system_heap_allocate+0x133/0x8c0 [ 2560.390889] ? ion_alloc+0x187/0x810 [ 2560.394583] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2560.400012] ? ion_system_contig_heap_create+0x130/0x130 [ 2560.405442] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2560.410454] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2560.415290] ion_alloc+0x204/0x810 [ 2560.418882] ? ion_dma_buf_release+0x40/0x40 [ 2560.423635] ? __might_fault+0x177/0x1b0 [ 2560.427699] ion_ioctl+0xea/0x1f0 [ 2560.431138] ? ion_query_heaps+0x360/0x360 [ 2560.435355] ? ion_query_heaps+0x360/0x360 [ 2560.439570] do_vfs_ioctl+0x75a/0xff0 [ 2560.443369] ? ioctl_preallocate+0x1a0/0x1a0 [ 2560.447756] ? lock_downgrade+0x740/0x740 [ 2560.451900] ? __fget+0x225/0x360 [ 2560.455334] ? do_vfs_ioctl+0xff0/0xff0 [ 2560.459291] ? security_file_ioctl+0x83/0xb0 [ 2560.463678] SyS_ioctl+0x7f/0xb0 [ 2560.467022] ? do_vfs_ioctl+0xff0/0xff0 [ 2560.470987] do_syscall_64+0x1d5/0x640 [ 2560.474861] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2560.480028] RIP: 0033:0x465f69 [ 2560.483203] RSP: 002b:00007fb3e357a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2560.490890] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2560.498138] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2560.505394] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2560.512672] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2560.519927] R13: 00007fffc0af773f R14: 00007fb3e357a300 R15: 0000000000022000 [ 2560.527688] Node 0 active_anon:82808kB inactive_anon:151040kB active_file:736kB inactive_file:996kB unevictable:0kB isolated(anon):0kB isolated(file):16kB mapped:160852kB dirty:36kB writeback:0kB shmem:161068kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2560.557787] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2560.561837] Node 1 active_anon:976kB inactive_anon:22104kB active_file:3164kB inactive_file:3040kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:56592kB dirty:16kB writeback:0kB shmem:22304kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2560.581033] syz-executor.1 cpuset= [ 2560.593119] Node 0 DMA free:11088kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:12kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2560.616601] / mems_allowed=0-1 [ 2560.642105] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2560.645952] CPU: 1 PID: 31592 Comm: syz-executor.1 Not tainted 4.14.224-syzkaller #0 [ 2560.653299] Node 0 [ 2560.655020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2560.655025] Call Trace: [ 2560.655043] dump_stack+0x1b2/0x281 [ 2560.655056] warn_alloc.cold+0x96/0x1cc [ 2560.660447] DMA32 free:182348kB min:36200kB low:45248kB high:54296kB active_anon:82796kB inactive_anon:151040kB active_file:736kB inactive_file:896kB unevictable:0kB writepending:36kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7488kB pagetables:2564kB bounce:0kB free_pcp:904kB local_pcp:220kB free_cma:0kB [ 2560.666643] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2560.666655] ? zone_watermark_ok_safe+0x220/0x220 [ 2560.666676] __alloc_pages_nodemask+0x2127/0x2720 [ 2560.681044] lowmem_reserve[]: [ 2560.705520] ? lock_acquire+0x170/0x3f0 [ 2560.705539] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2560.705555] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2560.705566] ? __mutex_unlock_slowpath+0x75/0x770 [ 2560.705578] alloc_pages_current+0x155/0x260 [ 2560.705593] ion_page_pool_alloc+0x118/0x1b0 [ 2560.742874] 0 [ 2560.747169] ion_system_heap_allocate+0x133/0x8c0 [ 2560.747182] ? ion_alloc+0x187/0x810 [ 2560.762088] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2560.762142] 0 [ 2560.767530] ? ion_system_contig_heap_create+0x130/0x130 [ 2560.767541] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2560.767551] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2560.767562] ion_alloc+0x204/0x810 [ 2560.777090] 0 [ 2560.779784] ? ion_dma_buf_release+0x40/0x40 [ 2560.779796] ? __might_fault+0x177/0x1b0 [ 2560.779808] ion_ioctl+0xea/0x1f0 [ 2560.779817] ? ion_query_heaps+0x360/0x360 [ 2560.779834] ? ion_query_heaps+0x360/0x360 [ 2560.791247] 0 [ 2560.794443] do_vfs_ioctl+0x75a/0xff0 [ 2560.794456] ? ioctl_preallocate+0x1a0/0x1a0 [ 2560.794467] ? lock_downgrade+0x740/0x740 [ 2560.803442] 0 [ 2560.806188] ? __fget+0x225/0x360 [ 2560.806199] ? do_vfs_ioctl+0xff0/0xff0 [ 2560.806211] ? security_file_ioctl+0x83/0xb0 [ 2560.820380] SyS_ioctl+0x7f/0xb0 [ 2560.820390] ? do_vfs_ioctl+0xff0/0xff0 [ 2560.820402] do_syscall_64+0x1d5/0x640 [ 2560.820419] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2560.820428] RIP: 0033:0x465f69 [ 2560.830371] Node 0 [ 2560.833724] RSP: 002b:00007f747aa45188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2560.833736] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2560.833741] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2560.833746] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2560.833755] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2560.845108] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2560.845452] R13: 00007fff04d0b2bf R14: 00007f747aa45300 R15: 0000000000022000 [ 2560.853802] lowmem_reserve[]: 0 0 0 0 0 [ 2561.020695] Node 1 Normal free:84892kB min:53696kB low:67120kB high:80544kB active_anon:976kB inactive_anon:22104kB active_file:3164kB inactive_file:3040kB unevictable:0kB writepending:24kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:824kB bounce:0kB free_pcp:688kB local_pcp:0kB free_cma:0kB [ 2561.082892] lowmem_reserve[]: 0 0 0 0 0 [ 2561.091774] Node 0 DMA: 11*4kB (UME) 47*8kB (U) 37*16kB (UME) 11*32kB (UME) 3*64kB (UME) 12*128kB (UME) 4*256kB (UME) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 12308kB [ 2561.126062] Node 0 DMA32: 0*4kB 73*8kB (E) 8623*16kB (UE) 1041*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 171864kB [ 2561.158305] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2561.171568] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2561.181973] Node 1 Normal: 210*4kB (UM) 738*8kB (UME) 741*16kB (UME) 522*32kB (UME) 0*64kB 1*128kB (M) 1*256kB (M) 35*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 53608kB [ 2561.215846] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2561.235437] CPU: 1 PID: 31595 Comm: syz-executor.2 Not tainted 4.14.224-syzkaller #0 [ 2561.235463] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2561.243348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2561.243353] Call Trace: [ 2561.243372] dump_stack+0x1b2/0x281 [ 2561.243385] warn_alloc.cold+0x96/0x1cc [ 2561.243396] ? zone_watermark_ok_safe+0x220/0x220 [ 2561.243417] __alloc_pages_nodemask+0x2127/0x2720 [ 2561.243429] ? _raw_spin_unlock_irq+0x5a/0x80 [ 2561.269885] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2561.271858] ? finish_task_switch+0x178/0x610 [ 2561.271866] ? finish_task_switch+0x14d/0x610 [ 2561.271879] ? lock_acquire+0x170/0x3f0 [ 2561.278955] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2561.281541] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2561.281560] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2561.288286] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2561.294590] ? __mutex_unlock_slowpath+0x75/0x770 [ 2561.294600] ? alloc_pages_current+0x37/0x260 [ 2561.294612] alloc_pages_current+0x155/0x260 [ 2561.294626] ion_page_pool_alloc+0x118/0x1b0 [ 2561.294637] ion_system_heap_allocate+0x133/0x8c0 [ 2561.310059] 47723 total pagecache pages [ 2561.316370] ? ion_alloc+0x187/0x810 [ 2561.316380] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2561.316391] ? ion_system_contig_heap_create+0x130/0x130 [ 2561.333341] 0 pages in swap cache [ 2561.335221] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2561.335236] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2561.347778] Swap cache stats: add 0, delete 0, find 0/0 [ 2561.348928] ion_alloc+0x204/0x810 [ 2561.348943] ? ion_dma_buf_release+0x40/0x40 [ 2561.348955] ? __might_fault+0x177/0x1b0 [ 2561.348966] ion_ioctl+0xea/0x1f0 [ 2561.354505] Free swap = 0kB [ 2561.358200] ? ion_query_heaps+0x360/0x360 [ 2561.358217] ? ion_query_heaps+0x360/0x360 [ 2561.358227] do_vfs_ioctl+0x75a/0xff0 [ 2561.369891] Total swap = 0kB [ 2561.371304] ? ioctl_preallocate+0x1a0/0x1a0 [ 2561.371314] ? lock_downgrade+0x740/0x740 [ 2561.371327] ? __fget+0x225/0x360 [ 2561.377921] 2097051 pages RAM [ 2561.380221] ? do_vfs_ioctl+0xff0/0xff0 [ 2561.380232] ? security_file_ioctl+0x83/0xb0 [ 2561.380243] SyS_ioctl+0x7f/0xb0 [ 2561.380251] ? do_vfs_ioctl+0xff0/0xff0 [ 2561.380262] do_syscall_64+0x1d5/0x640 [ 2561.380279] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2561.388590] 0 pages HighMem/MovableOnly [ 2561.390109] RIP: 0033:0x465f69 [ 2561.390114] RSP: 002b:00007fa2ca784188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2561.390124] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2561.390130] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2561.390135] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2561.390141] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2561.390146] R13: 00007fff4963426f R14: 00007fa2ca784300 R15: 0000000000022000 [ 2561.537007] 363840 pages reserved [ 2561.547980] 0 pages cma reserved [ 2561.676398] warn_alloc_show_mem: 4 callbacks suppressed [ 2561.676402] Mem-Info: [ 2561.704841] active_anon:20946 inactive_anon:43286 isolated_anon:0 [ 2561.704841] active_file:949 inactive_file:933 isolated_file:1 [ 2561.704841] unevictable:0 dirty:26 writeback:0 unstable:0 [ 2561.704841] slab_reclaimable:12138 slab_unreclaimable:120035 [ 2561.704841] mapped:54368 shmem:45843 pagetables:850 bounce:0 [ 2561.704841] free:65699 free_pcp:224 free_cma:0 [ 2561.830258] Node 0 active_anon:82808kB inactive_anon:151040kB active_file:632kB inactive_file:692kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:160880kB dirty:80kB writeback:0kB shmem:161068kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2561.950722] Node 1 active_anon:976kB inactive_anon:22104kB active_file:3164kB inactive_file:3240kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:56592kB dirty:8kB writeback:0kB shmem:22304kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2562.077105] Node 0 DMA free:11060kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:12kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2562.176693] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2562.221139] Node 0 DMA32 free:43388kB min:36200kB low:45248kB high:54296kB active_anon:82796kB inactive_anon:151040kB active_file:56kB inactive_file:568kB unevictable:0kB writepending:40kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:2564kB bounce:0kB free_pcp:868kB local_pcp:776kB free_cma:0kB [ 2562.225303] oom_reaper: reaped process 31598 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2562.352665] lowmem_reserve[]: 0 0 0 0 0 [ 2562.356696] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2562.502892] lowmem_reserve[]: 0 0 0 0 0 [ 2562.523812] Node 1 Normal free:53600kB min:53696kB low:67120kB high:80544kB active_anon:976kB inactive_anon:22104kB active_file:500kB inactive_file:456kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:824kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2562.589152] lowmem_reserve[]: 0 0 0 0 0 [ 2562.596490] Node 0 DMA: 2*4kB (ME) 28*8kB (U) 38*16kB (UME) 13*32kB (UME) 2*64kB (ME) 3*128kB (UME) 4*256kB (UME) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10984kB [ 2562.626530] oom_reaper: reaped process 31593 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2562.693630] Node 0 DMA32: 146*4kB (UME) 82*8kB (UME) 76*16kB (UME) 13*32kB (ME) 132*64kB (UM) 52*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17976kB [ 2562.715753] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2562.755957] Node 1 Normal: 43*4kB (ME) 26*8kB (UME) 30*16kB (UME) 20*32kB (ME) 84*64kB (UM) 25*128kB (UM) 4*256kB (M) 35*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 29020kB [ 2562.801119] syz-executor.5 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2562.817913] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2562.882597] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2562.887741] CPU: 1 PID: 29066 Comm: syz-executor.5 Not tainted 4.14.224-syzkaller #0 [ 2562.894915] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2562.895619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2562.913524] Call Trace: [ 2562.916117] dump_stack+0x1b2/0x281 [ 2562.919749] dump_header+0x178/0x82f [ 2562.923461] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2562.928565] ? ___ratelimit+0x2cd/0x530 [ 2562.932542] oom_kill_process.cold+0x10/0xb18 [ 2562.935590] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2562.937059] out_of_memory+0xe3e/0x1190 [ 2562.949845] ? oom_killer_disable+0x1c0/0x1c0 [ 2562.954333] ? mutex_trylock+0x152/0x1a0 [ 2562.958393] __alloc_pages_nodemask+0x23e1/0x2720 [ 2562.963271] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2562.968138] alloc_pages_current+0x155/0x260 [ 2562.972747] filemap_fault+0xea3/0x1980 [ 2562.976729] ext4_filemap_fault+0x84/0xb0 [ 2562.980876] __do_fault+0xfa/0x380 [ 2562.984502] __handle_mm_fault+0x2497/0x4620 [ 2562.988907] ? vm_insert_page+0x7c0/0x7c0 [ 2562.993055] ? nanosleep_copyout+0x100/0x100 [ 2562.997475] handle_mm_fault+0x391/0x860 [ 2562.998891] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2563.001531] __do_page_fault+0x549/0xad0 [ 2563.014145] ? spurious_fault+0x640/0x640 [ 2563.018294] ? do_page_fault+0x60/0x500 [ 2563.022267] ? page_fault+0x2f/0x50 [ 2563.025889] page_fault+0x45/0x50 [ 2563.029337] RIP: 271320:0xe [ 2563.032260] RSP: 003f:00007ffe15f844bc EFLAGS: 00000009 [ 2563.062887] 45862 total pagecache pages [ 2563.118346] 0 pages in swap cache [ 2563.164950] Swap cache stats: add 0, delete 0, find 0/0 [ 2563.207543] Free swap = 0kB [ 2563.221968] Total swap = 0kB [ 2563.225017] 2097051 pages RAM [ 2563.228115] 0 pages HighMem/MovableOnly [ 2563.243123] 363840 pages reserved [ 2563.246602] 0 pages cma reserved [ 2563.438825] Mem-Info: [ 2563.441306] active_anon:20900 inactive_anon:43286 isolated_anon:0 [ 2563.441306] active_file:38 inactive_file:504 isolated_file:0 [ 2563.441306] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2563.441306] slab_reclaimable:12123 slab_unreclaimable:119913 [ 2563.441306] mapped:53145 shmem:45843 pagetables:850 bounce:0 [ 2563.441306] free:25693 free_pcp:51 free_cma:0 [ 2563.528793] Node 0 active_anon:82784kB inactive_anon:151040kB active_file:20kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:159784kB dirty:0kB writeback:0kB shmem:161068kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2563.588776] Node 1 active_anon:816kB inactive_anon:22104kB active_file:436kB inactive_file:496kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:52296kB dirty:0kB writeback:0kB shmem:22304kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2563.728742] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:12kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2563.811358] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2563.816430] Node 0 DMA32 free:18100kB min:36200kB low:45248kB high:54296kB active_anon:82772kB inactive_anon:151040kB active_file:120kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:2564kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2563.907100] lowmem_reserve[]: 0 0 0 0 0 [ 2563.925024] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2564.003657] lowmem_reserve[]: 0 0 0 0 0 [ 2564.007686] Node 1 Normal free:53348kB min:53696kB low:67120kB high:80544kB active_anon:824kB inactive_anon:22104kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:824kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2564.090898] lowmem_reserve[]: 0 0 0 0 0 [ 2564.094921] Node 0 DMA: 2*4kB (ME) 0*8kB 3*16kB (UME) 3*32kB (UME) 19*64kB (UME) 3*128kB (UME) 4*256kB (UME) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10968kB [ 2564.149052] Node 0 DMA32: 160*4kB (UME) 88*8kB (UME) 83*16kB (UME) 14*32kB (UME) 2*64kB (UM) 117*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18224kB [ 2564.194467] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2564.241410] Node 1 Normal: 46*4kB (UME) 27*8kB (ME) 29*16kB (ME) 22*32kB (UME) 413*64kB (UM) 25*128kB (UM) 4*256kB (M) 35*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 50144kB [ 2564.298903] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2564.325343] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2564.362733] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2564.392713] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2564.414477] 45885 total pagecache pages [ 2564.418475] 0 pages in swap cache [ 2564.426017] Swap cache stats: add 0, delete 0, find 0/0 [ 2564.435608] Free swap = 0kB [ 2564.442761] Total swap = 0kB [ 2564.445812] 2097051 pages RAM [ 2564.453122] 0 pages HighMem/MovableOnly [ 2564.457089] 363840 pages reserved [ 2564.464610] 0 pages cma reserved [ 2564.467973] Out of memory (oom_kill_allocating_task): Kill process 29066 (syz-executor.5) score 0 or sacrifice child [ 2564.487457] Killed process 31607 (syz-executor.5) total-vm:93252kB, anon-rss:148kB, file-rss:34760kB, shmem-rss:0kB [ 2564.507864] oom_reaper: reaped process 31607 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2564.546762] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2564.568751] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2564.570341] syz-fuzzer cpuset= [ 2564.580730] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2564.580750] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2564.580771] CPU: 0 PID: 31593 Comm: syz-executor.0 Not tainted 4.14.224-syzkaller #0 [ 2564.580776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2564.580780] Call Trace: [ 2564.580797] dump_stack+0x1b2/0x281 [ 2564.580810] warn_alloc.cold+0x96/0x1cc [ 2564.580822] ? zone_watermark_ok_safe+0x220/0x220 [ 2564.580834] ? usleep_range+0x130/0x130 [ 2564.594502] / [ 2564.595801] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2564.605443] mems_allowed=0-1 [ 2564.608745] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2564.608757] ? run_timer_softirq+0x5a0/0x5a0 [ 2564.608775] __alloc_pages_nodemask+0x2127/0x2720 [ 2564.608792] ? lock_acquire+0x170/0x3f0 [ 2564.608807] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2564.608819] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2564.608834] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2564.682990] ? retint_kernel+0x2d/0x2d [ 2564.686878] alloc_pages_current+0x155/0x260 [ 2564.691284] ion_page_pool_alloc+0x118/0x1b0 [ 2564.695700] ion_system_heap_allocate+0x133/0x8c0 [ 2564.700704] ? ion_alloc+0x187/0x810 [ 2564.704416] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2564.707835] syz-executor.5: [ 2564.709860] ? ion_system_contig_heap_create+0x130/0x130 [ 2564.709871] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2564.709881] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2564.709891] ion_alloc+0x204/0x810 [ 2564.709904] ? ion_dma_buf_release+0x40/0x40 [ 2564.709915] ? __might_fault+0x177/0x1b0 [ 2564.709928] ion_ioctl+0xea/0x1f0 [ 2564.714794] page allocation failure: order:0 [ 2564.718370] ? ion_query_heaps+0x360/0x360 [ 2564.751566] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2564.752180] ? ion_query_heaps+0x360/0x360 [ 2564.764007] do_vfs_ioctl+0x75a/0xff0 [ 2564.767802] ? ioctl_preallocate+0x1a0/0x1a0 [ 2564.772206] ? lock_downgrade+0x740/0x740 [ 2564.776363] ? __fget+0x225/0x360 [ 2564.779819] ? do_vfs_ioctl+0xff0/0xff0 [ 2564.783786] ? security_file_ioctl+0x83/0xb0 [ 2564.788182] SyS_ioctl+0x7f/0xb0 [ 2564.791539] ? do_vfs_ioctl+0xff0/0xff0 [ 2564.795604] do_syscall_64+0x1d5/0x640 [ 2564.799495] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2564.804687] RIP: 0033:0x465f69 [ 2564.804726] syz-executor.5 cpuset= [ 2564.807884] RSP: 002b:00007fb3e357a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2564.819106] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2564.826371] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2564.833637] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2564.840908] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2564.848167] R13: 00007fffc0af773f R14: 00007fb3e357a300 R15: 0000000000022000 [ 2564.855543] CPU: 1 PID: 7979 Comm: syz-fuzzer Not tainted 4.14.224-syzkaller #0 [ 2564.858071] syz-executor.4 cpuset= [ 2564.862988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2564.862992] Call Trace: [ 2564.863007] dump_stack+0x1b2/0x281 [ 2564.863022] dump_header+0x178/0x82f [ 2564.866575] / [ 2564.875913] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2564.878598] mems_allowed=0-1 [ 2564.882074] ? ___ratelimit+0x2cd/0x530 [ 2564.899547] oom_kill_process.cold+0x10/0xb18 [ 2564.904051] out_of_memory+0xe3e/0x1190 [ 2564.908032] ? oom_killer_disable+0x1c0/0x1c0 [ 2564.912520] ? mutex_trylock+0x152/0x1a0 [ 2564.916562] __alloc_pages_nodemask+0x23e1/0x2720 [ 2564.921395] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2564.926224] alloc_pages_current+0x155/0x260 [ 2564.930612] filemap_fault+0xea3/0x1980 [ 2564.934571] ext4_filemap_fault+0x84/0xb0 [ 2564.938699] __do_fault+0xfa/0x380 [ 2564.942315] __handle_mm_fault+0x2497/0x4620 [ 2564.946762] ? vm_insert_page+0x7c0/0x7c0 [ 2564.950898] ? lock_downgrade+0x740/0x740 [ 2564.955035] handle_mm_fault+0x391/0x860 [ 2564.959082] __do_page_fault+0x549/0xad0 [ 2564.963124] ? spurious_fault+0x640/0x640 [ 2564.967260] ? do_page_fault+0x60/0x500 [ 2564.971225] ? page_fault+0x2f/0x50 [ 2564.974842] page_fault+0x45/0x50 [ 2564.978272] RIP: 0000:0x93f060 [ 2564.981439] RSP: 2e000:000000c00003df00 EFLAGS: 0043b6a0 [ 2564.981462] CPU: 0 PID: 31598 Comm: syz-executor.4 Not tainted 4.14.224-syzkaller #0 [ 2564.994783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2564.994785] / mems_allowed=0-1 [ 2565.004122] Call Trace: [ 2565.004141] dump_stack+0x1b2/0x281 [ 2565.004154] warn_alloc.cold+0x96/0x1cc [ 2565.004166] ? zone_watermark_ok_safe+0x220/0x220 [ 2565.004175] ? usleep_range+0x130/0x130 [ 2565.004183] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2565.004195] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2565.004205] ? run_timer_softirq+0x5a0/0x5a0 [ 2565.004220] __alloc_pages_nodemask+0x2127/0x2720 [ 2565.004235] ? lock_acquire+0x170/0x3f0 [ 2565.004250] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2565.054394] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2565.058890] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2565.064424] alloc_pages_current+0x155/0x260 [ 2565.068828] ion_page_pool_alloc+0x118/0x1b0 [ 2565.073231] ion_system_heap_allocate+0x133/0x8c0 [ 2565.078061] ? ion_alloc+0x187/0x810 [ 2565.081764] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2565.087203] ? ion_system_contig_heap_create+0x130/0x130 [ 2565.092638] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2565.097644] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2565.102469] ion_alloc+0x204/0x810 [ 2565.105995] ? ion_dma_buf_release+0x40/0x40 [ 2565.110392] ? __might_fault+0x177/0x1b0 [ 2565.114455] ion_ioctl+0xea/0x1f0 [ 2565.117899] ? ion_query_heaps+0x360/0x360 [ 2565.122118] ? SyS_epoll_ctl+0x1e0/0x2780 [ 2565.126245] ? ion_query_heaps+0x360/0x360 [ 2565.130470] do_vfs_ioctl+0x75a/0xff0 [ 2565.134266] ? ioctl_preallocate+0x1a0/0x1a0 [ 2565.138668] ? lock_downgrade+0x740/0x740 [ 2565.142823] ? __fget+0x225/0x360 [ 2565.146257] ? do_vfs_ioctl+0xff0/0xff0 [ 2565.150217] ? security_file_ioctl+0x83/0xb0 [ 2565.154618] SyS_ioctl+0x7f/0xb0 [ 2565.157973] ? do_vfs_ioctl+0xff0/0xff0 [ 2565.161935] do_syscall_64+0x1d5/0x640 [ 2565.165815] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2565.170989] RIP: 0033:0x465f69 [ 2565.174168] RSP: 002b:00007f1dbb0fc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2565.181872] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2565.189135] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2565.196426] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2565.203690] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2565.210948] R13: 00007fff344be07f R14: 00007f1dbb0fc300 R15: 0000000000022000 [ 2565.218221] CPU: 1 PID: 31607 Comm: syz-executor.5 Not tainted 4.14.224-syzkaller #0 [ 2565.226101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2565.226853] Mem-Info: [ 2565.235444] Call Trace: [ 2565.235461] dump_stack+0x1b2/0x281 [ 2565.235474] warn_alloc.cold+0x96/0x1cc [ 2565.235486] ? zone_watermark_ok_safe+0x220/0x220 [ 2565.237898] active_anon:20878 inactive_anon:43286 isolated_anon:0 [ 2565.237898] active_file:10 inactive_file:9 isolated_file:0 [ 2565.237898] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2565.237898] slab_reclaimable:12119 slab_unreclaimable:119763 [ 2565.237898] mapped:52795 shmem:45843 pagetables:850 bounce:0 [ 2565.237898] free:14011 free_pcp:237 free_cma:0 [ 2565.240450] ? usleep_range+0x130/0x130 [ 2565.240458] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2565.240469] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2565.240478] ? run_timer_softirq+0x5a0/0x5a0 [ 2565.244091] Node 0 active_anon:82704kB inactive_anon:151040kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:159784kB dirty:0kB writeback:0kB shmem:161068kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2565.248043] __alloc_pages_nodemask+0x2127/0x2720 [ 2565.252882] Node 1 active_anon:808kB inactive_anon:22104kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:51396kB dirty:0kB writeback:0kB shmem:22304kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2565.285998] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2565.286010] ? migrate_swap_stop+0x880/0x880 [ 2565.289972] Node 0 [ 2565.295043] ? lock_acquire+0x170/0x3f0 [ 2565.300056] DMA free:10980kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:12kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2565.304430] alloc_pages_current+0x155/0x260 [ 2565.358584] lowmem_reserve[]: [ 2565.363949] ion_page_pool_alloc+0x118/0x1b0 [ 2565.378581] 0 [ 2565.379345] ion_system_heap_allocate+0x133/0x8c0 [ 2565.423383] ? ion_alloc+0x187/0x810 [ 2565.427091] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2565.428584] 2717 [ 2565.432531] ? ion_system_contig_heap_create+0x130/0x130 [ 2565.432533] 2718 2718 [ 2565.434582] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2565.447494] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2565.448576] 2718 [ 2565.452327] ion_alloc+0x204/0x810 [ 2565.452341] ? ion_dma_buf_release+0x40/0x40 [ 2565.454380] Node 0 [ 2565.457901] ? __might_fault+0x177/0x1b0 [ 2565.468549] ion_ioctl+0xea/0x1f0 [ 2565.471995] ? ion_query_heaps+0x360/0x360 [ 2565.476225] ? SyS_epoll_ctl+0x1e0/0x2780 [ 2565.478590] DMA32 free:18732kB min:36200kB low:45248kB high:54296kB active_anon:82704kB inactive_anon:151040kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:2564kB bounce:0kB free_pcp:148kB local_pcp:68kB free_cma:0kB [ 2565.480363] ? ion_query_heaps+0x360/0x360 [ 2565.512876] do_vfs_ioctl+0x75a/0xff0 [ 2565.516679] ? ioctl_preallocate+0x1a0/0x1a0 [ 2565.521113] ? lock_downgrade+0x740/0x740 [ 2565.525268] ? __fget+0x225/0x360 [ 2565.528722] ? do_vfs_ioctl+0xff0/0xff0 [ 2565.532696] ? security_file_ioctl+0x83/0xb0 [ 2565.537102] SyS_ioctl+0x7f/0xb0 [ 2565.538579] lowmem_reserve[]: 0 [ 2565.540461] ? do_vfs_ioctl+0xff0/0xff0 [ 2565.540473] do_syscall_64+0x1d5/0x640 [ 2565.543733] 0 [ 2565.547695] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2565.558538] RIP: 0033:0x465f69 [ 2565.561722] RSP: 002b:00007f886bfb2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2565.568588] 0 [ 2565.569422] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2565.569429] 0 [ 2565.571204] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2565.571211] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2565.578469] 0 [ 2565.580246] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2565.580251] R13: 00007ffe15f841ff R14: 00007f886bfb2300 R15: 0000000000022000 [ 2565.621778] Mem-Info: [ 2565.624202] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2565.648581] active_anon:20878 inactive_anon:43286 isolated_anon:0 [ 2565.648581] active_file:10 inactive_file:209 isolated_file:0 [ 2565.648581] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2565.648581] slab_reclaimable:12119 slab_unreclaimable:119763 [ 2565.648581] mapped:52870 shmem:45843 pagetables:850 bounce:0 [ 2565.648581] free:26268 free_pcp:421 free_cma:0 [ 2565.656704] lowmem_reserve[]: [ 2565.683995] Node 0 active_anon:82704kB inactive_anon:151040kB active_file:32kB inactive_file:1532kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:160484kB dirty:0kB writeback:0kB shmem:161068kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2565.708574] 0 0 0 0 0 [ 2565.715627] Node 1 active_anon:808kB inactive_anon:22104kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:51396kB dirty:0kB writeback:0kB shmem:22304kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2565.722186] Node 1 [ 2565.745463] Node 0 DMA free:11060kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:12kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2565.748835] Normal free:28132kB min:53696kB low:67120kB high:80544kB active_anon:808kB inactive_anon:22104kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:824kB bounce:0kB free_pcp:1348kB local_pcp:684kB free_cma:0kB [ 2565.808573] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2565.812226] lowmem_reserve[]: 0 0 0 0 0 [ 2565.813737] Node 0 DMA32 free:76236kB min:36200kB low:45248kB high:54296kB active_anon:82704kB inactive_anon:151040kB active_file:32kB inactive_file:2932kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:2564kB bounce:0kB free_pcp:996kB local_pcp:288kB free_cma:0kB [ 2565.817994] Node 0 DMA: 2*4kB (UE) 10*8kB (U) 2*16kB (UE) 2*32kB (UE) 18*64kB (UE) 2*128kB (UE) 3*256kB (UE) 1*512kB (E) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11064kB [ 2565.851819] lowmem_reserve[]: 0 0 0 0 0 [ 2565.867974] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2565.899527] Node 0 DMA32: 532*4kB (UME) 548*8kB (UE) 1921*16kB (UE) 526*32kB (UME) 144*64kB (UM) 95*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 75456kB [ 2565.919319] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2565.930820] Node 1 Normal: 865*4kB (UME) 35*8kB (UME) 44*16kB (UME) 33*32kB (UME) 221*64kB (UM) 30*128kB (UM) 7*256kB (UM) 35*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 43196kB [ 2565.982732] lowmem_reserve[]: 0 0 0 0 0 [ 2565.986766] Node 1 Normal free:64932kB min:53696kB low:67120kB high:80544kB active_anon:804kB inactive_anon:22104kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:824kB bounce:0kB free_pcp:1384kB local_pcp:668kB free_cma:0kB [ 2565.998529] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2566.059144] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2566.067811] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2566.077597] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2566.089381] 45920 total pagecache pages [ 2566.093372] 0 pages in swap cache [ 2566.096819] Swap cache stats: add 0, delete 0, find 0/0 [ 2566.102251] Free swap = 0kB [ 2566.105261] Total swap = 0kB [ 2566.108303] 2097051 pages RAM [ 2566.111441] 0 pages HighMem/MovableOnly [ 2566.115400] 363840 pages reserved [ 2566.117970] lowmem_reserve[]: [ 2566.121096] 0 pages cma reserved [ 2566.122855] 0 0 0 0 0 [ 2566.133693] Node 0 DMA: 2*4kB (UE) 10*8kB (U) 2*16kB (UE) 2*32kB (UE) 17*64kB (UE) 2*128kB (UE) 3*256kB (UE) 1*512kB (E) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11000kB [ 2566.153109] Node 0 DMA32: 199*4kB (UME) 100*8kB (UME) 373*16kB (UME) 541*32kB (UME) 8*64kB (U) 20*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27948kB [ 2566.192243] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2566.223637] Node 1 Normal: 5310*4kB (UME) 309*8kB (UME) 218*16kB (UME) 182*32kB (UME) 878*64kB (UM) 495*128kB (UM) 134*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 186880kB [ 2566.244110] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2566.253989] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2566.285437] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2566.348520] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2566.362305] 46533 total pagecache pages [ 2566.366299] 0 pages in swap cache [ 2566.388525] Swap cache stats: add 0, delete 0, find 0/0 [ 2566.393944] Free swap = 0kB [ 2566.396967] Total swap = 0kB [ 2566.421673] 2097051 pages RAM [ 2566.424832] 0 pages HighMem/MovableOnly [ 2566.437236] 363840 pages reserved [ 2566.491680] 0 pages cma reserved [ 2566.495107] Out of memory (oom_kill_allocating_task): Kill process 7979 (syz-fuzzer) score 0 or sacrifice child [ 2566.538587] Killed process 31340 (syz-executor.3) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 2566.584728] oom_reaper: reaped process 31340 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2566.901822] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2566.913830] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2566.931869] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2566.938658] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2566.945394] CPU: 0 PID: 31593 Comm: syz-executor.0 Not tainted 4.14.224-syzkaller #0 [ 2566.953278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2566.962617] Call Trace: [ 2566.965196] dump_stack+0x1b2/0x281 [ 2566.968817] warn_alloc.cold+0x96/0x1cc [ 2566.972779] ? zone_watermark_ok_safe+0x220/0x220 [ 2566.977609] __alloc_pages_nodemask+0x2127/0x2720 [ 2566.982440] ? lock_acquire+0x170/0x3f0 [ 2566.986401] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2566.991247] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2566.996679] ? __mutex_unlock_slowpath+0x75/0x770 [ 2567.001512] alloc_pages_current+0x155/0x260 [ 2567.005909] ion_page_pool_alloc+0x118/0x1b0 [ 2567.010299] ion_system_heap_allocate+0x133/0x8c0 [ 2567.015132] ? _raw_spin_unlock+0x29/0x40 [ 2567.019268] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2567.024183] ? ion_system_contig_heap_create+0x130/0x130 [ 2567.029613] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2567.034610] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2567.039441] ion_alloc+0x27a/0x810 [ 2567.042973] ? ion_dma_buf_release+0x40/0x40 [ 2567.047360] ? __might_fault+0x177/0x1b0 [ 2567.051402] ion_ioctl+0xea/0x1f0 [ 2567.054835] ? ion_query_heaps+0x360/0x360 [ 2567.059062] ? ion_query_heaps+0x360/0x360 [ 2567.063285] do_vfs_ioctl+0x75a/0xff0 [ 2567.067070] ? ioctl_preallocate+0x1a0/0x1a0 [ 2567.071459] ? lock_downgrade+0x740/0x740 [ 2567.075597] ? __fget+0x225/0x360 [ 2567.079035] ? do_vfs_ioctl+0xff0/0xff0 [ 2567.082994] ? security_file_ioctl+0x83/0xb0 [ 2567.087385] SyS_ioctl+0x7f/0xb0 [ 2567.090824] ? do_vfs_ioctl+0xff0/0xff0 [ 2567.094779] do_syscall_64+0x1d5/0x640 [ 2567.098660] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2567.103847] RIP: 0033:0x465f69 [ 2567.107023] RSP: 002b:00007fb3e357a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2567.114731] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2567.122003] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2567.129263] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2567.136531] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2567.143789] R13: 00007fffc0af773f R14: 00007fb3e357a300 R15: 0000000000022000 [ 2567.151083] CPU: 1 PID: 31598 Comm: syz-executor.4 Not tainted 4.14.224-syzkaller #0 [ 2567.158967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2567.168314] Call Trace: [ 2567.170901] dump_stack+0x1b2/0x281 [ 2567.174525] warn_alloc.cold+0x96/0x1cc [ 2567.178498] ? zone_watermark_ok_safe+0x220/0x220 [ 2567.183350] __alloc_pages_nodemask+0x2127/0x2720 [ 2567.188201] ? lock_acquire+0x170/0x3f0 [ 2567.192186] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2567.197034] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2567.202496] ? __mutex_unlock_slowpath+0x75/0x770 [ 2567.207333] ? retint_kernel+0x2d/0x2d [ 2567.211220] alloc_pages_current+0x155/0x260 [ 2567.215632] ion_page_pool_alloc+0x118/0x1b0 [ 2567.220039] ion_system_heap_allocate+0x133/0x8c0 [ 2567.224905] ? _raw_spin_unlock+0x29/0x40 [ 2567.228423] warn_alloc_show_mem: 2 callbacks suppressed [ 2567.228426] Mem-Info: [ 2567.229042] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2567.234394] active_anon:20867 inactive_anon:43286 isolated_anon:0 [ 2567.234394] active_file:348 inactive_file:947 isolated_file:0 [ 2567.234394] unevictable:0 dirty:7 writeback:1 unstable:0 [ 2567.234394] slab_reclaimable:12094 slab_unreclaimable:120672 [ 2567.234394] mapped:53686 shmem:45843 pagetables:803 bounce:0 [ 2567.234394] free:42384 free_pcp:426 free_cma:0 [ 2567.236775] ? ion_system_contig_heap_create+0x130/0x130 [ 2567.248452] Node 0 active_anon:82676kB inactive_anon:151040kB active_file:1308kB inactive_file:3696kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:163252kB dirty:16kB writeback:0kB shmem:161068kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2567.275171] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2567.275184] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2567.275200] ion_alloc+0x27a/0x810 [ 2567.318431] Node 1 active_anon:792kB inactive_anon:22104kB active_file:84kB inactive_file:92kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:51492kB dirty:12kB writeback:4kB shmem:22304kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2567.318662] ? ion_dma_buf_release+0x40/0x40 [ 2567.322171] Node 0 [ 2567.349303] ? __might_fault+0x177/0x1b0 [ 2567.349315] ion_ioctl+0xea/0x1f0 [ 2567.349325] ? ion_query_heaps+0x360/0x360 [ 2567.349336] ? SyS_epoll_ctl+0x1e0/0x2780 [ 2567.371771] ? ion_query_heaps+0x360/0x360 [ 2567.376003] do_vfs_ioctl+0x75a/0xff0 [ 2567.379803] ? ioctl_preallocate+0x1a0/0x1a0 [ 2567.384208] ? lock_downgrade+0x740/0x740 [ 2567.388357] ? __fget+0x225/0x360 [ 2567.388422] DMA free:10996kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:12kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2567.391798] ? do_vfs_ioctl+0xff0/0xff0 [ 2567.420516] lowmem_reserve[]: 0 [ 2567.421335] ? security_file_ioctl+0x83/0xb0 [ 2567.421346] SyS_ioctl+0x7f/0xb0 [ 2567.424599] 2717 [ 2567.428984] ? do_vfs_ioctl+0xff0/0xff0 [ 2567.428995] do_syscall_64+0x1d5/0x640 [ 2567.429010] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2567.429018] RIP: 0033:0x465f69 [ 2567.432356] 2718 [ 2567.434397] RSP: 002b:00007f1dbb0fc188 EFLAGS: 00000246 [ 2567.438344] 2718 [ 2567.442215] ORIG_RAX: 0000000000000010 [ 2567.442221] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2567.442225] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2567.442230] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2567.442235] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2567.442239] R13: 00007fff344be07f R14: 00007f1dbb0fc300 R15: 0000000000022000 [ 2567.579885] 2718 [ 2567.581989] Node 0 DMA32 free:44696kB min:36200kB low:45248kB high:54296kB active_anon:82676kB inactive_anon:151040kB active_file:424kB inactive_file:304kB unevictable:0kB writepending:16kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7424kB pagetables:2376kB bounce:0kB free_pcp:804kB local_pcp:688kB free_cma:0kB [ 2567.611344] lowmem_reserve[]: 0 0 0 0 0 [ 2567.615341] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2567.660619] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2567.682420] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2567.684755] syz-executor.5: page allocation failure: order:4 [ 2567.687223] CPU: 1 PID: 7979 Comm: syz-fuzzer Not tainted 4.14.224-syzkaller #0 [ 2567.687231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2567.693072] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2567.700547] Call Trace: [ 2567.700568] dump_stack+0x1b2/0x281 [ 2567.700580] dump_header+0x178/0x82f [ 2567.700590] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2567.700602] ? ___ratelimit+0x2cd/0x530 [ 2567.710005] lowmem_reserve[]: [ 2567.717058] oom_kill_process.cold+0x10/0xb18 [ 2567.719645] 0 [ 2567.723229] out_of_memory+0xe3e/0x1190 [ 2567.726905] 0 0 [ 2567.731997] ? oom_killer_disable+0x1c0/0x1c0 [ 2567.732004] ? mutex_trylock+0x152/0x1a0 [ 2567.732015] __alloc_pages_nodemask+0x23e1/0x2720 [ 2567.735967] (null) [ 2567.739066] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2567.739089] alloc_pages_current+0x155/0x260 [ 2567.743649] syz-executor.5 cpuset= [ 2567.745434] filemap_fault+0xea3/0x1980 [ 2567.749400] / [ 2567.751345] ext4_filemap_fault+0x84/0xb0 [ 2567.755819] mems_allowed=0-1 [ 2567.759862] __do_fault+0xfa/0x380 [ 2567.759872] __handle_mm_fault+0x2497/0x4620 [ 2567.759882] ? vm_insert_page+0x7c0/0x7c0 [ 2567.764703] 0 [ 2567.766828] ? free_object+0xe4/0x240 [ 2567.766848] handle_mm_fault+0x391/0x860 [ 2567.771672] 0 [ 2567.776043] __do_page_fault+0x549/0xad0 [ 2567.789330] ? spurious_fault+0x640/0x640 [ 2567.792406] Node 1 [ 2567.795924] ? do_page_fault+0x60/0x500 [ 2567.808364] Normal free:28128kB min:53696kB low:67120kB high:80544kB active_anon:792kB inactive_anon:22104kB active_file:44kB inactive_file:0kB unevictable:0kB writepending:16kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:824kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2567.809992] ? page_fault+0x2f/0x50 [ 2567.814021] lowmem_reserve[]: [ 2567.815802] page_fault+0x45/0x50 [ 2567.828349] 0 [ 2567.830141] RIP: 0000:0x93f060 [ 2567.872933] RSP: 4e20:000000c00003dfa0 EFLAGS: 0043b6a0 [ 2567.872951] CPU: 0 PID: 31607 Comm: syz-executor.5 Not tainted 4.14.224-syzkaller #0 [ 2567.886187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2567.895541] Call Trace: [ 2567.898133] dump_stack+0x1b2/0x281 [ 2567.901761] warn_alloc.cold+0x96/0x1cc [ 2567.905731] ? zone_watermark_ok_safe+0x220/0x220 [ 2567.910594] __alloc_pages_nodemask+0x2127/0x2720 [ 2567.915462] ? lock_acquire+0x170/0x3f0 [ 2567.919440] ? lock_acquire+0x170/0x3f0 [ 2567.923418] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2567.925903] Mem-Info: [ 2567.928259] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2567.935951] active_anon:20867 inactive_anon:43286 isolated_anon:0 [ 2567.935951] active_file:37 inactive_file:0 isolated_file:0 [ 2567.935951] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2567.935951] slab_reclaimable:12088 slab_unreclaimable:120700 [ 2567.935951] mapped:52863 shmem:45843 pagetables:803 bounce:0 [ 2567.935951] free:13731 free_pcp:60 free_cma:0 [ 2567.936097] ? __mutex_unlock_slowpath+0x75/0x770 [ 2567.969374] syz-executor.4: page allocation failure: order:0 [ 2567.973975] alloc_pages_current+0x155/0x260 [ 2567.973985] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2567.979762] ion_page_pool_alloc+0x118/0x1b0 [ 2567.979772] ion_system_heap_allocate+0x133/0x8c0 [ 2567.979783] ? _raw_spin_unlock+0x29/0x40 [ 2567.979791] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2567.979800] ? ion_system_contig_heap_create+0x130/0x130 [ 2567.979809] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2567.979820] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2567.995015] Node 0 active_anon:82676kB inactive_anon:151040kB active_file:100kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:159996kB dirty:0kB writeback:0kB shmem:161068kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2567.995688] ion_alloc+0x27a/0x810 [ 2568.004141] Node 1 active_anon:792kB inactive_anon:22104kB active_file:48kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:51456kB dirty:0kB writeback:0kB shmem:22304kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2568.004647] ? ion_dma_buf_release+0x40/0x40 [ 2568.017050] (null) [ 2568.019969] ? __might_fault+0x177/0x1b0 [ 2568.019982] ion_ioctl+0xea/0x1f0 [ 2568.019993] ? ion_query_heaps+0x360/0x360 [ 2568.020004] ? SyS_epoll_ctl+0x1e0/0x2780 [ 2568.020014] ? ion_query_heaps+0x360/0x360 [ 2568.020022] do_vfs_ioctl+0x75a/0xff0 [ 2568.020033] ? ioctl_preallocate+0x1a0/0x1a0 [ 2568.020042] ? lock_downgrade+0x740/0x740 [ 2568.020054] ? __fget+0x225/0x360 [ 2568.027827] Node 0 [ 2568.052827] ? do_vfs_ioctl+0xff0/0xff0 [ 2568.052837] ? security_file_ioctl+0x83/0xb0 [ 2568.052846] SyS_ioctl+0x7f/0xb0 [ 2568.052854] ? do_vfs_ioctl+0xff0/0xff0 [ 2568.052864] do_syscall_64+0x1d5/0x640 [ 2568.052880] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2568.052889] RIP: 0033:0x465f69 [ 2568.052893] RSP: 002b:00007f886bfb2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2568.052903] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2568.052908] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2568.052913] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2568.052918] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2568.052923] R13: 00007ffe15f841ff R14: 00007f886bfb2300 R15: 0000000000022000 [ 2568.070229] 0 [ 2568.085917] syz-executor.4 cpuset= [ 2568.100795] 0 [ 2568.104245] / [ 2568.106131] 0 [ 2568.110361] mems_allowed=0-1 [ 2568.113935] CPU: 1 PID: 31598 Comm: syz-executor.4 Not tainted 4.14.224-syzkaller #0 [ 2568.122911] 0 [ 2568.126292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2568.132481] Call Trace: [ 2568.136864] Node 0 [ 2568.140219] dump_stack+0x1b2/0x281 [ 2568.140233] warn_alloc.cold+0x96/0x1cc [ 2568.144175] DMA: [ 2568.148041] ? zone_watermark_ok_safe+0x220/0x220 [ 2568.153219] 4*4kB [ 2568.156375] ? usleep_range+0x130/0x130 [ 2568.164066] (UE) [ 2568.171309] ? try_to_free_pages+0x23f/0x6e0 [ 2568.171318] ? _find_next_bit+0xdb/0x100 [ 2568.171329] ? run_timer_softirq+0x5a0/0x5a0 [ 2568.178589] 11*8kB [ 2568.185843] __alloc_pages_nodemask+0x2127/0x2720 [ 2568.193098] (U) [ 2568.200354] ? lock_acquire+0x170/0x3f0 [ 2568.200370] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2568.202141] 3*16kB [ 2568.205660] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2568.207443] (UE) [ 2568.209144] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2568.209158] ? retint_kernel+0x2d/0x2d [ 2568.210935] 2*32kB [ 2568.214028] alloc_pages_current+0x155/0x260 [ 2568.221892] (UE) [ 2568.223668] ion_page_pool_alloc+0x118/0x1b0 [ 2568.233005] 16*64kB [ 2568.235561] ion_system_heap_allocate+0x133/0x8c0 [ 2568.237769] (UE) [ 2568.241379] ? _raw_spin_unlock+0x29/0x40 [ 2568.241388] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2568.241399] ? ion_system_contig_heap_create+0x130/0x130 [ 2568.245343] 2*128kB [ 2568.247388] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2568.252258] (UE) [ 2568.254362] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2568.258329] 3*256kB [ 2568.260358] ion_alloc+0x27a/0x810 [ 2568.264753] (UE) [ 2568.268922] ? ion_dma_buf_release+0x40/0x40 [ 2568.268934] ? __might_fault+0x177/0x1b0 [ 2568.268946] ion_ioctl+0xea/0x1f0 [ 2568.275364] 1*512kB [ 2568.275553] ? ion_query_heaps+0x360/0x360 [ 2568.280392] (E) [ 2568.282332] ? SyS_epoll_ctl+0x1e0/0x2780 [ 2568.286273] 2*1024kB [ 2568.291102] ? ion_query_heaps+0x360/0x360 [ 2568.291112] do_vfs_ioctl+0x75a/0xff0 [ 2568.291123] ? ioctl_preallocate+0x1a0/0x1a0 [ 2568.293330] (UE) [ 2568.297807] ? lock_downgrade+0x740/0x740 [ 2568.299855] 3*2048kB [ 2568.305275] ? __fget+0x225/0x360 [ 2568.309229] (UME) [ 2568.311437] ? do_vfs_ioctl+0xff0/0xff0 [ 2568.315815] 0*4096kB [ 2568.317861] ? security_file_ioctl+0x83/0xb0 [ 2568.322250] = 10968kB [ 2568.324542] SyS_ioctl+0x7f/0xb0 [ 2568.329383] Node 0 [ 2568.331429] ? do_vfs_ioctl+0xff0/0xff0 [ 2568.335544] DMA32: [ 2568.340454] do_syscall_64+0x1d5/0x640 [ 2568.340475] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2568.345891] 186*4kB [ 2568.348193] RIP: 0033:0x465f69 [ 2568.353194] (ME) [ 2568.355220] RSP: 002b:00007f1dbb0fc188 EFLAGS: 00000246 [ 2568.360047] 88*8kB [ 2568.362336] ORIG_RAX: 0000000000000010 [ 2568.365863] (UME) [ 2568.367905] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2568.372298] 71*16kB [ 2568.376326] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2568.379765] (UE) [ 2568.382056] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2568.386262] 467*32kB [ 2568.388214] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2568.392359] (UE) [ 2568.394737] R13: 00007fff344be07f R14: 00007f1dbb0fc300 R15: 0000000000022000 [ 2568.398958] 0*64kB [ 2568.407305] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:12kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2568.412904] syz-executor.5: [ 2568.413322] lowmem_reserve[]: [ 2568.415706] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2568.422972] 0 [ 2568.433784] (null) [ 2568.434504] 2717 [ 2568.437853] syz-executor.5 cpuset= [ 2568.443782] 2718 [ 2568.454218] 0*128kB [ 2568.455424] 2718 [ 2568.457729] 0*256kB [ 2568.464586] 2718 [ 2568.480309] / [ 2568.502554] 0*512kB [ 2568.514909] Node 0 [ 2568.523660] mems_allowed=0-1 [ 2568.527939] DMA32 free:17504kB min:36200kB low:45248kB high:54296kB active_anon:82676kB inactive_anon:151040kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7424kB pagetables:2376kB bounce:0kB free_pcp:128kB local_pcp:120kB free_cma:0kB [ 2568.552111] 0*1024kB [ 2568.567609] lowmem_reserve[]: [ 2568.568191] 0*2048kB [ 2568.575314] 0 [ 2568.576040] CPU: 0 PID: 31607 Comm: syz-executor.5 Not tainted 4.14.224-syzkaller #0 [ 2568.578069] 0 [ 2568.580369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2568.580373] Call Trace: [ 2568.580391] dump_stack+0x1b2/0x281 [ 2568.580405] warn_alloc.cold+0x96/0x1cc [ 2568.580417] ? zone_watermark_ok_safe+0x220/0x220 [ 2568.580426] ? usleep_range+0x130/0x130 [ 2568.580434] ? try_to_free_pages+0x23f/0x6e0 [ 2568.580444] ? _find_next_bit+0xdb/0x100 [ 2568.580454] ? run_timer_softirq+0x5a0/0x5a0 [ 2568.580470] __alloc_pages_nodemask+0x2127/0x2720 [ 2568.580487] ? lock_acquire+0x170/0x3f0 [ 2568.580504] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2568.596355] 0 [ 2568.624562] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2568.624578] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2568.624600] alloc_pages_current+0x155/0x260 [ 2568.624612] ion_page_pool_alloc+0x118/0x1b0 [ 2568.624622] ion_system_heap_allocate+0x133/0x8c0 [ 2568.624632] ? _raw_spin_unlock+0x29/0x40 [ 2568.624641] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2568.624650] ? ion_system_contig_heap_create+0x130/0x130 [ 2568.624659] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2568.624669] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2568.624680] ion_alloc+0x27a/0x810 [ 2568.624693] ? ion_dma_buf_release+0x40/0x40 [ 2568.624704] ? __might_fault+0x177/0x1b0 [ 2568.624715] ion_ioctl+0xea/0x1f0 [ 2568.624724] ? ion_query_heaps+0x360/0x360 [ 2568.624735] ? SyS_epoll_ctl+0x1e0/0x2780 [ 2568.624745] ? ion_query_heaps+0x360/0x360 [ 2568.624754] do_vfs_ioctl+0x75a/0xff0 [ 2568.624764] ? ioctl_preallocate+0x1a0/0x1a0 [ 2568.624772] ? lock_downgrade+0x740/0x740 [ 2568.624785] ? __fget+0x225/0x360 [ 2568.624793] ? do_vfs_ioctl+0xff0/0xff0 [ 2568.624802] ? security_file_ioctl+0x83/0xb0 [ 2568.624810] SyS_ioctl+0x7f/0xb0 [ 2568.624816] ? do_vfs_ioctl+0xff0/0xff0 [ 2568.624826] do_syscall_64+0x1d5/0x640 [ 2568.624840] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2568.641564] 0 [ 2568.642364] RIP: 0033:0x465f69 [ 2568.644141] 0 [ 2568.653475] RSP: 002b:00007f886bfb2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2568.653485] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2568.653489] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2568.653493] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2568.653498] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2568.653503] R13: 00007ffe15f841ff R14: 00007f886bfb2300 R15: 0000000000022000 [ 2568.660521] 0*4096kB [ 2568.672483] Node 0 [ 2568.678141] = 17528kB [ 2568.684601] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2568.687468] Node 0 [ 2568.696316] lowmem_reserve[]: [ 2568.706246] Normal: [ 2568.719934] 0 [ 2568.726850] 0*4kB [ 2568.735892] 0 [ 2568.746216] 0*8kB [ 2568.757917] 0 [ 2568.768070] 0*16kB [ 2568.777587] 0 [ 2568.787933] warn_alloc_show_mem: 2 callbacks suppressed [ 2568.787936] Mem-Info: [ 2568.798470] 0 [ 2568.808458] 0*32kB [ 2568.817911] 0*64kB [ 2568.821961] Node 1 [ 2568.829811] 0*128kB [ 2568.841182] Normal free:26196kB min:53696kB low:67120kB high:80544kB active_anon:792kB inactive_anon:22104kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:824kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2568.853435] active_anon:20867 inactive_anon:43286 isolated_anon:0 [ 2568.853435] active_file:10 inactive_file:9 isolated_file:0 [ 2568.853435] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2568.853435] slab_reclaimable:12088 slab_unreclaimable:120706 [ 2568.853435] mapped:52832 shmem:45843 pagetables:803 bounce:0 [ 2568.853435] free:13667 free_pcp:66 free_cma:0 [ 2568.863260] lowmem_reserve[]: [ 2568.874728] 0*256kB [ 2568.883567] 0 [ 2568.907742] Node 0 active_anon:82676kB inactive_anon:151040kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:159932kB dirty:0kB writeback:0kB shmem:161068kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2568.917613] 0 [ 2568.918224] Node 1 active_anon:792kB inactive_anon:22104kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:51396kB dirty:0kB writeback:0kB shmem:22304kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2568.920480] 0 0 0 [ 2568.920493] Node 0 DMA: 4*4kB (UE) 11*8kB (U) 3*16kB (UE) [ 2568.929220] Node 0 [ 2568.938806] 2*32kB [ 2568.947693] 0*512kB [ 2568.985982] (UE) [ 2569.028304] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:12kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2569.194975] 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2569.199477] Node 1 Normal: 5*4kB (E) 2*8kB (UE) 3*16kB (ME) 4*32kB (UE) 1810*64kB (UM) 747*128kB (UM) 272*256kB (UM) 20*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 291540kB [ 2569.204730] 16*64kB (UE) 2*128kB (UE) 3*256kB (UE) 1*512kB (E) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10968kB [ 2569.245369] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2569.278266] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2569.283338] Node 0 DMA32 free:44276kB min:36200kB low:45248kB high:54296kB active_anon:82676kB inactive_anon:151040kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7424kB pagetables:2376kB bounce:0kB free_pcp:560kB local_pcp:128kB free_cma:0kB [ 2569.291094] Node 0 [ 2569.312419] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2569.312427] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2569.312433] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2569.312437] 47303 total pagecache pages [ 2569.312446] 0 pages in swap cache [ 2569.312451] Swap cache stats: add 0, delete 0, find 0/0 [ 2569.312455] Free swap = 0kB [ 2569.312458] Total swap = 0kB [ 2569.312464] 2097051 pages RAM [ 2569.381526] DMA32: 189*4kB (UME) 119*8kB (UME) 72*16kB (UE) 172*32kB (UE) 198*64kB (UE) 142*128kB (U) 12*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 42284kB [ 2569.428307] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2569.458848] lowmem_reserve[]: 0 0 0 0 0 [ 2569.463115] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2569.468270] 0 pages HighMem/MovableOnly [ 2569.488736] Node 1 Normal: 5*4kB (E) 2*8kB (UE) 2*16kB (E) 5*32kB (UME) 0*64kB 1*128kB (U) 251*256kB (UM) 16*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 72804kB [ 2569.532659] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2569.541614] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2569.550196] 363840 pages reserved [ 2569.550496] 0 pages cma reserved [ 2569.557832] lowmem_reserve[]: 0 0 0 0 0 [ 2569.561935] Node 1 Normal free:54344kB min:53696kB low:67120kB high:80544kB active_anon:792kB inactive_anon:22104kB active_file:1160kB inactive_file:1172kB unevictable:0kB writepending:148kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:824kB bounce:0kB free_pcp:752kB local_pcp:132kB free_cma:0kB [ 2569.571267] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2569.638325] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2569.646928] 45878 total pagecache pages [ 2569.652689] lowmem_reserve[]: 0 0 0 0 0 [ 2569.672354] Node 0 DMA: 2*4kB (UE) 1*8kB (U) 1*16kB (E) 2*32kB (UE) 18*64kB (UE) 2*128kB (UE) 3*256kB (UE) 1*512kB (E) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10976kB [ 2569.692488] 0 pages in swap cache [ 2569.695955] Swap cache stats: add 0, delete 0, find 0/0 [ 2569.701412] Free swap = 0kB [ 2569.704416] Total swap = 0kB [ 2569.706629] Node 0 DMA32: [ 2569.707419] 2097051 pages RAM [ 2569.707424] 0 pages HighMem/MovableOnly [ 2569.718782] 196*4kB (ME) 92*8kB (UME) 71*16kB (UE) 13*32kB (E) 2*64kB (E) 89*128kB (U) 12*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17664kB [ 2569.728418] 363840 pages reserved [ 2569.735400] 0 pages cma reserved [ 2569.738854] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2569.740638] Node 0 [ 2569.756947] Out of memory (oom_kill_allocating_task): Kill process 7979 (syz-fuzzer) score 0 or sacrifice child [ 2569.757445] Normal: [ 2569.759267] Killed process 30430 (syz-executor.0) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 2569.778537] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2569.787568] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2569.796597] CPU: 0 PID: 31593 Comm: syz-executor.0 Not tainted 4.14.224-syzkaller #0 [ 2569.800132] Node 1 [ 2569.804465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2569.804471] Normal: [ 2569.806688] Call Trace: [ 2569.820911] dump_stack+0x1b2/0x281 [ 2569.824534] warn_alloc.cold+0x96/0x1cc [ 2569.824816] 6*4kB [ 2569.828501] ? zone_watermark_ok_safe+0x220/0x220 [ 2569.828510] ? usleep_range+0x130/0x130 [ 2569.828518] ? try_to_free_pages+0x23f/0x6e0 [ 2569.828527] ? _find_next_bit+0xdb/0x100 [ 2569.828536] ? run_timer_softirq+0x5a0/0x5a0 [ 2569.828553] __alloc_pages_nodemask+0x2127/0x2720 [ 2569.828567] ? lock_acquire+0x170/0x3f0 [ 2569.828582] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2569.832351] (ME) [ 2569.835536] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2569.846443] 1*8kB [ 2569.847922] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2569.856394] (E) [ 2569.857146] alloc_pages_current+0x155/0x260 [ 2569.869880] 2*16kB [ 2569.872432] ion_page_pool_alloc+0x118/0x1b0 [ 2569.874550] (E) [ 2569.879985] ion_system_heap_allocate+0x133/0x8c0 [ 2569.879997] ? _raw_spin_unlock+0x29/0x40 [ 2569.880005] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2569.880014] ? ion_system_contig_heap_create+0x130/0x130 [ 2569.880025] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2569.880035] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2569.880046] ion_alloc+0x27a/0x810 [ 2569.880060] ? ion_dma_buf_release+0x40/0x40 [ 2569.880071] ? __might_fault+0x177/0x1b0 [ 2569.880082] ion_ioctl+0xea/0x1f0 [ 2569.880091] ? ion_query_heaps+0x360/0x360 [ 2569.880103] ? ion_query_heaps+0x360/0x360 [ 2569.890668] 4*32kB [ 2569.893054] do_vfs_ioctl+0x75a/0xff0 [ 2569.895000] (UE) [ 2569.899826] ? ioctl_preallocate+0x1a0/0x1a0 [ 2569.899834] ? lock_downgrade+0x740/0x740 [ 2569.899847] ? __fget+0x225/0x360 [ 2569.899856] ? do_vfs_ioctl+0xff0/0xff0 [ 2569.899866] ? security_file_ioctl+0x83/0xb0 [ 2569.899876] SyS_ioctl+0x7f/0xb0 [ 2569.899883] ? do_vfs_ioctl+0xff0/0xff0 [ 2569.899895] do_syscall_64+0x1d5/0x640 [ 2569.899914] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2569.913194] 2*64kB [ 2569.914392] RIP: 0033:0x465f69 [ 2569.923497] (UM) [ 2569.924292] RSP: 002b:00007fb3e357a188 EFLAGS: 00000246 [ 2569.927811] 2*128kB [ 2569.932205] ORIG_RAX: 0000000000000010 [ 2569.932210] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2569.932215] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2569.932219] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2569.932224] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2569.932229] R13: 00007fffc0af773f R14: 00007fb3e357a300 R15: 0000000000022000 [ 2569.940407] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 2569.984871] (UM) [ 2569.993349] (null) [ 2570.011311] 70*256kB [ 2570.017752] , order=0, oom_score_adj=0 [ 2570.045343] (UM) [ 2570.054127] syz-fuzzer cpuset= [ 2570.071303] 16*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26688kB [ 2570.080053] / mems_allowed=0-1 [ 2570.083573] CPU: 0 PID: 7979 Comm: syz-fuzzer Not tainted 4.14.224-syzkaller #0 [ 2570.085588] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2570.091001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2570.091005] Call Trace: [ 2570.091023] dump_stack+0x1b2/0x281 [ 2570.091035] dump_header+0x178/0x82f [ 2570.091045] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2570.091054] ? ___ratelimit+0x2cd/0x530 [ 2570.091063] oom_kill_process.cold+0x10/0xb18 [ 2570.091078] out_of_memory+0xe3e/0x1190 [ 2570.091091] ? oom_killer_disable+0x1c0/0x1c0 [ 2570.091100] ? mutex_trylock+0x152/0x1a0 [ 2570.105852] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2570.109264] __alloc_pages_nodemask+0x23e1/0x2720 [ 2570.109284] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2570.109306] alloc_pages_current+0x155/0x260 [ 2570.109316] filemap_fault+0xea3/0x1980 [ 2570.109333] ext4_filemap_fault+0x84/0xb0 [ 2570.111900] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2570.115601] __do_fault+0xfa/0x380 [ 2570.124459] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2570.128337] __handle_mm_fault+0x2497/0x4620 [ 2570.128347] ? vm_insert_page+0x7c0/0x7c0 [ 2570.128356] ? free_object+0xe4/0x240 [ 2570.128374] handle_mm_fault+0x391/0x860 [ 2570.128386] __do_page_fault+0x549/0xad0 [ 2570.136315] 45862 total pagecache pages [ 2570.136827] ? spurious_fault+0x640/0x640 [ 2570.146662] 0 pages in swap cache [ 2570.153937] ? do_page_fault+0x60/0x500 [ 2570.153947] ? page_fault+0x2f/0x50 [ 2570.153954] page_fault+0x45/0x50 [ 2570.153962] RIP: 0000:0x93f060 [ 2570.153966] RSP: 4e20:000000c00003dfa0 EFLAGS: 0043b6a0 [ 2570.162807] Mem-Info: [ 2570.175061] Swap cache stats: add 0, delete 0, find 0/0 [ 2570.179201] active_anon:20861 inactive_anon:43286 isolated_anon:0 [ 2570.179201] active_file:9 inactive_file:10 isolated_file:0 [ 2570.179201] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2570.179201] slab_reclaimable:12051 slab_unreclaimable:121577 [ 2570.179201] mapped:52849 shmem:45843 pagetables:803 bounce:0 [ 2570.179201] free:13934 free_pcp:52 free_cma:0 [ 2570.188102] Free swap = 0kB [ 2570.190442] warn_alloc_show_mem: 1 callbacks suppressed [ 2570.190445] Mem-Info: [ 2570.208873] Total swap = 0kB [ 2570.211420] Node 0 active_anon:82640kB inactive_anon:151040kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:160000kB dirty:0kB writeback:0kB shmem:161068kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2570.213764] 2097051 pages RAM [ 2570.217811] Node 1 active_anon:804kB inactive_anon:22104kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:51396kB dirty:0kB writeback:0kB shmem:22304kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2570.233866] 0 pages HighMem/MovableOnly [ 2570.238106] Node 0 [ 2570.246120] 363840 pages reserved [ 2570.248993] active_anon:20861 inactive_anon:43286 isolated_anon:0 [ 2570.248993] active_file:9 inactive_file:10 isolated_file:0 [ 2570.248993] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2570.248993] slab_reclaimable:12051 slab_unreclaimable:121577 [ 2570.248993] mapped:52849 shmem:45843 pagetables:803 bounce:0 [ 2570.248993] free:13934 free_pcp:52 free_cma:0 [ 2570.249010] Node 0 active_anon:82640kB inactive_anon:151040kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:160000kB dirty:0kB writeback:0kB shmem:161068kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2570.249024] Node 1 active_anon:804kB inactive_anon:22104kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:51396kB dirty:0kB writeback:0kB shmem:22304kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2570.249027] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:12kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2570.249047] lowmem_reserve[]: [ 2570.265298] 0 pages cma reserved [ 2570.290650] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:12kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2570.520179] 0 2717 2718 2718 2718 [ 2570.524189] Node 0 DMA32 free:100692kB min:36200kB low:45248kB high:54296kB active_anon:82640kB inactive_anon:151040kB active_file:32kB inactive_file:232kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7424kB pagetables:2376kB bounce:0kB free_pcp:548kB local_pcp:548kB free_cma:0kB [ 2570.553829] lowmem_reserve[]: 0 0 0 0 0 [ 2570.558287] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2570.584119] lowmem_reserve[]: 0 0 0 0 0 [ 2570.588554] Node 1 Normal free:711872kB min:53696kB low:67120kB high:80544kB active_anon:804kB inactive_anon:22104kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:824kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2570.617604] lowmem_reserve[]: 0 0 0 0 0 [ 2570.622144] Node 0 DMA: 2*4kB (UE) 1*8kB (U) 1*16kB (E) 2*32kB (UE) 14*64kB (UE) 9*128kB (UE) 5*256kB (UE) 1*512kB (E) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 12128kB [ 2570.637377] Node 0 DMA32: 53*4kB (ME) 117*8kB (UME) 74*16kB (UME) 16*32kB (UME) 4583*64kB (UME) 716*128kB (U) 17*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 392156kB [ 2570.652763] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2570.678218] Node 1 Normal: 6*4kB (ME) 1*8kB (E) 2*16kB (E) 4*32kB (UE) 9357*64kB (UM) 1592*128kB (UM) 238*256kB (UM) 16*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 871936kB [ 2570.704445] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2570.722231] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2570.748161] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2570.757043] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2570.772401] 46218 total pagecache pages [ 2570.776427] 0 pages in swap cache [ 2570.779912] Swap cache stats: add 0, delete 0, find 0/0 [ 2570.781003] lowmem_reserve[]: [ 2570.785263] Free swap = 0kB [ 2570.785267] Total swap = 0kB [ 2570.785275] 2097051 pages RAM [ 2570.785279] 0 pages HighMem/MovableOnly [ 2570.785282] 363840 pages reserved [ 2570.785285] 0 pages cma reserved [ 2570.838185] 0 2717 2718 2718 2718 [ 2570.841781] Node 0 DMA32 free:322404kB min:36200kB low:45248kB high:54296kB active_anon:82640kB inactive_anon:151040kB active_file:656kB inactive_file:3056kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7424kB pagetables:2376kB bounce:0kB free_pcp:284kB local_pcp:92kB free_cma:0kB [ 2570.888185] lowmem_reserve[]: 0 0 0 0 0 [ 2570.892252] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2570.918063] lowmem_reserve[]: 0 0 0 0 0 [ 2570.922117] Node 1 Normal free:872064kB min:53696kB low:67120kB high:80544kB active_anon:804kB inactive_anon:22104kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:824kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 2570.951539] lowmem_reserve[]: 0 0 0 0 0 [ 2570.955541] Node 0 DMA: 2*4kB (UE) 1*8kB (U) 1*16kB (E) 2*32kB (UE) 14*64kB (UE) 9*128kB (UE) 5*256kB (UE) 1*512kB (E) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 12128kB [ 2570.970905] Node 0 DMA32: 23*4kB (UME) 83*8kB (UE) 70*16kB (E) 14*32kB (ME) 2433*64kB (UE) 723*128kB (UM) 15*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 254420kB [ 2570.986098] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2570.997145] Node 1 Normal: 6*4kB (ME) 1*8kB (E) 2*16kB (E) 4*32kB (UE) 9357*64kB (UM) 1593*128kB (UM) 238*256kB (UM) 16*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 872064kB [ 2571.012590] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2571.038156] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2571.046765] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2571.055887] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2571.064708] 46822 total pagecache pages [ 2571.068839] 0 pages in swap cache [ 2571.072284] Swap cache stats: add 0, delete 0, find 0/0 [ 2571.077637] Free swap = 0kB [ 2571.081411] Total swap = 0kB [ 2571.084429] 2097051 pages RAM [ 2571.087527] 0 pages HighMem/MovableOnly [ 2571.091719] 363840 pages reserved [ 2571.095164] 0 pages cma reserved [ 2571.098670] Out of memory (oom_kill_allocating_task): Kill process 7979 (syz-fuzzer) score 0 or sacrifice child [ 2571.109309] Killed process 29065 (syz-executor.5) total-vm:84924kB, anon-rss:60kB, file-rss:0kB, shmem-rss:0kB [ 2571.127831] oom_reaper: reaped process 30430 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2571.174151] oom_reaper: reaped process 29065 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 00:44:57 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x484240, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)={0x101, 0x1, 0x4, 0x400, 0xffff, {0x0, 0x2710}, {0x1, 0x2, 0x8, 0x2, 0x7, 0x1, "db53d254"}, 0x8, 0x4, @fd=r1, 0x4, 0x0, r1}) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x8) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000340)={0x401, 0x2, 0x4, 0x8, 0x8, {}, {0x1, 0x8, 0xbc, 0xa2, 0xf7, 0x20, "450104da"}, 0xa87, 0x4, @fd=r3, 0x1ff}) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x4, 0x90040) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, 0xffffffffffffffff) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x7fffffff, 0x1e, 0x1}) [ 2571.815754] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2571.830639] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2571.849783] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2571.872900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2571.881526] device bridge_slave_1 left promiscuous mode [ 2571.887313] bridge0: port 2(bridge_slave_1) entered disabled state [ 2571.900534] device bridge_slave_0 left promiscuous mode [ 2571.906947] bridge0: port 1(bridge_slave_0) entered disabled state [ 2571.925532] device veth1_macvtap left promiscuous mode [ 2571.933775] device veth0_macvtap left promiscuous mode [ 2571.942211] device veth1_vlan left promiscuous mode [ 2571.947813] device veth0_vlan left promiscuous mode [ 2572.005957] syz-executor.4 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=1000 [ 2572.038326] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2572.062262] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2572.067184] CPU: 0 PID: 31621 Comm: syz-executor.4 Not tainted 4.14.224-syzkaller #0 [ 2572.082099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2572.091540] Call Trace: [ 2572.094134] dump_stack+0x1b2/0x281 [ 2572.097766] dump_header+0x178/0x82f [ 2572.101485] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2572.106599] ? ___ratelimit+0x2cd/0x530 [ 2572.110023] syz-executor.4 cpuset= [ 2572.110572] oom_kill_process.cold+0x10/0xb18 [ 2572.110590] out_of_memory+0xe3e/0x1190 [ 2572.110604] ? oom_killer_disable+0x1c0/0x1c0 [ 2572.110612] ? mutex_trylock+0x152/0x1a0 [ 2572.110623] __alloc_pages_nodemask+0x23e1/0x2720 [ 2572.126443] / [ 2572.127095] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2572.137410] mems_allowed=0-1 [ 2572.137677] alloc_pages_current+0x155/0x260 [ 2572.137689] filemap_fault+0xea3/0x1980 [ 2572.137705] ext4_filemap_fault+0x84/0xb0 [ 2572.158094] __do_fault+0xfa/0x380 [ 2572.161630] __handle_mm_fault+0x2497/0x4620 [ 2572.166033] ? vm_insert_page+0x7c0/0x7c0 [ 2572.170172] ? nanosleep_copyout+0x100/0x100 [ 2572.174569] handle_mm_fault+0x391/0x860 [ 2572.178622] __do_page_fault+0x549/0xad0 [ 2572.182676] ? spurious_fault+0x640/0x640 [ 2572.186805] ? do_page_fault+0x60/0x500 [ 2572.190767] ? page_fault+0x2f/0x50 [ 2572.194381] page_fault+0x45/0x50 [ 2572.197824] RIP: 56c9e0:0x56bf60 [ 2572.201178] RSP: 27409c:0000000000000001 EFLAGS: 0056c9e0 [ 2572.201667] Mem-Info: [ 2572.209710] active_anon:20932 inactive_anon:43282 isolated_anon:0 [ 2572.209710] active_file:35 inactive_file:153 isolated_file:23 [ 2572.209710] unevictable:0 dirty:5 writeback:0 unstable:0 [ 2572.209710] slab_reclaimable:12087 slab_unreclaimable:122114 [ 2572.209710] mapped:35577 shmem:45836 pagetables:684 bounce:0 [ 2572.209710] free:25693 free_pcp:156 free_cma:0 [ 2572.210285] CPU: 1 PID: 31622 Comm: syz-executor.4 Not tainted 4.14.224-syzkaller #0 [ 2572.243178] Node 0 active_anon:82280kB inactive_anon:151024kB active_file:108kB inactive_file:680kB unevictable:0kB isolated(anon):0kB isolated(file):92kB mapped:90912kB dirty:20kB writeback:0kB shmem:161040kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2572.250980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2572.250985] Call Trace: [ 2572.251003] dump_stack+0x1b2/0x281 [ 2572.251017] warn_alloc.cold+0x96/0x1cc [ 2572.279030] Node 1 active_anon:1448kB inactive_anon:22104kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:51396kB dirty:0kB writeback:0kB shmem:22304kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2572.288349] ? zone_watermark_ok_safe+0x220/0x220 [ 2572.288372] __alloc_pages_nodemask+0x2127/0x2720 [ 2572.290939] Node 0 [ 2572.294547] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2572.298517] DMA free:11068kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2572.325643] ? lock_acquire+0x170/0x3f0 [ 2572.325659] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2572.330484] lowmem_reserve[]: [ 2572.335302] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2572.337507] 0 [ 2572.342504] ? __mutex_unlock_slowpath+0x75/0x770 [ 2572.342521] alloc_pages_current+0x155/0x260 [ 2572.368007] 2717 [ 2572.371968] ion_page_pool_alloc+0x118/0x1b0 [ 2572.376787] 2718 [ 2572.379876] ion_system_heap_allocate+0x133/0x8c0 [ 2572.379886] ? ion_alloc+0x187/0x810 [ 2572.379898] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2572.385402] 2718 [ 2572.387186] ? ion_system_contig_heap_create+0x130/0x130 [ 2572.392010] 2718 [ 2572.396390] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2572.402808] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2572.404840] Node 0 [ 2572.409691] ion_alloc+0x204/0x810 [ 2572.409708] ? ion_dma_buf_release+0x40/0x40 [ 2572.413404] DMA32 free:38444kB min:36200kB low:45248kB high:54296kB active_anon:82280kB inactive_anon:151024kB active_file:20kB inactive_file:512kB unevictable:0kB writepending:20kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7360kB pagetables:2044kB bounce:0kB free_pcp:624kB local_pcp:4kB free_cma:0kB [ 2572.418827] ? __might_fault+0x177/0x1b0 [ 2572.418839] ion_ioctl+0xea/0x1f0 [ 2572.418848] ? ion_query_heaps+0x360/0x360 [ 2572.420885] lowmem_reserve[]: [ 2572.426441] ? ion_query_heaps+0x360/0x360 [ 2572.428500] 0 [ 2572.433481] do_vfs_ioctl+0x75a/0xff0 [ 2572.438319] 0 [ 2572.440533] ? ioctl_preallocate+0x1a0/0x1a0 [ 2572.444041] 0 [ 2572.448426] ? lock_downgrade+0x740/0x740 [ 2572.448440] ? __fget+0x225/0x360 [ 2572.448449] ? do_vfs_ioctl+0xff0/0xff0 [ 2572.476835] 0 [ 2572.480872] ? security_file_ioctl+0x83/0xb0 [ 2572.480887] SyS_ioctl+0x7f/0xb0 [ 2572.484310] 0 [ 2572.488527] ? do_vfs_ioctl+0xff0/0xff0 [ 2572.488539] do_syscall_64+0x1d5/0x640 [ 2572.488556] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2572.496017] RIP: 0033:0x465f69 [ 2572.497790] Node 0 [ 2572.501563] RSP: 002b:00007f1dbb0fc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2572.501573] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2572.501578] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2572.501583] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2572.501590] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2572.503375] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2572.507750] R13: 00007fff344be07f R14: 00007f1dbb0fc300 R15: 0000000000022000 [ 2572.514921] Mem-Info: [ 2572.525250] lowmem_reserve[]: [ 2572.530556] active_anon:20932 inactive_anon:43282 isolated_anon:0 [ 2572.530556] active_file:35 inactive_file:165 isolated_file:23 [ 2572.530556] unevictable:0 dirty:5 writeback:0 unstable:0 [ 2572.530556] slab_reclaimable:12087 slab_unreclaimable:122114 [ 2572.530556] mapped:35602 shmem:45836 pagetables:684 bounce:0 [ 2572.530556] free:25091 free_pcp:80 free_cma:0 [ 2572.531049] 0 [ 2572.532806] Node 0 active_anon:82280kB inactive_anon:151024kB active_file:108kB inactive_file:628kB unevictable:0kB isolated(anon):0kB isolated(file):92kB mapped:91012kB dirty:20kB writeback:0kB shmem:161040kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2572.536702] 0 0 0 0 [ 2572.536721] Node 1 [ 2572.540662] Node 1 active_anon:1448kB inactive_anon:22104kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:51396kB dirty:0kB writeback:0kB shmem:22304kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2572.549136] Normal free:53260kB min:53696kB low:67120kB high:80544kB active_anon:1448kB inactive_anon:22104kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:692kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 2572.551260] Node 0 [ 2572.561722] lowmem_reserve[]: [ 2572.566390] DMA free:11068kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2572.573629] 0 0 0 0 0 [ 2572.573646] Node 0 DMA: 1*4kB (E) 3*8kB (U) 2*16kB (UE) 2*32kB [ 2572.581270] lowmem_reserve[]: [ 2572.591815] (UE) [ 2572.613479] 0 [ 2572.624023] 1*64kB [ 2572.626442] 2717 [ 2572.666411] (E) [ 2572.690402] 2718 [ 2572.695381] 7*128kB [ 2572.721591] 2718 [ 2572.753130] (UE) [ 2572.754755] 2718 [ 2572.784018] 5*256kB [ 2572.791896] (UE) 1*512kB (E) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB [ 2572.794000] Node 0 [ 2572.795756] = 11068kB [ 2572.795760] Node 0 DMA32: 47*4kB (UME) [ 2572.798067] DMA32 free:36036kB min:36200kB low:45248kB high:54296kB active_anon:82280kB inactive_anon:151024kB active_file:20kB inactive_file:1016kB unevictable:0kB writepending:20kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7360kB pagetables:2044kB bounce:0kB free_pcp:316kB local_pcp:248kB free_cma:0kB [ 2572.798072] lowmem_reserve[]: [ 2572.803396] 1818*8kB [ 2572.804156] 0 [ 2572.806433] (UME) 267*16kB (UME) 110*32kB (UME) 5*64kB (UME) [ 2572.808913] 0 [ 2572.810557] 104*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB [ 2572.812649] 0 [ 2572.814953] = 36156kB [ 2572.814957] Node 0 Normal: 0*4kB 0*8kB 0*16kB [ 2572.821914] 0 [ 2572.826942] 0*32kB [ 2572.830097] 0 [ 2572.896214] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2572.943804] 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2572.956324] lowmem_reserve[]: 0 0 0 0 0 [ 2572.960448] Node 1 Normal free:53532kB min:53696kB low:67120kB high:80544kB active_anon:1448kB inactive_anon:22104kB active_file:28kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:692kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2572.966596] Node 1 Normal: 12*4kB (UME) 18*8kB (UME) 6*16kB (UME) 26*32kB (UME) 5*64kB (UM) 1*128kB (U) 177*256kB (U) 13*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 53536kB [ 2573.019703] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2573.036754] lowmem_reserve[]: 0 0 0 0 0 [ 2573.040801] Node 0 DMA: 1*4kB (E) 3*8kB (U) 2*16kB (UE) 2*32kB (UE) 1*64kB (E) 7*128kB (UE) 5*256kB (UE) 1*512kB (E) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11068kB [ 2573.044646] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2573.122379] Node 0 DMA32: 208*4kB (ME) 1671*8kB (UME) 319*16kB (UE) 110*32kB (UE) 7*64kB (UME) 104*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36584kB [ 2573.169655] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2573.216864] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2573.226048] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2573.284823] Node 1 Normal: 12*4kB (UME) 18*8kB (UME) 6*16kB (UME) 26*32kB (UME) 5*64kB (UM) 1*128kB (U) 177*256kB (U) 13*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 53536kB [ 2573.301333] 45882 total pagecache pages [ 2573.305319] 0 pages in swap cache [ 2573.345078] Swap cache stats: add 0, delete 0, find 0/0 [ 2573.367141] Free swap = 0kB [ 2573.374313] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2573.381445] Total swap = 0kB [ 2573.386167] 2097051 pages RAM [ 2573.413646] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2573.439470] 0 pages HighMem/MovableOnly [ 2573.443469] 363840 pages reserved [ 2573.446909] 0 pages cma reserved [ 2573.462906] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2573.496241] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2573.516133] Out of memory (oom_kill_allocating_task): Kill process 31621 (syz-executor.4) score 0 or sacrifice child [ 2573.549093] 45882 total pagecache pages [ 2573.553111] 0 pages in swap cache [ 2573.556556] Swap cache stats: add 0, delete 0, find 0/0 [ 2573.584668] Killed process 31621 (syz-executor.4) total-vm:93252kB, anon-rss:108kB, file-rss:33752kB, shmem-rss:0kB [ 2573.617119] Free swap = 0kB [ 2573.632241] Total swap = 0kB [ 2573.635270] 2097051 pages RAM [ 2573.656487] 0 pages HighMem/MovableOnly [ 2573.678961] 363840 pages reserved [ 2573.682437] 0 pages cma reserved [ 2573.701892] oom_reaper: reaped process 31621 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2573.730192] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2573.761809] systemd-journal cpuset=/ mems_allowed=0-1 [ 2573.767047] CPU: 0 PID: 31192 Comm: systemd-journal Not tainted 4.14.224-syzkaller #0 [ 2573.775007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2573.784358] Call Trace: [ 2573.786949] dump_stack+0x1b2/0x281 [ 2573.790577] dump_header+0x178/0x82f [ 2573.794285] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2573.799384] ? ___ratelimit+0x2cd/0x530 [ 2573.803355] oom_kill_process.cold+0x10/0xb18 [ 2573.807851] out_of_memory+0xe3e/0x1190 [ 2573.811826] ? oom_killer_disable+0x1c0/0x1c0 [ 2573.815182] syz-executor.4: [ 2573.816331] ? mutex_trylock+0x152/0x1a0 [ 2573.816339] page allocation failure: order:0 [ 2573.819336] __alloc_pages_nodemask+0x23e1/0x2720 [ 2573.819356] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2573.819377] alloc_pages_current+0x155/0x260 [ 2573.819387] filemap_fault+0xea3/0x1980 [ 2573.819404] ext4_filemap_fault+0x84/0xb0 [ 2573.838249] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2573.841973] __do_fault+0xfa/0x380 [ 2573.841982] __handle_mm_fault+0x2497/0x4620 [ 2573.841992] ? vm_insert_page+0x7c0/0x7c0 [ 2573.842000] ? perf_trace_wpan_phy_only_evt+0x160/0x3b0 [ 2573.842006] ? check_stack_object+0x86/0xa0 [ 2573.842020] ? sync_mm_rss+0xf2/0x160 [ 2573.842029] handle_mm_fault+0x391/0x860 [ 2573.842041] __do_page_fault+0x549/0xad0 [ 2573.842053] ? spurious_fault+0x640/0x640 [ 2573.842064] ? do_page_fault+0x60/0x500 [ 2573.864133] (null) [ 2573.865232] ? page_fault+0x2f/0x50 [ 2573.865242] page_fault+0x45/0x50 [ 2573.879720] syz-executor.4 cpuset= [ 2573.882801] RIP: f3728040:0x7ffc366dc810 [ 2573.882805] RSP: 366dc850:0000000000000001 EFLAGS: 7fb4e6ec13a0 [ 2573.910480] Mem-Info: [ 2573.915616] / [ 2573.916168] active_anon:20908 inactive_anon:43282 isolated_anon:0 [ 2573.916168] active_file:36 inactive_file:3 isolated_file:0 [ 2573.916168] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2573.916168] slab_reclaimable:12100 slab_unreclaimable:122127 [ 2573.916168] mapped:35479 shmem:45836 pagetables:684 bounce:0 [ 2573.916168] free:18421 free_pcp:0 free_cma:0 [ 2573.946833] mems_allowed=0-1 [ 2574.046137] Node 0 active_anon:82200kB inactive_anon:151024kB active_file:112kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:90520kB dirty:0kB writeback:0kB shmem:161040kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2574.047931] CPU: 1 PID: 31622 Comm: syz-executor.4 Not tainted 4.14.224-syzkaller #0 [ 2574.074076] Node 1 active_anon:1432kB inactive_anon:22104kB active_file:32kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:51396kB dirty:0kB writeback:0kB shmem:22304kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2574.081788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2574.081793] Call Trace: [ 2574.081809] dump_stack+0x1b2/0x281 [ 2574.081827] warn_alloc.cold+0x96/0x1cc [ 2574.108981] Node 0 [ 2574.118308] ? zone_watermark_ok_safe+0x220/0x220 [ 2574.118317] ? usleep_range+0x130/0x130 [ 2574.118326] ? try_to_free_pages+0x23f/0x6e0 [ 2574.120893] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2574.124490] ? _find_next_bit+0xdb/0x100 [ 2574.128447] lowmem_reserve[]: [ 2574.130654] ? run_timer_softirq+0x5a0/0x5a0 [ 2574.135465] 0 [ 2574.139430] __alloc_pages_nodemask+0x2127/0x2720 [ 2574.139446] ? lock_acquire+0x170/0x3f0 [ 2574.143824] 2717 [ 2574.169329] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2574.169340] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2574.169354] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2574.173386] 2718 [ 2574.176509] alloc_pages_current+0x155/0x260 [ 2574.180911] 2718 [ 2574.182684] ion_page_pool_alloc+0x118/0x1b0 [ 2574.187490] 2718 [ 2574.191450] ion_system_heap_allocate+0x133/0x8c0 [ 2574.191461] ? ion_alloc+0x187/0x810 [ 2574.191471] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2574.193611] Node 0 [ 2574.198431] ? ion_system_contig_heap_create+0x130/0x130 [ 2574.198440] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2574.198451] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2574.202927] DMA32 free:35860kB min:36200kB low:45248kB high:54296kB active_anon:82200kB inactive_anon:151024kB active_file:168kB inactive_file:112kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7328kB pagetables:2044kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2574.208351] ion_alloc+0x204/0x810 [ 2574.208364] ? ion_dma_buf_release+0x40/0x40 [ 2574.208375] ? __might_fault+0x177/0x1b0 [ 2574.210406] lowmem_reserve[]: [ 2574.214794] ion_ioctl+0xea/0x1f0 [ 2574.216854] 0 [ 2574.221242] ? ion_query_heaps+0x360/0x360 [ 2574.221255] ? ion_query_heaps+0x360/0x360 [ 2574.221264] do_vfs_ioctl+0x75a/0xff0 [ 2574.223314] 0 [ 2574.228138] ? ioctl_preallocate+0x1a0/0x1a0 [ 2574.228146] ? lock_downgrade+0x740/0x740 [ 2574.228159] ? __fget+0x225/0x360 [ 2574.231846] 0 [ 2574.237289] ? do_vfs_ioctl+0xff0/0xff0 [ 2574.239529] 0 [ 2574.245048] ? security_file_ioctl+0x83/0xb0 [ 2574.250062] 0 [ 2574.254875] SyS_ioctl+0x7f/0xb0 [ 2574.286566] ? do_vfs_ioctl+0xff0/0xff0 [ 2574.290956] Node 0 [ 2574.294985] do_syscall_64+0x1d5/0x640 [ 2574.298085] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2574.301498] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2574.303266] lowmem_reserve[]: [ 2574.307478] RIP: 0033:0x465f69 [ 2574.311802] 0 [ 2574.315565] RSP: 002b:00007f1dbb0fc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2574.317360] 0 [ 2574.321744] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2574.321750] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2574.321755] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2574.321763] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2574.321769] R13: 00007fff344be07f R14: 00007f1dbb0fc300 R15: 0000000000022000 [ 2574.325903] 0 [ 2574.354020] Mem-Info: [ 2574.418527] 0 0 [ 2574.533729] Node 1 Normal free:26868kB min:53696kB low:67120kB high:80544kB active_anon:1432kB inactive_anon:22104kB active_file:32kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:692kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2574.623969] active_anon:20908 inactive_anon:43282 isolated_anon:0 [ 2574.623969] active_file:36 inactive_file:3 isolated_file:0 [ 2574.623969] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2574.623969] slab_reclaimable:12100 slab_unreclaimable:122127 [ 2574.623969] mapped:35479 shmem:45836 pagetables:684 bounce:0 [ 2574.623969] free:18421 free_pcp:0 free_cma:0 [ 2574.648269] lowmem_reserve[]: 0 0 0 0 0 [ 2574.706252] Node 0 DMA: 1*4kB (E) 1*8kB (U) 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 6*128kB (UE) 5*256kB (UE) 1*512kB (E) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10956kB [ 2574.724639] Node 0 active_anon:82200kB inactive_anon:151024kB active_file:112kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:90520kB dirty:0kB writeback:0kB shmem:161040kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2574.790159] Node 1 active_anon:1432kB inactive_anon:22104kB active_file:28kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:51396kB dirty:0kB writeback:0kB shmem:22304kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2574.792300] Node 0 DMA32: 121*4kB (ME) 97*8kB (ME) 1199*16kB (UE) 49*32kB (UE) 8*64kB (UME) 103*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35708kB [ 2574.894673] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2574.899216] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2574.935081] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2574.943425] Node 1 Normal: 10*4kB (UME) 4*8kB (UME) 4*16kB (ME) 6*32kB (UME) 5*64kB (UM) 1*128kB (U) 76*256kB (U) 13*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26888kB [ 2574.944032] Node 0 [ 2574.968591] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2574.971081] DMA32 free:35692kB min:36200kB low:45248kB high:54296kB active_anon:82200kB inactive_anon:151024kB active_file:40kB inactive_file:152kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7328kB pagetables:2044kB bounce:0kB free_pcp:488kB local_pcp:128kB free_cma:0kB [ 2574.986603] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2575.019072] lowmem_reserve[]: 0 0 0 0 0 [ 2575.023082] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2575.024732] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2575.060047] lowmem_reserve[]: 0 0 0 0 0 [ 2575.064052] Node 1 Normal free:26888kB min:53696kB low:67120kB high:80544kB active_anon:1432kB inactive_anon:22104kB active_file:0kB inactive_file:72kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:692kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2575.065999] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2575.102972] lowmem_reserve[]: 0 0 0 0 0 [ 2575.106990] Node 0 DMA: 1*4kB (E) 1*8kB (U) 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 6*128kB (UE) 5*256kB (UE) 1*512kB (E) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10956kB [ 2575.109858] 45874 total pagecache pages [ 2575.125900] 0 pages in swap cache [ 2575.132640] Node 0 DMA32: 121*4kB (ME) 97*8kB (ME) 1199*16kB (UE) 49*32kB (UE) 8*64kB (UME) 103*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35708kB [ 2575.138415] Swap cache stats: add 0, delete 0, find 0/0 [ 2575.158303] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2575.161966] Free swap = 0kB [ 2575.176114] Total swap = 0kB [ 2575.180194] Node 1 Normal: 10*4kB (UME) 4*8kB (UME) 4*16kB (ME) 6*32kB (UME) 5*64kB (UM) 1*128kB (U) 76*256kB (U) 13*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26888kB [ 2575.184351] 2097051 pages RAM [ 2575.207342] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2575.208047] 0 pages HighMem/MovableOnly [ 2575.229208] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2575.230409] 363840 pages reserved [ 2575.246146] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2575.247285] 0 pages cma reserved [ 2575.266851] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2575.268652] Out of memory (oom_kill_allocating_task): Kill process 31192 (systemd-journal) score 0 or sacrifice child [ 2575.276681] 45874 total pagecache pages [ 2575.295594] Killed process 31192 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:4kB, shmem-rss:2692kB [ 2575.301196] 0 pages in swap cache [ 2575.310400] oom_reaper: reaped process 31192 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:2692kB [ 2575.314835] Swap cache stats: add 0, delete 0, find 0/0 [ 2575.372952] Free swap = 0kB [ 2575.375994] Total swap = 0kB [ 2575.404810] 2097051 pages RAM [ 2575.422783] 0 pages HighMem/MovableOnly [ 2575.426791] 363840 pages reserved [ 2575.466938] 0 pages cma reserved [ 2575.617609] device hsr_slave_1 left promiscuous mode [ 2575.662071] device hsr_slave_0 left promiscuous mode [ 2575.758385] team0 (unregistering): Port device team_slave_1 removed [ 2575.819980] team0 (unregistering): Port device team_slave_0 removed [ 2575.876942] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2575.896808] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2575.906529] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2575.923759] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2575.962595] systemd[1]: Stopped Journal Service. [ 2576.039532] systemd[1]: Starting Journal Service... [ 2576.060348] bond0 (unregistering): Released all slaves [ 2576.221606] systemd-journald[31628]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 2576.754042] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2576.779589] oom_reaper: reaped process 31592 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2576.811851] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2576.817003] CPU: 1 PID: 31622 Comm: syz-executor.4 Not tainted 4.14.224-syzkaller #0 [ 2576.823922] syz-executor.1 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2576.824877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2576.824883] (null) [ 2576.835252] Call Trace: [ 2576.835270] dump_stack+0x1b2/0x281 [ 2576.835284] warn_alloc.cold+0x96/0x1cc [ 2576.835296] ? zone_watermark_ok_safe+0x220/0x220 [ 2576.844646] , order=0, oom_score_adj=1000 [ 2576.846772] __alloc_pages_nodemask+0x2127/0x2720 [ 2576.849339] syz-executor.1 cpuset= [ 2576.852933] ? lock_acquire+0x170/0x3f0 [ 2576.856957] / [ 2576.861796] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2576.866022] mems_allowed=0-1 [ 2576.870833] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2576.870846] ? __mutex_unlock_slowpath+0x75/0x770 [ 2576.898121] ? retint_kernel+0x2d/0x2d [ 2576.901991] alloc_pages_current+0x155/0x260 [ 2576.906386] ion_page_pool_alloc+0x118/0x1b0 [ 2576.910774] ion_system_heap_allocate+0x133/0x8c0 [ 2576.915603] ? _raw_spin_unlock+0x29/0x40 [ 2576.919731] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2576.924640] ? ion_system_contig_heap_create+0x130/0x130 [ 2576.930068] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2576.935063] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2576.939888] ion_alloc+0x27a/0x810 [ 2576.943425] ? ion_dma_buf_release+0x40/0x40 [ 2576.947814] ? __might_fault+0x177/0x1b0 [ 2576.951855] ion_ioctl+0xea/0x1f0 [ 2576.955291] ? ion_query_heaps+0x360/0x360 [ 2576.959507] ? ion_query_heaps+0x360/0x360 [ 2576.963719] do_vfs_ioctl+0x75a/0xff0 [ 2576.967500] ? ioctl_preallocate+0x1a0/0x1a0 [ 2576.971887] ? lock_downgrade+0x740/0x740 [ 2576.976018] ? __fget+0x225/0x360 [ 2576.979451] ? do_vfs_ioctl+0xff0/0xff0 [ 2576.983404] ? security_file_ioctl+0x83/0xb0 [ 2576.987792] SyS_ioctl+0x7f/0xb0 [ 2576.991136] ? do_vfs_ioctl+0xff0/0xff0 [ 2576.995088] do_syscall_64+0x1d5/0x640 [ 2576.998960] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2577.004139] RIP: 0033:0x465f69 [ 2577.007305] RSP: 002b:00007f1dbb0fc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2577.014994] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2577.022244] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2577.029492] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2577.036740] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2577.043991] R13: 00007fff344be07f R14: 00007f1dbb0fc300 R15: 0000000000022000 [ 2577.051339] CPU: 0 PID: 31592 Comm: syz-executor.1 Not tainted 4.14.224-syzkaller #0 [ 2577.059222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2577.068568] Call Trace: [ 2577.071156] dump_stack+0x1b2/0x281 [ 2577.074791] dump_header+0x178/0x82f [ 2577.078506] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2577.083606] ? ___ratelimit+0x2cd/0x530 [ 2577.087573] oom_kill_process.cold+0x10/0xb18 [ 2577.092071] out_of_memory+0xe3e/0x1190 [ 2577.096042] ? oom_killer_disable+0x1c0/0x1c0 [ 2577.100529] ? mutex_trylock+0x152/0x1a0 [ 2577.104583] __alloc_pages_nodemask+0x23e1/0x2720 [ 2577.109423] ? lock_acquire+0x170/0x3f0 [ 2577.113396] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2577.118233] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2577.122831] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2577.128275] ? __sanitizer_cov_trace_pc+0x9/0x50 [ 2577.133028] alloc_pages_current+0x155/0x260 [ 2577.137431] ion_page_pool_alloc+0x118/0x1b0 [ 2577.141829] ion_system_heap_allocate+0x133/0x8c0 [ 2577.146662] ? ion_alloc+0x187/0x810 [ 2577.150367] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2577.155807] ? ion_system_contig_heap_create+0x130/0x130 [ 2577.161248] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2577.166255] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2577.171092] ion_alloc+0x204/0x810 [ 2577.174635] ? ion_dma_buf_release+0x40/0x40 [ 2577.179060] ? __might_fault+0x177/0x1b0 [ 2577.183118] ion_ioctl+0xea/0x1f0 [ 2577.186560] ? ion_query_heaps+0x360/0x360 [ 2577.190792] ? ion_query_heaps+0x360/0x360 [ 2577.195018] do_vfs_ioctl+0x75a/0xff0 [ 2577.198818] ? ioctl_preallocate+0x1a0/0x1a0 [ 2577.203219] ? lock_downgrade+0x740/0x740 [ 2577.207362] ? __fget+0x225/0x360 [ 2577.210805] ? do_vfs_ioctl+0xff0/0xff0 [ 2577.214769] ? security_file_ioctl+0x83/0xb0 [ 2577.219169] SyS_ioctl+0x7f/0xb0 [ 2577.222528] ? do_vfs_ioctl+0xff0/0xff0 [ 2577.226496] do_syscall_64+0x1d5/0x640 [ 2577.230382] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2577.235567] RIP: 0033:0x465f69 [ 2577.238745] RSP: 002b:00007f747aa45188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2577.246444] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2577.253705] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2577.260964] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2577.268223] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2577.275485] R13: 00007fff04d0b2bf R14: 00007f747aa45300 R15: 0000000000022000 [ 2577.297477] Mem-Info: [ 2577.300092] active_anon:20903 inactive_anon:45313 isolated_anon:0 [ 2577.300092] active_file:3 inactive_file:29 isolated_file:0 [ 2577.300092] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2577.300092] slab_reclaimable:12126 slab_unreclaimable:120097 [ 2577.300092] mapped:35123 shmem:47884 pagetables:684 bounce:0 [ 2577.300092] free:13879 free_pcp:60 free_cma:0 [ 2577.342482] Node 0 active_anon:81756kB inactive_anon:150956kB active_file:8kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87876kB dirty:0kB writeback:0kB shmem:161040kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2577.379435] Node 1 active_anon:1856kB inactive_anon:30296kB active_file:4kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:52616kB dirty:0kB writeback:0kB shmem:30496kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2577.417949] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2577.439273] Mem-Info: [ 2577.446626] active_anon:20903 inactive_anon:45313 isolated_anon:0 [ 2577.446626] active_file:3 inactive_file:29 isolated_file:0 [ 2577.446626] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2577.446626] slab_reclaimable:12126 slab_unreclaimable:120097 [ 2577.446626] mapped:35123 shmem:47884 pagetables:684 bounce:0 [ 2577.446626] free:13879 free_pcp:60 free_cma:0 [ 2577.453736] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2577.528091] Node 0 active_anon:81756kB inactive_anon:150956kB active_file:8kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87876kB dirty:0kB writeback:0kB shmem:161040kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2577.533875] Node 0 DMA32 free:17796kB min:36200kB low:45248kB high:54296kB active_anon:81756kB inactive_anon:150956kB active_file:8kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7264kB pagetables:1952kB bounce:0kB free_pcp:144kB local_pcp:120kB free_cma:0kB [ 2577.587617] Node 1 active_anon:1856kB inactive_anon:30296kB active_file:4kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:52616kB dirty:0kB writeback:0kB shmem:30496kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2577.618517] lowmem_reserve[]: 0 0 0 0 0 [ 2577.634853] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2577.667602] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2577.677272] lowmem_reserve[]: [ 2577.727781] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2577.731169] 0 [ 2577.735933] Node 0 [ 2577.735940] 0 [ 2577.747592] DMA32 free:17796kB min:36200kB low:45248kB high:54296kB active_anon:81756kB inactive_anon:150956kB active_file:8kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7264kB pagetables:1952kB bounce:0kB free_pcp:144kB local_pcp:24kB free_cma:0kB [ 2577.756635] 0 [ 2577.787706] lowmem_reserve[]: 0 0 0 0 0 [ 2577.793510] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2577.793851] 0 [ 2577.819221] lowmem_reserve[]: 0 0 0 0 0 [ 2577.819244] Node 1 Normal free:26760kB min:53696kB low:67120kB high:80544kB active_anon:1856kB inactive_anon:30296kB active_file:4kB inactive_file:68kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:784kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 2577.819264] lowmem_reserve[]: 0 0 0 0 0 [ 2577.819281] Node 0 DMA: 2*4kB (UE) [ 2577.835619] 0 [ 2577.853648] 1*8kB (U) [ 2577.872713] Node 1 Normal free:26760kB min:53696kB low:67120kB high:80544kB active_anon:1856kB inactive_anon:30296kB active_file:36kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:784kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2577.877700] 2*16kB [ 2577.911809] lowmem_reserve[]: 0 0 0 0 0 [ 2577.922933] Node 0 DMA: 2*4kB (UE) 1*8kB (U) 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 6*128kB (UE) 5*256kB (UE) 1*512kB (E) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10960kB [ 2577.925209] (UE) 1*32kB (E) 2*64kB (UE) 6*128kB (UE) 5*256kB (UE) 1*512kB (E) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10960kB [ 2577.950133] Node 0 DMA32: 177*4kB (ME) 94*8kB (ME) 735*16kB (UE) 143*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17796kB [ 2577.956441] Node 0 DMA32: 177*4kB (ME) 94*8kB (ME) 735*16kB (UE) 143*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17796kB [ 2577.981887] Node 0 [ 2577.997300] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2578.000053] Normal: [ 2578.018630] Node 1 Normal: 16*4kB (UME) 31*8kB (UME) 47*16kB (UME) 45*32kB (UME) 13*64kB (ME) 5*128kB (UM) 89*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26760kB [ 2578.021063] 0*4kB [ 2578.044573] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2578.046880] 0*8kB 0*16kB 0*32kB 0*64kB [ 2578.055702] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2578.055710] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2578.069276] 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2578.084134] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2578.091686] Node 1 Normal: 16*4kB (UME) 31*8kB (UME) 47*16kB (UME) 45*32kB (UME) 13*64kB (ME) 5*128kB (UM) 89*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26760kB [ 2578.092825] 47916 total pagecache pages [ 2578.118000] 0 pages in swap cache [ 2578.119891] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2578.121445] Swap cache stats: add 0, delete 0, find 0/0 [ 2578.141498] Free swap = 0kB [ 2578.142528] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2578.144606] Total swap = 0kB [ 2578.156578] 2097051 pages RAM [ 2578.159447] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2578.163053] 0 pages HighMem/MovableOnly [ 2578.176332] 363840 pages reserved [ 2578.181260] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2578.183410] 0 pages cma reserved [ 2578.200585] 47916 total pagecache pages [ 2578.204666] 0 pages in swap cache [ 2578.209767] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2578.213946] Swap cache stats: add 0, delete 0, find 0/0 [ 2578.226651] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2578.230997] Free swap = 0kB [ 2578.233938] CPU: 1 PID: 31622 Comm: syz-executor.4 Not tainted 4.14.224-syzkaller #0 [ 2578.235107] Total swap = 0kB [ 2578.242962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2578.242967] Call Trace: [ 2578.242987] dump_stack+0x1b2/0x281 [ 2578.243000] warn_alloc.cold+0x96/0x1cc [ 2578.243011] ? zone_watermark_ok_safe+0x220/0x220 [ 2578.243021] ? usleep_range+0x130/0x130 [ 2578.243030] ? try_to_free_pages+0x23f/0x6e0 [ 2578.243040] ? _find_next_bit+0xdb/0x100 [ 2578.243049] ? run_timer_softirq+0x5a0/0x5a0 [ 2578.243065] __alloc_pages_nodemask+0x2127/0x2720 [ 2578.251675] 2097051 pages RAM [ 2578.255434] ? lock_acquire+0x170/0x3f0 [ 2578.258010] 0 pages HighMem/MovableOnly [ 2578.261605] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2578.265564] 363840 pages reserved [ 2578.270471] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2578.270486] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2578.270500] ? retint_kernel+0x2d/0x2d [ 2578.274442] 0 pages cma reserved [ 2578.278921] alloc_pages_current+0x155/0x260 [ 2578.278935] ion_page_pool_alloc+0x118/0x1b0 [ 2578.282970] Out of memory (oom_kill_allocating_task): Kill process 31592 (syz-executor.1) score 0 or sacrifice child [ 2578.287354] ion_system_heap_allocate+0x133/0x8c0 [ 2578.292195] Killed process 31592 (syz-executor.1) total-vm:93252kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2578.295362] ? _raw_spin_unlock+0x29/0x40 [ 2578.299438] syz-executor.1: [ 2578.303264] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2578.308090] page allocation failure: order:0 [ 2578.311510] ? ion_system_contig_heap_create+0x130/0x130 [ 2578.315977] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2578.321414] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2578.321425] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2578.321437] ion_alloc+0x27a/0x810 [ 2578.325295] (null) [ 2578.328647] ? ion_dma_buf_release+0x40/0x40 [ 2578.328659] ? __might_fault+0x177/0x1b0 [ 2578.333035] syz-executor.1 cpuset= [ 2578.337435] ion_ioctl+0xea/0x1f0 [ 2578.348166] / [ 2578.352985] ? ion_query_heaps+0x360/0x360 [ 2578.363020] mems_allowed=0-1 [ 2578.367136] ? ion_query_heaps+0x360/0x360 [ 2578.435951] do_vfs_ioctl+0x75a/0xff0 [ 2578.439734] ? ioctl_preallocate+0x1a0/0x1a0 [ 2578.444219] ? lock_downgrade+0x740/0x740 [ 2578.448360] ? __fget+0x225/0x360 [ 2578.451793] ? do_vfs_ioctl+0xff0/0xff0 [ 2578.455747] ? security_file_ioctl+0x83/0xb0 [ 2578.460134] SyS_ioctl+0x7f/0xb0 [ 2578.463479] ? do_vfs_ioctl+0xff0/0xff0 [ 2578.467433] do_syscall_64+0x1d5/0x640 [ 2578.471318] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2578.476486] RIP: 0033:0x465f69 [ 2578.479653] RSP: 002b:00007f1dbb0fc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2578.487340] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2578.494674] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2578.501933] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2578.509188] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2578.516451] R13: 00007fff344be07f R14: 00007f1dbb0fc300 R15: 0000000000022000 [ 2578.523920] CPU: 0 PID: 31592 Comm: syz-executor.1 Not tainted 4.14.224-syzkaller #0 [ 2578.525903] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 2578.531885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2578.531889] Call Trace: [ 2578.531907] dump_stack+0x1b2/0x281 [ 2578.531920] warn_alloc.cold+0x96/0x1cc [ 2578.531935] ? zone_watermark_ok_safe+0x220/0x220 [ 2578.547247] Mem-Info: [ 2578.550888] ? wait_for_completion_io+0x10/0x10 [ 2578.550902] __alloc_pages_nodemask+0x2127/0x2720 [ 2578.550919] ? lock_acquire+0x170/0x3f0 [ 2578.553484] active_anon:20903 inactive_anon:45313 isolated_anon:0 [ 2578.553484] active_file:12 inactive_file:20 isolated_file:0 [ 2578.553484] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2578.553484] slab_reclaimable:12126 slab_unreclaimable:120097 [ 2578.553484] mapped:35123 shmem:47884 pagetables:684 bounce:0 [ 2578.553484] free:13879 free_pcp:66 free_cma:0 [ 2578.557087] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2578.566219] (null) [ 2578.568246] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2578.568263] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2578.568275] ? __sanitizer_cov_trace_pc+0x9/0x50 [ 2578.568288] alloc_pages_current+0x155/0x260 [ 2578.572956] , order=0, oom_score_adj=0 [ 2578.577782] ion_page_pool_alloc+0x118/0x1b0 [ 2578.577792] ion_system_heap_allocate+0x133/0x8c0 [ 2578.577802] ? ion_alloc+0x187/0x810 [ 2578.577811] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2578.577821] ? ion_system_contig_heap_create+0x130/0x130 [ 2578.577831] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2578.577840] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2578.577850] ion_alloc+0x204/0x810 [ 2578.577864] ? ion_dma_buf_release+0x40/0x40 [ 2578.587009] Node 0 active_anon:81756kB inactive_anon:150956kB active_file:8kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87876kB dirty:0kB writeback:0kB shmem:161040kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2578.614962] ? __might_fault+0x177/0x1b0 [ 2578.614976] ion_ioctl+0xea/0x1f0 [ 2578.614986] ? ion_query_heaps+0x360/0x360 [ 2578.614997] ? ion_query_heaps+0x360/0x360 [ 2578.615007] do_vfs_ioctl+0x75a/0xff0 [ 2578.615018] ? ioctl_preallocate+0x1a0/0x1a0 [ 2578.615028] ? lock_downgrade+0x740/0x740 [ 2578.615040] ? __fget+0x225/0x360 [ 2578.615050] ? do_vfs_ioctl+0xff0/0xff0 [ 2578.625003] in:imklog cpuset= [ 2578.626485] ? security_file_ioctl+0x83/0xb0 [ 2578.631973] / [ 2578.636646] SyS_ioctl+0x7f/0xb0 [ 2578.646275] mems_allowed=0-1 [ 2578.649389] ? do_vfs_ioctl+0xff0/0xff0 [ 2578.649402] do_syscall_64+0x1d5/0x640 [ 2578.649419] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2578.649427] RIP: 0033:0x465f69 [ 2578.649431] RSP: 002b:00007f747aa45188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2578.649440] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2578.649445] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2578.649449] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2578.649456] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2578.662624] Node 1 active_anon:1856kB inactive_anon:30296kB active_file:40kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:52616kB dirty:0kB writeback:0kB shmem:30496kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2578.663410] R13: 00007fff04d0b2bf R14: 00007f747aa45300 R15: 0000000000022000 [ 2578.682710] Node 0 [ 2578.737954] CPU: 0 PID: 31583 Comm: in:imklog Not tainted 4.14.224-syzkaller #0 [ 2578.838182] DMA free:11024kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2578.846155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2578.846160] Call Trace: [ 2578.846176] dump_stack+0x1b2/0x281 [ 2578.846187] dump_header+0x178/0x82f [ 2578.846197] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2578.846206] ? ___ratelimit+0x2cd/0x530 [ 2578.846215] oom_kill_process.cold+0x10/0xb18 [ 2578.846241] out_of_memory+0xe3e/0x1190 [ 2578.846255] ? oom_killer_disable+0x1c0/0x1c0 [ 2578.929817] ? mutex_trylock+0x152/0x1a0 [ 2578.933876] __alloc_pages_nodemask+0x23e1/0x2720 [ 2578.938725] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2578.943574] alloc_pages_current+0x155/0x260 [ 2578.947977] filemap_fault+0xea3/0x1980 [ 2578.950294] lowmem_reserve[]: 0 2717 [ 2578.951944] ext4_filemap_fault+0x84/0xb0 [ 2578.951955] __do_fault+0xfa/0x380 [ 2578.955649] 2718 [ 2578.959775] __handle_mm_fault+0x2497/0x4620 [ 2578.959784] ? vm_insert_page+0x7c0/0x7c0 [ 2578.959792] ? lock_downgrade+0x740/0x740 [ 2578.959810] handle_mm_fault+0x391/0x860 [ 2578.959822] __do_page_fault+0x549/0xad0 [ 2578.986122] ? spurious_fault+0x640/0x640 [ 2578.990372] ? do_page_fault+0x60/0x500 [ 2578.994339] ? page_fault+0x2f/0x50 [ 2578.997962] page_fault+0x45/0x50 [ 2579.001411] RIP: 1fa0:0x1f9f [ 2579.004416] RSP: 0000:0000556f55aa09d0 EFLAGS: 7f2ec3a59da0 [ 2579.006243] Mem-Info: [ 2579.014443] active_anon:20903 inactive_anon:45313 isolated_anon:0 [ 2579.014443] active_file:16 inactive_file:866 isolated_file:0 [ 2579.014443] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2579.014443] slab_reclaimable:12131 slab_unreclaimable:120522 [ 2579.014443] mapped:35732 shmem:47884 pagetables:684 bounce:0 [ 2579.014443] free:97552 free_pcp:189 free_cma:0 [ 2579.017762] 2718 [ 2579.047813] Node 0 active_anon:81756kB inactive_anon:150956kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87876kB dirty:0kB writeback:0kB shmem:161040kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2579.047826] Node 1 active_anon:1856kB inactive_anon:30296kB active_file:36kB inactive_file:3436kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:55052kB dirty:0kB writeback:0kB shmem:30496kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2579.047830] Node 0 DMA free:11024kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2579.047845] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2579.152513] Node 0 DMA32 free:75648kB min:36200kB low:45248kB high:54296kB active_anon:81756kB inactive_anon:150956kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7264kB pagetables:1952kB bounce:0kB free_pcp:740kB local_pcp:120kB free_cma:0kB [ 2579.200817] 2718 [ 2579.202914] Node 0 DMA32 free:76632kB min:36200kB low:45248kB high:54296kB active_anon:81756kB inactive_anon:150956kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7264kB pagetables:1952kB bounce:0kB free_pcp:908kB local_pcp:712kB free_cma:0kB [ 2579.227425] lowmem_reserve[]: 0 0 0 0 0 [ 2579.236035] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2579.287446] lowmem_reserve[]: 0 0 0 0 0 [ 2579.297352] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2579.317420] lowmem_reserve[]: 0 0 0 0 0 [ 2579.357609] lowmem_reserve[]: 0 0 0 0 0 [ 2579.360268] Node 1 [ 2579.361606] Node 1 [ 2579.361625] Normal free:373536kB min:53696kB low:67120kB high:80544kB active_anon:1856kB inactive_anon:30296kB active_file:936kB inactive_file:2256kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:784kB bounce:0kB free_pcp:896kB local_pcp:688kB free_cma:0kB [ 2579.363837] Normal free:373536kB min:53696kB low:67120kB high:80544kB active_anon:1856kB inactive_anon:30296kB active_file:936kB inactive_file:2256kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:784kB bounce:0kB free_pcp:896kB local_pcp:208kB free_cma:0kB [ 2579.366045] lowmem_reserve[]: [ 2579.395307] lowmem_reserve[]: 0 0 0 0 0 [ 2579.431780] Node 0 DMA: 1*4kB (E) 4*8kB (U) 2*16kB (UE) 4*32kB (UE) 3*64kB (UE) 6*128kB (UE) 5*256kB (UE) 1*512kB (E) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11140kB [ 2579.448718] Node 0 DMA32: 20*4kB (ME) 184*8kB (UE) 66*16kB (UE) 13*32kB (UME) 531*64kB (UME) 64*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 45200kB [ 2579.463797] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2579.484714] Node 1 Normal: 6*4kB (UE) 3*8kB (UME) 166*16kB (UE) 120*32kB (UE) 4309*64kB (UME) 307*128kB (UM) 155*256kB (UM) 8*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 365392kB [ 2579.511208] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2579.536949] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2579.578381] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2579.614907] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2579.624170] 49841 total pagecache pages [ 2579.627125] 0 [ 2579.629089] 0 pages in swap cache [ 2579.641698] 0 0 0 0 [ 2579.644065] Node 0 DMA: 1*4kB (E) 4*8kB (U) 2*16kB (UE) 4*32kB (UE) 3*64kB (UE) 6*128kB (UE) 5*256kB (UE) 1*512kB (E) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11140kB [ 2579.649651] Swap cache stats: add 0, delete 0, find 0/0 [ 2579.697484] Free swap = 0kB [ 2579.711947] Node 0 DMA32: 20*4kB (UE) 89*8kB (UME) 73*16kB (UME) 12*32kB (ME) 519*64kB (UME) 63*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 43624kB [ 2579.717474] Total swap = 0kB [ 2579.737757] systemd[1]: Started Journal Service. [ 2579.749954] 2097051 pages RAM [ 2579.761029] 0 pages HighMem/MovableOnly [ 2579.765416] 363840 pages reserved [ 2579.768973] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB [ 2579.769283] 0 pages cma reserved [ 2579.770196] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2579.788169] 0*2048kB 0*4096kB = 0kB [ 2579.791799] Node 1 Normal: 6*4kB (UE) 1*8kB (E) 3*16kB (ME) 4*32kB (ME) 3653*64kB (UE) 306*128kB (U) 153*256kB (U) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 312848kB [ 2579.807129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2579.814145] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2579.825021] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2579.831814] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2579.846470] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2579.857929] device bridge_slave_1 left promiscuous mode [ 2579.863460] bridge0: port 2(bridge_slave_1) entered disabled state [ 2579.870851] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2579.880539] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2579.890368] device bridge_slave_0 left promiscuous mode [ 2579.895885] bridge0: port 1(bridge_slave_0) entered disabled state [ 2579.903310] 50568 total pagecache pages [ 2579.907293] 0 pages in swap cache [ 2579.913972] Swap cache stats: add 0, delete 0, find 0/0 [ 2579.920322] device veth1_macvtap left promiscuous mode [ 2579.925630] device veth0_macvtap left promiscuous mode [ 2579.931744] Free swap = 0kB [ 2579.934758] Total swap = 0kB [ 2579.938749] 2097051 pages RAM [ 2579.941848] 0 pages HighMem/MovableOnly [ 2579.945806] 363840 pages reserved [ 2579.957801] device veth1_vlan left promiscuous mode [ 2579.962879] device veth0_vlan left promiscuous mode [ 2579.977474] 0 pages cma reserved [ 2579.980871] Out of memory (oom_kill_allocating_task): Kill process 31583 (in:imklog) score 0 or sacrifice child [ 2579.991932] Killed process 31567 (rsyslogd) total-vm:254332kB, anon-rss:816kB, file-rss:0kB, shmem-rss:0kB [ 2580.005496] oom_reaper: reaped process 31567 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2580.267395] device hsr_slave_1 left promiscuous mode [ 2580.287423] device hsr_slave_0 left promiscuous mode [ 2580.332050] team0 (unregistering): Port device team_slave_1 removed [ 2580.369673] team0 (unregistering): Port device team_slave_0 removed [ 2580.403123] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2580.477970] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2580.550288] bond0 (unregistering): Released all slaves 00:45:07 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x484240, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)={0x101, 0x1, 0x4, 0x400, 0xffff, {0x0, 0x2710}, {0x1, 0x2, 0x8, 0x2, 0x7, 0x1, "db53d254"}, 0x8, 0x4, @fd=r1, 0x4, 0x0, r1}) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x8) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x4, 0x90040) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x7fffffff, 0x1e, 0x1}) 00:45:07 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x484240, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)={0x101, 0x1, 0x4, 0x400, 0xffff, {0x0, 0x2710}, {0x1, 0x2, 0x8, 0x2, 0x7, 0x1, "db53d254"}, 0x8, 0x4, @fd=r1, 0x4, 0x0, r1}) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x8) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000340)={0x401, 0x2, 0x4, 0x8, 0x8, {}, {0x1, 0x8, 0xbc, 0xa2, 0xf7, 0x20, "450104da"}, 0xa87, 0x4, @fd=r3, 0x1ff}) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x4, 0x90040) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r4, 0xc00464be, &(0x7f0000000240)={0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x7fffffff, 0x1e, 0x1}) 00:45:08 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x0, 0x0) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x8) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x4, 0x90040) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x7fffffff, 0x1e, 0x1}) 00:45:08 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x484240, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)={0x101, 0x1, 0x4, 0x400, 0xffff, {0x0, 0x2710}, {0x1, 0x2, 0x8, 0x2, 0x7, 0x1, "db53d254"}, 0x8, 0x4, @fd=r1, 0x4, 0x0, r1}) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x8) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000340)={0x401, 0x2, 0x4, 0x8, 0x8, {}, {0x1, 0x8, 0xbc, 0xa2, 0xf7, 0x20, "450104da"}, 0xa87, 0x4, @fd=r3, 0x1ff}) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x4, 0x90040) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000240)={0x1}) syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x1, 0x621c0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x7fffffff, 0x1e, 0x1}) 00:45:08 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x484240, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)={0x101, 0x1, 0x4, 0x400, 0xffff, {0x0, 0x2710}, {0x1, 0x2, 0x8, 0x2, 0x7, 0x1, "db53d254"}, 0x8, 0x4, @fd=r1, 0x4, 0x0, r1}) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x8) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000340)={0x401, 0x2, 0x4, 0x8, 0x8, {}, {0x1, 0x8, 0xbc, 0xa2, 0xf7, 0x20, "450104da"}, 0xa87, 0x4, @fd=r3, 0x1ff}) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x4, 0x90040) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r4, 0xc00464be, &(0x7f0000000240)={0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x7fffffff, 0x1e, 0x1}) 00:45:08 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x484240, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)={0x101, 0x1, 0x4, 0x400, 0xffff, {0x0, 0x2710}, {0x1, 0x2, 0x8, 0x2, 0x7, 0x1, "db53d254"}, 0x8, 0x4, @fd=r1, 0x4, 0x0, r1}) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x8) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000340)={0x401, 0x2, 0x4, 0x8, 0x8, {}, {0x1, 0x8, 0xbc, 0xa2, 0xf7, 0x20, "450104da"}, 0xa87, 0x4, @fd=r3, 0x1ff}) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x4, 0x90040) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, 0xffffffffffffffff) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x7fffffff, 0x1e, 0x1}) [ 2581.683825] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2581.683925] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2581.735141] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2581.757326] CPU: 0 PID: 31648 Comm: syz-executor.4 Not tainted 4.14.224-syzkaller #0 [ 2581.765232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2581.774592] Call Trace: [ 2581.776184] syz-executor.1 cpuset= [ 2581.777181] dump_stack+0x1b2/0x281 [ 2581.780136] / [ 2581.780721] warn_alloc.cold+0x96/0x1cc [ 2581.790000] ? zone_watermark_ok_safe+0x220/0x220 [ 2581.790573] mems_allowed=0-1 [ 2581.794847] __alloc_pages_nodemask+0x2127/0x2720 [ 2581.794863] ? lock_acquire+0x170/0x3f0 [ 2581.806746] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2581.811598] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2581.817050] ? __mutex_unlock_slowpath+0x75/0x770 [ 2581.821897] alloc_pages_current+0x155/0x260 [ 2581.826307] ion_page_pool_alloc+0x118/0x1b0 [ 2581.830709] ion_system_heap_allocate+0x133/0x8c0 [ 2581.835546] ? ion_alloc+0x187/0x810 [ 2581.839260] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2581.844706] ? ion_system_contig_heap_create+0x130/0x130 [ 2581.850150] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2581.855165] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2581.860008] ion_alloc+0x204/0x810 [ 2581.863552] ? ion_dma_buf_release+0x40/0x40 [ 2581.867958] ? __might_fault+0x177/0x1b0 [ 2581.872017] ion_ioctl+0xea/0x1f0 [ 2581.875460] ? ion_query_heaps+0x360/0x360 [ 2581.879697] ? ion_query_heaps+0x360/0x360 [ 2581.883931] do_vfs_ioctl+0x75a/0xff0 [ 2581.887730] ? ioctl_preallocate+0x1a0/0x1a0 [ 2581.892134] ? lock_downgrade+0x740/0x740 [ 2581.896278] ? __fget+0x225/0x360 [ 2581.899727] ? do_vfs_ioctl+0xff0/0xff0 [ 2581.903694] ? security_file_ioctl+0x83/0xb0 [ 2581.908093] SyS_ioctl+0x7f/0xb0 [ 2581.911456] ? do_vfs_ioctl+0xff0/0xff0 [ 2581.915421] do_syscall_64+0x1d5/0x640 [ 2581.919308] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2581.924495] RIP: 0033:0x465f69 [ 2581.927674] RSP: 002b:00007f1dbb0fc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2581.935377] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2581.942638] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2581.949900] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2581.957162] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2581.964419] R13: 00007fff344be07f R14: 00007f1dbb0fc300 R15: 0000000000022000 [ 2581.995633] CPU: 1 PID: 31647 Comm: syz-executor.1 Not tainted 4.14.224-syzkaller #0 [ 2582.002926] warn_alloc_show_mem: 1 callbacks suppressed [ 2582.002930] Mem-Info: [ 2582.003534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2582.003539] Call Trace: [ 2582.003557] dump_stack+0x1b2/0x281 [ 2582.003575] warn_alloc.cold+0x96/0x1cc [ 2582.009056] active_anon:20798 inactive_anon:45311 isolated_anon:12 [ 2582.009056] active_file:1926 inactive_file:5157 isolated_file:0 [ 2582.009056] unevictable:0 dirty:37 writeback:25 unstable:0 [ 2582.009056] slab_reclaimable:12114 slab_unreclaimable:118099 [ 2582.009056] mapped:31367 shmem:47880 pagetables:657 bounce:0 [ 2582.009056] free:185263 free_pcp:335 free_cma:0 [ 2582.011352] ? zone_watermark_ok_safe+0x220/0x220 [ 2582.011379] __alloc_pages_nodemask+0x2127/0x2720 [ 2582.020805] Node 0 active_anon:82180kB inactive_anon:150948kB active_file:1776kB inactive_file:16380kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:63364kB dirty:108kB writeback:100kB shmem:161024kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2582.023282] ? lock_acquire+0x170/0x3f0 [ 2582.023296] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2582.023314] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2582.026953] Node 1 active_anon:1012kB inactive_anon:30296kB active_file:5928kB inactive_file:4248kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:62104kB dirty:40kB writeback:0kB shmem:30496kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2582.030892] ? __mutex_unlock_slowpath+0x75/0x770 [ 2582.030908] alloc_pages_current+0x155/0x260 [ 2582.030924] ion_page_pool_alloc+0x118/0x1b0 [ 2582.030944] ion_system_heap_allocate+0x133/0x8c0 [ 2582.064906] Node 0 [ 2582.069666] ? ion_alloc+0x187/0x810 [ 2582.069677] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2582.069687] ? ion_system_contig_heap_create+0x130/0x130 [ 2582.069696] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2582.069707] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2582.074587] DMA free:11108kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:56kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2582.103067] ion_alloc+0x204/0x810 [ 2582.103083] ? ion_dma_buf_release+0x40/0x40 [ 2582.103095] ? __might_fault+0x177/0x1b0 [ 2582.103109] ion_ioctl+0xea/0x1f0 [ 2582.107097] lowmem_reserve[]: [ 2582.111882] ? ion_query_heaps+0x360/0x360 [ 2582.111897] ? ion_query_heaps+0x360/0x360 [ 2582.111907] do_vfs_ioctl+0x75a/0xff0 [ 2582.111918] ? ioctl_preallocate+0x1a0/0x1a0 [ 2582.111926] ? lock_downgrade+0x740/0x740 [ 2582.111939] ? __fget+0x225/0x360 [ 2582.118012] 0 [ 2582.144951] ? do_vfs_ioctl+0xff0/0xff0 [ 2582.144962] ? security_file_ioctl+0x83/0xb0 [ 2582.144973] SyS_ioctl+0x7f/0xb0 [ 2582.144981] ? do_vfs_ioctl+0xff0/0xff0 [ 2582.144991] do_syscall_64+0x1d5/0x640 [ 2582.145007] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2582.145014] RIP: 0033:0x465f69 [ 2582.145022] RSP: 002b:00007f747aa45188 EFLAGS: 00000246 [ 2582.150070] 2717 [ 2582.154235] ORIG_RAX: 0000000000000010 [ 2582.154241] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2582.154247] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2582.154252] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2582.154258] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2582.154264] R13: 00007fff04d0b2bf R14: 00007f747aa45300 R15: 0000000000022000 [ 2582.536840] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2582.537789] 2718 2718 2718 [ 2582.551668] Node 0 DMA32 free:586028kB min:36200kB low:45248kB high:54296kB active_anon:82180kB inactive_anon:150948kB active_file:1720kB inactive_file:16380kB unevictable:0kB writepending:308kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7360kB pagetables:2208kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2582.581145] lowmem_reserve[]: 0 0 0 0 0 [ 2582.585145] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2582.590810] syz-executor.2 cpuset= [ 2582.612845] lowmem_reserve[]: 0 0 0 0 0 [ 2582.630068] Node 1 Normal free:204392kB min:53696kB low:67120kB high:80544kB active_anon:1012kB inactive_anon:30296kB active_file:5420kB inactive_file:4248kB unevictable:0kB writepending:40kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:420kB bounce:0kB free_pcp:692kB local_pcp:0kB free_cma:0kB [ 2582.636149] / mems_allowed=0-1 [ 2582.693229] lowmem_reserve[]: 0 0 0 0 0 [ 2582.696633] CPU: 1 PID: 31649 Comm: syz-executor.2 Not tainted 4.14.224-syzkaller #0 [ 2582.705319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2582.714657] Call Trace: [ 2582.717230] dump_stack+0x1b2/0x281 [ 2582.720844] warn_alloc.cold+0x96/0x1cc [ 2582.724800] ? zone_watermark_ok_safe+0x220/0x220 [ 2582.729632] __alloc_pages_nodemask+0x2127/0x2720 [ 2582.734569] ? lock_acquire+0x170/0x3f0 [ 2582.738547] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2582.743385] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2582.748832] ? __mutex_unlock_slowpath+0x75/0x770 [ 2582.753658] alloc_pages_current+0x155/0x260 [ 2582.758065] ion_page_pool_alloc+0x118/0x1b0 [ 2582.762477] ion_system_heap_allocate+0x133/0x8c0 [ 2582.767299] ? ion_alloc+0x187/0x810 [ 2582.770992] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2582.776422] ? ion_system_contig_heap_create+0x130/0x130 [ 2582.781850] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2582.786866] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2582.791690] ion_alloc+0x204/0x810 [ 2582.795212] ? ion_dma_buf_release+0x40/0x40 [ 2582.799604] ? __might_fault+0x177/0x1b0 [ 2582.803644] ion_ioctl+0xea/0x1f0 [ 2582.807076] ? ion_query_heaps+0x360/0x360 [ 2582.811297] ? ion_query_heaps+0x360/0x360 [ 2582.815514] do_vfs_ioctl+0x75a/0xff0 [ 2582.819297] ? ioctl_preallocate+0x1a0/0x1a0 [ 2582.823682] ? lock_downgrade+0x740/0x740 [ 2582.827812] ? __fget+0x225/0x360 [ 2582.831244] ? do_vfs_ioctl+0xff0/0xff0 [ 2582.835197] ? security_file_ioctl+0x83/0xb0 [ 2582.839595] SyS_ioctl+0x7f/0xb0 [ 2582.842939] ? do_vfs_ioctl+0xff0/0xff0 [ 2582.846895] do_syscall_64+0x1d5/0x640 [ 2582.850767] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2582.855938] RIP: 0033:0x465f69 [ 2582.859107] RSP: 002b:00007fa2ca784188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2582.866921] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2582.874169] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2582.881418] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2582.888678] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2582.895942] R13: 00007fff4963426f R14: 00007fa2ca784300 R15: 0000000000022000 [ 2582.921647] Node 0 DMA: 26*4kB (UME) 61*8kB (UM) 34*16kB (UME) 10*32kB (UME) 7*64kB (UME) 4*128kB (UME) 2*256kB (ME) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11120kB [ 2582.960760] Node 0 DMA32: 1*4kB (U) 19296*8kB (UE) 11795*16kB (UME) 6822*32kB (UME) 278*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 579188kB [ 2582.991040] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2583.014419] Node 1 Normal: 9614*4kB (UM) 5002*8kB (UM) 1780*16kB (U) 1631*32kB (U) 5532*64kB (U) 27*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 516648kB [ 2583.045285] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2583.054290] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2583.063959] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2583.073593] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2583.082961] 54673 total pagecache pages [ 2583.087020] 0 pages in swap cache [ 2583.091453] Swap cache stats: add 0, delete 0, find 0/0 [ 2583.096873] Free swap = 0kB [ 2583.100939] Total swap = 0kB [ 2583.104013] 2097051 pages RAM [ 2583.108135] 0 pages HighMem/MovableOnly [ 2583.112154] 363840 pages reserved [ 2583.115642] 0 pages cma reserved [ 2583.197470] warn_alloc_show_mem: 1 callbacks suppressed [ 2583.197474] Mem-Info: [ 2583.212573] active_anon:20835 inactive_anon:45311 isolated_anon:0 [ 2583.212573] active_file:1756 inactive_file:5200 isolated_file:0 [ 2583.212573] unevictable:0 dirty:8 writeback:0 unstable:0 [ 2583.212573] slab_reclaimable:12114 slab_unreclaimable:118484 [ 2583.212573] mapped:57364 shmem:47880 pagetables:745 bounce:0 [ 2583.212573] free:322095 free_pcp:206 free_cma:0 [ 2583.282801] Node 0 active_anon:82328kB inactive_anon:150948kB active_file:1988kB inactive_file:16704kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:168236kB dirty:32kB writeback:0kB shmem:161024kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2583.331671] Node 1 active_anon:1012kB inactive_anon:30296kB active_file:5036kB inactive_file:4096kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:61220kB dirty:0kB writeback:0kB shmem:30496kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2583.377134] Node 0 DMA free:12336kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:56kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2583.436642] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2583.442619] Node 0 DMA32 free:415236kB min:36200kB low:45248kB high:54296kB active_anon:82328kB inactive_anon:150948kB active_file:1932kB inactive_file:16704kB unevictable:0kB writepending:32kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7392kB pagetables:2560kB bounce:0kB free_pcp:80kB local_pcp:56kB free_cma:0kB [ 2583.490552] lowmem_reserve[]: 0 0 0 0 0 [ 2583.503804] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2583.532655] lowmem_reserve[]: 0 0 0 0 0 [ 2583.548074] Node 1 Normal free:1267816kB min:53696kB low:67120kB high:80544kB active_anon:1012kB inactive_anon:30296kB active_file:5036kB inactive_file:4096kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:420kB bounce:0kB free_pcp:692kB local_pcp:0kB free_cma:0kB [ 2583.577446] lowmem_reserve[]: 0 0 0 0 0 [ 2583.589366] Node 0 DMA: 26*4kB (UME) 61*8kB (UM) 34*16kB (UME) 10*32kB (UME) 10*64kB (UME) 12*128kB (UME) 2*256kB (ME) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 12336kB [ 2583.626018] Node 0 DMA32: 0*4kB 91*8kB (UE) 84*16kB (ME) 1613*32kB (UME) 3258*64kB (UME) 850*128kB (UM) 28*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 378168kB [ 2583.657144] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2583.681292] Node 1 Normal: 9614*4kB (UM) 5002*8kB (UM) 1780*16kB (U) 1630*32kB (U) 12944*64kB (U) 2167*128kB (U) 336*256kB (U) 18*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 1361160kB [ 2583.715426] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2583.734291] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2583.753331] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2583.772128] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2583.789983] 54673 total pagecache pages [ 2583.798872] 0 pages in swap cache [ 2583.806756] Swap cache stats: add 0, delete 0, find 0/0 [ 2583.813217] Free swap = 0kB [ 2583.827867] Total swap = 0kB [ 2583.830966] 2097051 pages RAM [ 2583.839208] 0 pages HighMem/MovableOnly [ 2583.846512] 363840 pages reserved [ 2583.855324] 0 pages cma reserved [ 2584.389601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2584.396354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2584.431721] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2584.459403] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2584.479606] device bridge_slave_1 left promiscuous mode [ 2584.485164] bridge0: port 2(bridge_slave_1) entered disabled state [ 2584.507862] device bridge_slave_0 left promiscuous mode [ 2584.513411] bridge0: port 1(bridge_slave_0) entered disabled state [ 2584.542198] device veth1_macvtap left promiscuous mode [ 2584.553889] device veth0_macvtap left promiscuous mode [ 2584.575732] device veth1_vlan left promiscuous mode [ 2584.583608] device veth0_vlan left promiscuous mode [ 2584.801721] device hsr_slave_1 left promiscuous mode [ 2584.822452] device hsr_slave_0 left promiscuous mode [ 2584.865107] team0 (unregistering): Port device team_slave_1 removed [ 2584.882101] team0 (unregistering): Port device team_slave_0 removed [ 2584.904076] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2584.930794] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2585.020521] bond0 (unregistering): Released all slaves [ 2585.959943] oom_reaper: reaped process 31649 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2586.032671] oom_reaper: reaped process 31648 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2586.042754] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2586.056893] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2586.058600] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2586.070804] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null) [ 2586.075791] CPU: 1 PID: 31649 Comm: syz-executor.2 Not tainted 4.14.224-syzkaller #0 [ 2586.075815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2586.096845] syz-executor.4 cpuset= [ 2586.103139] Call Trace: [ 2586.103140] / mems_allowed=0-1 [ 2586.106682] dump_stack+0x1b2/0x281 [ 2586.116027] warn_alloc.cold+0x96/0x1cc [ 2586.116848] , order=0, oom_score_adj=0 [ 2586.119992] ? zone_watermark_ok_safe+0x220/0x220 [ 2586.123954] in:imklog cpuset= [ 2586.128777] ? usleep_range+0x130/0x130 [ 2586.128786] ? try_to_free_pages+0x23f/0x6e0 [ 2586.128795] ? _find_next_bit+0xdb/0x100 [ 2586.128804] ? run_timer_softirq+0x5a0/0x5a0 [ 2586.128820] __alloc_pages_nodemask+0x2127/0x2720 [ 2586.128835] ? lock_acquire+0x170/0x3f0 [ 2586.156838] / mems_allowed=0-1 [ 2586.157441] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2586.157453] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2586.169919] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2586.175373] alloc_pages_current+0x155/0x260 [ 2586.179773] ion_page_pool_alloc+0x118/0x1b0 [ 2586.184165] ion_system_heap_allocate+0x133/0x8c0 [ 2586.188989] ? ion_alloc+0x187/0x810 [ 2586.192694] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2586.198148] ? ion_system_contig_heap_create+0x130/0x130 [ 2586.203599] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2586.208599] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2586.213423] ion_alloc+0x204/0x810 [ 2586.216947] ? ion_dma_buf_release+0x40/0x40 [ 2586.221340] ? __might_fault+0x177/0x1b0 [ 2586.225382] ion_ioctl+0xea/0x1f0 [ 2586.228819] ? ion_query_heaps+0x360/0x360 [ 2586.233046] ? ion_query_heaps+0x360/0x360 [ 2586.237268] do_vfs_ioctl+0x75a/0xff0 [ 2586.241048] ? ioctl_preallocate+0x1a0/0x1a0 [ 2586.245434] ? lock_downgrade+0x740/0x740 [ 2586.249564] ? __fget+0x225/0x360 [ 2586.252997] ? do_vfs_ioctl+0xff0/0xff0 [ 2586.256956] ? security_file_ioctl+0x83/0xb0 [ 2586.261353] SyS_ioctl+0x7f/0xb0 [ 2586.264705] ? do_vfs_ioctl+0xff0/0xff0 [ 2586.268666] do_syscall_64+0x1d5/0x640 [ 2586.272537] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2586.277704] RIP: 0033:0x465f69 [ 2586.280872] RSP: 002b:00007fa2ca784188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2586.288575] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2586.295834] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2586.303089] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2586.310342] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2586.317597] R13: 00007fff4963426f R14: 00007fa2ca784300 R15: 0000000000022000 [ 2586.332965] CPU: 0 PID: 31648 Comm: syz-executor.4 Not tainted 4.14.224-syzkaller #0 [ 2586.333163] Mem-Info: [ 2586.340862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2586.340866] Call Trace: [ 2586.340882] dump_stack+0x1b2/0x281 [ 2586.340894] warn_alloc.cold+0x96/0x1cc [ 2586.340906] ? zone_watermark_ok_safe+0x220/0x220 [ 2586.340914] ? usleep_range+0x130/0x130 [ 2586.340922] ? try_to_free_pages+0x23f/0x6e0 [ 2586.340933] ? _find_next_bit+0xdb/0x100 [ 2586.356860] active_anon:20987 inactive_anon:45318 isolated_anon:0 [ 2586.356860] active_file:26 inactive_file:9 isolated_file:0 [ 2586.356860] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2586.356860] slab_reclaimable:12113 slab_unreclaimable:118041 [ 2586.356860] mapped:52667 shmem:47892 pagetables:789 bounce:0 [ 2586.356860] free:13833 free_pcp:87 free_cma:0 [ 2586.358825] ? run_timer_softirq+0x5a0/0x5a0 [ 2586.362783] Node 0 active_anon:82640kB inactive_anon:150948kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:157508kB dirty:0kB writeback:0kB shmem:161024kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2586.367612] __alloc_pages_nodemask+0x2127/0x2720 [ 2586.367630] ? lock_acquire+0x170/0x3f0 [ 2586.367645] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2586.367655] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2586.367672] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2586.390415] Node 1 active_anon:1308kB inactive_anon:30324kB active_file:96kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:53160kB dirty:0kB writeback:0kB shmem:30544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2586.413104] alloc_pages_current+0x155/0x260 [ 2586.413120] ion_page_pool_alloc+0x118/0x1b0 [ 2586.413130] ion_system_heap_allocate+0x133/0x8c0 [ 2586.413139] ? ion_alloc+0x187/0x810 [ 2586.413149] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2586.413159] ? ion_system_contig_heap_create+0x130/0x130 [ 2586.413170] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2586.413180] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2586.413191] ion_alloc+0x204/0x810 [ 2586.413205] ? ion_dma_buf_release+0x40/0x40 [ 2586.447316] Node 0 [ 2586.450092] ? __might_fault+0x177/0x1b0 [ 2586.454063] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2586.458882] ion_ioctl+0xea/0x1f0 [ 2586.458893] ? ion_query_heaps+0x360/0x360 [ 2586.458905] ? ion_query_heaps+0x360/0x360 [ 2586.458915] do_vfs_ioctl+0x75a/0xff0 [ 2586.458927] ? ioctl_preallocate+0x1a0/0x1a0 [ 2586.458935] ? lock_downgrade+0x740/0x740 [ 2586.458948] ? __fget+0x225/0x360 [ 2586.486830] lowmem_reserve[]: [ 2586.495978] ? do_vfs_ioctl+0xff0/0xff0 [ 2586.520460] 0 [ 2586.524140] ? security_file_ioctl+0x83/0xb0 [ 2586.540547] 2717 [ 2586.541858] SyS_ioctl+0x7f/0xb0 [ 2586.544065] 2718 [ 2586.548106] ? do_vfs_ioctl+0xff0/0xff0 [ 2586.548122] do_syscall_64+0x1d5/0x640 [ 2586.548138] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2586.548146] RIP: 0033:0x465f69 [ 2586.548151] RSP: 002b:00007f1dbb0fc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2586.548163] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2586.618708] 2718 [ 2586.619809] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2586.621852] 2718 [ 2586.625802] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2586.625809] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2586.652948] R13: 00007fff344be07f R14: 00007f1dbb0fc300 R15: 0000000000022000 [ 2586.654992] Node 0 [ 2586.688743] CPU: 1 PID: 31642 Comm: in:imklog Not tainted 4.14.224-syzkaller #0 [ 2586.698519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2586.707867] Call Trace: [ 2586.710454] dump_stack+0x1b2/0x281 [ 2586.714075] dump_header+0x178/0x82f [ 2586.717780] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2586.722984] ? ___ratelimit+0x2cd/0x530 [ 2586.726955] oom_kill_process.cold+0x10/0xb18 [ 2586.731538] out_of_memory+0xe3e/0x1190 [ 2586.735509] ? oom_killer_disable+0x1c0/0x1c0 [ 2586.739995] ? mutex_trylock+0x152/0x1a0 [ 2586.744050] __alloc_pages_nodemask+0x23e1/0x2720 [ 2586.748895] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2586.753831] alloc_pages_current+0x155/0x260 [ 2586.758234] filemap_fault+0xea3/0x1980 [ 2586.762209] ext4_filemap_fault+0x84/0xb0 [ 2586.766351] __do_fault+0xfa/0x380 [ 2586.769881] __handle_mm_fault+0x2497/0x4620 [ 2586.774296] ? vm_insert_page+0x7c0/0x7c0 [ 2586.778437] ? lock_downgrade+0x740/0x740 [ 2586.782587] handle_mm_fault+0x391/0x860 [ 2586.786641] __do_page_fault+0x549/0xad0 [ 2586.790695] ? spurious_fault+0x640/0x640 [ 2586.794836] ? do_page_fault+0x60/0x500 [ 2586.798805] ? page_fault+0x2f/0x50 [ 2586.802424] page_fault+0x45/0x50 [ 2586.805864] RIP: 1fa0:0x1f9f [ 2586.808870] RSP: 0000:00005645bbfbf9d0 EFLAGS: 7f7df52e1da0 [ 2586.828815] DMA32 free:47952kB min:36200kB low:45248kB high:54296kB active_anon:82632kB inactive_anon:150948kB active_file:8kB inactive_file:108kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7424kB pagetables:2736kB bounce:0kB free_pcp:220kB local_pcp:648kB free_cma:0kB [ 2586.898799] lowmem_reserve[]: 0 0 0 0 0 [ 2586.902825] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2587.006829] lowmem_reserve[]: 0 0 0 0 0 [ 2587.010887] Node 1 Normal free:49740kB min:53696kB low:67120kB high:80544kB active_anon:1288kB inactive_anon:30324kB active_file:60kB inactive_file:60kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:420kB bounce:0kB free_pcp:128kB local_pcp:120kB free_cma:0kB [ 2587.066791] Mem-Info: [ 2587.069245] active_anon:20962 inactive_anon:45318 isolated_anon:0 [ 2587.069245] active_file:17 inactive_file:204 isolated_file:0 [ 2587.069245] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2587.069245] slab_reclaimable:12111 slab_unreclaimable:117611 [ 2587.069245] mapped:52767 shmem:47892 pagetables:789 bounce:0 [ 2587.069245] free:69807 free_pcp:369 free_cma:0 [ 2587.118639] lowmem_reserve[]: 0 0 0 0 0 [ 2587.122672] Node 0 DMA: 1*4kB (E) 0*8kB 1*16kB (E) 2*32kB (UE) 3*64kB (UE) 12*128kB (UE) 2*256kB (UE) 1*512kB (E) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11028kB [ 2587.137558] Bluetooth: hci0 command 0x0409 tx timeout [ 2587.146795] Bluetooth: hci4 command 0x0409 tx timeout [ 2587.152086] Bluetooth: hci2 command 0x0409 tx timeout [ 2587.178641] Node 0 DMA32: 1483*4kB (UE) 5205*8kB (UME) 6462*16kB (UME) 3616*32kB (UE) 1419*64kB (U) 88*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 368756kB [ 2587.186789] Node 0 active_anon:82560kB inactive_anon:150948kB active_file:8kB inactive_file:756kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:158004kB dirty:0kB writeback:0kB shmem:161024kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2587.226778] Node 0 Normal: 0*4kB 0*8kB 0*16kB [ 2587.226810] Node 1 active_anon:1288kB inactive_anon:30324kB active_file:60kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:53064kB dirty:0kB writeback:0kB shmem:30544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2587.226816] Node 0 [ 2587.231395] 0*32kB [ 2587.258689] DMA free:11028kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2587.258692] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2587.258710] Node 0 DMA32 free:381572kB min:36200kB low:45248kB high:54296kB active_anon:82560kB inactive_anon:150948kB active_file:8kB inactive_file:756kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7424kB pagetables:2736kB bounce:0kB free_pcp:1320kB local_pcp:676kB free_cma:0kB [ 2587.258726] lowmem_reserve[]: 0 0 0 0 0 [ 2587.282734] IPVS: ftp: loaded support on port[0] = 21 [ 2587.332895] 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2587.340471] Node 1 Normal: 4184*4kB (UM) 1571*8kB (UM) 1039*16kB (UME) 608*32kB (UM) 811*64kB (UM) 6*128kB (UM) 2*256kB (U) 40*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 139048kB [ 2587.364989] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2587.366755] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2587.379322] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2587.410845] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2587.439633] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2587.462555] 48150 total pagecache pages [ 2587.466653] 0 pages in swap cache [ 2587.483246] IPVS: ftp: loaded support on port[0] = 21 [ 2587.491088] Swap cache stats: add 0, delete 0, find 0/0 [ 2587.496463] Free swap = 0kB [ 2587.499597] lowmem_reserve[]: 0 0 0 0 0 [ 2587.501741] Total swap = 0kB [ 2587.503614] Node 1 Normal free:307728kB min:53696kB low:67120kB high:80544kB active_anon:1288kB inactive_anon:30324kB active_file:60kB inactive_file:60kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:420kB bounce:0kB free_pcp:1348kB local_pcp:732kB free_cma:0kB [ 2587.503632] lowmem_reserve[]: 0 0 0 0 0 [ 2587.503649] Node 0 DMA: 3*4kB (UE) 3*8kB (U) 2*16kB (UE) 2*32kB (UE) 3*64kB (UE) 12*128kB (UE) 2*256kB (UE) 1*512kB (E) 2*1024kB [ 2587.510135] 2097051 pages RAM [ 2587.587191] (UE) 3*2048kB (UME) 0*4096kB = 11076kB [ 2587.602798] 0 pages HighMem/MovableOnly [ 2587.617234] Node 0 DMA32: 1727*4kB (UME) 5464*8kB (UME) 6565*16kB (UE) 3680*32kB (UME) 1497*64kB (UM) 133*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 386252kB [ 2587.626559] 363840 pages reserved [ 2587.657401] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2587.659171] 0 pages cma reserved [ 2587.687053] Node 1 Normal: 5857*4kB (UM) 3128*8kB (UM) 2597*16kB (UME) 2158*32kB (UM) 3989*64kB (UM) 511*128kB (UM) 2*256kB (U) 40*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 500756kB [ 2587.758422] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2587.776794] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2587.797735] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2587.800181] IPVS: ftp: loaded support on port[0] = 21 [ 2587.806599] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2587.847397] 48372 total pagecache pages [ 2587.851457] 0 pages in swap cache [ 2587.854907] Swap cache stats: add 0, delete 0, find 0/0 [ 2587.866961] Free swap = 0kB [ 2587.870016] Total swap = 0kB [ 2587.873024] 2097051 pages RAM [ 2587.876114] 0 pages HighMem/MovableOnly [ 2587.897361] 363840 pages reserved [ 2587.900865] 0 pages cma reserved [ 2587.904226] Out of memory (oom_kill_allocating_task): Kill process 31642 (in:imklog) score 0 or sacrifice child [ 2587.960250] Killed process 31631 (rsyslogd) total-vm:254332kB, anon-rss:668kB, file-rss:0kB, shmem-rss:0kB [ 2587.998881] oom_reaper: reaped process 31631 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2588.151526] chnl_net:caif_netlink_parms(): no params data found [ 2588.176097] chnl_net:caif_netlink_parms(): no params data found [ 2588.529347] chnl_net:caif_netlink_parms(): no params data found [ 2588.581734] syz-executor.5: page allocation failure: order:5, mode:0x1084020(GFP_ATOMIC|__GFP_COMP), nodemask=(null) [ 2588.592446] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2588.597798] CPU: 0 PID: 31653 Comm: syz-executor.5 Not tainted 4.14.224-syzkaller #0 [ 2588.605675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2588.615120] Call Trace: [ 2588.617709] dump_stack+0x1b2/0x281 [ 2588.621330] warn_alloc.cold+0x96/0x1cc [ 2588.625309] ? zone_watermark_ok_safe+0x220/0x220 [ 2588.630171] ? wake_all_kswapds+0x175/0x360 [ 2588.634503] __alloc_pages_nodemask+0x2127/0x2720 [ 2588.639343] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2588.644361] ? __alloc_pages_nodemask+0x1a6e/0x2720 [ 2588.649394] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2588.654235] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2588.659087] ? cache_alloc_refill+0x2fa/0x350 [ 2588.663590] ? ____cache_alloc_node+0x156/0x1d0 [ 2588.668272] cache_grow_begin+0x91/0x630 [ 2588.672340] ? cache_grow_begin+0x91/0x630 [ 2588.676582] fallback_alloc+0x207/0x2c0 [ 2588.680564] __kmalloc+0x213/0x400 [ 2588.684101] ? batadv_hash_new+0xaa/0x270 [ 2588.688251] batadv_hash_new+0xaa/0x270 [ 2588.692226] ? batadv_v_ogm_packet_recv+0xac0/0xac0 [ 2588.697250] batadv_originator_init+0x57/0x2a0 [ 2588.701967] batadv_mesh_init+0x460/0x630 [ 2588.706162] batadv_softif_init_late+0xa26/0xc90 [ 2588.710926] ? batadv_get_strings+0x40/0x40 [ 2588.715239] ? dev_valid_name+0x1a0/0x1a0 [ 2588.719495] ? batadv_get_strings+0x40/0x40 [ 2588.723815] register_netdevice+0x291/0xe40 [ 2588.728144] ? netdev_change_features+0xa0/0xa0 [ 2588.732823] ? rtnl_create_link+0x129/0x890 [ 2588.737145] rtnl_newlink+0x14dc/0x1830 [ 2588.741112] ? rtnl_newlink+0x43d/0x1830 [ 2588.745161] ? __lock_acquire+0x5fc/0x3f20 [ 2588.749410] ? trace_hardirqs_on+0x10/0x10 [ 2588.753648] ? rtnl_dellink+0x6a0/0x6a0 [ 2588.757621] ? trace_hardirqs_on+0x10/0x10 [ 2588.761853] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 2588.767736] ? deref_stack_reg+0x124/0x1a0 [ 2588.771997] ? lock_acquire+0x170/0x3f0 [ 2588.775965] ? lock_downgrade+0x740/0x740 [ 2588.780113] ? rtnl_dellink+0x6a0/0x6a0 [ 2588.784097] rtnetlink_rcv_msg+0x3be/0xb10 [ 2588.788344] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 2588.792839] ? __netlink_lookup+0x345/0x5d0 [ 2588.797161] netlink_rcv_skb+0x125/0x390 [ 2588.801221] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 2588.805706] ? netlink_ack+0x9a0/0x9a0 [ 2588.809597] netlink_unicast+0x437/0x610 [ 2588.813657] ? netlink_sendskb+0xd0/0xd0 [ 2588.817716] ? __check_object_size+0x179/0x230 [ 2588.822291] netlink_sendmsg+0x62e/0xb80 [ 2588.826369] ? nlmsg_notify+0x170/0x170 [ 2588.830460] ? security_socket_sendmsg+0x83/0xb0 [ 2588.835207] ? nlmsg_notify+0x170/0x170 [ 2588.839174] sock_sendmsg+0xb5/0x100 [ 2588.842886] SyS_sendto+0x1c7/0x2c0 [ 2588.846517] ? SyS_getpeername+0x220/0x220 [ 2588.850764] ? up_read+0x17/0x30 [ 2588.854123] ? __do_page_fault+0x159/0xad0 [ 2588.858367] ? do_syscall_64+0x4c/0x640 [ 2588.862363] ? SyS_getpeername+0x220/0x220 [ 2588.866618] do_syscall_64+0x1d5/0x640 [ 2588.870507] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2588.875686] RIP: 0033:0x4193fc [ 2588.878866] RSP: 002b:00007ffef36832f0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 2588.886578] RAX: ffffffffffffffda RBX: 00000000014a4320 RCX: 00000000004193fc [ 2588.893861] RDX: 000000000000003c RSI: 00000000014a4370 RDI: 0000000000000003 [ 2588.901147] RBP: 0000000000000000 R08: 00007ffef3683344 R09: 000000000000000c [ 2588.908437] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2588.915717] R13: 00000000014a4370 R14: 0000000000000003 R15: 0000000000000000 [ 2588.923055] warn_alloc_show_mem: 1 callbacks suppressed [ 2588.923058] Mem-Info: [ 2588.930816] active_anon:20912 inactive_anon:45318 isolated_anon:0 [ 2588.930816] active_file:878 inactive_file:1960 isolated_file:0 [ 2588.930816] unevictable:0 dirty:25 writeback:0 unstable:0 [ 2588.930816] slab_reclaimable:12111 slab_unreclaimable:117102 [ 2588.930816] mapped:54221 shmem:47892 pagetables:800 bounce:0 [ 2588.930816] free:165216 free_pcp:704 free_cma:0 [ 2588.964491] Node 0 active_anon:82416kB inactive_anon:150948kB active_file:4548kB inactive_file:6460kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:163820kB dirty:100kB writeback:0kB shmem:161024kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2588.992782] Node 1 active_anon:1232kB inactive_anon:30324kB active_file:64kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:53064kB dirty:0kB writeback:0kB shmem:30544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2589.019930] Node 0 DMA free:11024kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2589.046054] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2589.051177] Node 0 DMA32 free:229584kB min:36200kB low:45248kB high:54296kB active_anon:82416kB inactive_anon:150948kB active_file:4548kB inactive_file:6560kB unevictable:0kB writepending:148kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7552kB pagetables:2780kB bounce:0kB free_pcp:800kB local_pcp:672kB free_cma:0kB [ 2589.080769] lowmem_reserve[]: 0 0 0 0 0 [ 2589.084844] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2589.107345] syz-executor.4: [ 2589.110347] lowmem_reserve[]: 0 [ 2589.113362] page allocation failure: order:4 [ 2589.113368] 0 0 0 0 [ 2589.123358] Node 1 Normal free:337768kB min:53696kB low:67120kB high:80544kB active_anon:1232kB inactive_anon:30324kB active_file:64kB inactive_file:56kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:420kB bounce:0kB free_pcp:724kB local_pcp:720kB free_cma:0kB [ 2589.127539] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2589.152277] lowmem_reserve[]: 0 0 0 0 0 [ 2589.152296] Node 0 DMA: 212*4kB (UEH) 14*8kB (UH) 4*16kB (UE) 2*32kB (UE) 3*64kB (UEH) 4*128kB (UEH) 2*256kB (UE) 1*512kB (E) 2*1024kB (EH) 3*2048kB (UME) 0*4096kB = 11008kB [ 2589.152357] Node 0 DMA32: 0*4kB 71*8kB (E) 3842*16kB (UE) 3965*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 188920kB [ 2589.191973] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2589.202677] Node 1 Normal: 10280*4kB (UM) 6573*8kB (UM) 5206*16kB (UME) 5024*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 337768kB [ 2589.216872] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2589.225701] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2589.231000] (null) [ 2589.234271] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2589.236406] syz-executor.4 cpuset= [ 2589.245214] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2589.245218] 50712 total pagecache pages [ 2589.245227] 0 pages in swap cache [ 2589.245231] Swap cache stats: add 0, delete 0, find 0/0 [ 2589.245233] Free swap = 0kB [ 2589.245235] Total swap = 0kB [ 2589.245398] 2097051 pages RAM [ 2589.266633] / [ 2589.270092] 0 pages HighMem/MovableOnly [ 2589.273095] mems_allowed=0-1 [ 2589.276086] 363840 pages reserved [ 2589.276091] 0 pages cma reserved [ 2589.294786] CPU: 1 PID: 31648 Comm: syz-executor.4 Not tainted 4.14.224-syzkaller #0 [ 2589.300134] Bluetooth: hci2 command 0x041b tx timeout [ 2589.302674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2589.309203] Bluetooth: hci4 command 0x041b tx timeout [ 2589.317180] Call Trace: [ 2589.317198] dump_stack+0x1b2/0x281 [ 2589.317211] warn_alloc.cold+0x96/0x1cc [ 2589.317223] ? zone_watermark_ok_safe+0x220/0x220 [ 2589.317246] __alloc_pages_nodemask+0x2127/0x2720 [ 2589.323583] Bluetooth: hci0 command 0x041b tx timeout [ 2589.324994] ? lock_acquire+0x170/0x3f0 [ 2589.329216] ODEBUG: assert_init not available (active state 0) object type: timer_list hint: (null) [ 2589.332556] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2589.337524] ------------[ cut here ]------------ [ 2589.342209] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2589.347372] WARNING: CPU: 0 PID: 31653 at lib/debugobjects.c:287 debug_print_object.cold+0xa7/0xdb [ 2589.351318] ? __mutex_unlock_slowpath+0x75/0x770 [ 2589.361364] Kernel panic - not syncing: panic_on_warn set ... [ 2589.361364] [ 2589.366191] alloc_pages_current+0x155/0x260 [ 2589.401942] ion_page_pool_alloc+0x118/0x1b0 [ 2589.406333] ion_system_heap_allocate+0x133/0x8c0 [ 2589.411154] ? _raw_spin_unlock+0x29/0x40 [ 2589.415281] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2589.420189] ? ion_system_contig_heap_create+0x130/0x130 [ 2589.425620] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2589.430625] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2589.435447] ion_alloc+0x27a/0x810 [ 2589.438972] ? ion_dma_buf_release+0x40/0x40 [ 2589.444404] ? __might_fault+0x177/0x1b0 [ 2589.448447] ion_ioctl+0xea/0x1f0 [ 2589.451879] ? ion_query_heaps+0x360/0x360 [ 2589.456096] ? ion_query_heaps+0x360/0x360 [ 2589.460336] do_vfs_ioctl+0x75a/0xff0 [ 2589.464120] ? ioctl_preallocate+0x1a0/0x1a0 [ 2589.468507] ? lock_downgrade+0x740/0x740 [ 2589.472637] ? __fget+0x225/0x360 [ 2589.476068] ? do_vfs_ioctl+0xff0/0xff0 [ 2589.480021] ? security_file_ioctl+0x83/0xb0 [ 2589.484408] SyS_ioctl+0x7f/0xb0 [ 2589.487751] ? do_vfs_ioctl+0xff0/0xff0 [ 2589.491719] do_syscall_64+0x1d5/0x640 [ 2589.495692] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2589.500859] RIP: 0033:0x465f69 [ 2589.504040] RSP: 002b:00007f1dbb0fc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2589.511728] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2589.519082] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2589.526346] RBP: 00000000004bfa3f R08: 0000000000000000 R09: 0000000000000000 [ 2589.533601] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2589.540856] R13: 00007fff344be07f R14: 00007f1dbb0fc300 R15: 0000000000022000 [ 2589.548137] CPU: 0 PID: 31653 Comm: syz-executor.5 Not tainted 4.14.224-syzkaller #0 [ 2589.556024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2589.565379] Call Trace: [ 2589.567970] dump_stack+0x1b2/0x281 [ 2589.571595] panic+0x1f9/0x42d [ 2589.574786] ? add_taint.cold+0x16/0x16 [ 2589.578767] ? debug_print_object.cold+0xa7/0xdb [ 2589.583529] ? debug_print_object.cold+0xa7/0xdb [ 2589.588295] __warn.cold+0x20/0x44 [ 2589.591832] ? ist_end_non_atomic+0x10/0x10 [ 2589.596148] ? debug_print_object.cold+0xa7/0xdb [ 2589.600899] report_bug+0x208/0x250 [ 2589.604522] do_error_trap+0x195/0x2d0 [ 2589.608402] ? math_error+0x2d0/0x2d0 [ 2589.612200] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2589.617044] invalid_op+0x1b/0x40 [ 2589.620498] RIP: 0010:debug_print_object.cold+0xa7/0xdb [ 2589.625851] RSP: 0018:ffff888089197248 EFLAGS: 00010086 [ 2589.631210] RAX: 0000000000000061 RBX: 0000000000000005 RCX: 0000000000000000 [ 2589.638472] RDX: 0000000000000000 RSI: ffffffff87ccd680 RDI: ffffed1011232e3f [ 2589.645737] RBP: ffffffff878b6e40 R08: 0000000000000061 R09: 0000000000000001 [ 2589.653031] R10: 0000000000000000 R11: ffff88807420c4c0 R12: 0000000000000000 [ 2589.660298] R13: 0000000000000000 R14: ffff88807a3c7030 R15: 1ffff11011232e52 [ 2589.667587] ? debug_print_object.cold+0xa7/0xdb [ 2589.672343] debug_object_assert_init+0x1d3/0x2d0 [ 2589.677187] ? debug_object_active_state+0x330/0x330 [ 2589.682384] ? rtnl_newlink+0x14dc/0x1830 [ 2589.686533] ? rtnetlink_rcv_msg+0x3be/0xb10 [ 2589.690938] ? netlink_rcv_skb+0x125/0x390 [ 2589.695176] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2589.700546] del_timer+0x5d/0xe0 [ 2589.703910] ? process_timeout+0x20/0x20 [ 2589.707970] try_to_grab_pending+0x243/0x610 [ 2589.712373] __cancel_work_timer+0x90/0x460 [ 2589.716692] ? work_on_cpu_safe+0x70/0x70 [ 2589.720842] ? batadv_tvlv_handler_get+0x1db/0x2b0 [ 2589.725768] batadv_nc_mesh_free+0x41/0x120 [ 2589.730089] batadv_mesh_free+0x70/0x150 [ 2589.734147] batadv_mesh_init+0x561/0x630 [ 2589.738295] batadv_softif_init_late+0xa26/0xc90 [ 2589.743179] ? batadv_get_strings+0x40/0x40 [ 2589.747501] ? dev_valid_name+0x1a0/0x1a0 [ 2589.752002] ? batadv_get_strings+0x40/0x40 [ 2589.756321] register_netdevice+0x291/0xe40 [ 2589.760643] ? netdev_change_features+0xa0/0xa0 [ 2589.765309] ? rtnl_create_link+0x129/0x890 [ 2589.769628] rtnl_newlink+0x14dc/0x1830 [ 2589.773597] ? rtnl_newlink+0x43d/0x1830 [ 2589.777789] ? __lock_acquire+0x5fc/0x3f20 [ 2589.782043] ? trace_hardirqs_on+0x10/0x10 [ 2589.786276] ? rtnl_dellink+0x6a0/0x6a0 [ 2589.790247] ? trace_hardirqs_on+0x10/0x10 [ 2589.794481] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 2589.800359] ? deref_stack_reg+0x124/0x1a0 [ 2589.804622] ? lock_acquire+0x170/0x3f0 [ 2589.808591] ? lock_downgrade+0x740/0x740 [ 2589.812736] ? rtnl_dellink+0x6a0/0x6a0 [ 2589.816702] rtnetlink_rcv_msg+0x3be/0xb10 [ 2589.820936] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 2589.825424] ? __netlink_lookup+0x345/0x5d0 [ 2589.829751] netlink_rcv_skb+0x125/0x390 [ 2589.833805] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 2589.838298] ? netlink_ack+0x9a0/0x9a0 [ 2589.842279] netlink_unicast+0x437/0x610 [ 2589.846333] ? netlink_sendskb+0xd0/0xd0 [ 2589.850389] ? __check_object_size+0x179/0x230 [ 2589.855008] netlink_sendmsg+0x62e/0xb80 [ 2589.859067] ? nlmsg_notify+0x170/0x170 [ 2589.863052] ? security_socket_sendmsg+0x83/0xb0 [ 2589.867802] ? nlmsg_notify+0x170/0x170 [ 2589.871769] sock_sendmsg+0xb5/0x100 [ 2589.875496] SyS_sendto+0x1c7/0x2c0 [ 2589.879123] ? SyS_getpeername+0x220/0x220 [ 2589.883362] ? up_read+0x17/0x30 [ 2589.886726] ? __do_page_fault+0x159/0xad0 [ 2589.890951] ? do_syscall_64+0x4c/0x640 [ 2589.894919] ? SyS_getpeername+0x220/0x220 [ 2589.899147] do_syscall_64+0x1d5/0x640 [ 2589.903034] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2589.908475] RIP: 0033:0x4193fc [ 2589.911653] RSP: 002b:00007ffef36832f0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 2589.919359] RAX: ffffffffffffffda RBX: 00000000014a4320 RCX: 00000000004193fc [ 2589.926622] RDX: 000000000000003c RSI: 00000000014a4370 RDI: 0000000000000003 [ 2589.933887] RBP: 0000000000000000 R08: 00007ffef3683344 R09: 000000000000000c [ 2589.941149] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2589.948408] R13: 00000000014a4370 R14: 0000000000000003 R15: 0000000000000000 [ 2589.956669] Kernel Offset: disabled [ 2589.960290] Rebooting in 86400 seconds..